https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T23:42:01.456177+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:4617 ALSA-2024:4617 — Important: qt5-qtbase security update 2026-10-12T23:42:01.649917+00:00

Affected: AlmaLinux:8: qt5-qtbase, AlmaLinux:8: qt5-qtbase-common, AlmaLinux:8: qt5-qtbase-devel, AlmaLinux:8: qt5-qtbase-examples, AlmaLinux:8: qt5-qtbase-gui, AlmaLinux:8: qt5-qtbase-mysql, AlmaLinux:8: qt5-qtbase-odbc, AlmaLinux:8: qt5-qtbase-postgresql, AlmaLinux:8: qt5-qtbase-private-devel, AlmaLinux:8: qt5-qtbase-static

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.

Security Fix(es):

* qtbase: qtbase: Delay any communication until encrypted() can be responded to (CVE-2024-39936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2025-04695 bdu:2025-04695 2026-10-12T23:42:01.650026+00:00 bdu:2025-04695 https://cve.radiocsirt.org/vuln/euvd-2026-262056 EUVD-2026-262056 2026-10-12T23:42:01.650053+00:00 EUVD-2026-262056 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39936 fkie_cve-2024-39936 2026-10-12T23:42:01.650072+00:00

An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..

 https://cve.radiocsirt.org/vuln/ghsa-8gfm-8wff-rjvj GHSA-8gfm-8wff-rjvj 2026-10-12T23:42:01.650106+00:00

An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-39936 msrc_CVE-2024-39936 — An issue was discovered in HTTP2 in Qt before 5.15.18 6.x before 6.2.13 6.3.x through 6.5.x before 6.5.7 and 6.6.x thro… 2026-10-12T23:42:01.650132+00:00 msrc_CVE-2024-39936 https://cve.radiocsirt.org/vuln/oesa-2024-2572 OESA-2024-2572 — qt6-qtbase security update 2026-10-12T23:42:01.650163+00:00

Affected: openEuler:24.03-LTS: qt6-qtbase

Qt is a software toolkit for developing applications. Security Fix(es): (CVE-2023-45935) (CVE-2024-25580) (CVE-2024-33861) (CVE-2024-39936)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14114-1 openSUSE-SU-2024:14114-1 — libQt6Concurrent6-6.7.2-2.1 on GA media 2026-10-12T23:42:01.650194+00:00

libQt6Concurrent6-6.7.2-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:4621 RHSA-2024:4621 — Red Hat Security Advisory: qt5-qtbase security update 2026-10-12T23:42:01.650220+00:00

qtbase: qtbase: Delay any communication until encrypted() can be responded to

 https://cve.radiocsirt.org/vuln/suse-su-2024:2873-1 SUSE-SU-2024:2873-1 — Security update for qt6-base 2026-10-12T23:42:01.650247+00:00

Security update for qt6-base

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-39936 UBUNTU-CVE-2024-39936 2026-10-12T23:42:01.650277+00:00

Affected: Ubuntu:Pro:20.04:LTS: qtbase-opensource-src, Ubuntu:22.04:LTS: qtbase-opensource-src, Ubuntu:Pro:22.04:LTS: qtbase-opensource-src, Ubuntu:24.04:LTS: qtbase-opensource-src, Ubuntu:Pro:24.04:LTS: qtbase-opensource-src

An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1526 WID-SEC-W-2024-1526 — QT: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-12T23:42:01.650332+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in QT ausnutzen, um Informationen offenzulegen.