qt5-5.15.3-1.el8

エラータID: AXSA:2022-4365:05

Release date: 
Friday, December 9, 2022 - 07:52
Subject: 
qt5-5.15.3-1.el8
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

The Qt5 libraries packages provide Qt 5, version 5 of the Qt cross-platform application framework.

The following packages have been upgraded to a later upstream version: qt5 (5.15.3). (BZ#2061377)

Security Fix(es):

* qt: QProcess could execute a binary from the current working directory when not found in the PATH (CVE-2022-25255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Asianux Server 8.7 Release Notes linked from the References section.

CVE-2022-25255
In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. qt5-5.15.3-1.el8.src.rpm
    MD5: 316b234e71c84be8fa1c91a15cf51ea3
    SHA-256: d947991dc8eb8d5da04d9b871a6171f88398ed21697436d934a75d19c3a2918a
    Size: 12.51 kB

Asianux Server 8 for x86_64
  1. qt5-devel-5.15.3-1.el8.noarch.rpm
    MD5: 81d6b49b12dc3bef89964c5cef70ee2d
    SHA-256: 024bc999d1f7ffb2d2d72f6c34de040d98251ce33a7ab70106ea85b6e1d735a4
    Size: 10.66 kB
  2. qt5-rpm-macros-5.15.3-1.el8.noarch.rpm
    MD5: 0e7f60ae9f1a8e91e5f313dfa5284ad5
    SHA-256: d42352b7f8e42d9a2de6557c78296dc9d3e74312f98c6987ca5d771258be8634
    Size: 11.42 kB
  3. qt5-srpm-macros-5.15.3-1.el8.noarch.rpm
    MD5: 39fcd9a0985b92a508bfad57f1289b55
    SHA-256: a14818657e01bac1634b7bf817691032ec9597d6c6b1822ab1aa61fde79c7ad6
    Size: 9.58 kB