Fedora: Security Advisory for mingw-qt6-qtbase (FEDORA-2023-364ae10761)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: mingw-qt6-qtbase-6.5.1-2.fc37

This package contains the Qt software toolkit for developing cross-platform applications. This is the 32-bit Windows version of Qt, for use in conjunction with the Fedora Windows cross-compiler...

[SECURITY] Fedora 38 Update: mingw-qt6-qtbase-6.5.1-2.fc38

This package contains the Qt software toolkit for developing cross-platform applications. This is the 32-bit Windows version of Qt, for use in conjunction with the Fedora Windows cross-compiler...

Fedora 38 : mingw-qt5-qtbase (2023-5ead27b6d2)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-5ead27b6d2 advisory. Backport fix for CVE-2023-38197. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

SUSE SLES12: libQt5Bootstrap-devel-static / libQt5Concurrent-devel / etc (SUSE-SU-2023:2971-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2971-1 advisory. - CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS bsc1209616. - CVE-2023-33285: Fixed buffer overflow in QDnsLookup bsc1211642....

SUSE SLED15: libQt5Bootstrap-devel-static / libQt5Bootstrap-devel-static-32bit / etc (SUSE-SU-2023:2982-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2982-1 advisory. - CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS bsc1209616. - CVE-2023-32762: Fixed Qt...

SUSE: Security Advisory (SUSE-SU-2023:2971-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 37 : mingw-qt6-qtbase (2023-ff372f9829)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-ff372f9829 advisory. Backport fix for CVE-2023-38197. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 38 : mingw-qt6-qtbase (2023-364ae10761)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-364ae10761 advisory. Backport fix for CVE-2023-38197. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

SUSE-SU-2023:2982-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS bsc1209616. - CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security HSTS header bsc1211797. - CVE-2023-32763: Fixed buffer overflow when rendering an SVG fil...

Amazon Linux 2 : qt5-qtbase (ALAS-2023-2159)

The version of qt5-qtbase installed on the remote host is prior to 5.9.2-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2159 advisory. In QT, there is an integer overflow in qfixedp.h when rendering SVG image on the minimal plugin. CVE-2023-32763 Tenable has...

Medium: qt5-qtbase

Issue Overview: In QT, there is an integer overflow in qfixedp.h when rendering SVG image on the minimal plugin. CVE-2023-32763 Affected Packages: qt5-qtbase Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2...

CVE-2023-38197

A vulnerability was found in Qtbase, where it is vulnerable to a denial of service caused by an infinite loop flaw in the QXmlStreamReader function. This flaw occurs because the QXmlStreamReader function accepts multiple DOCTYPE elements containing DTD fragments in the XML prolog and the XML body...

SUSE: Security Advisory (SUSE-SU-2023:2860-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:2860-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2023-32763: Fixed overflow in QTextLayout bsc1211798...

SUSE-SU-2023:2824-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2023-32763: Fixed an overflow in QTextLayout bsc1211798...

SUSE SLES12: libQt5Bootstrap-devel-static / libQt5Concurrent-devel / etc (SUSE-SU-2023:2816-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2816-1 advisory. - CVE-2020-24741: Fixed a bug that allow QLibrary to load libraries relative to CWD which could result in arbitrary code execution...

SUSE: Security Advisory (SUSE-SU-2023:2816-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:2816-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2020-24741: Fixed a bug that allow QLibrary to load libraries relative to CWD which could result in arbitrary code execution bsc1189408. - CVE-2023-32763: Fixed buffer overflow in QTextLayout bsc1211798...

Amazon Linux 2 : qt5-qtbase (ALAS-2023-2091)

The version of qt5-qtbase installed on the remote host is prior to 5.9.2-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2091 advisory. An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for...