{"id":"SUSE-SU-2024:2976-1","summary":"Security update for libqt5-qt3d","details":"This update for libqt5-qt3d fixes the following issues:\n\n- CVE-2024-40724: Fixed heap-based buffer overflow in the PLY importer class in assimp (bsc#1228204)\n\nOther fixes:\n- Check for a nullptr returned from the shader manager\n- Fill image with transparency by default to avoid having junk if it's not filled properly before the first paint call\n- Fix QTextureAtlas parenting that could lead to crashes due to being used after free'd.\n","modified":"2025-05-02T04:36:56.598998Z","published":"2024-08-20T07:18:16Z","related":["CVE-2024-40724"],"upstream":["CVE-2024-40724"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242976-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1228204"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-40724"}],"affected":[{"package":{"name":"libqt5-qt3d","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","purl":"pkg:rpm/suse/libqt5-qt3d&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2+kde39-150400.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"libqt5-qt3d-devel":"5.15.2+kde39-150400.3.3.1","libqt5-qt3d-private-headers-devel":"5.15.2+kde39-150400.3.3.1","libQt53DLogic-devel":"5.15.2+kde39-150400.3.3.1","libQt53DLogic5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickAnimation5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickExtras-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickInput-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickScene2D5":"5.15.2+kde39-150400.3.3.1","libqt5-qt3d-tools":"5.15.2+kde39-150400.3.3.1","libQt53DAnimation-devel":"5.15.2+kde39-150400.3.3.1","libQt53DCore-devel":"5.15.2+kde39-150400.3.3.1","libQt53DExtras-devel":"5.15.2+kde39-150400.3.3.1","libQt53DExtras5":"5.15.2+kde39-150400.3.3.1","libQt53DInput-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuick-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickInput5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickRender5":"5.15.2+kde39-150400.3.3.1","libQt53DAnimation5":"5.15.2+kde39-150400.3.3.1","libQt53DCore5":"5.15.2+kde39-150400.3.3.1","libQt53DInput5":"5.15.2+kde39-150400.3.3.1","libQt53DQuick5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickExtras5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickScene2D-devel":"5.15.2+kde39-150400.3.3.1","libQt53DRender5":"5.15.2+kde39-150400.3.3.1","libqt5-qt3d-imports":"5.15.2+kde39-150400.3.3.1","libQt53DQuickAnimation-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickRender-devel":"5.15.2+kde39-150400.3.3.1","libQt53DRender-devel":"5.15.2+kde39-150400.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:2976-1.json"}},{"package":{"name":"libqt5-qt3d","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","purl":"pkg:rpm/suse/libqt5-qt3d&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2+kde39-150400.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"libQt53DQuickScene2D5":"5.15.2+kde39-150400.3.3.1","libqt5-qt3d-private-headers-devel":"5.15.2+kde39-150400.3.3.1","libQt53DAnimation5":"5.15.2+kde39-150400.3.3.1","libQt53DExtras-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuick5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickRender-devel":"5.15.2+kde39-150400.3.3.1","libqt5-qt3d-devel":"5.15.2+kde39-150400.3.3.1","libqt5-qt3d-tools":"5.15.2+kde39-150400.3.3.1","libQt53DAnimation-devel":"5.15.2+kde39-150400.3.3.1","libQt53DInput5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickExtras5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickRender5":"5.15.2+kde39-150400.3.3.1","libQt53DRender-devel":"5.15.2+kde39-150400.3.3.1","libQt53DRender5":"5.15.2+kde39-150400.3.3.1","libqt5-qt3d-imports":"5.15.2+kde39-150400.3.3.1","libQt53DCore-devel":"5.15.2+kde39-150400.3.3.1","libQt53DInput-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuick-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickAnimation5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickExtras-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickInput-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickInput5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickScene2D-devel":"5.15.2+kde39-150400.3.3.1","libQt53DCore5":"5.15.2+kde39-150400.3.3.1","libQt53DExtras5":"5.15.2+kde39-150400.3.3.1","libQt53DLogic-devel":"5.15.2+kde39-150400.3.3.1","libQt53DLogic5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickAnimation-devel":"5.15.2+kde39-150400.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:2976-1.json"}},{"package":{"name":"libqt5-qt3d","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","purl":"pkg:rpm/suse/libqt5-qt3d&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2+kde39-150400.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"libQt53DQuickInput5":"5.15.2+kde39-150400.3.3.1","libqt5-qt3d-imports":"5.15.2+kde39-150400.3.3.1","libQt53DCore-devel":"5.15.2+kde39-150400.3.3.1","libQt53DExtras-devel":"5.15.2+kde39-150400.3.3.1","libQt53DExtras5":"5.15.2+kde39-150400.3.3.1","libQt53DQuick5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickAnimation5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickInput-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickRender-devel":"5.15.2+kde39-150400.3.3.1","libqt5-qt3d-devel":"5.15.2+kde39-150400.3.3.1","libQt53DAnimation-devel":"5.15.2+kde39-150400.3.3.1","libQt53DAnimation5":"5.15.2+kde39-150400.3.3.1","libQt53DCore5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickRender5":"5.15.2+kde39-150400.3.3.1","libQt53DRender-devel":"5.15.2+kde39-150400.3.3.1","libQt53DRender5":"5.15.2+kde39-150400.3.3.1","libqt5-qt3d-tools":"5.15.2+kde39-150400.3.3.1","libQt53DLogic-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuick-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickExtras5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickScene2D-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickScene2D5":"5.15.2+kde39-150400.3.3.1","libqt5-qt3d-private-headers-devel":"5.15.2+kde39-150400.3.3.1","libQt53DInput-devel":"5.15.2+kde39-150400.3.3.1","libQt53DInput5":"5.15.2+kde39-150400.3.3.1","libQt53DLogic5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickAnimation-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickExtras-devel":"5.15.2+kde39-150400.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:2976-1.json"}},{"package":{"name":"libqt5-qt3d","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","purl":"pkg:rpm/suse/libqt5-qt3d&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2+kde39-150400.3.3.1"}]}],"ecosystem_specific":{"binaries":[{"libQt53DExtras-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuick-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuick5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickAnimation-devel":"5.15.2+kde39-150400.3.3.1","libqt5-qt3d-imports":"5.15.2+kde39-150400.3.3.1","libqt5-qt3d-tools":"5.15.2+kde39-150400.3.3.1","libQt53DCore5":"5.15.2+kde39-150400.3.3.1","libQt53DInput-devel":"5.15.2+kde39-150400.3.3.1","libQt53DInput5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickAnimation5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickRender-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickScene2D-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickScene2D5":"5.15.2+kde39-150400.3.3.1","libQt53DRender-devel":"5.15.2+kde39-150400.3.3.1","libQt53DCore-devel":"5.15.2+kde39-150400.3.3.1","libQt53DLogic-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickExtras-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickExtras5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickRender5":"5.15.2+kde39-150400.3.3.1","libQt53DRender5":"5.15.2+kde39-150400.3.3.1","libqt5-qt3d-private-headers-devel":"5.15.2+kde39-150400.3.3.1","libQt53DAnimation-devel":"5.15.2+kde39-150400.3.3.1","libQt53DAnimation5":"5.15.2+kde39-150400.3.3.1","libQt53DExtras5":"5.15.2+kde39-150400.3.3.1","libQt53DLogic5":"5.15.2+kde39-150400.3.3.1","libQt53DQuickInput-devel":"5.15.2+kde39-150400.3.3.1","libQt53DQuickInput5":"5.15.2+kde39-150400.3.3.1","libqt5-qt3d-devel":"5.15.2+kde39-150400.3.3.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:2976-1.json"}}],"schema_version":"1.7.3"}