Bug 26505 - qt4 new security issues CVE-2018-15518, CVE-2018-19869, CVE-2018-1987[013]
Summary: qt4 new security issues CVE-2018-15518, CVE-2018-19869, CVE-2018-1987[013]
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 7
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA7-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2020-04-20 17:15 CEST by David Walser
Modified: 2020-05-08 12:59 CEST (History)
6 users (show)

See Also:
Source RPM: qt4-4.8.7-29.mga8.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2020-04-20 17:15:02 CEST 
SUSE has issued an advisory on April 17:
http://lists.suse.com/pipermail/sle-security-updates/2020-April/006715.html

Mageia 7 is also affected.
David Walser 2020-04-20 17:15:25 CEST

Whiteboard: (none) => MGA7TOO

Comment 1 David GEIGER 2020-04-22 09:38:40 CEST 
Done for both Cauldron and mga7 adding two more CVE's CVE-2018-19870 and CVE-2018-19871.

CC: (none) => geiger.david68210

Comment 2 David Walser 2020-04-22 16:30:46 CEST 
Darn, I missed this one since I wasn't tracking Debian-LTS advisories at the time.  Here it is from May 14, 2019:
https://www.debian.org/lts/security/2019/dla-1786
Comment 3 David Walser 2020-04-22 16:34:58 CEST 
Advisory:
========================

Updated qt4 packages fix security vulnerabilities:

A double-free or corruption during parsing of a specially crafted illegal XML
document (CVE-2018-15518).

A malformed SVG image could cause a segmentation fault in qsvghandler.cpp
(CVE-2018-19869).

A malformed GIF image might have caused a NULL pointer dereference in
QGifHandler resulting in a segmentation fault (CVE-2018-19870).

There was an uncontrolled resource consumption in QTgaFile (CVE-2018-19871).

QBmpHandler had a buffer overflow via BMP data (CVE-2018-19873).

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15518
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19869
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19870
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19871
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19873
https://www.debian.org/lts/security/2019/dla-1786
========================

Updated packages in core/updates_testing:
========================
qt4-common-4.8.7-26.1.mga7
libqtxml4-4.8.7-26.1.mga7
libqtscripttools4-4.8.7-26.1.mga7
libqtxmlpatterns4-4.8.7-26.1.mga7
libqtsql4-4.8.7-26.1.mga7
libqtnetwork4-4.8.7-26.1.mga7
libqtscript4-4.8.7-26.1.mga7
libqtgui4-4.8.7-26.1.mga7
libqtsvg4-4.8.7-26.1.mga7
libqttest4-4.8.7-26.1.mga7
libqthelp4-4.8.7-26.1.mga7
libqtclucene4-4.8.7-26.1.mga7
libqtcore4-4.8.7-26.1.mga7
libqt3support4-4.8.7-26.1.mga7
libqtopengl4-4.8.7-26.1.mga7
libqtdesigner4-4.8.7-26.1.mga7
libqtdbus4-4.8.7-26.1.mga7
libqtmultimedia4-4.8.7-26.1.mga7
qt4-qtdbus-4.8.7-26.1.mga7
libqtdeclarative4-4.8.7-26.1.mga7
qt4-qmlviewer-4.8.7-26.1.mga7
libqt4-devel-4.8.7-26.1.mga7
qt4-devel-private-4.8.7-26.1.mga7
qt4-xmlpatterns-4.8.7-26.1.mga7
qt4-qtconfig-4.8.7-26.1.mga7
qt4-doc-4.8.7-26.1.mga7
qt4-demos-4.8.7-26.1.mga7
qt4-examples-4.8.7-26.1.mga7
qt4-linguist-4.8.7-26.1.mga7
qt4-assistant-4.8.7-26.1.mga7
libqt4-database-plugin-mysql-4.8.7-26.1.mga7
libqt4-database-plugin-sqlite-4.8.7-26.1.mga7
libqt4-database-plugin-tds-4.8.7-26.1.mga7
libqt4-database-plugin-pgsql-4.8.7-26.1.mga7
qt4-graphicssystems-plugin-4.8.7-26.1.mga7
qt4-accessibility-plugin-4.8.7-26.1.mga7
qt4-designer-4.8.7-26.1.mga7
qt4-designer-plugin-webkit-4.8.7-26.1.mga7
qt4-designer-plugin-qt3support-4.8.7-26.1.mga7
qt4-qvfb-4.8.7-26.1.mga7
qt4-qdoc3-4.8.7-26.1.mga7

from qt4-4.8.7-26.1.mga7.src.rpm

Version: Cauldron => 7
Whiteboard: MGA7TOO => (none)
Assignee: kde => qa-bugs
Severity: normal => critical

David Walser 2020-04-22 16:35:18 CEST

Summary: qt4 new security issues CVE-2018-15518, CVE-2018-19869, CVE-2018-19873 => qt4 new security issues CVE-2018-15518, CVE-2018-19869, CVE-2018-1987[013]

Comment 4 Herman Viaene 2020-04-23 21:53:55 CEST 
MGA7-64 Plasma on Lenovo B50.
No installation issues.
Tried different LibreOffice files, all OK.

CC: (none) => herman.viaene

Comment 5 PC LX 2020-04-28 14:29:17 CEST 
Tried to install all the packages in comment 3 and found an issue.

I'm seeing this message:
libdbus-devel-1.13.8-4.1.mga7.i586 (due to unsatisfied systemd-devel-241-8.mga7.i586)

Maybe there is some dependency error or a missing package.


$ LANGUAGE=C urpmi $(cat qt4_list.txt)
In order to satisfy the 'devel(libcrypto(64bit))' dependency, one of the following packages is needed:
 1- lib64openssl-devel-1.1.0l-1.1.mga7.x86_64: Secure Sockets Layer communications libs & headers & utils (to install)
 2- lib64compat-openssl10-devel-1.0.2u-1.mga7.x86_64: Files for development of applications which have to use OpenSSL-1.0.2 (to install)
What is your choice? (1-2) 1
A requested package cannot be installed:
libdbus-devel-1.13.8-4.1.mga7.i586 (due to unsatisfied systemd-devel-241-8.mga7.i586)
Continue installation anyway? (Y/n) 
Marking qt4-common as manually installed, it won't be auto-orphaned
Marking qt4-xmlpatterns as manually installed, it won't be auto-orphaned
writing /var/lib/rpm/installed-through-deps.list
To satisfy dependencies, the following packages are going to be installed:
<SNIP>

CC: (none) => mageia

Comment 6 David Walser 2020-04-28 15:31:52 CEST 
You should have chosen 2.  It looks like a packaging error in openssl, not qt4.
Comment 7 PC LX 2020-04-29 01:51:54 CEST 
The dependency error message also shows if I select option 2.

I'm installing the packages now, so will see what is the result soon.
Comment 8 David Walser 2020-04-29 01:55:58 CEST 
You're not trying to install any 32-bit qt4 packages are you?
Comment 9 PC LX 2020-04-29 02:05:03 CEST 
The install was tried on a QEMU/KVM VM machine.

Tried to install all packages in comment 3, both x86_64 and i586.
140 packages were needed to be installed dues to not having much i586 stuff in the system.

One package failed to install: libqt4-devel-4.8.7-26.1.mga7

The following messages are shown at the end of the install:
""""""""""""""""""""""
While some packages may have been installed, there were failures.
A requested package cannot be installed:
libdbus-devel-1.13.8-4.1.mga7.i586 (due to unsatisfied systemd-devel-241-8.mga7.i586)
Continue installation anyway?
""""""""""""""""""""""



$ LANGUAGE=C urpmi $(cat /mnt/host/qt4_list.txt )
In order to satisfy the 'devel(libcrypto(64bit))' dependency, one of the following packages is needed:
 1- lib64openssl-devel-1.1.0l-1.1.mga7.x86_64: Secure Sockets Layer communications libs & headers & utils (to install)
 2- lib64compat-openssl10-devel-1.0.2u-1.mga7.x86_64: Files for development of applications which have to use OpenSSL-1.0.2 (to install)
What is your choice? (1-2) 1
A requested package cannot be installed:
libdbus-devel-1.13.8-4.1.mga7.i586 (due to unsatisfied systemd-devel-241-8.mga7.i586)
Continue installation anyway? (Y/n) 
To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch    
(medium "Core Release")
  lib64proj15                    6.1.0        1.mga7        x86_64  
  lib64qtlocation1               1.2.2        10.mga7       x86_64  
  lib64qtsensors1                1.2.2        10.mga7       x86_64  
  lib64qtwebkit2.2_4             2.3.4        13.mga7       x86_64  
  qtwebkit-qmlplugin             2.3.4        13.mga7       x86_64  
(medium "Core Updates")
  lib64openssl-devel             1.1.0l       1.1.mga7      x86_64  
  make                           4.2.1        3.1.mga7      x86_64  
(medium "Core Updates Testing")
  lib64dri-drivers               20.0.5       1.mga7        x86_64  
  lib64mesaegl1                  20.0.5       1.mga7        x86_64  
  lib64mesaegl1-devel            20.0.5       1.mga7        x86_64  
  lib64mesagl1                   20.0.5       1.mga7        x86_64  
  lib64mesagl1-devel             20.0.5       1.mga7        x86_64  
  lib64mesakhr-devel             20.0.5       1.mga7        x86_64  
  lib64qt3support4               4.8.7        26.1.mga7     x86_64  
  lib64qt4-database-plugin-sqli> 4.8.7        26.1.mga7     x86_64  
  lib64qt4-devel                 4.8.7        26.1.mga7     x86_64  
  lib64qtclucene4                4.8.7        26.1.mga7     x86_64  
  lib64qtdesigner4               4.8.7        26.1.mga7     x86_64  
  lib64qthelp4                   4.8.7        26.1.mga7     x86_64  
  lib64qtmultimedia4             4.8.7        26.1.mga7     x86_64  
  lib64qtopengl4                 4.8.7        26.1.mga7     x86_64  
  lib64qtscripttools4            4.8.7        26.1.mga7     x86_64  
  lib64qttest4                   4.8.7        26.1.mga7     x86_64  
  mesa                           20.0.5       1.mga7        x86_64  
  qt4-accessibility-plugin       4.8.7        26.1.mga7     x86_64  
  qt4-assistant                  4.8.7        26.1.mga7     x86_64  
  qt4-common                     4.8.7        26.1.mga7     x86_64  
  qt4-demos                      4.8.7        26.1.mga7     x86_64  
  qt4-designer                   4.8.7        26.1.mga7     x86_64  
  qt4-designer-plugin-qt3support 4.8.7        26.1.mga7     x86_64  
  qt4-designer-plugin-webkit     4.8.7        26.1.mga7     x86_64  
  qt4-devel-private              4.8.7        26.1.mga7     noarch  
  qt4-doc                        4.8.7        26.1.mga7     noarch  
  qt4-examples                   4.8.7        26.1.mga7     x86_64  
  qt4-graphicssystems-plugin     4.8.7        26.1.mga7     x86_64  
  qt4-linguist                   4.8.7        26.1.mga7     x86_64  
  qt4-qdoc3                      4.8.7        26.1.mga7     x86_64  
  qt4-qmlviewer                  4.8.7        26.1.mga7     x86_64  
  qt4-qtconfig                   4.8.7        26.1.mga7     x86_64  
  qt4-qtdbus                     4.8.7        26.1.mga7     x86_64  
  qt4-qvfb                       4.8.7        26.1.mga7     x86_64  
  qt4-xmlpatterns                4.8.7        26.1.mga7     x86_64  
(medium "Core 32bit Release")
  libblkid1                      2.33.2       1.mga7        i586    
  libedit0                       3.1          0.20181209.1> i586    
  libelfutils1                   0.176        1.mga7        i586    
  libffi6                        3.2.1        7.mga7        i586    
  libfontconfig1                 2.13.1       1.mga7        i586    
  libgmp10                       6.1.2        3.mga7        i586    
  libhogweed4                    3.4.1        1.mga7        i586    
  libintl8                       0.19.8.1     4.mga7        i586    
  libjbig1                       2.1          6.mga7        i586    
  libkeyutils1                   1.6          1.mga7        i586    
  libkrb53                       1.17         2.mga7        i586    
  liblcms2_2                     2.9          3.mga7        i586    
  libllvm8.0                     8.0.0        1.mga7        i586    
  libltdl7                       2.4.6        9.mga7        i586    
  libmng2                        2.0.3        2.mga7        i586    
  libnettle6                     3.4.1        1.mga7        i586    
  libp11-kit0                    0.23.15      1.mga7        i586    
  libpciaccess0                  0.14         2.mga7        i586    
  libpng16_16                    1.6.37       1.mga7        i586    
  libreadline7                   7.0          3.mga7        i586    
  libsm6                         1.2.3        1.mga7        i586    
  libunistring2                  0.9.10       2.mga7        i586    
  libunixODBC2                   2.3.7        2.mga7        i586    
  libuuid1                       2.33.2       1.mga7        i586    
  libverto1                      0.3.0        3.mga7        i586    
  libwebp7                       1.0.2        1.mga7        i586    
  libx11-xcb1                    1.6.7        1.mga7        i586    
  libx11_6                       1.6.7        1.mga7        i586    
  libxcb-dri2_0                  1.13.1       1.mga7        i586    
  libxcb-dri3_0                  1.13.1       1.mga7        i586    
  libxcb-glx0                    1.13.1       1.mga7        i586    
  libxcb-present0                1.13.1       1.mga7        i586    
  libxcb-sync1                   1.13.1       1.mga7        i586    
  libxcb-xfixes0                 1.13.1       1.mga7        i586    
  libxcrypt1                     4.4.6        1.mga7        i586    
  libxcursor1                    1.2.0        1.mga7        i586    
  libxdamage1                    1.1.5        1.mga7        i586    
  libxext6                       1.3.4        1.mga7        i586    
  libxfixes3                     5.0.3        2.mga7        i586    
  libxi6                         1.7.9        3.mga7        i586    
  libxinerama1                   1.1.4        2.mga7        i586    
  libxrandr2                     1.5.2        1.mga7        i586    
  libxrender1                    0.9.10       2.mga7        i586    
  libxshmfence1                  1.3          2.mga7        i586    
  libxxf86vm1                    1.1.4        3.mga7        i586    
  libzlib1                       1.2.11       7.mga7        i586    
  libzstd1                       1.4.0        1.mga7        i586    
(medium "Core 32bit Updates")
  libbz2_1                       1.0.8        1.mga7        i586    
  libdrm2                        2.4.101      2.mga7        i586    
  libdrm_amdgpu1                 2.4.101      2.mga7        i586    
  libdrm_intel1                  2.4.101      2.mga7        i586    
  libdrm_nouveau2                2.4.101      2.mga7        i586    
  libdrm_radeon1                 2.4.101      2.mga7        i586    
  libexpat1                      2.2.7        1.1.mga7      i586    
  libext2fs2                     1.45.5       1.mga7        i586    
  libfreetds0                    1.00.83      2.1.mga7      i586    
  libglib2.0_0                   2.60.2       1.3.mga7      i586    
  libgnutls30                    3.6.7        1.1.mga7      i586    
  libicu63                       63.1         1.2.mga7      i586    
  libidn2_0                      2.2.0        1.mga7        i586    
  libjpeg8                       2.0.4        1.mga7        i586    
  liblm_sensors5                 3.5.0        2.1.mga7      i586    
  libmariadb3                    10.3.22      1.mga7        i586    
  libncurses6                    6.1          20181117.3.1> i586    
  libopenssl1.1                  1.1.0l       1.1.mga7      i586    
  libpcre1                       8.44         1.mga7        i586    
  libpq5                         11.7         2.mga7        i586    
  libsqlite3_0                   3.31.1       1.mga7        i586    
  libtasn1_6                     4.14         1.mga7        i586    
  libtiff5                       4.1.0        2.git2019112> i586    
  libxml2_2                      2.9.9        2.3.mga7      i586    
(medium "Core 32bit Updates Testing")
  libdri-drivers                 20.0.5       1.mga7        i586    
  libglapi0                      20.0.5       1.mga7        i586    
  libice6                        1.0.10       1.mga7        i586    
  libmesagl1                     20.0.5       1.mga7        i586    
  libqt3support4                 4.8.7        26.1.mga7     i586    
  libqt4-database-plugin-mysql   4.8.7        26.1.mga7     i586    
  libqt4-database-plugin-pgsql   4.8.7        26.1.mga7     i586    
  libqt4-database-plugin-sqlite  4.8.7        26.1.mga7     i586    
  libqt4-database-plugin-tds     4.8.7        26.1.mga7     i586    
  libqtclucene4                  4.8.7        26.1.mga7     i586    
  libqtcore4                     4.8.7        26.1.mga7     i586    
  libqtdbus4                     4.8.7        26.1.mga7     i586    
  libqtdeclarative4              4.8.7        26.1.mga7     i586    
  libqtdesigner4                 4.8.7        26.1.mga7     i586    
  libqtgui4                      4.8.7        26.1.mga7     i586    
  libqthelp4                     4.8.7        26.1.mga7     i586    
  libqtmultimedia4               4.8.7        26.1.mga7     i586    
  libqtnetwork4                  4.8.7        26.1.mga7     i586    
  libqtopengl4                   4.8.7        26.1.mga7     i586    
  libqtscript4                   4.8.7        26.1.mga7     i586    
  libqtscripttools4              4.8.7        26.1.mga7     i586    
  libqtsql4                      4.8.7        26.1.mga7     i586    
  libqtsvg4                      4.8.7        26.1.mga7     i586    
  libqttest4                     4.8.7        26.1.mga7     i586    
  libqtxml4                      4.8.7        26.1.mga7     i586    
  libqtxmlpatterns4              4.8.7        26.1.mga7     i586    
(medium "Tainted 32bit Release")
  libfreetype6                   2.9.1        4.mga7.taint> i586    
675MB of additional disk space will be used.
253MB of packages will be retrieved.
Proceed with the installation of the 140 packages? (Y/n) Y

<SNIP>

While some packages may have been installed, there were failures.
A requested package cannot be installed:
libdbus-devel-1.13.8-4.1.mga7.i586 (due to unsatisfied systemd-devel-241-8.mga7.i586)
Continue installation anyway?

$ # After install check to see if the packages are installed.
$ LANGUAGE=C rpm -q $(cat /mnt/host/qt4_list.txt )
qt4-common-4.8.7-26.1.mga7
libqtxml4-4.8.7-26.1.mga7
libqtscripttools4-4.8.7-26.1.mga7
libqtxmlpatterns4-4.8.7-26.1.mga7
libqtsql4-4.8.7-26.1.mga7
libqtnetwork4-4.8.7-26.1.mga7
libqtscript4-4.8.7-26.1.mga7
libqtgui4-4.8.7-26.1.mga7
libqtsvg4-4.8.7-26.1.mga7
libqttest4-4.8.7-26.1.mga7
libqthelp4-4.8.7-26.1.mga7
libqtclucene4-4.8.7-26.1.mga7
libqtcore4-4.8.7-26.1.mga7
libqt3support4-4.8.7-26.1.mga7
libqtopengl4-4.8.7-26.1.mga7
libqtdesigner4-4.8.7-26.1.mga7
libqtdbus4-4.8.7-26.1.mga7
libqtmultimedia4-4.8.7-26.1.mga7
qt4-qtdbus-4.8.7-26.1.mga7
libqtdeclarative4-4.8.7-26.1.mga7
qt4-qmlviewer-4.8.7-26.1.mga7
package libqt4-devel-4.8.7-26.1.mga7 is not installed
qt4-devel-private-4.8.7-26.1.mga7
qt4-xmlpatterns-4.8.7-26.1.mga7
qt4-qtconfig-4.8.7-26.1.mga7
qt4-doc-4.8.7-26.1.mga7
qt4-demos-4.8.7-26.1.mga7
qt4-examples-4.8.7-26.1.mga7
qt4-linguist-4.8.7-26.1.mga7
qt4-assistant-4.8.7-26.1.mga7
libqt4-database-plugin-mysql-4.8.7-26.1.mga7
libqt4-database-plugin-sqlite-4.8.7-26.1.mga7
libqt4-database-plugin-tds-4.8.7-26.1.mga7
libqt4-database-plugin-pgsql-4.8.7-26.1.mga7
qt4-graphicssystems-plugin-4.8.7-26.1.mga7
qt4-accessibility-plugin-4.8.7-26.1.mga7
qt4-designer-4.8.7-26.1.mga7
qt4-designer-plugin-webkit-4.8.7-26.1.mga7
qt4-designer-plugin-qt3support-4.8.7-26.1.mga7
qt4-qvfb-4.8.7-26.1.mga7
qt4-qdoc3-4.8.7-26.1.mga7
Comment 10 David Walser 2020-04-29 02:23:29 CEST 
Ahh, this makes more sense now.  Don't install the 32-bit devel package on a 64-bit system (especially not at the same time as the 64-bit one).
Comment 11 PC LX 2020-04-30 12:09:38 CEST 
Installed and tested without issues.

Installed all the packages in comment 3, except libqt4-devel-4.8.7-26.1.mga7.

Tested for several hours without any noticed issues.


System: Mageia 7, x86_64, Plasma DE, LXQt DE, Intel CPU, nVidia GPU using nvidia340 proprietary driver.

Also tested on a QEMU/KVM VM.
System VM: QEMU/KVM, Mageia 7, x86_64, LXQt DE, Intel CPU, virtio drivers.



$ urpmi $(cat qt4_list.txt | grep -v -- -devel)
In order to satisfy the 'devel(libcrypto(64bit))' dependency, one of the following packages is needed:
 1- lib64openssl-devel-1.1.0l-1.1.mga7.x86_64: Secure Sockets Layer communications libs & headers & utils (to install)
 2- lib64compat-openssl10-devel-1.0.2u-1.mga7.x86_64: Files for development of applications which have to use OpenSSL-1.0.2 (to install)
What is your choice? (1-2) 1 
Marking qt4-xmlpatterns as manually installed, it won't be auto-orphaned
Marking qt4-common as manually installed, it won't be auto-orphaned
writing /var/lib/rpm/installed-through-deps.list
To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch    
(medium "Core Release")
  lib64proj15                    6.1.0        1.mga7        x86_64  
  lib64qtlocation1               1.2.2        10.mga7       x86_64  
  lib64qtsensors1                1.2.2        10.mga7       x86_64  
  lib64qtwebkit2.2_4             2.3.4        13.mga7       x86_64  
  qtwebkit-qmlplugin             2.3.4        13.mga7       x86_64  
(medium "Core Updates")
  lib64openssl-devel             1.1.0l       1.1.mga7      x86_64  
  make                           4.2.1        3.1.mga7      x86_64  
(medium "Core Updates Testing")
  lib64dri-drivers               20.0.6       1.mga7        x86_64  
  lib64mesaegl1                  20.0.6       1.mga7        x86_64  
  lib64mesaegl1-devel            20.0.6       1.mga7        x86_64  
  lib64mesagl1                   20.0.6       1.mga7        x86_64  
  lib64mesagl1-devel             20.0.6       1.mga7        x86_64  
  lib64mesakhr-devel             20.0.6       1.mga7        x86_64  
  lib64qt3support4               4.8.7        26.1.mga7     x86_64  
  lib64qt4-devel                 4.8.7        26.1.mga7     x86_64  
  lib64qtclucene4                4.8.7        26.1.mga7     x86_64  
  lib64qtdesigner4               4.8.7        26.1.mga7     x86_64  
  lib64qthelp4                   4.8.7        26.1.mga7     x86_64  
  lib64qtmultimedia4             4.8.7        26.1.mga7     x86_64  
  lib64qtopengl4                 4.8.7        26.1.mga7     x86_64  
  lib64qtscripttools4            4.8.7        26.1.mga7     x86_64  
  lib64qttest4                   4.8.7        26.1.mga7     x86_64  
  mesa                           20.0.6       1.mga7        x86_64  
  qt4-accessibility-plugin       4.8.7        26.1.mga7     x86_64  
  qt4-assistant                  4.8.7        26.1.mga7     x86_64  
  qt4-common                     4.8.7        26.1.mga7     x86_64  
  qt4-demos                      4.8.7        26.1.mga7     x86_64  
  qt4-designer                   4.8.7        26.1.mga7     x86_64  
  qt4-designer-plugin-qt3support 4.8.7        26.1.mga7     x86_64  
  qt4-designer-plugin-webkit     4.8.7        26.1.mga7     x86_64  
  qt4-doc                        4.8.7        26.1.mga7     noarch  
  qt4-examples                   4.8.7        26.1.mga7     x86_64  
  qt4-graphicssystems-plugin     4.8.7        26.1.mga7     x86_64  
  qt4-linguist                   4.8.7        26.1.mga7     x86_64  
  qt4-qdoc3                      4.8.7        26.1.mga7     x86_64  
  qt4-qmlviewer                  4.8.7        26.1.mga7     x86_64  
  qt4-qtconfig                   4.8.7        26.1.mga7     x86_64  
  qt4-qtdbus                     4.8.7        26.1.mga7     x86_64  
  qt4-qvfb                       4.8.7        26.1.mga7     x86_64  
  qt4-xmlpatterns                4.8.7        26.1.mga7     x86_64  
(medium "Core 32bit Release")
  libblkid1                      2.33.2       1.mga7        i586    
  libedit0                       3.1          0.20181209.1> i586    
  libelfutils1                   0.176        1.mga7        i586    
  libffi6                        3.2.1        7.mga7        i586    
  libfontconfig1                 2.13.1       1.mga7        i586    
  libgmp10                       6.1.2        3.mga7        i586    
  libhogweed4                    3.4.1        1.mga7        i586    
  libintl8                       0.19.8.1     4.mga7        i586    
  libjbig1                       2.1          6.mga7        i586    
  libkeyutils1                   1.6          1.mga7        i586    
  libkrb53                       1.17         2.mga7        i586    
  liblcms2_2                     2.9          3.mga7        i586    
  libllvm8.0                     8.0.0        1.mga7        i586    
  libltdl7                       2.4.6        9.mga7        i586    
  libmng2                        2.0.3        2.mga7        i586    
  libnettle6                     3.4.1        1.mga7        i586    
  libp11-kit0                    0.23.15      1.mga7        i586    
  libpciaccess0                  0.14         2.mga7        i586    
  libpng16_16                    1.6.37       1.mga7        i586    
  libreadline7                   7.0          3.mga7        i586    
  libsm6                         1.2.3        1.mga7        i586    
  libunistring2                  0.9.10       2.mga7        i586    
  libunixODBC2                   2.3.7        2.mga7        i586    
  libuuid1                       2.33.2       1.mga7        i586    
  libverto1                      0.3.0        3.mga7        i586    
  libwebp7                       1.0.2        1.mga7        i586    
  libx11-xcb1                    1.6.7        1.mga7        i586    
  libx11_6                       1.6.7        1.mga7        i586    
  libxcb-dri2_0                  1.13.1       1.mga7        i586    
  libxcb-dri3_0                  1.13.1       1.mga7        i586    
  libxcb-glx0                    1.13.1       1.mga7        i586    
  libxcb-present0                1.13.1       1.mga7        i586    
  libxcb-sync1                   1.13.1       1.mga7        i586    
  libxcb-xfixes0                 1.13.1       1.mga7        i586    
  libxcrypt1                     4.4.6        1.mga7        i586    
  libxcursor1                    1.2.0        1.mga7        i586    
  libxdamage1                    1.1.5        1.mga7        i586    
  libxext6                       1.3.4        1.mga7        i586    
  libxfixes3                     5.0.3        2.mga7        i586    
  libxi6                         1.7.9        3.mga7        i586    
  libxinerama1                   1.1.4        2.mga7        i586    
  libxrandr2                     1.5.2        1.mga7        i586    
  libxrender1                    0.9.10       2.mga7        i586    
  libxshmfence1                  1.3          2.mga7        i586    
  libxxf86vm1                    1.1.4        3.mga7        i586    
  libzlib1                       1.2.11       7.mga7        i586    
  libzstd1                       1.4.0        1.mga7        i586    
(medium "Core 32bit Updates")
  libbz2_1                       1.0.8        1.mga7        i586    
  libdrm2                        2.4.101      2.mga7        i586    
  libdrm_amdgpu1                 2.4.101      2.mga7        i586    
  libdrm_intel1                  2.4.101      2.mga7        i586    
  libdrm_nouveau2                2.4.101      2.mga7        i586    
  libdrm_radeon1                 2.4.101      2.mga7        i586    
  libexpat1                      2.2.7        1.1.mga7      i586    
  libext2fs2                     1.45.5       1.mga7        i586    
  libfreetds0                    1.00.83      2.1.mga7      i586    
  libglib2.0_0                   2.60.2       1.3.mga7      i586    
  libgnutls30                    3.6.7        1.1.mga7      i586    
  libicu63                       63.1         1.2.mga7      i586    
  libidn2_0                      2.2.0        1.mga7        i586    
  libjpeg8                       2.0.4        1.mga7        i586    
  liblm_sensors5                 3.5.0        2.1.mga7      i586    
  libmariadb3                    10.3.22      1.mga7        i586    
  libncurses6                    6.1          20181117.3.1> i586    
  libopenssl1.1                  1.1.0l       1.1.mga7      i586    
  libpcre1                       8.44         1.mga7        i586    
  libpq5                         11.7         2.mga7        i586    
  libsqlite3_0                   3.31.1       1.mga7        i586    
  libtasn1_6                     4.14         1.mga7        i586    
  libtiff5                       4.1.0        2.git2019112> i586    
  libxml2_2                      2.9.9        2.3.mga7      i586    
(medium "Core 32bit Updates Testing")
  libdri-drivers                 20.0.6       1.mga7        i586    
  libglapi0                      20.0.6       1.mga7        i586    
  libice6                        1.0.10       1.mga7        i586    
  libmesagl1                     20.0.6       1.mga7        i586    
  libqt3support4                 4.8.7        26.1.mga7     i586    
  libqt4-database-plugin-mysql   4.8.7        26.1.mga7     i586    
  libqt4-database-plugin-pgsql   4.8.7        26.1.mga7     i586    
  libqt4-database-plugin-sqlite  4.8.7        26.1.mga7     i586    
  libqt4-database-plugin-tds     4.8.7        26.1.mga7     i586    
  libqtclucene4                  4.8.7        26.1.mga7     i586    
  libqtcore4                     4.8.7        26.1.mga7     i586    
  libqtdbus4                     4.8.7        26.1.mga7     i586    
  libqtdeclarative4              4.8.7        26.1.mga7     i586    
  libqtdesigner4                 4.8.7        26.1.mga7     i586    
  libqtgui4                      4.8.7        26.1.mga7     i586    
  libqthelp4                     4.8.7        26.1.mga7     i586    
  libqtmultimedia4               4.8.7        26.1.mga7     i586    
  libqtnetwork4                  4.8.7        26.1.mga7     i586    
  libqtopengl4                   4.8.7        26.1.mga7     i586    
  libqtscript4                   4.8.7        26.1.mga7     i586    
  libqtscripttools4              4.8.7        26.1.mga7     i586    
  libqtsql4                      4.8.7        26.1.mga7     i586    
  libqtsvg4                      4.8.7        26.1.mga7     i586    
  libqttest4                     4.8.7        26.1.mga7     i586    
  libqtxml4                      4.8.7        26.1.mga7     i586    
  libqtxmlpatterns4              4.8.7        26.1.mga7     i586    
(medium "Tainted 32bit Release")
  libfreetype6                   2.9.1        4.mga7.taint> i586    
670MB of additional disk space will be used.
252MB of packages will be retrieved.
Proceed with the installation of the 138 packages? (Y/n) 

<SNIP - NO ERRORS>

$ rpm -q $(cat /mnt/host/qt4_list.txt | grep -v -- -devel)
qt4-common-4.8.7-26.1.mga7
libqtxml4-4.8.7-26.1.mga7
libqtscripttools4-4.8.7-26.1.mga7
libqtxmlpatterns4-4.8.7-26.1.mga7
libqtsql4-4.8.7-26.1.mga7
libqtnetwork4-4.8.7-26.1.mga7
libqtscript4-4.8.7-26.1.mga7
libqtgui4-4.8.7-26.1.mga7
libqtsvg4-4.8.7-26.1.mga7
libqttest4-4.8.7-26.1.mga7
libqthelp4-4.8.7-26.1.mga7
libqtclucene4-4.8.7-26.1.mga7
libqtcore4-4.8.7-26.1.mga7
libqt3support4-4.8.7-26.1.mga7
libqtopengl4-4.8.7-26.1.mga7
libqtdesigner4-4.8.7-26.1.mga7
libqtdbus4-4.8.7-26.1.mga7
libqtmultimedia4-4.8.7-26.1.mga7
qt4-qtdbus-4.8.7-26.1.mga7
libqtdeclarative4-4.8.7-26.1.mga7
qt4-qmlviewer-4.8.7-26.1.mga7
qt4-xmlpatterns-4.8.7-26.1.mga7
qt4-qtconfig-4.8.7-26.1.mga7
qt4-doc-4.8.7-26.1.mga7
qt4-demos-4.8.7-26.1.mga7
qt4-examples-4.8.7-26.1.mga7
qt4-linguist-4.8.7-26.1.mga7
qt4-assistant-4.8.7-26.1.mga7
libqt4-database-plugin-mysql-4.8.7-26.1.mga7
libqt4-database-plugin-sqlite-4.8.7-26.1.mga7
libqt4-database-plugin-tds-4.8.7-26.1.mga7
libqt4-database-plugin-pgsql-4.8.7-26.1.mga7
qt4-graphicssystems-plugin-4.8.7-26.1.mga7
qt4-accessibility-plugin-4.8.7-26.1.mga7
qt4-designer-4.8.7-26.1.mga7
qt4-designer-plugin-webkit-4.8.7-26.1.mga7
qt4-designer-plugin-qt3support-4.8.7-26.1.mga7
qt4-qvfb-4.8.7-26.1.mga7
qt4-qdoc3-4.8.7-26.1.mga7
Comment 12 PC LX 2020-05-06 14:47:57 CEST 
This update has been in use for a week without issues. Based on comment 4 and comment 11 I'm marking it is OK for x86_64 to push it forward. Feel free to unokay if needed.

Whiteboard: (none) => MGA7-64-OK

Comment 13 Thomas Andrews 2020-05-07 16:03:29 CEST 
Looks good to me. Validating. Advisory in Comment 3.

Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs

Thomas Backlund 2020-05-08 11:45:39 CEST

Keywords: (none) => advisory
CC: (none) => tmb

Comment 14 Mageia Robot 2020-05-08 12:59:13 CEST 
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2020-0204.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED
Note You need to log in before you can comment on or make changes to this bug.