Linux · Security advisory · November 14, 2019

ELSA-2019-3390: Security update for 22 packages

ELSA-2019-3390, released November 14, 2019, fixes 3 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0338
88th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
qt5-assistantol 80:5.11.1-9.el8
qt5-designerol 80:5.11.1-9.el8
qt5-doctoolsol 80:5.11.1-9.el8
qt5-linguistol 80:5.11.1-9.el8
qt5-qdbusviewerol 80:5.11.1-9.el8
qt5-qtbaseol 80:5.11.1-7.el8
qt5-qtbase-commonol 80:5.11.1-7.el8
qt5-qtbase-develol 80:5.11.1-7.el8
qt5-qtbase-examplesol 80:5.11.1-7.el8
qt5-qtbase-guiol 80:5.11.1-7.el8
qt5-qtbase-mysqlol 80:5.11.1-7.el8
qt5-qtbase-odbcol 80:5.11.1-7.el8
qt5-qtbase-postgresqlol 80:5.11.1-7.el8
qt5-qtbase-staticol 80:5.11.1-7.el8
qt5-qttoolsol 80:5.11.1-9.el8
qt5-qttools-commonol 80:5.11.1-9.el8
qt5-qttools-develol 80:5.11.1-9.el8
qt5-qttools-examplesol 80:5.11.1-9.el8
qt5-qttools-libs-designerol 80:5.11.1-9.el8
qt5-qttools-libs-designercomponentsol 80:5.11.1-9.el8
qt5-qttools-libs-helpol 80:5.11.1-9.el8
qt5-qttools-staticol 80:5.11.1-9.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2018-19873 qt5-assistant: Qt is a software toolkit for developing applications 9.8 0.0338 None reported
High CVE-2018-15518 libqt5test5: QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML... 8.8 0.0250 None reported
High CVE-2018-19870 qt5-assistant: Qt is a software toolkit for developing applications 8.8 0.0242 None reported
Showing 1 to 3 of 3 1