CVE-2018-19869

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.

The following packages have been upgraded to a later upstream version: qt5 (5.12.5), qt5-qt3d (5.12.5), qt5-qtbase (5.12.5), qt5-qtcanvas3d (5.12.5), qt5-qtconnectivity (5.12.5), qt5-qtdeclarative (5.12.5), qt5-qtdoc (5.12.5), qt5-qtgraphicaleffects (5.12.5), qt5-qtimageformats (5.12.5), qt5-qtlocation (5.12.5), qt5-qtmultimedia (5.12.5), qt5-qtquickcontrols (5.12.5), qt5-qtquickcontrols2 (5.12.5), qt5-qtscript (5.12.5), qt5-qtsensors (5.12.5), qt5-qtserialbus (5.12.5), qt5-qtserialport (5.12.5), qt5-qtsvg (5.12.5), qt5-qttools (5.12.5), qt5-qttranslations (5.12.5), qt5-qtwayland (5.12.5), qt5-qtwebchannel (5.12.5), qt5-qtwebsockets (5.12.5), qt5-qtx11extras (5.12.5), qt5-qtxmlpatterns (5.12.5), python-qt5 (5.13.1), sip (4.19.19). (BZ#1775603, BZ#1775604)

Security Fix(es):

• qt: Malformed PPM image causing division by zero and crash in qppmhandler.cpp (CVE-2018-19872)

• qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service (CVE-2018-19869)

• qt5-qtimageformats: QTgaFile CPU exhaustion (CVE-2018-19871)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.

An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp.

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.

The following packages have been upgraded to a later upstream version: qt5 (5.12.5), qt5-qt3d (5.12.5), qt5-qtbase (5.12.5), qt5-qtcanvas3d (5.12.5), qt5-qtconnectivity (5.12.5), qt5-qtdeclarative (5.12.5), qt5-qtdoc (5.12.5), qt5-qtgraphicaleffects (5.12.5), qt5-qtimageformats (5.12.5), qt5-qtlocation (5.12.5), qt5-qtmultimedia (5.12.5), qt5-qtquickcontrols (5.12.5), qt5-qtquickcontrols2 (5.12.5), qt5-qtscript (5.12.5), qt5-qtsensors (5.12.5), qt5-qtserialbus (5.12.5), qt5-qtserialport (5.12.5), qt5-qtsvg (5.12.5), qt5-qttools (5.12.5), qt5-qttranslations (5.12.5), qt5-qtwayland (5.12.5), qt5-qtwebchannel (5.12.5), qt5-qtwebsockets (5.12.5), qt5-qtx11extras (5.12.5), qt5-qtxmlpatterns (5.12.5), python-qt5 (5.13.1), sip (4.19.19). (BZ#1775603, BZ#1775604)

Security Fix(es):

• qt: Malformed PPM image causing division by zero and crash in qppmhandler.cpp (CVE-2018-19872)

• qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service (CVE-2018-19869)

• qt5-qtimageformats: QTgaFile CPU exhaustion (CVE-2018-19871)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Updated qt4 packages fix security vulnerabilities:

A double-free or corruption during parsing of a specially crafted illegal XML document (CVE-2018-15518).

A malformed SVG image could cause a segmentation fault in qsvghandler.cpp (CVE-2018-19869).

A malformed GIF image might have caused a NULL pointer dereference in QGifHandler resulting in a segmentation fault (CVE-2018-19870).

There was an uncontrolled resource consumption in QTgaFile (CVE-2018-19871).

QBmpHandler had a buffer overflow via BMP data (CVE-2018-19873).

This update for libqt5-qtsvg fixes the following issues:

Security issues fixed:

• CVE-2018-19869: Fixed Denial of Service when parsing malformed URL reference (bsc#1118599)

This update was imported from the SUSE:SLE-15:Update update project.

This update for libqt4 fixes the following issues:

• Fix buffer over-read in read_xbm_body (boo#1176315, CVE-2020-17507)
• Fix 'double free or corruption' in QXmlStreamReader (boo#1118595, CVE-2018-15518)
• Fix QBmpHandler segfault on malformed BMP file boo#1118596, CVE-2018-19873)
• Fix crash when parsing malformed url reference (boo#1118599, CVE-2018-19869)

This update for libqt4 fixes the following issues:

• Fix buffer over-read in read_xbm_body (boo#1176315, CVE-2020-17507)
• Fix 'double free or corruption' in QXmlStreamReader (boo#1118595, CVE-2018-15518)
• Fix QBmpHandler segfault on malformed BMP file boo#1118596, CVE-2018-19873)
• Fix crash when parsing malformed url reference (boo#1118599, CVE-2018-19869)

This update was imported from the openSUSE:Leap:15.1:Update update project.

This update for libqt4 fixes the following issues:

• Fix buffer over-read in read_xbm_body (boo#1176315, CVE-2020-17507)
• Fix 'double free or corruption' in QXmlStreamReader (boo#1118595, CVE-2018-15518)
• Fix QBmpHandler segfault on malformed BMP file boo#1118596, CVE-2018-19873)
• Fix crash when parsing malformed url reference (boo#1118599, CVE-2018-19869)

This update was imported from the openSUSE:Leap:15.1:Update update project.

This update for libqt4 fixes the following issues:

• Fix buffer over-read in read_xbm_body (boo#1176315, CVE-2020-17507)
• Fix 'double free or corruption' in QXmlStreamReader (boo#1118595, CVE-2018-15518)
• Fix QBmpHandler segfault on malformed BMP file boo#1118596, CVE-2018-19873)
• Fix crash when parsing malformed url reference (boo#1118599, CVE-2018-19869)

This update was imported from the openSUSE:Leap:15.1:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project.

This update for libqt5-qtsvg fixes the following issues:

Security issues fixed:

• CVE-2018-19869: Fixed Denial of Service when parsing malformed URL reference (bsc#1118599)

This update for libqt4 fixes the following issues:

• CVE-2018-15518: Fixed a double free in QXmlStreamReader (bsc#1118595)
• CVE-2018-19873: Fixed a segmantation fault via a malformed BMP file (bsc#1118596).
• CVE-2018-19869: Fixed an improper checking which might lead to a crach via a malformed url reference (bsc#1118599).
• Added stricter toplevel asm parsing by dropping volatile qualification that has no effect (bsc#1121214).

This update for libqt5-qtsvg fixes the following issues:

Security issues fixed:

• CVE-2018-19869: Fixed Denial of Service when parsing malformed URL reference (bsc#1118599)

It was discovered that QtSvg incorrectly handled certain malformed SVG images. If a user or automated system were tricked into opening a specially crafted image file, a remote attacker could use this issue to cause QtSvg to crash, resulting in a denial of service, or possibly execute arbitrary code.

It was discovered that QtSvg incorrectly handled certain SVG images. An attacker could possibly use this issue to cause QtSvg to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2018-19869)

It was discovered that QtSvg incorrectly handled certain SVG images. An attacker could use this issue to cause QtSvg to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 20.04 LTS. (CVE-2021-3481, CVE-2021-28025, CVE-2021-45930)

It was discovered that QtSvg incorrectly handled certain SVG images. An attacker could use this issue to cause QtSvg to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-32573)