MGASA-2025-0046

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2025-0046.html

Import Source

https://advisories.mageia.org/MGASA-2025-0046.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2025-0046

Related

Published

2025-02-09T00:19:43Z

Modified

2025-02-08T23:44:14Z

Summary

Updated qtbase5 & qtbase6 packages fix security vulnerabilities

Details

network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check. (CVE-2023-51714) A buffer overflow and application crash can occur via a crafted KTX image file. (CVE-2024-25580) Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed. (CVE-2024-39936)

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:9 / qtbase5

Package

Name: qtbase5
Purl: pkg:rpm/mageia/qtbase5?distro=mageia-9

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.15.7-6.1.mga9

Ecosystem specific

{
    "section": "core"
}

Mageia:9 / qtbase6

Package

Name: qtbase6
Purl: pkg:rpm/mageia/qtbase6?distro=mageia-9

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.4.1-5.1.mga9

Ecosystem specific

{
    "section": "core"
}