Linux · Security advisory · November 12, 2023

ELSA-2023-6369: Security update for 110 packages

ELSA-2023-6369, released November 12, 2023, fixes 5 CVEs across 110 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0158
75th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
adwaita-qt5ol 90:1.4.2-1.el9
libadwaita-qt5ol 90:1.4.2-1.el9
python-qt5-rpm-macrosol 90:5.15.9-1.el9
python3-pyqt5-sipol 90:12.11.1-1.el9
python3-qt5ol 90:5.15.9-1.el9
python3-qt5-baseol 90:5.15.9-1.el9
python3-qt5-develol 90:5.15.9-1.el9
qgnomeplatformol 90:0.9.0-1.el9
qt5ol 90:5.15.9-1.el9
qt5-assistantol 90:5.15.9-3.el9
qt5-designerol 90:5.15.9-3.el9
qt5-develol 90:5.15.9-1.el9
qt5-doctoolsol 90:5.15.9-3.el9
qt5-linguistol 90:5.15.9-3.el9
qt5-qdbusviewerol 90:5.15.9-3.el9
qt5-qt3dol 90:5.15.9-1.el9
qt5-qt3d-develol 90:5.15.9-1.el9
qt5-qt3d-docol 90:5.15.9-1.el9
qt5-qt3d-examplesol 90:5.15.9-1.el9
qt5-qtbaseol 90:5.15.9-7.el9
qt5-qtbase-commonol 90:5.15.9-7.el9
qt5-qtbase-develol 90:5.15.9-7.el9
qt5-qtbase-docol 90:5.15.9-1.el9
qt5-qtbase-examplesol 90:5.15.9-7.el9
qt5-qtbase-guiol 90:5.15.9-7.el9
qt5-qtbase-mysqlol 90:5.15.9-7.el9
qt5-qtbase-odbcol 90:5.15.9-7.el9
qt5-qtbase-postgresqlol 90:5.15.9-7.el9
qt5-qtbase-private-develol 90:5.15.9-7.el9
qt5-qtbase-staticol 90:5.15.9-7.el9
qt5-qtconnectivityol 90:5.15.9-2.el9
qt5-qtconnectivity-develol 90:5.15.9-2.el9
qt5-qtconnectivity-docol 90:5.15.9-1.el9
qt5-qtconnectivity-examplesol 90:5.15.9-2.el9
qt5-qtdeclarativeol 90:5.15.9-3.el9
qt5-qtdeclarative-develol 90:5.15.9-3.el9
qt5-qtdeclarative-docol 90:5.15.9-1.el9
qt5-qtdeclarative-examplesol 90:5.15.9-3.el9
qt5-qtdeclarative-staticol 90:5.15.9-3.el9
qt5-qtdocol 90:5.15.9-1.el9
qt5-qtgraphicaleffectsol 90:5.15.9-1.el9
qt5-qtgraphicaleffects-docol 90:5.15.9-1.el9
qt5-qtimageformatsol 90:5.15.9-1.el9
qt5-qtimageformats-docol 90:5.15.9-1.el9
qt5-qtlocationol 90:5.15.9-1.el9
qt5-qtlocation-develol 90:5.15.9-1.el9
qt5-qtlocation-docol 90:5.15.9-1.el9
qt5-qtlocation-examplesol 90:5.15.9-1.el9
qt5-qtmultimediaol 90:5.15.9-1.el9
qt5-qtmultimedia-develol 90:5.15.9-1.el9
qt5-qtmultimedia-docol 90:5.15.9-1.el9
qt5-qtmultimedia-examplesol 90:5.15.9-1.el9
qt5-qtquickcontrolsol 90:5.15.9-1.el9
qt5-qtquickcontrols-docol 90:5.15.9-1.el9
qt5-qtquickcontrols-examplesol 90:5.15.9-1.el9
qt5-qtquickcontrols2ol 90:5.15.9-1.el9
qt5-qtquickcontrols2-develol 90:5.15.9-1.el9
qt5-qtquickcontrols2-docol 90:5.15.9-1.el9
qt5-qtquickcontrols2-examplesol 90:5.15.9-1.el9
qt5-qtscriptol 90:5.15.9-1.el9
qt5-qtscript-develol 90:5.15.9-1.el9
qt5-qtscript-docol 90:5.15.9-1.el9
qt5-qtscript-examplesol 90:5.15.9-1.el9
qt5-qtsensorsol 90:5.15.9-1.el9
qt5-qtsensors-develol 90:5.15.9-1.el9
qt5-qtsensors-docol 90:5.15.9-1.el9
qt5-qtsensors-examplesol 90:5.15.9-1.el9
qt5-qtserialbusol 90:5.15.9-1.el9
qt5-qtserialbus-develol 90:5.15.9-1.el9
qt5-qtserialbus-docol 90:5.15.9-1.el9
qt5-qtserialbus-examplesol 90:5.15.9-1.el9
qt5-qtserialportol 90:5.15.9-1.el9
qt5-qtserialport-develol 90:5.15.9-1.el9
qt5-qtserialport-docol 90:5.15.9-1.el9
qt5-qtserialport-examplesol 90:5.15.9-1.el9
qt5-qtsvgol 90:5.15.9-2.el9
qt5-qtsvg-develol 90:5.15.9-2.el9
qt5-qtsvg-docol 90:5.15.9-1.el9
qt5-qtsvg-examplesol 90:5.15.9-2.el9
qt5-qttoolsol 90:5.15.9-3.el9
qt5-qttools-commonol 90:5.15.9-3.el9
qt5-qttools-develol 90:5.15.9-3.el9
qt5-qttools-docol 90:5.15.9-1.el9
qt5-qttools-examplesol 90:5.15.9-3.el9
qt5-qttools-libs-designerol 90:5.15.9-3.el9
qt5-qttools-libs-designercomponentsol 90:5.15.9-3.el9
qt5-qttools-libs-helpol 90:5.15.9-3.el9
qt5-qttools-staticol 90:5.15.9-3.el9
qt5-qttranslationsol 90:5.15.9-1.el9
qt5-qtwaylandol 90:5.15.9-1.el9
qt5-qtwayland-develol 90:5.15.9-1.el9
qt5-qtwayland-docol 90:5.15.9-1.el9
qt5-qtwayland-examplesol 90:5.15.9-1.el9
qt5-qtwebchannelol 90:5.15.9-1.el9
qt5-qtwebchannel-develol 90:5.15.9-1.el9
qt5-qtwebchannel-docol 90:5.15.9-1.el9
qt5-qtwebchannel-examplesol 90:5.15.9-1.el9
qt5-qtwebsocketsol 90:5.15.9-2.el9
qt5-qtwebsockets-develol 90:5.15.9-2.el9
qt5-qtwebsockets-docol 90:5.15.9-1.el9
qt5-qtwebsockets-examplesol 90:5.15.9-2.el9
qt5-qtx11extrasol 90:5.15.9-1.el9
qt5-qtx11extras-develol 90:5.15.9-1.el9
qt5-qtx11extras-docol 90:5.15.9-1.el9
qt5-qtxmlpatternsol 90:5.15.9-2.el9
qt5-qtxmlpatterns-develol 90:5.15.9-2.el9
qt5-qtxmlpatterns-docol 90:5.15.9-1.el9
qt5-qtxmlpatterns-examplesol 90:5.15.9-2.el9
qt5-rpm-macrosol 90:5.15.9-1.el9
qt5-srpm-macrosol 90:5.15.9-1.el9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-37369 qt6-base: In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QX... 7.5 0.0158 None reported
High CVE-2023-38197 qt5-qtbase: Qt is a software toolkit for developing applications 7.5 0.0128 None reported
High CVE-2023-32573 qt6-svg: In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsP... 7.5 0.0088 None reported
High CVE-2023-33285 qt6-base: An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1 7.5 0.0081 None reported
High CVE-2023-34410 qt6-base: An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2 7.5 0.0074 None reported
Showing 1 to 5 of 5 1