ALSA-2023:6369
See a problem?- Source
- https://errata.almalinux.org/9/ALSA-2023-6369.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2023:6369.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALSA-2023:6369
- Related
- Published
- 2023-11-07T00:00:00Z
- Modified
- 2023-11-14T12:13:26Z
- Summary
- Moderate: qt5 security and bug fix update
- Details
-
Qt is a software toolkit for developing applications.
Security Fix(es):
- qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)
- qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)
- qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)
- qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)
- qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2023:6369
- https://access.redhat.com/security/cve/CVE-2023-32573
- https://access.redhat.com/security/cve/CVE-2023-33285
- https://access.redhat.com/security/cve/CVE-2023-34410
- https://access.redhat.com/security/cve/CVE-2023-37369
- https://access.redhat.com/security/cve/CVE-2023-38197
- https://bugzilla.redhat.com/2208135
- https://bugzilla.redhat.com/2209488
- https://bugzilla.redhat.com/2212747
- https://bugzilla.redhat.com/2222767
- https://bugzilla.redhat.com/2232173
- https://errata.almalinux.org/9/ALSA-2023-6369.html
Affected packages
AlmaLinux:9 / qt5
Package
- Name
- qt5
AlmaLinux:9 / qt5-devel
Package
- Name
- qt5-devel
AlmaLinux:9 / qt5-qtbase
Package
- Name
- qt5-qtbase
AlmaLinux:9 / qt5-qtbase-common
Package
- Name
- qt5-qtbase-common
AlmaLinux:9 / qt5-qtbase-devel
Package
- Name
- qt5-qtbase-devel
AlmaLinux:9 / qt5-qtbase-examples
Package
- Name
- qt5-qtbase-examples
AlmaLinux:9 / qt5-qtbase-gui
Package
- Name
- qt5-qtbase-gui
AlmaLinux:9 / qt5-qtbase-mysql
Package
- Name
- qt5-qtbase-mysql
AlmaLinux:9 / qt5-qtbase-odbc
Package
- Name
- qt5-qtbase-odbc
AlmaLinux:9 / qt5-qtbase-postgresql
Package
- Name
- qt5-qtbase-postgresql
AlmaLinux:9 / qt5-qtbase-private-devel
Package
- Name
- qt5-qtbase-private-devel
AlmaLinux:9 / qt5-qtbase-static
Package
- Name
- qt5-qtbase-static
AlmaLinux:9 / qt5-rpm-macros
Package
- Name
- qt5-rpm-macros