Oracle Linux 8 : qt5 (ELSA-2020-1665)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1665 advisory. python-qt5 5.13.1-1 - 5.13.1 Resolves: bz1775603 qgnomeplatform 0.4-3 - Rebuild qt5 Resolves: bz1774418 qt5 5.12.5-3 - Re-add srpm macros, just leave...

Medium: qt5-qtsvg

Issue Overview: Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a denial of service DoS. CVE-2021-28025 A flaw was found in Qt. An out-of-bounds read vulnerability was found in QRadialFetchSimd in...

Medium: qt5-qtbase

Issue Overview: QT-based clients may mismatch HSTS headers Strict-Transport-Security, which would prevent the client from switching to a secure HTTPS connection as requested by a server. CVE-2023-32762 Affected Packages: qt5-qtbase Note: This advisory is applicable to Amazon Linux 2 AL2 Core...

[SECURITY] Fedora 38 Update: mingw-qt5-qtbase-5.15.10-4.fc38

This package contains the Qt software toolkit for developing cross-platform applications. This is the Windows version of Qt, for use in conjunction with the Fedora Windows cross-compiler...

Fedora 38 : mingw-qt5-qtbase (2023-0e68827d36)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-0e68827d36 advisory. Backport fix for CVE-2023-37369. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora: Security Advisory for mingw-qt5-qtbase (FEDORA-2023-fd45b50121)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for mingw-qt5-qtbase (FEDORA-2023-0e68827d36)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 37 : mingw-qt5-qtbase (2023-fd45b50121)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-fd45b50121 advisory. Backport fix for CVE-2023-37369. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CBL Mariner 2.0 Security Update: qt5-qtbase (CVE-2023-37369)

The version of qt5-qtbase installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-37369 advisory. - In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an applicatio...

Fedora: Security Advisory for qt5-qtbase (FEDORA-2023-04d519d0b3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : qt5-qtbase (2023-04d519d0b3)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-04d519d0b3 advisory. Security fix for CVE-2023-37369 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

CVE-2023-38197 affecting package qt5-qtbase for versions less than 5.12.11-9

CVE-2023-38197 affecting package qt5-qtbase for versions less than 5.12.11-9. A patched version of the package is available...

CVE-2023-33285 affecting package qt5-qtbase for versions less than 5.12.11-9

CVE-2023-33285 affecting package qt5-qtbase for versions less than 5.12.11-9. A patched version of the package is available...

Fedora: Security Advisory for mingw-qt5-qtbase (FEDORA-2023-5ead27b6d2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-3505-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 38 : mingw-qt5-qtbase (2023-5ead27b6d2)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-5ead27b6d2 advisory. Backport fix for CVE-2023-38197. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Debian dla-3505 : gstreamer1.0-gtk3 - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3505 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3505-1 [email protected] https://www.debian.org/lts/security/...

Amazon Linux 2 : qt5-qtbase (ALAS-2023-2159)

The version of qt5-qtbase installed on the remote host is prior to 5.9.2-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2159 advisory. In QT, there is an integer overflow in qfixedp.h when rendering SVG image on the minimal plugin. CVE-2023-32763 Tenable has...

Medium: qt5-qtbase

Issue Overview: In QT, there is an integer overflow in qfixedp.h when rendering SVG image on the minimal plugin. CVE-2023-32763 Affected Packages: qt5-qtbase Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2...

Use-After-Free

qt5-qtwebengine is vulnerable to Use-After-Free. A malicious attacker could convince a user to install a malicious extension leading to heap corruption via a crafted HTML page...