SUSE-SU-2020:0317-1

UNKNOWN

Security update for libqt5-qtbase

Published Feb 4, 2020

Modified 6 years ago

Fix available

Details

This update for libqt5-qtbase fixes the following issues:

Security issues fixed:

CVE-2020-0569: Fixed a potential local code execution by loading plugins from CWD (bsc#1161167).
CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted gif files (bsc#1118597).
CVE-2018-19872: Fixed an issue which could allow a division by zero leading to crash (bsc#1130246).

Affected Packages(44 packages)

libQt5Concurrent5

SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4

Fixed in:

5.6.2-6.22.1

libQt5Core5

SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4

Fixed in:

5.6.2-6.22.1

libQt5DBus5

SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4

Fixed in:

5.6.2-6.22.1

libQt5Gui5

SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4

Fixed in:

5.6.2-6.22.1

libQt5Network5

SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4

Fixed in:

5.6.2-6.22.1

libQt5OpenGL5

SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4

Fixed in:

5.6.2-6.22.1

libQt5PrintSupport5

SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4

Fixed in:

5.6.2-6.22.1

libQt5Sql5

SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4

Fixed in:

5.6.2-6.22.1

libQt5Sql5-mysql

SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4

Fixed in:

5.6.2-6.22.1

libQt5Sql5-postgresql

SUSE Enterprise Storage 5SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSSSUSE Linux Enterprise Server 12 SP4

Fixed in:

5.6.2-6.22.1

References

https://bugzilla.suse.com/1118597

https://bugzilla.suse.com/1130246

https://bugzilla.suse.com/1161167

https://www.suse.com/security/cve/CVE-2018-19870

https://www.suse.com/security/cve/CVE-2018-19872

https://www.suse.com/security/cve/CVE-2020-0569

https://www.suse.com/support/update/announcement/2020/suse-su-20200317-1/

Upstream

CVE-2018-19870 CVE-2018-19872 CVE-2020-0569

Related

CVE-2018-19870 CVE-2018-19872 CVE-2020-0569

Ecosystems(12)

SUSE Enterprise Storage 5 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4

Timeline

PublishedFeb 4, 2020

ModifiedFeb 4, 2020

SUSE-SU-2020:0317-1 | Mondoo Vulnerability Intelligence