ALSA-2023:6369

Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2023:6369.json
Related
Published
2023-11-07T00:00:00Z
Modified
2023-11-14T12:13:26Z
Details

Qt is a software toolkit for developing applications.

Security Fix(es):

  • qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)
  • qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)
  • qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)
  • qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)
  • qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:9 / qt5

Package

Name
qt5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.15.9-1.el9

AlmaLinux:9 / qt5-devel

Package

Name
qt5-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.15.9-1.el9

AlmaLinux:9 / qt5-qtbase

Package

Name
qt5-qtbase

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.15.9-7.el9

AlmaLinux:9 / qt5-qtbase-common

Package

Name
qt5-qtbase-common

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.15.9-7.el9

AlmaLinux:9 / qt5-qtbase-devel

Package

Name
qt5-qtbase-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.15.9-7.el9

AlmaLinux:9 / qt5-qtbase-examples

Package

Name
qt5-qtbase-examples

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.15.9-7.el9

AlmaLinux:9 / qt5-qtbase-gui

Package

Name
qt5-qtbase-gui

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.15.9-7.el9

AlmaLinux:9 / qt5-qtbase-mysql

Package

Name
qt5-qtbase-mysql

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.15.9-7.el9

AlmaLinux:9 / qt5-qtbase-odbc

Package

Name
qt5-qtbase-odbc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.15.9-7.el9

AlmaLinux:9 / qt5-qtbase-postgresql

Package

Name
qt5-qtbase-postgresql

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.15.9-7.el9

AlmaLinux:9 / qt5-qtbase-private-devel

Package

Name
qt5-qtbase-private-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.15.9-7.el9

AlmaLinux:9 / qt5-qtbase-static

Package

Name
qt5-qtbase-static

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.15.9-7.el9

AlmaLinux:9 / qt5-rpm-macros

Package

Name
qt5-rpm-macros

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.15.9-1.el9

AlmaLinux:9 / qt5-srpm-macros

Package

Name
qt5-srpm-macros

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
5.15.9-1.el9