Lucene search

K
oraclelinuxOracleLinuxELSA-2020-4690
HistoryNov 10, 2020 - 12:00 a.m.

qt5-qtbase and qt5-qtwebsockets security and bug fix update

2020-11-1000:00:00
linux.oracle.com
32
qt5
qtbase
qtwebsockets
security update
bug fix
openssl
malicious code execution
xml entity expansion
max frame size api
unix

EPSS

0.006

Percentile

77.7%

qt5-qtbase
[5.12.5-6]

  • OpenSSL: handle SSL_shutdowns errors properly
    Resolves: bz#1851538
    [5.12.5-5]
  • Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
    Resolves: bz#1814739
    Resolves: bz#1814683
  • Fix: XML entity expansion vulnerability
    Resolves: bz#1822193
    qt5-qttools
    [5.12.5-2]
  • Rebuild (LLVM-10)
    Resolves: bz#1832857
    qt5-qtwebsockets
    [5.12.5-2]
  • Add a public api to set max frame and message size
    Resolves: bz#1815187