{ "Definition": [ { "ID": "oval:org.altlinux.errata:def:20202555", "Version": "oval:org.altlinux.errata:def:20202555", "Class": "patch", "Metadata": { "Title": "ALT-PU-2020-2555: package `qt5-base` update to version 5.15.0-alt1", "AffectedList": [ { "Family": "unix", "Platforms": [ "ALT Linux branch p10" ], "Products": [ "ALT Server", "ALT Virtualization Server", "ALT Workstation", "ALT Workstation K", "ALT Education", "Simply Linux", "Starterkit" ] } ], "References": [ { "RefID": "ALT-PU-2020-2555", "RefURL": "https://errata.altlinux.org/ALT-PU-2020-2555", "Source": "ALTPU" }, { "RefID": "CVE-2018-21035", "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2018-21035", "Source": "CVE" }, { "RefID": "CVE-2020-0569", "RefURL": "https://nvd.nist.gov/vuln/detail/CVE-2020-0569", "Source": "CVE" } ], "Description": "This update upgrades qt5-base to version 5.15.0-alt1. \nSecurity Fix(es):\n\n * CVE-2018-21035: In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB for frames and 2GB for messages. Smaller limits cannot be configured. This makes it easier for attackers to cause a denial of service (memory consumption).\n\n * CVE-2020-0569: Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via local access.", "Advisory": { "From": "errata.altlinux.org", "Severity": "High", "Rights": "Copyright 2024 BaseALT Ltd.", "Issued": { "Date": "2020-08-13" }, "Updated": { "Date": "2020-08-13" }, "BDUs": null, "CVEs": [ { "ID": "CVE-2018-21035", "CVSS": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "CVSS3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "CWE": "CWE-770", "Href": "https://nvd.nist.gov/vuln/detail/CVE-2018-21035", "Impact": "High", "Public": "20200228" }, { "ID": "CVE-2020-0569", "CVSS": "AV:A/AC:L/Au:S/C:N/I:N/A:P", "CVSS3": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "CWE": "CWE-787", "Href": "https://nvd.nist.gov/vuln/detail/CVE-2020-0569", "Impact": "Low", "Public": "20201123" } ], "AffectedCPEs": { "CPEs": [ "cpe:/o:alt:kworkstation:10", "cpe:/o:alt:workstation:10", "cpe:/o:alt:server:10", "cpe:/o:alt:server-v:10", "cpe:/o:alt:education:10", "cpe:/o:alt:slinux:10", "cpe:/o:alt:starterkit:p10", "cpe:/o:alt:kworkstation:10.1", "cpe:/o:alt:workstation:10.1", "cpe:/o:alt:server:10.1", "cpe:/o:alt:server-v:10.1", "cpe:/o:alt:education:10.1", "cpe:/o:alt:slinux:10.1", "cpe:/o:alt:starterkit:10.1", "cpe:/o:alt:kworkstation:10.2", "cpe:/o:alt:workstation:10.2", "cpe:/o:alt:server:10.2", "cpe:/o:alt:server-v:10.2", "cpe:/o:alt:education:10.2", "cpe:/o:alt:slinux:10.2", "cpe:/o:alt:starterkit:10.2" ] } } }, "Criteria": { "Operator": "AND", "Criterions": [ { "TestRef": "oval:org.altlinux.errata:tst:2001", "Comment": "ALT Linux must be installed" } ], "Criterias": [ { "Operator": "OR", "Criterions": [ { "TestRef": "oval:org.altlinux.errata:tst:20202555001", "Comment": "libqt5-concurrent is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555002", "Comment": "libqt5-core is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555003", "Comment": "libqt5-dbus is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555004", "Comment": "libqt5-eglfsdeviceintegration is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555005", "Comment": "libqt5-eglfskmssupport is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555006", "Comment": "libqt5-gui is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555007", "Comment": "libqt5-network is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555008", "Comment": "libqt5-opengl is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555009", "Comment": "libqt5-printsupport is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555010", "Comment": "libqt5-sql is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555011", "Comment": "libqt5-test is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555012", "Comment": "libqt5-widgets is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555013", "Comment": "libqt5-xcbqpa is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555014", "Comment": "libqt5-xml is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555015", "Comment": "qt5-base-common is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555016", "Comment": "qt5-base-devel is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555017", "Comment": "qt5-base-devel-static is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555018", "Comment": "qt5-base-doc is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555019", "Comment": "qt5-qtbase is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555020", "Comment": "qt5-qtbase-gui is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555021", "Comment": "qt5-sql is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555022", "Comment": "qt5-sql-interbase is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555023", "Comment": "qt5-sql-mysql is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555024", "Comment": "qt5-sql-odbc is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555025", "Comment": "qt5-sql-postgresql is earlier than 0:5.15.0-alt1" }, { "TestRef": "oval:org.altlinux.errata:tst:20202555026", "Comment": "rpm-macros-qt5 is earlier than 0:5.15.0-alt1" } ] } ] } } ] }