File _patchinfo of Package patchinfo.14473
<patchinfo incident="14473">
<issue tracker="cve" id="2018-19873"/>
<issue tracker="cve" id="2018-19869"/>
<issue tracker="cve" id="2018-15518"/>
<issue tracker="bnc" id="1121214">GCC 9: libqt4 build fails</issue>
<issue tracker="bnc" id="1118599">VUL-1: CVE-2018-19869: libqt5-qtsvg: Fix crash when parsing malformed url reference</issue>
<issue tracker="bnc" id="1118595">VUL-0: CVE-2018-15518: libqt4 ,libqt5-qtbase: "double free or corruption" in QXmlStreamReader</issue>
<issue tracker="bnc" id="1118596">VUL-1: CVE-2018-19873: libqt4 ,libqt5-qtbase: QBmpHandler segfault on malformed BMP file</issue>
<packager>dirkmueller</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for libqt4</summary>
<description>This update for libqt4 fixes the following issues:
- CVE-2018-15518: Fixed a double free in QXmlStreamReader (bsc#1118595)
- CVE-2018-19873: Fixed a segmantation fault via a malformed
BMP file (bsc#1118596).
- CVE-2018-19869: Fixed an improper checking which might lead to
a crach via a malformed url reference (bsc#1118599).
- Added stricter toplevel asm parsing by dropping volatile
qualification that has no effect (bsc#1121214).
</description>
</patchinfo>