Synopsis: Moderate: qt5 security, bug fix, and enhancement update
Advisory ID:       SLSA-2019:2135-1
Issue Date:        2019-08-06
CVE Numbers:       CVE-2018-15518
                   CVE-2018-19871
                   CVE-2018-19869
                   CVE-2018-19873
                   CVE-2018-19870
--

The following packages have been upgraded to a later upstream version:
qt5-qt3d (5.9.7), qt5-qtbase (5.9.7), qt5-qtcanvas3d (5.9.7),
qt5-qtconnectivity (5.9.7), qt5-qtdeclarative (5.9.7), qt5-qtdoc (5.9.7),
qt5-qtgraphicaleffects (5.9.7), qt5-qtimageformats (5.9.7), qt5-qtlocation
(5.9.7), qt5-qtmultimedia (5.9.7), qt5-qtquickcontrols (5.9.7),
qt5-qtquickcontrols2 (5.9.7), qt5-qtscript (5.9.7), qt5-qtsensors (5.9.7),
qt5-qtserialbus (5.9.7), qt5-qtserialport (5.9.7), qt5-qtsvg (5.9.7),
qt5-qttools (5.9.7), qt5-qttranslations (5.9.7), qt5-qtwayland (5.9.7),
qt5-qtwebchannel (5.9.7), qt5-qtwebsockets (5.9.7), qt5-qtx11extras
(5.9.7), qt5-qtxmlpatterns (5.9.7).

Security Fix(es):

* qt5-qtbase: Double free in QXmlStreamReader (CVE-2018-15518)

* qt5-qtsvg: Invalid parsing of malformed url reference resulting in a
denial of service (CVE-2018-19869)

* qt5-qtbase: QImage allocation failure in qgifhandler (CVE-2018-19870)

* qt5-qtimageformats: QTgaFile CPU exhaustion (CVE-2018-19871)

* qt5-qtbase: QBmpHandler segmentation fault on malformed BMP file
(CVE-2018-19873)
--

SL7
  x86_64
    qt5-qtwayland-5.9.7-1.el7.i686.rpm
    qt5-qtconnectivity-devel-5.9.7-1.el7.i686.rpm
    qt5-qtmultimedia-5.9.7-1.el7.i686.rpm
    qt5-qtserialport-5.9.7-1.el7.i686.rpm
    qt5-qttools-common-5.9.7-1.el7.noarch.rpm
    qt5-designer-5.9.7-1.el7.i686.rpm
    qt5-qtconnectivity-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qtwebchannel-devel-5.9.7-1.el7.i686.rpm
    qt5-qtserialport-5.9.7-1.el7.x86_64.rpm
    qt5-qtx11extras-5.9.7-1.el7.x86_64.rpm
    qt5-qttools-libs-help-5.9.7-1.el7.i686.rpm
    qt5-qtwebsockets-5.9.7-1.el7.x86_64.rpm
    qt5-qtwebsockets-devel-5.9.7-1.el7.i686.rpm
    qt5-qtwebsockets-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qtsensors-devel-5.9.7-1.el7.i686.rpm
    qt5-qtdoc-5.9.7-1.el7.noarch.rpm
    qt5-qtwebchannel-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qttools-libs-designercomponents-5.9.7-1.el7.x86_64.rpm
    qt5-qtdeclarative-5.9.7-1.el7.x86_64.rpm
    qt5-qtquickcontrols2-5.9.7-1.el7.x86_64.rpm
    qt5-qtquickcontrols2-5.9.7-1.el7.i686.rpm
    qt5-qtbase-postgresql-5.9.7-2.el7.x86_64.rpm
    qt5-qtimageformats-5.9.7-1.el7.i686.rpm
    qt5-qtbase-mysql-5.9.7-2.el7.x86_64.rpm
    qt5-qttools-libs-help-5.9.7-1.el7.x86_64.rpm
    qt5-qtbase-gui-5.9.7-2.el7.i686.rpm
    qt5-qtconnectivity-5.9.7-1.el7.x86_64.rpm
    qt5-qtsensors-5.9.7-1.el7.i686.rpm
    qt5-qtbase-odbc-5.9.7-2.el7.i686.rpm
    qt5-qtlocation-devel-5.9.7-1.el7.i686.rpm
    qt5-qtxmlpatterns-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qtdeclarative-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qtwebchannel-5.9.7-1.el7.x86_64.rpm
    qt5-qt3d-devel-5.9.7-1.el7.i686.rpm
    qt5-qtlocation-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qtgraphicaleffects-5.9.7-1.el7.i686.rpm
    qt5-qtwayland-5.9.7-1.el7.x86_64.rpm
    qt5-qttools-devel-5.9.7-1.el7.i686.rpm
    qt5-qtx11extras-devel-5.9.7-1.el7.i686.rpm
    qt5-qtserialbus-5.9.7-1.el7.i686.rpm
    qt5-qttools-libs-designer-5.9.7-1.el7.i686.rpm
    qt5-qtdeclarative-5.9.7-1.el7.i686.rpm
    qt5-qtbase-5.9.7-2.el7.i686.rpm
    qt5-qtimageformats-5.9.7-1.el7.x86_64.rpm
    qt5-qtsvg-devel-5.9.7-1.el7.i686.rpm
    qt5-designer-5.9.7-1.el7.x86_64.rpm
    qt5-qtcanvas3d-5.9.7-1.el7.x86_64.rpm
    qt5-qtmultimedia-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qtwebchannel-5.9.7-1.el7.i686.rpm
    qt5-qtxmlpatterns-devel-5.9.7-1.el7.i686.rpm
    qt5-rpm-macros-5.9.7-2.el7.noarch.rpm
    qt5-qtserialbus-5.9.7-1.el7.x86_64.rpm
    qt5-qtx11extras-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qtscript-devel-5.9.7-1.el7.i686.rpm
    qt5-qttools-5.9.7-1.el7.x86_64.rpm
    qt5-qtmultimedia-5.9.7-1.el7.x86_64.rpm
    qt5-qtserialport-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qt3d-5.9.7-1.el7.i686.rpm
    qt5-qtbase-mysql-5.9.7-2.el7.i686.rpm
    qt5-qtxmlpatterns-5.9.7-1.el7.i686.rpm
    qt5-qtbase-postgresql-5.9.7-2.el7.i686.rpm
    qt5-qttools-libs-designer-5.9.7-1.el7.x86_64.rpm
    qt5-qttranslations-5.9.7-1.el7.noarch.rpm
    qt5-qtscript-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qtscript-5.9.7-1.el7.i686.rpm
    qt5-qtwebsockets-5.9.7-1.el7.i686.rpm
    qt5-qtbase-devel-5.9.7-2.el7.i686.rpm
    qt5-qtbase-gui-5.9.7-2.el7.x86_64.rpm
    qt5-qtsvg-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qtbase-common-5.9.7-2.el7.noarch.rpm
    qt5-qtbase-devel-5.9.7-2.el7.x86_64.rpm
    qt5-qtx11extras-5.9.7-1.el7.i686.rpm
    qt5-qtlocation-5.9.7-1.el7.x86_64.rpm
    qt5-qtxmlpatterns-5.9.7-1.el7.x86_64.rpm
    qt5-qtsvg-5.9.7-1.el7.x86_64.rpm
    qt5-qtlocation-5.9.7-1.el7.i686.rpm
    qt5-qtsensors-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qtsensors-5.9.7-1.el7.x86_64.rpm
    qt5-qtgraphicaleffects-5.9.7-1.el7.x86_64.rpm
    qt5-qtscript-5.9.7-1.el7.x86_64.rpm
    qt5-qtconnectivity-5.9.7-1.el7.i686.rpm
    qt5-linguist-5.9.7-1.el7.x86_64.rpm
    qt5-qtbase-odbc-5.9.7-2.el7.x86_64.rpm
    qt5-qttools-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qt3d-5.9.7-1.el7.x86_64.rpm
    qt5-qttools-libs-designercomponents-5.9.7-1.el7.i686.rpm
    qt5-qtdeclarative-devel-5.9.7-1.el7.i686.rpm
    qt5-qtserialport-devel-5.9.7-1.el7.i686.rpm
    qt5-qtbase-5.9.7-2.el7.x86_64.rpm
    qt5-doctools-5.9.7-1.el7.x86_64.rpm
    qt5-qtmultimedia-devel-5.9.7-1.el7.i686.rpm
    qt5-qtsvg-5.9.7-1.el7.i686.rpm
    qt5-qt3d-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qtquickcontrols-5.9.7-1.el7.x86_64.rpm
    qt5-qtdeclarative-static-5.9.7-1.el7.i686.rpm
    qt5-assistant-5.9.7-1.el7.x86_64.rpm
    qt5-qtwebchannel-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qtcanvas3d-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qtserialport-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qtsensors-examples-5.9.7-1.el7.i686.rpm
    qt5-qtwayland-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtwayland-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qtmultimedia-examples-5.9.7-1.el7.i686.rpm
    qt5-qtserialbus-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qtquickcontrols-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtimageformats-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtdeclarative-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qtdeclarative-static-5.9.7-1.el7.x86_64.rpm
    qt5-qtquickcontrols2-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qtwebsockets-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qtsvg-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qtconnectivity-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qttools-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qtconnectivity-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtlocation-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtscript-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtquickcontrols2-doc-5.9.7-1.el7.x86_64.rpm
    qt5-qtserialbus-devel-5.9.7-1.el7.i686.rpm
    qt5-qdbusviewer-5.9.7-1.el7.x86_64.rpm
    qt5-qtlocation-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qtscript-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qtbase-static-5.9.7-2.el7.x86_64.rpm
    qt5-qtbase-doc-5.9.7-2.el7.x86_64.rpm
    qt5-qtserialport-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtxmlpatterns-doc-5.9.7-1.el7.noarch.rpm
    qt5-qt3d-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qtsensors-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtmultimedia-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtquickcontrols2-devel-5.9.7-1.el7.i686.rpm
    qt5-qtwebchannel-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtserialbus-doc-5.9.7-1.el7.noarch.rpm
    qt5-qttools-static-5.9.7-1.el7.i686.rpm
    qt5-qtwebsockets-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtquickcontrols-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qtserialbus-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qt3d-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtwayland-devel-5.9.7-1.el7.i686.rpm
    qt5-qtsensors-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qtbase-static-5.9.7-2.el7.i686.rpm
    qt5-qtwayland-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qtbase-examples-5.9.7-2.el7.x86_64.rpm
    qt5-qtxmlpatterns-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qttools-static-5.9.7-1.el7.x86_64.rpm
    qt5-qtgraphicaleffects-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtdeclarative-doc-5.9.7-1.el7.x86_64.rpm
    qt5-qtquickcontrols2-devel-5.9.7-1.el7.x86_64.rpm
    qt5-qtmultimedia-examples-5.9.7-1.el7.x86_64.rpm
    qt5-qttools-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtsvg-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtcanvas3d-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtx11extras-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtbase-debuginfo-5.9.7-2.el7.i686.rpm
    qt5-qtbase-debuginfo-5.9.7-2.el7.x86_64.rpm
    qt5-qtdeclarative-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtdeclarative-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qttools-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qttools-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtxmlpatterns-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtxmlpatterns-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qt3d-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qt3d-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtcanvas3d-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtconnectivity-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtconnectivity-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtgraphicaleffects-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtgraphicaleffects-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtimageformats-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtimageformats-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtlocation-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtlocation-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtmultimedia-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtmultimedia-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtquickcontrols-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtquickcontrols2-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtquickcontrols2-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtscript-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtscript-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtsensors-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtsensors-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtserialbus-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtserialbus-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtserialport-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtserialport-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtsvg-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtsvg-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtwayland-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtwayland-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtwebchannel-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtwebchannel-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtwebsockets-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtwebsockets-debuginfo-5.9.7-1.el7.x86_64.rpm
    qt5-qtx11extras-debuginfo-5.9.7-1.el7.i686.rpm
    qt5-qtx11extras-debuginfo-5.9.7-1.el7.x86_64.rpm
  noarch
    qt5-qtbase-common-5.9.7-2.el7.noarch.rpm
    qt5-qttools-common-5.9.7-1.el7.noarch.rpm
    qt5-qttools-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtxmlpatterns-doc-5.9.7-1.el7.noarch.rpm
    qt5-rpm-macros-5.9.7-2.el7.noarch.rpm
    qt5-qtdoc-5.9.7-1.el7.noarch.rpm
    qt5-qttranslations-5.9.7-1.el7.noarch.rpm
    qt5-qt3d-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtcanvas3d-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtconnectivity-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtgraphicaleffects-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtimageformats-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtlocation-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtmultimedia-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtquickcontrols-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtscript-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtsensors-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtserialbus-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtserialport-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtsvg-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtwayland-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtwebchannel-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtwebsockets-doc-5.9.7-1.el7.noarch.rpm
    qt5-qtx11extras-doc-5.9.7-1.el7.noarch.rpm

- Scientific Linux Development Team