RHEL 8 : qt5-qtbase (RHSA-2024:4617)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4617 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security...

CBL Mariner 2.0 Security Update: boost / cloud-hypervisor-cvm / cmake / erlang / grpc / mariadb / nmap / qt5-qtbase / teckit (CVE-2018-25032)

The version of boost / cloud-hypervisor-cvm / cmake / erlang / grpc / mariadb / nmap / qt5-qtbase / teckit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2018-25032 advisory. - zlib before 1.2.12 allo...

CVE-2024-25580 affecting package qtbase for versions less than 6.6.2-1

CVE-2024-25580 affecting package qtbase for versions less than 6.6.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-51714 affecting package qtbase for versions less than 6.6.2-1

CVE-2023-51714 affecting package qtbase for versions less than 6.6.2-1. An upgraded version of the package is available that resolves this issue...

Fedora: Security Advisory for qt5-qtbase (FEDORA-2024-2e27372d4c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: qt5-qtbase-5.15.14-1.fc40

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

qt:qtbase_gui_painting_qcolorspace_fromiccprofile: Crash in QColorTransferTable::applyInverse

Detailed Report: https://oss-fuzz.com/testcase?key=5978944565215232 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguipaintingqcolorspacefromiccprofile Job Type: libfuzzerasani386qt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x70f0c20e Crash State:...

Oracle Linux 8 : qt5-qtbase (ELSA-2024-3056)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3056 advisory. - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25725 Tenable has extracted the preceding description block...

RHEL 8 : qt5-qtbase (RHSA-2024:3056)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3056 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt...

RHEL 7 : qtbase (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - qtbase: infinite loops in QXmlStreamReader CVE-2023-38197 - In Qt before 5.15.15, 6.x before 6.2.9, and...

Oracle Linux 9 : qt5-qtbase (ELSA-2024-2276)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2276 advisory. - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 Tenable has extracted the preceding description block...

qt5-qtbase security update

5.15.9-9 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 5.15.9-8 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239...

Debian: Security Advisory (DLA-3805-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-3805-1 qtbase-opensource-src - security update

Bulletin has no description...

[SECURITY] [DLA 3805-1] qtbase-opensource-src security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3805-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz May 01, 2024 https://wiki.debian.org/LTS -...

RHEL 9 : qt5-qtbase (RHSA-2024:2276)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2276 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt...

Important: qt5-qtbase

Issue Overview: Potential buffer overflow issue in QXmlStreamReader. When given specifically crafted data then QXmlStreamReader can end up causing a buffer overflow and subsequently a crash. CVE-2023-37369 Affected Packages: qt5-qtbase Note: This advisory is applicable to Amazon Linux 2 AL2 Core...

Amazon Linux 2 : qt5-qtbase (ALAS-2024-2533)

The version of qt5-qtbase installed on the remote host is prior to 5.9.2-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2533 advisory. Potential buffer overflow issue in QXmlStreamReader.When given specifically crafted data then QXmlStreamReader can end up causin...

Fedora 40 : mingw-qt5-qt3d / mingw-qt5-qtactiveqt / mingw-qt5-qtbase / etc (2024-58c67dbb21)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-58c67dbb21 advisory. Update to qt-5.15.12. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

AZL-38737 CVE-2024-25580 affecting package qtbase for versions less than 6.6.2-1

An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file...