Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

openSUSE 15.4: 2023:2981-1 Moderate: libqt5-qtsvg Denial of Service

opensuse
Calendar Grey July 26, 2023
Dist Opensuse Esm H88
A recent security patch for libqt5-qtsvg has been implemented to resolve two vulnerabilities, one of which involves an out-of-bounds write that could result in a denial-of-service attack.
This update for libqt5-qtsvg fixes the following issues: CVE-2021-45930: Fixed an out-of-bounds write that may have lead to a denial- of-service (bsc#1196654).

Description

This update for libqt5-qtsvg fixes the following issues:

* CVE-2021-45930: Fixed an out-of-bounds write that may have lead to a denial-

of-service (bsc#1196654).

* CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont m_unitsPerEm

variable (bsc#1211298).

Topics%20covered

Topics Covered

security advisory moderate denial of service update openSUSE libqt5-qtsvg

Patch

## Patch Instructions:

To install this SUSE Moderate update use the SUSE recommended installation

methods like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.4

zypper in -t patch SUSE-2023-2981=1 openSUSE-SLE-15.4-2023-2981=1

* Basesystem Module 15-SP4

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-2981=1

* Desktop Applications Module 15-SP4

zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-2981=1

Package List

* openSUSE Leap 15.4 (x86_64)

* libQt5Svg5-32bit-5.15.2+kde16-150400.3.3.1

* libqt5-qtsvg-devel-32bit-5.15.2+kde16-150400.3.3.1

* libQt5Svg5-32bit-debuginfo-5.15.2+kde16-150400.3.3.1

* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586)

* libqt5-qtsvg-examples-debuginfo-5.15.2+kde16-150400.3.3.1

* libqt5-qtsvg-devel-5.15.2+kde16-150400.3.3.1

* libqt5-qtsvg-examples-5.15.2+kde16-150400.3.3.1

* libqt5-qtsvg-debugsource-5.15.2+kde16-150400.3.3.1

* libQt5Svg5-5.15.2+kde16-150400.3.3.1

* libQt5Svg5-debuginfo-5.15.2+kde16-150400.3.3.1

* openSUSE Leap 15.4 (noarch)

* libqt5-qtsvg-private-headers-devel-5.15.2+kde16-150400.3.3.1

* openSUSE Leap 15.4 (aarch64_ilp32)

* libQt5Svg5-64bit-5.15.2+kde16-150400.3.3.1

* libQt5Svg5-64bit-debuginfo-5.15.2+kde16-150400.3.3.1

* libqt5-qtsvg-devel-64bit-5.15.2+kde16-150400.3.3.1

* Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64)

* libqt5-qtsvg-devel-5.15.2+kde16-150400.3.3.1

* libQt5Svg5-5.15.2+kde16-150400.3.3.1

* libQt5Svg5-debuginfo-5.15.2+kde16-150400.3.3.1

*...

Read the Full Advisory

References

* #1196654

* #1211298

## References:

* https://www.suse.com/security/cve/CVE-2021-45930.html

* https://www.suse.com/security/cve/CVE-2023-32573.html

* https://bugzilla.suse.com/show_bug.cgi?id=1196654

* https://bugzilla.suse.com/show_bug.cgi?id=1211298

Announcement ID: SUSE-SU-2023:2981-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service update openSUSE libqt5-qtsvg

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here