Stay Secure with the Latest Linux Advisories

security advisoryxml parsing issuemageia

Mageia 7: 2020-0204 Moderate Security Flaw in qt4 XML Parsing

Updated qt4 packages fix security vulnerabilities: A double-free or corruption during parsing of a specially crafted illegal XML document (CVE-2018-15518). . MGASA-2020-0204 - Updated qt4 packages fix security vulnerabilities Publication date: 08 May 2020 URL: https://advisories.mageia.org/MGASA-2020-0204.html Type: security Affected Mageia releases: 7 CVE: CVE-2018-15518, CVE-2018-19869, CVE-2018-19870, CVE-2018-19871, CVE-2018-19873 Updated qt4 packages fix security vulnerabilities: A double-free or corruption during parsing of a specially crafted illegal XML document (CVE-2018-15518). A malformed SVG image could cause a segmentation fault in qsvghandler.cpp (CVE-2018-19869). A malformed GIF image might have caused a NULL pointer dereference in QGifHandler resulting in a segmentation fault (CVE-2018-19870). There was an uncontrolled resource consumption in QTgaFile (CVE-2018-19871). QBmpHandler had a buffer overflow via BMP data (CVE-2018-19873). References: - https://bugs.mageia.org/show_bug.cgi?id=26505 - https://lists.debian.org/debian-lts-announce/2019/05/msg00014.html - https://www.cve.org/CVERecord?id=CVE-2018-15518 - https://www.cve.org/CVERecord?id=CVE-2018-19869 - https://www.cve.org/CVERecord?id=CVE-2018-19870 - https://www.cve.org/CVERecord?id=CVE-2018-19871 - https://www.cve.org/CVERecord?id=CVE-2018-19873 SRPMS: - 7/core/qt4-4.8.7-26.1.mga7 . Latest qt4 updates rectify several security vulnerabilities linked to XML parsing and image processing. Explore the detailed patches in the advisory released by Mageia.. qt4 Update,Mageia Security Advisory,XML Vulnerability Fix,Image Handling Security. . Severity: Important. LinuxSecurity.com Team

May 08, 2020 •Important Mageia