SUSE-SU-2023:4950-1: Security update for libqt5-qtbase
This update for libqt5-qtbase fixes the following issues: CVE-2023-37369: Fixed buffer overflow in QXmlStreamReader (bsc#1214327).
libq5-qtbase was rebuild against icu 73. jsc#PED-6193
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/libQt5DBus5to a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Network5to a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-sqliteto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Widgets5to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Widgets-develto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5PrintSupport5to a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5PrintSupport-develto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Gui-develto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Xml5to a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libqt5-qtbase-examplesto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Network-develto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5OpenGLExtensions-devel-staticto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Bootstrap-devel-staticto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5DBus-develto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Widgets5to a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5to a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Gui5to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Network5to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Core5to a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Concurrent5to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5OpenGL-develto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Gui5to a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Test-develto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Core5to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Core-develto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Concurrent-develto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5DBus5to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-postgresqlto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql-develto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Xml-develto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-postgresqlto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Test5to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-mysqlto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Concurrent5to a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5DBus-develto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5PlatformSupport-devel-staticto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-unixODBCto a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Test5to a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-sqliteto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5OpenGL5to a version that resolves this vulnerability.Fixed in 32bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-unixODBCto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5OpenGL5to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5PrintSupport5to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-mysqlto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libqt5-qtbase-examplesto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Xml5to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5PlatformSupport-devel-staticto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libqt5-qtbase-platformtheme-gtk3to a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Concurrent-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Core5-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Network5-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Core-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Concurrent5to a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libqt5-qtbase-examplesto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Xml-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5OpenGL-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Widgets5to a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5PrintSupport-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-unixODBCto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Sql-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5OpenGL5-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5KmsSupport-devel-staticto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5DBus5-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-postgresql-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Bootstrap-devel-staticto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libqt5-qtbase-platformtheme-xdgdesktopportalto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Concurrent5-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libqt5-qtbase-debugsourceto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libqt5-qtbase-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-postgresqlto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Widgets-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Widgets5-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libqt5-qtbase-examples-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Core5to a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Test5-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libqt5-qtbase-common-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5DBus-devel-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5to a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5PlatformHeaders-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Test-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Gui5to a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5DBus5to a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Test5to a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-sqlite-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5DBus-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5PrintSupport5-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Network-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5OpenGL5to a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-mysqlto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-mysql-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Xml5-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libqt5-qtbase-platformtheme-xdgdesktopportal-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5OpenGLExtensions-devel-staticto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5PrintSupport5to a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libqt5-qtbase-platformtheme-gtk3-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Xml5to a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-sqliteto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-unixODBC-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Gui-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Gui5-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libqt5-qtbase-common-devel-debuginfoto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Network5to a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Gui-private-headers-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5PrintSupport-private-headers-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libqt5-qtbase-private-headers-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5DBus-private-headers-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5OpenGL-private-headers-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5PlatformSupport-private-headers-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Sql-private-headers-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Test-private-headers-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Widgets-private-headers-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5KmsSupport-private-headers-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Core-private-headers-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5Network-private-headers-develto a version that resolves this vulnerability.Fixed in 5.15.2 - Upgrade
Upgrade
suse/libQt5OpenGLExtensions-devel-staticto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-mysqlto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-mysqlto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Core5to a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Network5to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5DBus5to a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Core-develto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Test5to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Gui5to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5PrintSupport5to a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5DBus-develto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5OpenGL-develto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Concurrent5to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql-develto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5to a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Test5to a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libqt5-qtbase-examplesto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5PrintSupport5to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Network-develto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-sqliteto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-postgresqlto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Concurrent-develto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-unixODBCto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5DBus-develto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5OpenGL5to a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Widgets5to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Widgets-develto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-unixODBCto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Gui-develto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5OpenGL5to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-postgresqlto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Test-develto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Network5to a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Bootstrap-devel-staticto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Core5to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Xml5to a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5DBus5to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libqt5-qtbase-examplesto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5PrintSupport-develto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Gui5to a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Sql5-sqliteto a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade
suse/libQt5Widgets5to a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Concurrent5to a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5PlatformSupport-devel-staticto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Xml-develto a version that resolves this vulnerability.Fixed in 64bit-5.15.2 - Upgrade
Upgrade
suse/libQt5Xml5to a version that resolves this vulnerability.Fixed in 64bit-debuginfo-5.15.2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2023-4950=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2023-4950=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4950=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-4950=1
Event History
Frequently Asked Questions
Which installed components indicate that a system may be affected?
The advisory lists libqt5dbus5, libqt5network5, libqt5sql5-sqlite, libqt5widgets5, libqt5printsupport5, libqt5xml5, libqt5dbus-devel, and libqt5sql5. Systems with these SUSE packages installed should review and apply the security update.
What vulnerability type is addressed by this update?
The update fixes CVE-2023-37369, a buffer overflow in QXmlStreamReader. The associated CWE classification is Buffer Overflow.
Does the update include changes beyond the CVE fix?
Yes. The libqt5-qtbase package was also rebuilt against ICU 73.