Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 32: FEDORA-2020-ca02c529f8 Critical: qt5-qtbase XML Issue

fedora
Calendar Grey April 24, 2020
Dist Fedora Esm H88
Debian 10 patch for libxml2 fixes vulnerability in external entity processing. Upgrade today to improve system safety.
Security fix for CVE-2015-9541

Summary

Qt is a software toolkit for developing applications.

This package contains base tools, like string, xml, and network

handling.

Security fix for CVE-2015-9541

* Wed Apr 8 2020 Than Ngo - 5.13.2-5

- Fixed bz#1801370 - CVE-2015-9541 XML entity expansion vulnerability via a crafted SVG document

[ 1 ] Bug #1801369 - CVE-2015-9541 qt: XML entity expansion vulnerability

https://bugzilla.redhat.com/show_bug.cgi?id=1801369

su -c 'dnf upgrade --advisory FEDORA-2020-ca02c529f8' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 32
Version: 5.13.2
Release: 5.fc32
Summary: Qt5 - QtBase components

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here