CVE-2018-15518

QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML document.

Double free in QXmlStreamReader (CVE-2018-15518).

Denial of Service on malformed BMP file in QBmpHandler (CVE-2018-19873).

Updated qt4 packages fix security vulnerabilities:

A double-free or corruption during parsing of a specially crafted illegal XML document (CVE-2018-15518).

A malformed SVG image could cause a segmentation fault in qsvghandler.cpp (CVE-2018-19869).

A malformed GIF image might have caused a NULL pointer dereference in QGifHandler resulting in a segmentation fault (CVE-2018-19870).

There was an uncontrolled resource consumption in QTgaFile (CVE-2018-19871).

QBmpHandler had a buffer overflow via BMP data (CVE-2018-19873).

This update for libqt5-qtbase provides the following fixes:

Security issues fixed:

• CVE-2018-15518: Fixed double free in QXmlStreamReader (bsc#1118595)
• CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler (bsc#1118596)

Non-security issues fixed:

• Fix dynamic loading of libGL. (bsc#1099874)
• Make sure printer settings are properly remembered. (bsc#1096328)
• Add patch to fix fails to load pixmap cursors on XRender less system (bsc#1108889)
• Fix krita pop-up palette not working properly (bsc#1120639)

This update was imported from the SUSE:SLE-15:Update update project.

This update for libqt4 fixes the following issues:

• Fix buffer over-read in read_xbm_body (boo#1176315, CVE-2020-17507)
• Fix 'double free or corruption' in QXmlStreamReader (boo#1118595, CVE-2018-15518)
• Fix QBmpHandler segfault on malformed BMP file boo#1118596, CVE-2018-19873)
• Fix crash when parsing malformed url reference (boo#1118599, CVE-2018-19869)

This update for libqt4 fixes the following issues:

• Fix buffer over-read in read_xbm_body (boo#1176315, CVE-2020-17507)
• Fix 'double free or corruption' in QXmlStreamReader (boo#1118595, CVE-2018-15518)
• Fix QBmpHandler segfault on malformed BMP file boo#1118596, CVE-2018-19873)
• Fix crash when parsing malformed url reference (boo#1118599, CVE-2018-19869)

This update was imported from the openSUSE:Leap:15.1:Update update project.

This update for libqt4 fixes the following issues:

• Fix buffer over-read in read_xbm_body (boo#1176315, CVE-2020-17507)
• Fix 'double free or corruption' in QXmlStreamReader (boo#1118595, CVE-2018-15518)
• Fix QBmpHandler segfault on malformed BMP file boo#1118596, CVE-2018-19873)
• Fix crash when parsing malformed url reference (boo#1118599, CVE-2018-19869)

This update was imported from the openSUSE:Leap:15.1:Update update project.

This update for libqt4 fixes the following issues:

• Fix buffer over-read in read_xbm_body (boo#1176315, CVE-2020-17507)
• Fix 'double free or corruption' in QXmlStreamReader (boo#1118595, CVE-2018-15518)
• Fix QBmpHandler segfault on malformed BMP file boo#1118596, CVE-2018-19873)
• Fix crash when parsing malformed url reference (boo#1118599, CVE-2018-19869)

This update was imported from the openSUSE:Leap:15.1:Update update project. This update was imported from the openSUSE:Leap:15.2:Update update project.

This update for libqt5-qtbase fixes the following issues:

Security issues fixed:

• CVE-2018-15518: Fixed double free in QXmlStreamReader (bsc#1118595)
• CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler (bsc#1118596)

This update for libqt5-qtbase fixes the following issues:

Security issues fixed:

• CVE-2018-15518: Fixed double free in QXmlStreamReader (bsc#1118595)
• CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler (bsc#1118596)

This update for libqt5-qtbase fixes the following issues:

Security issues fixed:

• CVE-2018-15518: Fixed double free in QXmlStreamReader (bsc#1118595)
• CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler (bsc#1118596)

This update for libqt5-qtbase fixes the following issues:

Security issues fixed:

• CVE-2018-15518: Fixed double free in QXmlStreamReader (bsc#1118595)
• CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler (bsc#1118596)

This update for libqt5-qtbase fixes the following issues:

Security issues fixed:

• CVE-2018-15518: Fixed double free in QXmlStreamReader (bsc#1118595)
• CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler (bsc#1118596)

This update for libqt5-qtbase provides the following fixes:

Security issues fixed:

• CVE-2018-15518: Fixed double free in QXmlStreamReader (bsc#1118595)
• CVE-2018-19873: Fixed Denial of Service on malformed BMP file in QBmpHandler (bsc#1118596)

Non-security issues fixed:

• Fix dynamic loading of libGL. (bsc#1099874)
• Make sure printer settings are properly remembered. (bsc#1096328)
• Add patch to fix fails to load pixmap cursors on XRender less system (bsc#1108889)
• Fix krita pop-up palette not working properly (bsc#1120639)

This update for libqt4 fixes the following issues:

• CVE-2018-15518: Fixed a double free in QXmlStreamReader (bsc#1118595)
• CVE-2018-19873: Fixed a segmantation fault via a malformed BMP file (bsc#1118596).
• CVE-2018-19869: Fixed an improper checking which might lead to a crach via a malformed url reference (bsc#1118599).
• Added stricter toplevel asm parsing by dropping volatile qualification that has no effect (bsc#1121214).

It was discovered that Qt incorrectly handled certain XML documents. A remote attacker could use this issue with a specially crafted XML document to cause Qt to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-15518)

It was discovered that Qt incorrectly handled certain GIF images. A remote attacker could use this issue with a specially crafted GIF image to cause Qt to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-19870)

It was discovered that Qt incorrectly handled certain BMP images. A remote attacker could use this issue with a specially crafted BMP image to cause Qt to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-19873)