https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:29:15.576034+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:6369 ALSA-2023:6369 — Moderate: qt5 security and bug fix update 2026-10-04T11:29:16.005195+00:00

Affected: AlmaLinux:9: qt5, AlmaLinux:9: qt5-devel, AlmaLinux:9: qt5-qtbase, AlmaLinux:9: qt5-qtbase-common, AlmaLinux:9: qt5-qtbase-devel, AlmaLinux:9: qt5-qtbase-examples, AlmaLinux:9: qt5-qtbase-gui, AlmaLinux:9: qt5-qtbase-mysql, AlmaLinux:9: qt5-qtbase-odbc, AlmaLinux:9: qt5-qtbase-postgresql and 4 more

Qt is a software toolkit for developing applications.

Security Fix(es):

* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285) * qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410) * qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369) * qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197) * qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-03689 bdu:2023-03689 2026-10-04T11:29:16.005290+00:00 bdu:2023-03689 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0218 certfr-2026-avi-0218 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq… 2026-10-04T11:29:16.005308+00:00 certfr-2026-avi-0218 https://cve.radiocsirt.org/vuln/euvd-2026-209590 EUVD-2026-209590 2026-10-04T11:29:16.005324+00:00 EUVD-2026-209590 https://cve.radiocsirt.org/vuln/fkie_cve-2023-34410 fkie_cve-2023-34410 2026-10-04T11:29:16.005335+00:00

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for TLS does not always consider whether the root of a chain is a configured CA certificate.

 https://cve.radiocsirt.org/vuln/ghsa-5qcq-v4vg-rv2h GHSA-5qcq-v4vg-rv2h 2026-10-04T11:29:16.005357+00:00

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for TLS does not always consider whether the root of a chain is a configured CA certificate.

 https://cve.radiocsirt.org/vuln/gsd-2023-34410 gsd-2023-34410 2026-10-04T11:29:16.005371+00:00 gsd-2023-34410 https://cve.radiocsirt.org/vuln/msrc_cve-2023-34410 msrc_CVE-2023-34410 — An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate valid… 2026-10-04T11:29:16.005381+00:00 msrc_CVE-2023-34410 https://cve.radiocsirt.org/vuln/oesa-2023-1807 OESA-2023-1807 — qt security update 2026-10-04T11:29:16.005398+00:00

Affected: openEuler:20.03-LTS-SP1: qt

Qt (pronounced as "cute", not "cu-tee") is a cross-platform framework that is usually used as a graphical toolkit, although it is also very helpful in creating CLI applications. It runs on the three major desktop OSes, as well as on mobile OSes, such as Symbian, Nokia Belle, Meego Harmattan, MeeGo or BB10, and on embedded devices. Ports for Android (Necessitas) and iOS are also in development Security Fix(es): An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for TLS does not always consider whether the root of a chain is a configured CA certificate.(CVE-2023-34410)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12980-1 openSUSE-SU-2024:12980-1 — libQt6Concurrent6-6.5.1-2.1 on GA media 2026-10-04T11:29:16.005424+00:00

libQt6Concurrent6-6.5.1-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rlsa-2023:6369 RLSA-2023:6369 — Moderate: qt5 security and bug fix update 2026-10-04T11:29:16.005440+00:00

Affected: Rocky Linux:9: adwaita-qt, Rocky Linux:9: python-pyqt5-sip, Rocky Linux:9: python-qt5, Rocky Linux:9: qgnomeplatform, Rocky Linux:9: qt5, Rocky Linux:9: qt5-doc, Rocky Linux:9: qt5-qtconnectivity, Rocky Linux:9: qt5-qtdeclarative, Rocky Linux:9: qt5-qtdoc, Rocky Linux:9: qt5-qtgraphicaleffects and 16 more

Qt is a software toolkit for developing applications.

Security Fix(es):

* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)

* qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)

* qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)

* qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)

* qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2023:2971-1 SUSE-SU-2023:2971-1 — Security update for libqt5-qtbase 2026-10-04T11:29:16.005498+00:00

Security update for libqt5-qtbase

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-34410 UBUNTU-CVE-2023-34410 2026-10-04T11:29:16.005517+00:00

Affected: Ubuntu:14.04:LTS: qt4-x11, Ubuntu:Pro:16.04:LTS: qtbase-opensource-src, Ubuntu:16.04:LTS: qt4-x11, Ubuntu:16.04:LTS: qtbase-opensource-src-gles, Ubuntu:Pro:18.04:LTS: qtbase-opensource-src, Ubuntu:18.04:LTS: qt4-x11, Ubuntu:Pro:20.04:LTS: qtbase-opensource-src, Ubuntu:20.04:LTS: qtbase-opensource-src-gles, Ubuntu:22.04:LTS: qt6-base, Ubuntu:22.04:LTS: qtbase-opensource-src-gles and 7 more

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for TLS does not always consider whether the root of a chain is a configured CA certificate.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1357 WID-SEC-W-2023-1357 — QT: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-04T11:29:16.005561+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in QT ausnutzen, um Sicherheitsvorkehrungen zu umgehen.