Most recent entries from all

ALSA-2024:2276 — Moderate: qt5-qtbase security update

Affected: AlmaLinux:9: qt5-qtbase, AlmaLinux:9: qt5-qtbase-common, AlmaLinux:9: qt5-qtbase-devel, AlmaLinux:9: qt5-qtbase-examples, AlmaLinux:9: qt5-qtbase-gui, AlmaLinux:9: qt5-qtbase-mysql, AlmaLinux:9: qt5-qtbase-odbc, AlmaLinux:9: qt5-qtbase-postgresql, AlmaLinux:9: qt5-qtbase-private-devel, AlmaLinux:9: qt5-qtbase-static

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.

Security Fix(es):

* qt: incorrect integer overflow check (CVE-2023-51714) * qtbase: potential buffer overflow when reading KTX images (CVE-2024-25580)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2024-02875

EUVD-2026-259430

fkie_cve-2024-25580

An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.

GHSA-2952-j2hp-678j

gsd-2024-25580

msrc_CVE-2024-25580 — An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17 6.x before 6.2.12 6.3.x through 6.5.x before 6…

msrc_CVE-2024-25580

OESA-2024-1538 — qt5-qtbase security update

Affected: openEuler:22.03-LTS-SP3: qt5-qtbase

This package provides base tools, such as string, xml, and network handling. Security Fix(es): Qt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtoms(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server.(CVE-2023-45935) An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.(CVE-2024-25580)

openSUSE-SU-2024:13775-1 — libQt6Concurrent6-6.6.2-2.1 on GA media

libQt6Concurrent6-6.6.2-2.1 on GA media

UBUNTU-CVE-2024-25580

Affected: Ubuntu:16.04:LTS: qtbase-opensource-src-gles, Ubuntu:Pro:20.04:LTS: qtbase-opensource-src, Ubuntu:20.04:LTS: qtbase-opensource-src-gles, Ubuntu:22.04:LTS: qt6-base, Ubuntu:22.04:LTS: qtbase-opensource-src-gles, Ubuntu:Pro:22.04:LTS: qtbase-opensource-src, Ubuntu:24.04:LTS: qt6-base, Ubuntu:24.04:LTS: qtbase-opensource-src-gles, Ubuntu:25.10: qt6-base, Ubuntu:25.10: qtbase-opensource-src-gles and 2 more

WID-SEC-W-2024-0404 — QT: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in QT ausnutzen, um einen Denial of Service Angriff durchzuführen.