Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 436
Alerts This Week
Warning Icon 1 436

SUSE: 2019:0927-1 Moderate: libqt5-qtbase Denial of Service Issue

suse
Calendar Grey April 10, 2019
Dist Suse Esm H88
SUSE Security Update: Security update for libqt5-qtbase ____________________________________________
An update that solves two vulnerabilities and has two fixes is now available

Summary

This update for libqt5-qtbase fixes the following issues: Security issues fixed: - CVE-2018-19872: Fixed an issue which could allow a division by zero leading to crash (bsc#1130246). - CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted gif files (bsc#1118597). Other issue addressed: - Fixed an issue which showing remote locations was not allowed (bsc#1129662). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-2019-927=1

Topics%20covered

Topics Covered

security advisory denial of service moderate severity suse linux libqt5-qtbase

References

#1108889 #1118597 #1129662 #1130246

Cross- CVE-2018-19870 CVE-2018-19872

Affected Products:

SUSE Linux Enterprise Module for Open Buildservice Development Tools 15

SUSE Linux Enterprise Module for Desktop Applications 15

SUSE Linux Enterprise Module for Basesystem 15

https://www.suse.com/security/cve/CVE-2018-19870.html

https://www.suse.com/security/cve/CVE-2018-19872.html

https://bugzilla.suse.com/1108889

https://bugzilla.suse.com/1118597

https://bugzilla.suse.com/1129662

https://bugzilla.suse.com/1130246

Announcement ID: SUSE-SU-2019:0927-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory denial of service moderate severity suse linux libqt5-qtbase

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.