Red Hat Security Advisory

RHSA-2021:2328

qt5-qtimageformats security update

Released 2021-06-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7) qt5-qtimageformats-5.9.7-2.el7_9, qt5-qtimageformats-5.9.7-2.el7_9.ppc
Red Hat Enterprise Linux Server Optional (v. 7) qt5-qtimageformats-doc-5.9.7-2.el7_9
Red Hat Enterprise Linux Workstation (v. 7) qt5-qtimageformats-5.9.7-2.el7_9
Red Hat Enterprise Linux Workstation Optional (v. 7) qt5-qtimageformats-doc-5.9.7-2.el7_9

TI-2020-18612 CVE-2020-36329 · GHSA-mprg-gw36-367p

MEDIUM 47

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02319 Published 2021-05-21 Fixed CWE-416

TI-2020-18611 CVE-2020-36328 · GHSA-jxwm-333p-5cwx

MEDIUM 47

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02662 Published 2021-05-21 Fixed CWE-787

TI-2018-15238 CVE-2018-25011 · GHSA-vqgc-g267-8p6w

MEDIUM 47

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02513 Published 2021-05-21 Fixed CWE-787

TI-2018-15241 CVE-2018-25014 · GHSA-rr28-4v9r-6wcq

MEDIUM 46

A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0223 Published 2021-05-21 Partial fix CWE-908