{"schemaVersion":3,"id":"SUSE-SU-2015:1359-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for libqt4\n\nThe libqt4 library was updated to fix several security and non security issues.\n\nThe following vulnerabilities were fixed:\n- bsc#921999: CVE-2015-0295: division by zero when processing malformed BMP files\n- bsc#927806: CVE-2015-1858: segmentation fault in BMP Qt Image Format Handling\n- bsc#927807: CVE-2015-1859: segmentation fault in ICO Qt Image Format Handling\n- bsc#927808: CVE-2015-1860: segmentation fault in GIF Qt Image Format Handling\n\nThe following non-secuirty issues were fixed:\n- bsc#929688: Critical Problem in Qt Network Stack\n- bsc#847880: kde/qt rendering error in qemu cirrus i586\n- Update use-freetype-default.diff to use same method as with\n  libqt5-qtbase package: Qt itself already does runtime check\n  whether subpixel rendering is available, but only when\n  FT_CONFIG_OPTION_SUBPIXEL_RENDERING is defined. Thus it is enough\n  to only remove that condition\n- The -devel subpackage requires Mesa-devel, not only at build time\n- Fixed compilation on SLE_11_SP3 by making it build against\n  Mesa-devel on that system\n- Replace patch l-qclipboard_fix_recursive.patch with\n  qtcore-4.8.5-qeventdispatcher-recursive.patch. The later one\n  seems to work better and really resolves the issue in LibreOffice\n- Added kde4_qt_plugin_path.patch, so kde4 plugins are magically\n  found/known outside kde4 enviroment/session\n- added _constraints. building took up to 7GB of disk space on\n  s390x, and more than 6GB on x86_64\n- Add 3 patches for Qt bugs to make LibreOffice KDE4 file\n  picker work properly again:\n  * Add glib-honor-ExcludeSocketNotifiers-flag.diff (QTBUG-37380)\n  * Add l-qclipboard_fix_recursive.patch (QTBUG-34614)\n  * Add l-qclipboard_delay.patch (QTBUG-38585)","dates":{"published":"2015-05-27T13:53:24.000Z","modified":"2026-02-04T03:29:43.341Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"libqt4-devel-doc&distro=SUSE Linux Enterprise Server 12","name":"libqt4-devel-doc","label":"libqt4-devel-doc&distro=SUSE Linux Enterprise Server 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libqt4-devel-doc&distro=SUSE Linux Enterprise Server 12","purlType":"rpm","versions":[{"text":"< 4.8.6-4.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.8.6-4.6","eol":null,"hubHref":null},{"vendor":"suse","product":"libqt4-devel-doc&distro=SUSE Linux Enterprise Server for SAP Applications 12","name":"libqt4-devel-doc","label":"libqt4-devel-doc&distro=SUSE Linux Enterprise Server for SAP Applications 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libqt4-devel-doc&distro=SUSE Linux Enterprise Server for SAP Applications 12","purlType":"rpm","versions":[{"text":"< 4.8.6-4.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.8.6-4.6","eol":null,"hubHref":null},{"vendor":"suse","product":"libqt4-devel-doc&distro=SUSE Linux Enterprise Software Development Kit 12","name":"libqt4-devel-doc","label":"libqt4-devel-doc&distro=SUSE Linux Enterprise Software Development Kit 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libqt4-devel-doc&distro=SUSE Linux Enterprise Software Development Kit 12","purlType":"rpm","versions":[{"text":"< 4.8.6-4.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.8.6-4.6","eol":null,"hubHref":null},{"vendor":"suse","product":"libqt4-sql-plugins&distro=SUSE Linux Enterprise Desktop 12","name":"libqt4-sql-plugins","label":"libqt4-sql-plugins&distro=SUSE Linux Enterprise Desktop 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE Linux Enterprise Desktop 12","purlType":"rpm","versions":[{"text":"< 4.8.6-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.8.6-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"libqt4-sql-plugins&distro=SUSE Linux Enterprise Server 12","name":"libqt4-sql-plugins","label":"libqt4-sql-plugins&distro=SUSE Linux Enterprise Server 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE Linux Enterprise Server 12","purlType":"rpm","versions":[{"text":"< 4.8.6-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.8.6-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"libqt4-sql-plugins&distro=SUSE Linux Enterprise Server for SAP Applications 12","name":"libqt4-sql-plugins","label":"libqt4-sql-plugins&distro=SUSE Linux Enterprise Server for SAP Applications 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE Linux Enterprise Server for SAP Applications 12","purlType":"rpm","versions":[{"text":"< 4.8.6-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.8.6-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"libqt4-sql-plugins&distro=SUSE Linux Enterprise Software Development Kit 12","name":"libqt4-sql-plugins","label":"libqt4-sql-plugins&distro=SUSE Linux Enterprise Software Development Kit 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE Linux Enterprise Software Development Kit 12","purlType":"rpm","versions":[{"text":"< 4.8.6-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.8.6-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"libqt4-sql-plugins&distro=SUSE Linux Enterprise Workstation Extension 12","name":"libqt4-sql-plugins","label":"libqt4-sql-plugins&distro=SUSE Linux Enterprise Workstation Extension 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libqt4-sql-plugins&distro=SUSE Linux Enterprise Workstation Extension 12","purlType":"rpm","versions":[{"text":"< 4.8.6-4.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.8.6-4.1","eol":null,"hubHref":null},{"vendor":"suse","product":"libqt4&distro=SUSE Linux Enterprise Desktop 12","name":"libqt4","label":"libqt4&distro=SUSE Linux Enterprise Desktop 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libqt4&distro=SUSE Linux Enterprise Desktop 12","purlType":"rpm","versions":[{"text":"< 4.8.6-4.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.8.6-4.2","eol":null,"hubHref":null},{"vendor":"suse","product":"libqt4&distro=SUSE Linux Enterprise Server 12","name":"libqt4","label":"libqt4&distro=SUSE Linux Enterprise Server 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libqt4&distro=SUSE Linux Enterprise Server 12","purlType":"rpm","versions":[{"text":"< 4.8.6-4.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.8.6-4.2","eol":null,"hubHref":null},{"vendor":"suse","product":"libqt4&distro=SUSE Linux Enterprise Server for SAP Applications 12","name":"libqt4","label":"libqt4&distro=SUSE Linux Enterprise Server for SAP Applications 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libqt4&distro=SUSE Linux Enterprise Server for SAP Applications 12","purlType":"rpm","versions":[{"text":"< 4.8.6-4.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.8.6-4.2","eol":null,"hubHref":null},{"vendor":"suse","product":"libqt4&distro=SUSE Linux Enterprise Software Development Kit 12","name":"libqt4","label":"libqt4&distro=SUSE Linux Enterprise Software Development Kit 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libqt4&distro=SUSE Linux Enterprise Software Development Kit 12","purlType":"rpm","versions":[{"text":"< 4.8.6-4.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.8.6-4.2","eol":null,"hubHref":null},{"vendor":"suse","product":"libqt4&distro=SUSE Linux Enterprise Workstation Extension 12","name":"libqt4","label":"libqt4&distro=SUSE Linux Enterprise Workstation Extension 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libqt4&distro=SUSE Linux Enterprise Workstation Extension 12","purlType":"rpm","versions":[{"text":"< 4.8.6-4.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.8.6-4.2","eol":null,"hubHref":null}],"affectedCount":13,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151359-1/","label":"www.suse.com/support/update/announcement/2015/suse-su-20151359-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/847880","label":"bugzilla.suse.com/847880","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/921999","label":"bugzilla.suse.com/921999","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/927806","label":"bugzilla.suse.com/927806","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/927807","label":"bugzilla.suse.com/927807","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/927808","label":"bugzilla.suse.com/927808","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/929688","label":"bugzilla.suse.com/929688","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0295","label":"www.suse.com/security/cve/CVE-2015-0295","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1858","label":"www.suse.com/security/cve/CVE-2015-1858","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1859","label":"www.suse.com/security/cve/CVE-2015-1859","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1860","label":"www.suse.com/security/cve/CVE-2015-1860","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2015-0295","CVE-2015-1858","CVE-2015-1859","CVE-2015-1860"],"downstream":[],"duplicates":[],"related":["CVE-2015-0295","CVE-2015-1858","CVE-2015-1859","CVE-2015-1860"]},"timeline":[{"kind":"published","date":"2015-05-27T13:53:24.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:29:43.341Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T10:48:42.260Z","stale":false,"partial":false}}