USN-5081-1: Qt vulnerabilities

Releases

• Ubuntu 18.04 ESM

Packages

• qtbase-opensource-src - Qt 5 libraries

Details

It was discovered that Qt incorrectly handled certain XBM image files. If a
user or automated system were tricked into opening a specially crafted PPM
file, a remote attacker could cause Qt to crash, resulting in a denial of
service. (CVE-2020-17507)

It was discovered that Qt incorrectly handled certain graphics operations.
If a user or automated system were tricked into performing certain graphics
operations, a remote attacker could cause Qt to crash, resulting in a
denial of service. (CVE-2021-38593)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 18.04

• libqt5core5a - 5.9.5+dfsg-0ubuntu2.6
• libqt5gui5 - 5.9.5+dfsg-0ubuntu2.6

After a standard system update you need to restart your session to make all
the necessary changes.

References

• CVE-2021-38593
• CVE-2020-17507