{"affected":[{"ecosystem_specific":{"binaries":[{"libqt4":"4.8.6-4.2","libqt4-32bit":"4.8.6-4.2","libqt4-qt3support":"4.8.6-4.2","libqt4-qt3support-32bit":"4.8.6-4.2","libqt4-sql":"4.8.6-4.2","libqt4-sql-32bit":"4.8.6-4.2","libqt4-sql-mysql":"4.8.6-4.1","libqt4-sql-mysql-32bit":"4.8.6-4.1","libqt4-sql-postgresql":"4.8.6-4.1","libqt4-sql-postgresql-32bit":"4.8.6-4.1","libqt4-sql-sqlite":"4.8.6-4.2","libqt4-sql-sqlite-32bit":"4.8.6-4.2","libqt4-sql-unixODBC":"4.8.6-4.1","libqt4-sql-unixODBC-32bit":"4.8.6-4.1","libqt4-x11":"4.8.6-4.2","libqt4-x11-32bit":"4.8.6-4.2"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12","name":"libqt4","purl":"pkg:rpm/suse/libqt4&distro=SUSE%20Linux%20Enterprise%20Desktop%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.8.6-4.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libqt4":"4.8.6-4.2","libqt4-32bit":"4.8.6-4.2","libqt4-qt3support":"4.8.6-4.2","libqt4-qt3support-32bit":"4.8.6-4.2","libqt4-sql":"4.8.6-4.2","libqt4-sql-32bit":"4.8.6-4.2","libqt4-sql-mysql":"4.8.6-4.1","libqt4-sql-mysql-32bit":"4.8.6-4.1","libqt4-sql-postgresql":"4.8.6-4.1","libqt4-sql-postgresql-32bit":"4.8.6-4.1","libqt4-sql-sqlite":"4.8.6-4.2","libqt4-sql-sqlite-32bit":"4.8.6-4.2","libqt4-sql-unixODBC":"4.8.6-4.1","libqt4-sql-unixODBC-32bit":"4.8.6-4.1","libqt4-x11":"4.8.6-4.2","libqt4-x11-32bit":"4.8.6-4.2"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Desktop 12","name":"libqt4-sql-plugins","purl":"pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE%20Linux%20Enterprise%20Desktop%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.8.6-4.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libqt4-devel":"4.8.6-4.2","libqt4-devel-doc":"4.8.6-4.6","libqt4-devel-doc-data":"4.8.6-4.6","libqt4-linguist":"4.8.6-4.2","libqt4-private-headers-devel":"4.8.6-4.2","libqt4-sql-postgresql":"4.8.6-4.1","libqt4-sql-postgresql-32bit":"4.8.6-4.1","libqt4-sql-unixODBC":"4.8.6-4.1","libqt4-sql-unixODBC-32bit":"4.8.6-4.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","name":"libqt4","purl":"pkg:rpm/suse/libqt4&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.8.6-4.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libqt4-devel":"4.8.6-4.2","libqt4-devel-doc":"4.8.6-4.6","libqt4-devel-doc-data":"4.8.6-4.6","libqt4-linguist":"4.8.6-4.2","libqt4-private-headers-devel":"4.8.6-4.2","libqt4-sql-postgresql":"4.8.6-4.1","libqt4-sql-postgresql-32bit":"4.8.6-4.1","libqt4-sql-unixODBC":"4.8.6-4.1","libqt4-sql-unixODBC-32bit":"4.8.6-4.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","name":"libqt4-devel-doc","purl":"pkg:rpm/suse/libqt4-devel-doc&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.8.6-4.6"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libqt4-devel":"4.8.6-4.2","libqt4-devel-doc":"4.8.6-4.6","libqt4-devel-doc-data":"4.8.6-4.6","libqt4-linguist":"4.8.6-4.2","libqt4-private-headers-devel":"4.8.6-4.2","libqt4-sql-postgresql":"4.8.6-4.1","libqt4-sql-postgresql-32bit":"4.8.6-4.1","libqt4-sql-unixODBC":"4.8.6-4.1","libqt4-sql-unixODBC-32bit":"4.8.6-4.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","name":"libqt4-sql-plugins","purl":"pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.8.6-4.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libqt4":"4.8.6-4.2","libqt4-32bit":"4.8.6-4.2","libqt4-qt3support":"4.8.6-4.2","libqt4-qt3support-32bit":"4.8.6-4.2","libqt4-sql":"4.8.6-4.2","libqt4-sql-32bit":"4.8.6-4.2","libqt4-sql-mysql":"4.8.6-4.1","libqt4-sql-sqlite":"4.8.6-4.2","libqt4-x11":"4.8.6-4.2","libqt4-x11-32bit":"4.8.6-4.2","qt4-x11-tools":"4.8.6-4.6"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12","name":"libqt4","purl":"pkg:rpm/suse/libqt4&distro=SUSE%20Linux%20Enterprise%20Server%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.8.6-4.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libqt4":"4.8.6-4.2","libqt4-32bit":"4.8.6-4.2","libqt4-qt3support":"4.8.6-4.2","libqt4-qt3support-32bit":"4.8.6-4.2","libqt4-sql":"4.8.6-4.2","libqt4-sql-32bit":"4.8.6-4.2","libqt4-sql-mysql":"4.8.6-4.1","libqt4-sql-sqlite":"4.8.6-4.2","libqt4-x11":"4.8.6-4.2","libqt4-x11-32bit":"4.8.6-4.2","qt4-x11-tools":"4.8.6-4.6"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12","name":"libqt4-devel-doc","purl":"pkg:rpm/suse/libqt4-devel-doc&distro=SUSE%20Linux%20Enterprise%20Server%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.8.6-4.6"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libqt4":"4.8.6-4.2","libqt4-32bit":"4.8.6-4.2","libqt4-qt3support":"4.8.6-4.2","libqt4-qt3support-32bit":"4.8.6-4.2","libqt4-sql":"4.8.6-4.2","libqt4-sql-32bit":"4.8.6-4.2","libqt4-sql-mysql":"4.8.6-4.1","libqt4-sql-sqlite":"4.8.6-4.2","libqt4-x11":"4.8.6-4.2","libqt4-x11-32bit":"4.8.6-4.2","qt4-x11-tools":"4.8.6-4.6"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 12","name":"libqt4-sql-plugins","purl":"pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE%20Linux%20Enterprise%20Server%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.8.6-4.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libqt4":"4.8.6-4.2","libqt4-32bit":"4.8.6-4.2","libqt4-qt3support":"4.8.6-4.2","libqt4-qt3support-32bit":"4.8.6-4.2","libqt4-sql":"4.8.6-4.2","libqt4-sql-32bit":"4.8.6-4.2","libqt4-sql-mysql":"4.8.6-4.1","libqt4-sql-sqlite":"4.8.6-4.2","libqt4-x11":"4.8.6-4.2","libqt4-x11-32bit":"4.8.6-4.2","qt4-x11-tools":"4.8.6-4.6"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","name":"libqt4","purl":"pkg:rpm/suse/libqt4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.8.6-4.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libqt4":"4.8.6-4.2","libqt4-32bit":"4.8.6-4.2","libqt4-qt3support":"4.8.6-4.2","libqt4-qt3support-32bit":"4.8.6-4.2","libqt4-sql":"4.8.6-4.2","libqt4-sql-32bit":"4.8.6-4.2","libqt4-sql-mysql":"4.8.6-4.1","libqt4-sql-sqlite":"4.8.6-4.2","libqt4-x11":"4.8.6-4.2","libqt4-x11-32bit":"4.8.6-4.2","qt4-x11-tools":"4.8.6-4.6"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","name":"libqt4-devel-doc","purl":"pkg:rpm/suse/libqt4-devel-doc&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.8.6-4.6"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libqt4":"4.8.6-4.2","libqt4-32bit":"4.8.6-4.2","libqt4-qt3support":"4.8.6-4.2","libqt4-qt3support-32bit":"4.8.6-4.2","libqt4-sql":"4.8.6-4.2","libqt4-sql-32bit":"4.8.6-4.2","libqt4-sql-mysql":"4.8.6-4.1","libqt4-sql-sqlite":"4.8.6-4.2","libqt4-x11":"4.8.6-4.2","libqt4-x11-32bit":"4.8.6-4.2","qt4-x11-tools":"4.8.6-4.6"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","name":"libqt4-sql-plugins","purl":"pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.8.6-4.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libqt4-sql-mysql-32bit":"4.8.6-4.1","libqt4-sql-postgresql":"4.8.6-4.1","libqt4-sql-postgresql-32bit":"4.8.6-4.1","libqt4-sql-sqlite-32bit":"4.8.6-4.2","libqt4-sql-unixODBC":"4.8.6-4.1","libqt4-sql-unixODBC-32bit":"4.8.6-4.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","name":"libqt4","purl":"pkg:rpm/suse/libqt4&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.8.6-4.2"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libqt4-sql-mysql-32bit":"4.8.6-4.1","libqt4-sql-postgresql":"4.8.6-4.1","libqt4-sql-postgresql-32bit":"4.8.6-4.1","libqt4-sql-sqlite-32bit":"4.8.6-4.2","libqt4-sql-unixODBC":"4.8.6-4.1","libqt4-sql-unixODBC-32bit":"4.8.6-4.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12","name":"libqt4-sql-plugins","purl":"pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"4.8.6-4.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"The libqt4 library was updated to fix several security and non security issues.\n\nThe following vulnerabilities were fixed:\n- bsc#921999: CVE-2015-0295: division by zero when processing malformed BMP files\n- bsc#927806: CVE-2015-1858: segmentation fault in BMP Qt Image Format Handling\n- bsc#927807: CVE-2015-1859: segmentation fault in ICO Qt Image Format Handling\n- bsc#927808: CVE-2015-1860: segmentation fault in GIF Qt Image Format Handling\n\nThe following non-secuirty issues were fixed:\n- bsc#929688: Critical Problem in Qt Network Stack\n- bsc#847880: kde/qt rendering error in qemu cirrus i586\n- Update use-freetype-default.diff to use same method as with\n  libqt5-qtbase package: Qt itself already does runtime check\n  whether subpixel rendering is available, but only when\n  FT_CONFIG_OPTION_SUBPIXEL_RENDERING is defined. Thus it is enough\n  to only remove that condition\n- The -devel subpackage requires Mesa-devel, not only at build time \n- Fixed compilation on SLE_11_SP3 by making it build against\n  Mesa-devel on that system\n- Replace patch l-qclipboard_fix_recursive.patch with\n  qtcore-4.8.5-qeventdispatcher-recursive.patch. The later one \n  seems to work better and really resolves the issue in LibreOffice\n- Added kde4_qt_plugin_path.patch, so kde4 plugins are magically\n  found/known outside kde4 enviroment/session\n- added _constraints. building took up to 7GB of disk space on\n  s390x, and more than 6GB on x86_64 \n- Add 3 patches for Qt bugs to make LibreOffice KDE4 file\n  picker work properly again:\n  * Add glib-honor-ExcludeSocketNotifiers-flag.diff (QTBUG-37380)\n  * Add l-qclipboard_fix_recursive.patch (QTBUG-34614)\n  * Add l-qclipboard_delay.patch (QTBUG-38585)","id":"SUSE-SU-2015:1359-1","modified":"2015-05-27T13:53:24Z","published":"2015-05-27T13:53:24Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151359-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/847880"},{"type":"REPORT","url":"https://bugzilla.suse.com/921999"},{"type":"REPORT","url":"https://bugzilla.suse.com/927806"},{"type":"REPORT","url":"https://bugzilla.suse.com/927807"},{"type":"REPORT","url":"https://bugzilla.suse.com/927808"},{"type":"REPORT","url":"https://bugzilla.suse.com/929688"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-0295"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-1858"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-1859"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-1860"}],"related":["CVE-2015-0295","CVE-2015-1858","CVE-2015-1859","CVE-2015-1860"],"summary":"Security update for libqt4","upstream":["CVE-2015-0295","CVE-2015-1858","CVE-2015-1859","CVE-2015-1860"]}