SUSE-SU-2023:3209-1

UNKNOWN

Security update for libqt5-qtsvg

Published Aug 7, 2023

Modified 2 years ago

Fix available

Details

This update for libqt5-qtsvg fixes the following issues:

CVE-2021-45930: Fixed an out-of-bounds write that may have lead to a denial-of-service (bsc#1196654).
CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont m_unitsPerEm variable (bsc#1211298).

Affected Packages

libQt5Svg5

SUSE Linux Enterprise Real Time 15 SP3SUSE Manager Proxy 4.2SUSE Manager Server 4.2

Fixed in:

5.12.7-150200.3.8.1

libqt5-qtsvg

SUSE Linux Enterprise Real Time 15 SP3SUSE Manager Proxy 4.2SUSE Manager Server 4.2

Fixed in:

5.12.7-150200.3.8.1

libqt5-qtsvg-devel

SUSE Linux Enterprise Real Time 15 SP3SUSE Manager Proxy 4.2SUSE Manager Server 4.2

Fixed in:

5.12.7-150200.3.8.1

libqt5-qtsvg-private-headers-devel

SUSE Linux Enterprise Real Time 15 SP3

Fixed in:

5.12.7-150200.3.8.1

References

Upstream

Ecosystems

Timeline

PublishedAug 7, 2023

ModifiedAug 7, 2023

SUSE-SU-2023:3209-1 | Mondoo Vulnerability Intelligence