Most recent entries from all

ALSA-2022:1796 — Moderate: qt5-qtbase security update

Affected: AlmaLinux:8: qt5-qtbase, AlmaLinux:8: qt5-qtbase-common, AlmaLinux:8: qt5-qtbase-devel, AlmaLinux:8: qt5-qtbase-examples, AlmaLinux:8: qt5-qtbase-gui, AlmaLinux:8: qt5-qtbase-mysql, AlmaLinux:8: qt5-qtbase-odbc, AlmaLinux:8: qt5-qtbase-postgresql, AlmaLinux:8: qt5-qtbase-private-devel, AlmaLinux:8: qt5-qtbase-static

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.

Security Fix(es):

* qt: out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke (CVE-2021-38593)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2025-00916

certfr-2025-avi-0481 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2025-avi-0481

EUVD-2026-30362

fkie_cve-2021-38593

Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke).

GHSA-qfcf-2jfw-4cm8

Qt 5.0.0 through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke).

gsd-2021-38593

msrc_CVE-2021-38593 — Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRast…

msrc_CVE-2021-38593

OESA-2022-2059 — qt5-qtbase security update

Affected: openEuler:20.03-LTS-SP3: qt5-qtbase

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling. Security Fix(es): Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke).(CVE-2021-38593)

RHSA-2022:1796 — Red Hat Security Advisory: qt5-qtbase security update

qt: out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke

UBUNTU-CVE-2021-38593

Affected: Ubuntu:16.04:LTS: qtbase-opensource-src-gles, Ubuntu:18.04:LTS: qtbase-opensource-src, Ubuntu:20.04:LTS: qtbase-opensource-src, Ubuntu:20.04:LTS: qtbase-opensource-src-gles, Ubuntu:22.04:LTS: qtbase-opensource-src-gles, Ubuntu:24.04:LTS: qtbase-opensource-src-gles, Ubuntu:25.10: qtbase-opensource-src-gles, Ubuntu:26.04:LTS: qtbase-opensource-src-gles

Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngineEx::stroke).

WID-SEC-W-2022-0610 — QT: Schwachstelle ermöglicht Denial of Service

Ein Angreifer kann eine Schwachstelle in QT ausnutzen, um einen Denial of Service Angriff durchzuführen.