Most recent entries from all

ALSA-2023:6369 — Moderate: qt5 security and bug fix update

Affected: AlmaLinux:9: qt5, AlmaLinux:9: qt5-devel, AlmaLinux:9: qt5-qtbase, AlmaLinux:9: qt5-qtbase-common, AlmaLinux:9: qt5-qtbase-devel, AlmaLinux:9: qt5-qtbase-examples, AlmaLinux:9: qt5-qtbase-gui, AlmaLinux:9: qt5-qtbase-mysql, AlmaLinux:9: qt5-qtbase-odbc, AlmaLinux:9: qt5-qtbase-postgresql and 4 more

Qt is a software toolkit for developing applications.

Security Fix(es):

* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285) * qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410) * qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369) * qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197) * qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-03689

certfr-2026-avi-0218 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Certaines d'entre elles permettent à un attaq…

certfr-2026-avi-0218

EUVD-2026-209590

fkie_cve-2023-34410

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for TLS does not always consider whether the root of a chain is a configured CA certificate.

GHSA-5qcq-v4vg-rv2h

gsd-2023-34410

msrc_CVE-2023-34410 — An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate valid…

msrc_CVE-2023-34410

OESA-2023-1807 — qt security update

Affected: openEuler:20.03-LTS-SP1: qt

Qt (pronounced as "cute", not "cu-tee") is a cross-platform framework that is usually used as a graphical toolkit, although it is also very helpful in creating CLI applications. It runs on the three major desktop OSes, as well as on mobile OSes, such as Symbian, Nokia Belle, Meego Harmattan, MeeGo or BB10, and on embedded devices. Ports for Android (Necessitas) and iOS are also in development Security Fix(es): An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for TLS does not always consider whether the root of a chain is a configured CA certificate.(CVE-2023-34410)

openSUSE-SU-2024:12980-1 — libQt6Concurrent6-6.5.1-2.1 on GA media

libQt6Concurrent6-6.5.1-2.1 on GA media

RLSA-2023:6369 — Moderate: qt5 security and bug fix update

Affected: Rocky Linux:9: adwaita-qt, Rocky Linux:9: python-pyqt5-sip, Rocky Linux:9: python-qt5, Rocky Linux:9: qgnomeplatform, Rocky Linux:9: qt5, Rocky Linux:9: qt5-doc, Rocky Linux:9: qt5-qtconnectivity, Rocky Linux:9: qt5-qtdeclarative, Rocky Linux:9: qt5-qtdoc, Rocky Linux:9: qt5-qtgraphicaleffects and 16 more

Qt is a software toolkit for developing applications.

Security Fix(es):

* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)

* qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)

* qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)

* qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)

* qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.

SUSE-SU-2023:2971-1 — Security update for libqt5-qtbase

Security update for libqt5-qtbase

UBUNTU-CVE-2023-34410

Affected: Ubuntu:14.04:LTS: qt4-x11, Ubuntu:Pro:16.04:LTS: qtbase-opensource-src, Ubuntu:16.04:LTS: qt4-x11, Ubuntu:16.04:LTS: qtbase-opensource-src-gles, Ubuntu:Pro:18.04:LTS: qtbase-opensource-src, Ubuntu:18.04:LTS: qt4-x11, Ubuntu:Pro:20.04:LTS: qtbase-opensource-src, Ubuntu:20.04:LTS: qtbase-opensource-src-gles, Ubuntu:22.04:LTS: qt6-base, Ubuntu:22.04:LTS: qtbase-opensource-src-gles and 7 more

WID-SEC-W-2023-1357 — QT: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in QT ausnutzen, um Sicherheitsvorkehrungen zu umgehen.