Errata ALT-PU-2020-1809-1: Information

Package name: qt5-webengine
Version: 5.12.8-alt1
Bulletin updated: April 21, 2020
Task: #249835

Fixes

Published: Jan. 25, 2020
Modified: Nov. 7, 2023

CVE-2015-9541

Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564.
Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Links:
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top