Security update for libqt4
This update for libqt4 fixes the following issues:
* Fix buffer over-read in read_xbm_body (boo#1176315, CVE-2020-17507)
* Fix "double free or corruption" in QXmlStreamReader (boo#1118595, CVE-2018-15518)
* Fix QBmpHandler segfault on malformed BMP file boo#1118596, CVE-2018-19873)
* Fix crash when parsing malformed url reference (boo#1118599, CVE-2018-19869)
This update was imported from the openSUSE:Leap:15.1:Update update project.
This update was imported from the openSUSE:Leap:15.2:Update update project.
-
Submitted by
Dirk Mueller (dirkmueller)
Fixed bugs
bnc#1121214
GCC 9: libqt4 build fails
bnc#1118596
VUL-1: CVE-2018-19873: libqt4 ,libqt5-qtbase: QBmpHandler segfault on malformed BMP file
bnc#1176315
VUL-0: CVE-2020-17507: libqt4,libqt5-qtbase: buffer over-read in read_xbm_body in gui/image/qxbmhandler.cpp
bnc#1118595
VUL-0: CVE-2018-15518: libqt4 ,libqt5-qtbase: "double free or corruption" in QXmlStreamReader
bnc#1118599
VUL-1: CVE-2018-19869: libqt5-qtsvg: Fix crash when parsing malformed url reference
