SUSE has issued an advisory on July 6: http://lists.suse.com/pipermail/sle-security-updates/2018-July/004250.html The issue was fixed upstream in 4.8.7. I'm not sure why we haven't updated it.
Assigning to the registered maintainer, CC'ing KDE team because I assume that in Mageia 5, qt4 counts as KDE package
CC: (none) => kde, marja11Assignee: bugsquad => mageia
The limited support Mga5 continued to have after its official EOL has ended, so closing this bug as OLD.
Resolution: (none) => OLDStatus: NEW => RESOLVED