qt5-qtsvg-5.15.3-2.el8

エラータID: AXSA:2023-7241:02

Release date: 
Monday, December 25, 2023 - 10:28
Subject: 
qt5-qtsvg-5.15.3-2.el8
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Low
Description: 

Scalable Vector Graphics (SVG) is an XML-based language for describing two-dimensional vector graphics. Qt provides classes for rendering and displaying SVG drawings in widgets and on other paint devices.

Security Fix(es):

* qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-32573
In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsPerEm initialization is mishandled.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. qt5-qtsvg-5.15.3-2.el8.src.rpm
    MD5: 4b97e4b4414bb6ca1f7177f509dc6a2b
    SHA-256: 97178ded9fcb3bfa6331ee1c61ce7b129bd8c92f5b1416405025750020e3341e
    Size: 1.82 MB

Asianux Server 8 for x86_64
  1. qt5-qtsvg-5.15.3-2.el8.i686.rpm
    MD5: 6a4bd850e8b773aa40467f8e38a8938a
    SHA-256: c9bb41e46f5649848add0786c081b07967827b6edbabb9b1f617a6bde04d59ce
    Size: 202.77 kB
  2. qt5-qtsvg-5.15.3-2.el8.x86_64.rpm
    MD5: 8359d00dfa5a81e68ca0478c21422312
    SHA-256: 18cb263724d3b74a605c58d21e9190c389e5926c485a048535fd47c3d0e34a7e
    Size: 184.02 kB
  3. qt5-qtsvg-devel-5.15.3-2.el8.i686.rpm
    MD5: da0d843f58ebf59af3938287d60fc4bd
    SHA-256: 98a3e5714d2d28e14287cc84c61482fdeabfb4cf00763e3472ea939888175808
    Size: 32.27 kB
  4. qt5-qtsvg-devel-5.15.3-2.el8.x86_64.rpm
    MD5: 7fc6ce9bf448bade9a320fb34f525787
    SHA-256: 31162aad94e8c0a7db49973da5aea86f9babecfee920498882c7fe8cf77eb23a
    Size: 32.25 kB
  5. qt5-qtsvg-examples-5.15.3-2.el8.x86_64.rpm
    MD5: 9f47c8b64a2d2bd8a939f95fd6f979d4
    SHA-256: b154a027106e001d4f169f2304a7e4091d3c8e377265ac672e6d801895de025f
    Size: 1.28 MB