Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia: 2020-0347 Critical: qt4 and qt5base Buffer Over-read

mageia
Calendar Grey August 27, 2020
Dist Mageia Esm H88
Mageia unveils revised qt4 and qt5base packages to resolve security flaw issues, effective August 27.
The read_xbm_body function in gui/image/qxbmhandler.cpp has a buffer over-read (CVE-2020-17507)

Summary

The read_xbm_body function in gui/image/qxbmhandler.cpp has a buffer over-read (CVE-2020-17507).

References

- https://bugs.mageia.org/show_bug.cgi?id=27173

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/426FCC6JNK4JUEX5QHJQDYQ6MUVQ3E6P/

- https://www.cve.org/CVERecord?id=CVE-2020-17507

Topics%20covered

Topics Covered

security advisory security issue buffer overflow qt4 Mageia qt5base

Resolution

SRPMS

- 7/core/qt4-4.8.7-26.2.mga7

- 7/core/qtbase5-5.12.6-4.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 27 Aug 2020
URL: https://advisories.mageia.org/MGASA-2020-0347.html
Type: security
CVE: CVE-2020-17507

Topics%20covered

Topics Covered

security advisory security issue buffer overflow qt4 Mageia qt5base

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here