SUSE update for libqt5-qtbase

Published: 2024-08-13

Risk	Low
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2023-45935 CVE-2024-39936
CWE-ID	CWE-476 CWE-367
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	Desktop Applications Module Operating systems & Components / Operating system Basesystem Module Operating systems & Components / Operating system SUSE Linux Enterprise Real Time 15 Operating systems & Components / Operating system openSUSE Leap Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Applications 15 Operating systems & Components / Operating system SUSE Linux Enterprise Server 15 Operating systems & Components / Operating system SUSE Linux Enterprise Desktop 15 Operating systems & Components / Operating system libQt5OpenGL5-64bit Operating systems & Components / Operating system package or component libQt5Sql-devel-64bit Operating systems & Components / Operating system package or component libQt5Concurrent5-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5Sql5-mysql-64bit-debuginfo Operating systems & Components / Operating system package or component libqt5-qtbase-examples-64bit Operating systems & Components / Operating system package or component libQt5Gui-devel-64bit Operating systems & Components / Operating system package or component libQt5Sql5-64bit Operating systems & Components / Operating system package or component libQt5Network-devel-64bit Operating systems & Components / Operating system package or component libQt5Widgets-devel-64bit Operating systems & Components / Operating system package or component libQt5Sql5-postgresql-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5Sql5-postgresql-64bit Operating systems & Components / Operating system package or component libQt5PlatformSupport-devel-static-64bit Operating systems & Components / Operating system package or component libQt5Sql5-sqlite-64bit Operating systems & Components / Operating system package or component libQt5Sql5-mysql-64bit Operating systems & Components / Operating system package or component libQt5DBus-devel-64bit Operating systems & Components / Operating system package or component libQt5Widgets5-64bit Operating systems & Components / Operating system package or component libQt5DBus-devel-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5PrintSupport5-64bit Operating systems & Components / Operating system package or component libQt5Core5-64bit Operating systems & Components / Operating system package or component libQt5Bootstrap-devel-static-64bit Operating systems & Components / Operating system package or component libQt5Concurrent5-64bit Operating systems & Components / Operating system package or component libQt5Test-devel-64bit Operating systems & Components / Operating system package or component libQt5Gui5-64bit Operating systems & Components / Operating system package or component libQt5Sql5-unixODBC-64bit Operating systems & Components / Operating system package or component libQt5OpenGLExtensions-devel-static-64bit Operating systems & Components / Operating system package or component libQt5Core-devel-64bit Operating systems & Components / Operating system package or component libQt5Sql5-sqlite-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5OpenGL-devel-64bit Operating systems & Components / Operating system package or component libQt5Xml5-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5Test5-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5Sql5-unixODBC-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5Widgets5-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5PrintSupport-devel-64bit Operating systems & Components / Operating system package or component libQt5PrintSupport5-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5Xml5-64bit Operating systems & Components / Operating system package or component libQt5Network5-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5Gui5-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5Test5-64bit Operating systems & Components / Operating system package or component libQt5Concurrent-devel-64bit Operating systems & Components / Operating system package or component libQt5Sql5-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5DBus5-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5Xml-devel-64bit Operating systems & Components / Operating system package or component libqt5-qtbase-examples-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5Network5-64bit Operating systems & Components / Operating system package or component libQt5OpenGL5-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5DBus5-64bit Operating systems & Components / Operating system package or component libQt5Core5-64bit-debuginfo Operating systems & Components / Operating system package or component libQt5Test-private-headers-devel Operating systems & Components / Operating system package or component libqt5-qtbase-private-headers-devel Operating systems & Components / Operating system package or component libQt5Network-private-headers-devel Operating systems & Components / Operating system package or component libQt5PlatformSupport-private-headers-devel Operating systems & Components / Operating system package or component libQt5Widgets-private-headers-devel Operating systems & Components / Operating system package or component libQt5DBus-private-headers-devel Operating systems & Components / Operating system package or component libQt5PrintSupport-private-headers-devel Operating systems & Components / Operating system package or component libQt5Core-private-headers-devel Operating systems & Components / Operating system package or component libQt5Gui-private-headers-devel Operating systems & Components / Operating system package or component libQt5KmsSupport-private-headers-devel Operating systems & Components / Operating system package or component libQt5Sql-private-headers-devel Operating systems & Components / Operating system package or component libQt5OpenGL-private-headers-devel Operating systems & Components / Operating system package or component libQt5Concurrent5-debuginfo Operating systems & Components / Operating system package or component libQt5OpenGL5-debuginfo Operating systems & Components / Operating system package or component libQt5Sql5 Operating systems & Components / Operating system package or component libQt5Core-devel Operating systems & Components / Operating system package or component libQt5DBus-devel-debuginfo Operating systems & Components / Operating system package or component libQt5Test5 Operating systems & Components / Operating system package or component libQt5Sql5-sqlite-debuginfo Operating systems & Components / Operating system package or component libQt5Sql-devel Operating systems & Components / Operating system package or component libqt5-qtbase-examples-debuginfo Operating systems & Components / Operating system package or component libQt5Xml-devel Operating systems & Components / Operating system package or component libQt5Network-devel Operating systems & Components / Operating system package or component libQt5PlatformSupport-devel-static Operating systems & Components / Operating system package or component libQt5Xml5 Operating systems & Components / Operating system package or component libQt5Network5 Operating systems & Components / Operating system package or component libqt5-qtbase-devel Operating systems & Components / Operating system package or component libQt5Gui-devel Operating systems & Components / Operating system package or component libQt5OpenGL5 Operating systems & Components / Operating system package or component libQt5Test-devel Operating systems & Components / Operating system package or component libqt5-qtbase-common-devel-debuginfo Operating systems & Components / Operating system package or component libQt5PrintSupport5-debuginfo Operating systems & Components / Operating system package or component libQt5Core5-debuginfo Operating systems & Components / Operating system package or component libqt5-qtbase-examples Operating systems & Components / Operating system package or component libQt5Widgets5 Operating systems & Components / Operating system package or component libQt5OpenGL-devel Operating systems & Components / Operating system package or component libQt5Bootstrap-devel-static Operating systems & Components / Operating system package or component libQt5Concurrent-devel Operating systems & Components / Operating system package or component libqt5-qtbase-common-devel Operating systems & Components / Operating system package or component libQt5Sql5-debuginfo Operating systems & Components / Operating system package or component libQt5Network5-debuginfo Operating systems & Components / Operating system package or component libQt5PrintSupport-devel Operating systems & Components / Operating system package or component libQt5Widgets5-debuginfo Operating systems & Components / Operating system package or component libQt5Test5-debuginfo Operating systems & Components / Operating system package or component libQt5Concurrent5 Operating systems & Components / Operating system package or component libQt5Gui5 Operating systems & Components / Operating system package or component libQt5Gui5-debuginfo Operating systems & Components / Operating system package or component libQt5Core5 Operating systems & Components / Operating system package or component libQt5DBus5 Operating systems & Components / Operating system package or component libQt5Xml5-debuginfo Operating systems & Components / Operating system package or component libQt5PlatformHeaders-devel Operating systems & Components / Operating system package or component libQt5DBus5-debuginfo Operating systems & Components / Operating system package or component libQt5DBus-devel Operating systems & Components / Operating system package or component libQt5KmsSupport-devel-static Operating systems & Components / Operating system package or component libqt5-qtbase-platformtheme-xdgdesktopportal Operating systems & Components / Operating system package or component libqt5-qtbase-platformtheme-xdgdesktopportal-debuginfo Operating systems & Components / Operating system package or component libQt5Widgets-devel Operating systems & Components / Operating system package or component libQt5PrintSupport5 Operating systems & Components / Operating system package or component libQt5Sql5-sqlite Operating systems & Components / Operating system package or component libQt5Concurrent-devel-32bit Operating systems & Components / Operating system package or component libqt5-qtbase-examples-32bit Operating systems & Components / Operating system package or component libQt5Sql5-postgresql-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5Sql5-postgresql-32bit Operating systems & Components / Operating system package or component libQt5Gui5-32bit Operating systems & Components / Operating system package or component libQt5OpenGL5-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5Xml5-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5Network5-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5Network-devel-32bit Operating systems & Components / Operating system package or component libQt5Widgets-devel-32bit Operating systems & Components / Operating system package or component libQt5DBus-devel-32bit Operating systems & Components / Operating system package or component libQt5OpenGL5-32bit Operating systems & Components / Operating system package or component libQt5Concurrent5-32bit Operating systems & Components / Operating system package or component libQt5Concurrent5-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5DBus-devel-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5Sql5-unixODBC-32bit Operating systems & Components / Operating system package or component libQt5OpenGL-devel-32bit Operating systems & Components / Operating system package or component libQt5Sql5-mysql-32bit Operating systems & Components / Operating system package or component libQt5Test5-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5Sql5-sqlite-32bit Operating systems & Components / Operating system package or component libQt5Core5-32bit Operating systems & Components / Operating system package or component libQt5Widgets5-32bit Operating systems & Components / Operating system package or component libQt5Xml-devel-32bit Operating systems & Components / Operating system package or component libQt5Test5-32bit Operating systems & Components / Operating system package or component libQt5DBus5-32bit Operating systems & Components / Operating system package or component libQt5Sql5-unixODBC-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5Core5-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5Sql5-mysql-32bit-debuginfo Operating systems & Components / Operating system package or component libqt5-qtbase-examples-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5PrintSupport5-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5PlatformSupport-devel-static-32bit Operating systems & Components / Operating system package or component libQt5PrintSupport-devel-32bit Operating systems & Components / Operating system package or component libQt5DBus5-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5Bootstrap-devel-static-32bit Operating systems & Components / Operating system package or component libQt5Widgets5-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5Sql-devel-32bit Operating systems & Components / Operating system package or component libQt5Sql5-32bit Operating systems & Components / Operating system package or component libQt5Network5-32bit Operating systems & Components / Operating system package or component libQt5OpenGLExtensions-devel-static-32bit Operating systems & Components / Operating system package or component libQt5Xml5-32bit Operating systems & Components / Operating system package or component libQt5Sql5-sqlite-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5PrintSupport5-32bit Operating systems & Components / Operating system package or component libQt5Test-devel-32bit Operating systems & Components / Operating system package or component libQt5Gui5-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5Gui-devel-32bit Operating systems & Components / Operating system package or component libQt5Sql5-32bit-debuginfo Operating systems & Components / Operating system package or component libQt5Core-devel-32bit Operating systems & Components / Operating system package or component libQt5Sql5-postgresql Operating systems & Components / Operating system package or component libqt5-qtbase-debugsource Operating systems & Components / Operating system package or component libqt5-qtbase-platformtheme-gtk3-debuginfo Operating systems & Components / Operating system package or component libQt5Sql5-unixODBC Operating systems & Components / Operating system package or component libQt5Sql5-postgresql-debuginfo Operating systems & Components / Operating system package or component libQt5Sql5-mysql-debuginfo Operating systems & Components / Operating system package or component libqt5-qtbase-platformtheme-gtk3 Operating systems & Components / Operating system package or component libQt5Sql5-unixODBC-debuginfo Operating systems & Components / Operating system package or component libQt5Sql5-mysql Operating systems & Components / Operating system package or component libQt5OpenGLExtensions-devel-static Operating systems & Components / Operating system package or component
Vendor	SUSE

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) NULL pointer dereference

EUVDB-ID: #VU89359

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-45935

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the QXcbConnection::initializeAllAtoms(). A local user can crash the application.

Mitigation

Update the affected package libqt5-qtbase to the latest version.

Vulnerable software versions

Desktop Applications Module: 15-SP6

Basesystem Module: 15-SP6

SUSE Linux Enterprise Real Time 15: SP6

openSUSE Leap: 15.6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

SUSE Linux Enterprise Desktop 15: SP6

libQt5OpenGL5-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Sql-devel-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Concurrent5-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-mysql-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libqt5-qtbase-examples-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Gui-devel-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Network-devel-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Widgets-devel-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-postgresql-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-postgresql-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5PlatformSupport-devel-static-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-sqlite-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-mysql-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5DBus-devel-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Widgets5-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5DBus-devel-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5PrintSupport5-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Core5-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Bootstrap-devel-static-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Concurrent5-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Test-devel-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Gui5-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-unixODBC-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5OpenGLExtensions-devel-static-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Core-devel-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-sqlite-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5OpenGL-devel-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Xml5-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Test5-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-unixODBC-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Widgets5-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5PrintSupport-devel-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5PrintSupport5-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Xml5-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Network5-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Gui5-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Test5-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Concurrent-devel-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5DBus5-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Xml-devel-64bit: before 5.15.12+kde151-150600.3.6.1

libqt5-qtbase-examples-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Network5-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5OpenGL5-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5DBus5-64bit: before 5.15.12+kde151-150600.3.6.1

libQt5Core5-64bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Test-private-headers-devel: before 5.15.12+kde151-150600.3.6.1

libqt5-qtbase-private-headers-devel: before 5.15.12+kde151-150600.3.6.1

libQt5Network-private-headers-devel: before 5.15.12+kde151-150600.3.6.1

libQt5PlatformSupport-private-headers-devel: before 5.15.12+kde151-150600.3.6.1

libQt5Widgets-private-headers-devel: before 5.15.12+kde151-150600.3.6.1

libQt5DBus-private-headers-devel: before 5.15.12+kde151-150600.3.6.1

libQt5PrintSupport-private-headers-devel: before 5.15.12+kde151-150600.3.6.1

libQt5Core-private-headers-devel: before 5.15.12+kde151-150600.3.6.1

libQt5Gui-private-headers-devel: before 5.15.12+kde151-150600.3.6.1

libQt5KmsSupport-private-headers-devel: before 5.15.12+kde151-150600.3.6.1

libQt5Sql-private-headers-devel: before 5.15.12+kde151-150600.3.6.1

libQt5OpenGL-private-headers-devel: before 5.15.12+kde151-150600.3.6.1

libQt5Concurrent5-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5OpenGL5-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5: before 5.15.12+kde151-150600.3.6.1

libQt5Core-devel: before 5.15.12+kde151-150600.3.6.1

libQt5DBus-devel-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Test5: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-sqlite-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Sql-devel: before 5.15.12+kde151-150600.3.6.1

libqt5-qtbase-examples-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Xml-devel: before 5.15.12+kde151-150600.3.6.1

libQt5Network-devel: before 5.15.12+kde151-150600.3.6.1

libQt5PlatformSupport-devel-static: before 5.15.12+kde151-150600.3.6.1

libQt5Xml5: before 5.15.12+kde151-150600.3.6.1

libQt5Network5: before 5.15.12+kde151-150600.3.6.1

libqt5-qtbase-devel: before 5.15.12+kde151-150600.3.6.1

libQt5Gui-devel: before 5.15.12+kde151-150600.3.6.1

libQt5OpenGL5: before 5.15.12+kde151-150600.3.6.1

libQt5Test-devel: before 5.15.12+kde151-150600.3.6.1

libqt5-qtbase-common-devel-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5PrintSupport5-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Core5-debuginfo: before 5.15.12+kde151-150600.3.6.1

libqt5-qtbase-examples: before 5.15.12+kde151-150600.3.6.1

libQt5Widgets5: before 5.15.12+kde151-150600.3.6.1

libQt5OpenGL-devel: before 5.15.12+kde151-150600.3.6.1

libQt5Bootstrap-devel-static: before 5.15.12+kde151-150600.3.6.1

libQt5Concurrent-devel: before 5.15.12+kde151-150600.3.6.1

libqt5-qtbase-common-devel: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Network5-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5PrintSupport-devel: before 5.15.12+kde151-150600.3.6.1

libQt5Widgets5-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Test5-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Concurrent5: before 5.15.12+kde151-150600.3.6.1

libQt5Gui5: before 5.15.12+kde151-150600.3.6.1

libQt5Gui5-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Core5: before 5.15.12+kde151-150600.3.6.1

libQt5DBus5: before 5.15.12+kde151-150600.3.6.1

libQt5Xml5-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5PlatformHeaders-devel: before 5.15.12+kde151-150600.3.6.1

libQt5DBus5-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5DBus-devel: before 5.15.12+kde151-150600.3.6.1

libQt5KmsSupport-devel-static: before 5.15.12+kde151-150600.3.6.1

libqt5-qtbase-platformtheme-xdgdesktopportal: before 5.15.12+kde151-150600.3.6.1

libqt5-qtbase-platformtheme-xdgdesktopportal-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Widgets-devel: before 5.15.12+kde151-150600.3.6.1

libQt5PrintSupport5: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-sqlite: before 5.15.12+kde151-150600.3.6.1

libQt5Concurrent-devel-32bit: before 5.15.12+kde151-150600.3.6.1

libqt5-qtbase-examples-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-postgresql-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-postgresql-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Gui5-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5OpenGL5-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Xml5-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Network5-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Network-devel-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Widgets-devel-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5DBus-devel-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5OpenGL5-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Concurrent5-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Concurrent5-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5DBus-devel-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-unixODBC-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5OpenGL-devel-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-mysql-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Test5-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-sqlite-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Core5-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Widgets5-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Xml-devel-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Test5-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5DBus5-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-unixODBC-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Core5-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-mysql-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libqt5-qtbase-examples-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5PrintSupport5-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5PlatformSupport-devel-static-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5PrintSupport-devel-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5DBus5-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Bootstrap-devel-static-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Widgets5-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Sql-devel-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Network5-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5OpenGLExtensions-devel-static-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Xml5-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-sqlite-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5PrintSupport5-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Test-devel-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Gui5-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Gui-devel-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-32bit-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Core-devel-32bit: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-postgresql: before 5.15.12+kde151-150600.3.6.1

libqt5-qtbase-debugsource: before 5.15.12+kde151-150600.3.6.1

libqt5-qtbase-platformtheme-gtk3-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-unixODBC: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-postgresql-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-mysql-debuginfo: before 5.15.12+kde151-150600.3.6.1

libqt5-qtbase-platformtheme-gtk3: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-unixODBC-debuginfo: before 5.15.12+kde151-150600.3.6.1

libQt5Sql5-mysql: before 5.15.12+kde151-150600.3.6.1

libQt5OpenGLExtensions-devel-static: before 5.15.12+kde151-150600.3.6.1

External links

http://www.suse.com/support/update/announcement/2024/suse-su-20242882-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Time-of-check Time-of-use (TOCTOU) Race Condition

EUVDB-ID: #VU94613

Risk: Low

CVSSv3.1: 3.2 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-39936

CWE-ID: CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Exploit availability: No

Description

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to a race condition in HTTP2 support when establishing an encrypted connection. A remote attacker can potentially force the application to send data before the encrypted() signal, leading to potential information disclosure.