Most recent entries from all

ALSA-2022:7482 — Moderate: qt5 security, bug fix, and enhancement update

Affected: AlmaLinux:8: qt5-devel, AlmaLinux:8: qt5-rpm-macros, AlmaLinux:8: qt5-srpm-macros

The Qt5 libraries packages provide Qt 5, version 5 of the Qt cross-platform application framework.

The following packages have been upgraded to a later upstream version: qt5 (5.15.3). (BZ#2061377)

Security Fix(es):

* qt: QProcess could execute a binary from the current working directory when not found in the PATH (CVE-2022-25255)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2022-00893

EUVD-2026-14472

fkie_cve-2022-25255

In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH.

GHSA-fw78-qp2x-5gc7

In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH.

gsd-2022-25255

msrc_CVE-2022-25255 — In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX QProcess could execute a binary from th…

msrc_CVE-2022-25255

OESA-2022-1787 — qt5-qtbase security update

Affected: openEuler:20.03-LTS-SP1: qt5-qtbase, openEuler:20.03-LTS-SP3: qt5-qtbase

Qt is a software toolkit for developing applications. Security Fix(es): In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH.(CVE-2022-25255)

openSUSE-SU-2022:0841-1 — Security update for libqt5-qtbase

Security update for libqt5-qtbase

SUSE-SU-2022:0841-1 — Security update for libqt5-qtbase

Security update for libqt5-qtbase

UBUNTU-CVE-2022-25255

Affected: Ubuntu:Pro:20.04:LTS: qtbase-opensource-src, Ubuntu:22.04:LTS: qt6-base, Ubuntu:24.04:LTS: qt6-base, Ubuntu:25.10: qt6-base, Ubuntu:26.04:LTS: qt6-base

In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH.

WID-SEC-W-2022-1991 — QT: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein Angreifer kann eine Schwachstelle in QT ausnutzen, um Sicherheitsvorkehrungen zu umgehen.