Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

openSUSE Leap 15.5 Security Update: libqt5-qtsvg DoS Vulnerability Fix

opensuse
Calendar Grey July 25, 2023
Dist Opensuse Esm H88
A patch for CVE-2021-45930 has been rolled out in libqt5-qtsvg for openSUSE users, along with guidance for optimal usage.
This update for libqt5-qtsvg fixes the following issues: CVE-2021-45930: Fixed an out-of-bounds write that may have lead to a denial- of-service (bsc#1196654).

Description

This update for libqt5-qtsvg fixes the following issues:

* CVE-2021-45930: Fixed an out-of-bounds write that may have lead to a denial-

of-service (bsc#1196654).

* CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont m_unitsPerEm

variable (bsc#1211298).

Topics%20covered

Topics Covered

security advisory moderate denial of service openSUSE libqt5-qtsvg CVE-2021-45930

Patch

## Patch Instructions:

To install this SUSE Moderate update use the SUSE recommended installation

methods like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.5

zypper in -t patch SUSE-2023-2969=1 openSUSE-SLE-15.5-2023-2969=1

* Basesystem Module 15-SP5

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-2969=1

* Desktop Applications Module 15-SP5

zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-2969=1

Package List

* openSUSE Leap 15.5 (x86_64)

* libQt5Svg5-32bit-5.15.8+kde8-150500.3.3.1

* libQt5Svg5-32bit-debuginfo-5.15.8+kde8-150500.3.3.1

* libqt5-qtsvg-devel-32bit-5.15.8+kde8-150500.3.3.1

* openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586)

* libQt5Svg5-5.15.8+kde8-150500.3.3.1

* libqt5-qtsvg-examples-debuginfo-5.15.8+kde8-150500.3.3.1

* libqt5-qtsvg-examples-5.15.8+kde8-150500.3.3.1

* libqt5-qtsvg-devel-5.15.8+kde8-150500.3.3.1

* libQt5Svg5-debuginfo-5.15.8+kde8-150500.3.3.1

* libqt5-qtsvg-debugsource-5.15.8+kde8-150500.3.3.1

* openSUSE Leap 15.5 (noarch)

* libqt5-qtsvg-private-headers-devel-5.15.8+kde8-150500.3.3.1

* openSUSE Leap 15.5 (aarch64_ilp32)

* libQt5Svg5-64bit-5.15.8+kde8-150500.3.3.1

* libQt5Svg5-64bit-debuginfo-5.15.8+kde8-150500.3.3.1

* libqt5-qtsvg-devel-64bit-5.15.8+kde8-150500.3.3.1

* Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64)

* libQt5Svg5-5.15.8+kde8-150500.3.3.1

* libQt5Svg5-debuginfo-5.15.8+kde8-150500.3.3.1

* libqt5-qtsvg-devel-5.15.8+kde8-150500.3.3.1

*...

Read the Full Advisory

References

* #1196654

* #1211298

## References:

* https://www.suse.com/security/cve/CVE-2021-45930.html

* https://www.suse.com/security/cve/CVE-2023-32573.html

* https://bugzilla.suse.com/show_bug.cgi?id=1196654

* https://bugzilla.suse.com/show_bug.cgi?id=1211298

Announcement ID: SUSE-SU-2023:2969-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service openSUSE libqt5-qtsvg CVE-2021-45930

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here