openSUSE 15 Security Update : qt6-networkauth (openSUSE-SU-2024:0138-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0138-1 advisory. - CVE-2024-36048: Fixed data race and poor seeding in generateRandomString boo1224782. Tenable has extracted the preceding description block directly fro...

OPENSUSE-SU-2024:0138-1 Security update for qt6-networkauth

This update for qt6-networkauth fixes the following issues: - CVE-2024-36048: Fixed data race and poor seeding in generateRandomString boo1224782...

Security update for qt6-networkauth (moderate)

openSUSE Security Update: Security update for qt6-networkauth Announcement ID: openSUSE-SU-2024:0138-1 Rating: moderate References: 1224782 Cross-References: CVE-2024-36048 Affected Products: openSUSE Backports SLE-15-SP5 An update that fixes one vulnerability is now available. Description: This...

Use After Free

qt6-qtwebengine is vulnerable to Use after Free. The vulnerability is due to heap corruption caused by a crafted HTML page, which allows an attacker to exploit the system...

FreeBSD : qt6-webengine -- Multiple vulnerabilities (c6f03ea6-12de-11ef-83d8-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c6f03ea6-12de-11ef-83d8-4ccc6adda413 advisory. - Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attack...

FreeBSD : qt6-base (core module) -- Invalid pointer in QStringConverter (e79cc4e2-12d7-11ef-83d8-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e79cc4e2-12d7-11ef-83d8-4ccc6adda413 advisory. - Andy Shaw reports: QStringConverter has an invalid pointer being passed as a callback which can allow...

Fedora 40 : libreoffice (2024-5f94556a31)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-5f94556a31 advisory. Patch for kf6/Qt6 scaling ---- Updated conditionals for kf subpackages ---- 24.2.1.2, include kf6. Tenable has extracted the preceding description block...

Fedora 40 : mingw-qt6-qt3d / mingw-qt6-qt5compat / mingw-qt6-qtactiveqt / etc (2024-7f2064f068)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-7f2064f068 advisory. Update to qt-6.6.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...

openSUSE Security Advisory (SUSE-SU-2024:1174-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: libQt6Concurrent6 / libQt6Core6 / libQt6DBus6 / libQt6Gui6 / etc (SUSE-SU-2024:1174-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1174-1 advisory. - CVE-2024-30161: Fixed QNetworkReply header data access via a dangling pointer bsc1221926. Tenable has...

SUSE-SU-2024:1174-1 Security update for qt6-base

This update for qt6-base fixes the following issues: - CVE-2024-30161: Fixed QNetworkReply header data access via a dangling pointer bsc1221926...

CVE-2024-30161

A flaw was found in the qt6 package where the WebAssembly wasm component may access the network reply header due to a dangling pointer. This issue may allow an attacker to gain access to restricted data, impacting data confidentiality and integrity...

openSUSE: Security Advisory for qt6 (openSUSE-SU-2023:0111-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for qt6 (SUSE-SU-2023:3225-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for qt6 (SUSE-SU-2023:3380-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

QtWebEngine: Multiple Vulnerabilities

Background QtWebEngine is a library for rendering dynamic web content in Qt5 and Qt6 C++ and QML applications. Description Multiple vulnerabilities have been discovered in QtWebEngine. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE...

FreeBSD : qt6-webengine -- Multiple vulnerabilities (bbcb1584-c068-11ee-bdd6-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the bbcb1584-c068-11ee-bdd6-4ccc6adda413 advisory. - Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacke...

FreeBSD : qt6-webengine -- Multiple vulnerabilities (a25b323a-bed9-11ee-bdd6-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a25b323a-bed9-11ee-bdd6-4ccc6adda413 advisory. - Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker...

qt6-webengine -- Multiple vulnerabilities

Qt qtwebengine-chromium repo reports: Backports for 3 security bugs in Chromium: 1505080 High CVE-2024-0807: Use after free in WebAudio 1504936 Critical CVE-2024-0808: Integer underflow in WebUI 1496250 Medium CVE-2024-0810: Insufficient policy enforcement in DevTools...

SUSE SLED15: libQt6Concurrent6 / libQt6Core6 / libQt6DBus6 / libQt6Gui6 / etc (SUSE-SU-2024:0063-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0063-1 advisory. - CVE-2023-51714: Fixed an incorrect integer overflow check bsc1218413. Tenable has extracted the precedi...