Red Hat Security AdvisoryRHSA-2023:6369
qt5 security and bug fix update
Released 2023-11-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) qt5-devel-5.15.9-1.el9, qt5-qtbase-static-5.15.9-7.el9
- Red Hat Enterprise Linux AppStream (v. 9) qt5-5.15.9-1.el9, qt5-qtbase-5.15.9-7.el9, qt5-qtbase-common-5.15.9-7.el9 +9
Fixes 5 records
Priority HIGH 72
In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefix is greater than a l…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0158 · Published 2023-08-20 · Partial fix
Priority MEDIUM 41
An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01284 · Published 2023-07-13 · Partial fix CWE-835
Priority LOW 32
An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00812 · Published 2023-05-22 · Fixed CWE-125
Priority LOW 31
An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00738 · Published 2023-06-05 · Partial fix CWE-295
Priority LOW 31
In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsPerEm initialization is mishandled.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00884 · Published 2023-05-10 · Partial fix CWE-369
THREATIST.IORead the docs