Ubuntu 18.04 LTS: 4003-1 Moderate: Qt Denial of Service Issues

ubuntu

June 3, 2019

Several security issues were fixed in Qt.

Summary

Several security issues were fixed in Qt.

Software Description:

- qtbase-opensource-src: Qt 5 libraries

Details:

It was discovered that Qt incorrectly handled certain XML documents. A

remote attacker could use this issue with a specially crafted XML document

to cause Qt to crash, resulting in a denial of service, or possibly execute

arbitrary code. (CVE-2018-15518)

It was discovered that Qt incorrectly handled certain GIF images. A remote

attacker could use this issue with a specially crafted GIF image to cause

Qt to crash, resulting in a denial of service, or possibly execute

arbitrary code. (CVE-2018-19870)

It was discovered that Qt incorrectly handled certain BMP images. A remote

attacker could use this issue with a specially crafted BMP image to cause

Qt to crash, resulting in a denial of service, or possibly execute

arbitrary code. (CVE-2018-19873)

Topics Covered

security advisory denial of service update instructions ubuntu qt

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  libqt5core5a                    5.11.1+dfsg-7ubuntu3.1
  libqt5gui5                      5.11.1+dfsg-7ubuntu3.1

Ubuntu 18.04 LTS:
  libqt5core5a                    5.9.5+dfsg-0ubuntu2.1
  libqt5gui5                      5.9.5+dfsg-0ubuntu2.1

Ubuntu 16.04 LTS:
  libqt5core5a                    5.5.1+dfsg-16ubuntu7.6
  libqt5gui5                      5.5.1+dfsg-16ubuntu7.6

After a standard system update you need to restart yoursession to make all
the necessary changes.