Security update for libqt5-qtbase SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1383-1 Final 1 1 2015-05-29T17:35:18Z current 2015-05-29T17:35:18Z 2015-05-29T17:35:18Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for libqt5-qtbase This security update fixes the following issues: * Add libqt5-Fix-a-division-by-zero-processing-malformed-BMP.patch - QTBUG-44547, bsc#921999 (CVE-2015-0295) * Add libqt5-Fixes-crash-in-bmp-and-ico-image-decoding.patch - bsc#927806 (CVE-2015-1858), bsc#927807 (CVE-2015-1859) * Add libqt5-Fixes-crash-in-gif-image-decoder.patch - bsc#927808 (CVE-2015-1860) * Add libqt5-fix-use-after-free-bug.patch from upstream - fixes the use-after-free bug in backingstore, boo#870151 The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-2015-399,SUSE-SLE-SDK-12-2015-399,SUSE-SLE-SERVER-12-2015-399 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151383-1/ Link for SUSE-SU-2015:1383-1 https://lists.suse.com/pipermail/sle-security-updates/2015-August/001540.html E-Mail link for SUSE-SU-2015:1383-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/870151 SUSE Bug 870151 https://bugzilla.suse.com/921999 SUSE Bug 921999 https://bugzilla.suse.com/927806 SUSE Bug 927806 https://bugzilla.suse.com/927807 SUSE Bug 927807 https://bugzilla.suse.com/927808 SUSE Bug 927808 https://www.suse.com/security/cve/CVE-2015-0295/ SUSE CVE CVE-2015-0295 page https://www.suse.com/security/cve/CVE-2015-1858/ SUSE CVE CVE-2015-1858 page https://www.suse.com/security/cve/CVE-2015-1859/ SUSE CVE CVE-2015-1859 page https://www.suse.com/security/cve/CVE-2015-1860/ SUSE CVE CVE-2015-1860 page SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Software Development Kit 12 libQt5Core5-5.3.1-4.4.2 libQt5DBus5-5.3.1-4.4.2 libQt5Gui5-5.3.1-4.4.2 libQt5Widgets5-5.3.1-4.4.2 libQt5Bootstrap-devel-static-5.3.1-4.4.2 libQt5Concurrent-devel-5.3.1-4.4.2 libQt5Concurrent5-5.3.1-4.4.2 libQt5Core-devel-5.3.1-4.4.2 libQt5Core-private-headers-devel-5.3.1-4.4.2 libQt5DBus-devel-5.3.1-4.4.2 libQt5DBus-private-headers-devel-5.3.1-4.4.2 libQt5Gui-devel-5.3.1-4.4.2 libQt5Gui-private-headers-devel-5.3.1-4.4.2 libQt5Network-devel-5.3.1-4.4.2 libQt5Network-private-headers-devel-5.3.1-4.4.2 libQt5Network5-5.3.1-4.4.2 libQt5OpenGL-devel-5.3.1-4.4.2 libQt5OpenGL-private-headers-devel-5.3.1-4.4.2 libQt5OpenGL5-5.3.1-4.4.2 libQt5OpenGLExtensions-devel-static-5.3.1-4.4.2 libQt5PlatformSupport-devel-static-5.3.1-4.4.2 libQt5PlatformSupport-private-headers-devel-5.3.1-4.4.2 libQt5PrintSupport-devel-5.3.1-4.4.2 libQt5PrintSupport-private-headers-devel-5.3.1-4.4.2 libQt5PrintSupport5-5.3.1-4.4.2 libQt5Sql-devel-5.3.1-4.4.2 libQt5Sql-private-headers-devel-5.3.1-4.4.2 libQt5Sql5-5.3.1-4.4.2 libQt5Sql5-mysql-5.3.1-4.4.2 libQt5Sql5-postgresql-5.3.1-4.4.2 libQt5Sql5-sqlite-5.3.1-4.4.2 libQt5Sql5-unixODBC-5.3.1-4.4.2 libQt5Test-devel-5.3.1-4.4.2 libQt5Test-private-headers-devel-5.3.1-4.4.2 libQt5Test5-5.3.1-4.4.2 libQt5Widgets-devel-5.3.1-4.4.2 libQt5Widgets-private-headers-devel-5.3.1-4.4.2 libQt5Xml-devel-5.3.1-4.4.2 libQt5Xml5-5.3.1-4.4.2 libqt5-qtbase-common-devel-5.3.1-4.4.2 libqt5-qtbase-devel-5.3.1-4.4.2 libqt5-qtbase-doc-5.3.1-4.4.2 libqt5-qtbase-private-headers-devel-5.3.1-4.4.2 libQt5Core5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Desktop 12 libQt5DBus5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Desktop 12 libQt5Gui5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Desktop 12 libQt5Widgets5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Desktop 12 libQt5Core5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Server 12 libQt5DBus5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Server 12 libQt5Gui5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Server 12 libQt5Widgets5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Server 12 libQt5Core5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libQt5DBus5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libQt5Gui5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libQt5Widgets5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 libQt5Bootstrap-devel-static-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Concurrent-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Concurrent5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Core-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Core-private-headers-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5DBus-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5DBus-private-headers-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Gui-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Gui-private-headers-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Network-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Network-private-headers-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Network5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5OpenGL-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5OpenGL-private-headers-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5OpenGL5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5OpenGLExtensions-devel-static-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5PlatformSupport-devel-static-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5PlatformSupport-private-headers-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5PrintSupport-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5PrintSupport-private-headers-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5PrintSupport5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Sql-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Sql-private-headers-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Sql5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Sql5-mysql-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Sql5-postgresql-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Sql5-sqlite-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Sql5-unixODBC-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Test-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Test-private-headers-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Test5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Widgets-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Widgets-private-headers-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Xml-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libQt5Xml5-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libqt5-qtbase-common-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libqt5-qtbase-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libqt5-qtbase-doc-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 libqt5-qtbase-private-headers-devel-5.3.1-4.4.2 as a component of SUSE Linux Enterprise Software Development Kit 12 The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers to cause a denial of service (divide-by-zero and crash) via a crafted BMP file. CVE-2015-0295 SUSE Linux Enterprise Desktop 12:libQt5Core5-5.3.1-4.4.2 SUSE Linux Enterprise Desktop 12:libQt5DBus5-5.3.1-4.4.2 SUSE Linux Enterprise Desktop 12:libQt5Gui5-5.3.1-4.4.2 SUSE Linux Enterprise Desktop 12:libQt5Widgets5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5Core5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5DBus5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5Gui5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5Widgets5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5Core5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5DBus5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5Gui5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5Widgets5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Bootstrap-devel-static-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Concurrent-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Concurrent5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Core-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Core-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5DBus-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5DBus-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Gui-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Gui-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Network-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Network-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Network5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGL-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGL-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGL5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGLExtensions-devel-static-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PlatformSupport-devel-static-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PlatformSupport-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PrintSupport-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PrintSupport-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PrintSupport5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-mysql-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-postgresql-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-sqlite-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-unixODBC-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Test-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Test-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Test5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Widgets-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Widgets-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Xml-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Xml5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-common-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-doc-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-private-headers-devel-5.3.1-4.4.2 low 2.1 AV:L/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151383-1/ https://www.suse.com/security/cve/CVE-2015-0295.html CVE-2015-0295 https://bugzilla.suse.com/921999 SUSE Bug 921999 https://bugzilla.suse.com/927806 SUSE Bug 927806 https://bugzilla.suse.com/927807 SUSE Bug 927807 https://bugzilla.suse.com/927808 SUSE Bug 927808 https://bugzilla.suse.com/936523 SUSE Bug 936523 Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted BMP image. CVE-2015-1858 SUSE Linux Enterprise Desktop 12:libQt5Core5-5.3.1-4.4.2 SUSE Linux Enterprise Desktop 12:libQt5DBus5-5.3.1-4.4.2 SUSE Linux Enterprise Desktop 12:libQt5Gui5-5.3.1-4.4.2 SUSE Linux Enterprise Desktop 12:libQt5Widgets5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5Core5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5DBus5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5Gui5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5Widgets5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5Core5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5DBus5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5Gui5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5Widgets5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Bootstrap-devel-static-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Concurrent-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Concurrent5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Core-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Core-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5DBus-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5DBus-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Gui-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Gui-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Network-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Network-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Network5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGL-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGL-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGL5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGLExtensions-devel-static-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PlatformSupport-devel-static-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PlatformSupport-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PrintSupport-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PrintSupport-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PrintSupport5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-mysql-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-postgresql-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-sqlite-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-unixODBC-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Test-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Test-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Test5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Widgets-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Widgets-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Xml-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Xml5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-common-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-doc-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-private-headers-devel-5.3.1-4.4.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151383-1/ https://www.suse.com/security/cve/CVE-2015-1858.html CVE-2015-1858 https://bugzilla.suse.com/921999 SUSE Bug 921999 https://bugzilla.suse.com/927806 SUSE Bug 927806 https://bugzilla.suse.com/927807 SUSE Bug 927807 https://bugzilla.suse.com/927808 SUSE Bug 927808 Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault and crash) and possibly execute arbitrary code via a crafted ICO image. CVE-2015-1859 SUSE Linux Enterprise Desktop 12:libQt5Core5-5.3.1-4.4.2 SUSE Linux Enterprise Desktop 12:libQt5DBus5-5.3.1-4.4.2 SUSE Linux Enterprise Desktop 12:libQt5Gui5-5.3.1-4.4.2 SUSE Linux Enterprise Desktop 12:libQt5Widgets5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5Core5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5DBus5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5Gui5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5Widgets5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5Core5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5DBus5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5Gui5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5Widgets5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Bootstrap-devel-static-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Concurrent-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Concurrent5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Core-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Core-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5DBus-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5DBus-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Gui-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Gui-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Network-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Network-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Network5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGL-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGL-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGL5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGLExtensions-devel-static-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PlatformSupport-devel-static-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PlatformSupport-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PrintSupport-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PrintSupport-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PrintSupport5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-mysql-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-postgresql-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-sqlite-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-unixODBC-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Test-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Test-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Test5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Widgets-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Widgets-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Xml-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Xml5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-common-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-doc-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-private-headers-devel-5.3.1-4.4.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151383-1/ https://www.suse.com/security/cve/CVE-2015-1859.html CVE-2015-1859 https://bugzilla.suse.com/921999 SUSE Bug 921999 https://bugzilla.suse.com/927806 SUSE Bug 927806 https://bugzilla.suse.com/927807 SUSE Bug 927807 https://bugzilla.suse.com/927808 SUSE Bug 927808 Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image. CVE-2015-1860 SUSE Linux Enterprise Desktop 12:libQt5Core5-5.3.1-4.4.2 SUSE Linux Enterprise Desktop 12:libQt5DBus5-5.3.1-4.4.2 SUSE Linux Enterprise Desktop 12:libQt5Gui5-5.3.1-4.4.2 SUSE Linux Enterprise Desktop 12:libQt5Widgets5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5Core5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5DBus5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5Gui5-5.3.1-4.4.2 SUSE Linux Enterprise Server 12:libQt5Widgets5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5Core5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5DBus5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5Gui5-5.3.1-4.4.2 SUSE Linux Enterprise Server for SAP Applications 12:libQt5Widgets5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Bootstrap-devel-static-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Concurrent-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Concurrent5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Core-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Core-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5DBus-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5DBus-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Gui-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Gui-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Network-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Network-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Network5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGL-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGL-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGL5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5OpenGLExtensions-devel-static-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PlatformSupport-devel-static-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PlatformSupport-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PrintSupport-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PrintSupport-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5PrintSupport5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-mysql-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-postgresql-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-sqlite-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Sql5-unixODBC-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Test-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Test-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Test5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Widgets-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Widgets-private-headers-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Xml-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libQt5Xml5-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-common-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-devel-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-doc-5.3.1-4.4.2 SUSE Linux Enterprise Software Development Kit 12:libqt5-qtbase-private-headers-devel-5.3.1-4.4.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151383-1/ https://www.suse.com/security/cve/CVE-2015-1860.html CVE-2015-1860 https://bugzilla.suse.com/921999 SUSE Bug 921999 https://bugzilla.suse.com/927806 SUSE Bug 927806 https://bugzilla.suse.com/927807 SUSE Bug 927807 https://bugzilla.suse.com/927808 SUSE Bug 927808