[ GLSA 202009-04 ] Qt GUI

[GLSA]

Gentoo Linux Security Advisory

Title: Qt GUI: Buffer overflow (GLSA 202009-04)
Severity: low
Exploitable: local, remote
Date: 2020-09-13
Bug(s): #736924
ID: 202009-04

Synopsis

Qt GUI has a buffer overflow with unspecified impact.

Background

The GUI module and platform plugins for the Qt5 framework.

Affected Packages

Package: dev-qt/qtgui
Vulnerable: < 5.14.2-r1
Unaffected: >= 5.14.2-r1
Architectures: All supported architectures


Description

It was discovered that Qt GUI’s XBM parser did not properly handle X
BitMap files.


Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Qt GUI users should upgrade to the latest version: