Linux · Security advisory · November 5, 2019

RHSA-2019:3390: Security update for 22 packages

RHSA-2019:3390, released November 5, 2019, fixes 3 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0338
88th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
qt5-assistantRHEL 80:5.11.1-9.el8
qt5-designerRHEL 80:5.11.1-9.el8
qt5-doctoolsRHEL 80:5.11.1-9.el8
qt5-linguistRHEL 80:5.11.1-9.el8
qt5-qdbusviewerRHEL 80:5.11.1-9.el8
qt5-qtbaseRHEL 80:5.11.1-7.el8
qt5-qtbase-commonRHEL 80:5.11.1-7.el8
qt5-qtbase-develRHEL 80:5.11.1-7.el8
qt5-qtbase-examplesRHEL 80:5.11.1-7.el8
qt5-qtbase-guiRHEL 80:5.11.1-7.el8
qt5-qtbase-mysqlRHEL 80:5.11.1-7.el8
qt5-qtbase-odbcRHEL 80:5.11.1-7.el8
qt5-qtbase-postgresqlRHEL 80:5.11.1-7.el8
qt5-qtbase-staticRHEL 80:5.11.1-7.el8
qt5-qttoolsRHEL 80:5.11.1-9.el8
qt5-qttools-commonRHEL 80:5.11.1-9.el8
qt5-qttools-develRHEL 80:5.11.1-9.el8
qt5-qttools-examplesRHEL 80:5.11.1-9.el8
qt5-qttools-libs-designerRHEL 80:5.11.1-9.el8
qt5-qttools-libs-designercomponentsRHEL 80:5.11.1-9.el8
qt5-qttools-libs-helpRHEL 80:5.11.1-9.el8
qt5-qttools-staticRHEL 80:5.11.1-9.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2018-19873 qt5-assistant: Qt is a software toolkit for developing applications 9.8 0.0338 None reported
High CVE-2018-15518 libqt5test5: QXmlStream in Qt 5.x before 5.11.3 has a double-free or corruption during parsing of a specially crafted illegal XML... 8.8 0.0250 None reported
High CVE-2018-19870 qt5-assistant: Qt is a software toolkit for developing applications 8.8 0.0242 None reported
Showing 1 to 3 of 3 1