Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits: 89cbc66d by Moritz Muehlenhoff at 2023-07-27T23:24:22+02:00 new qt issue (fixed in sid along with another one) - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,15 @@ +CVE-2023-37369 + - qt6-base <unfixed> + [bookworm] - qt6-base <no-dsa> (Minor issue) + - qtbase-opensource-src-gles <unfixed> + [bookworm] - qtbase-opensource-src-gles <no-dsa> (Minor issue) + [bullseye] - qtbase-opensource-src-gles <no-dsa> (Minor issue) + - qtbase-opensource-src 5.15.10+dfsg-3 + [bookworm] - qtbase-opensource-src <no-dsa> (Minor issue) + [bullseye] - qtbase-opensource-src <no-dsa> (Minor issue) + - qt4-x11 <removed> + NOTE: https://www.qt.io/blog/security-advisory-qxmlstreamreader + NOTE: https://codereview.qt-project.org/c/qt/qtbase/+/455027 CVE-2023-3982 (Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s ...) TODO: check CVE-2023-3981 (Server-Side Request Forgery (SSRF) in GitHub repository omeka/omeka-s ...) @@ -1630,7 +1642,7 @@ CVE-2023-38197 (An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, - qtbase-opensource-src-gles <unfixed> (bug #1041106) [bookworm] - qtbase-opensource-src-gles <no-dsa> (Minor issue) [bullseye] - qtbase-opensource-src-gles <no-dsa> (Minor issue) - - qtbase-opensource-src <unfixed> (bug #1041105) + - qtbase-opensource-src 5.15.10+dfsg-3 (bug #1041105) [bookworm] - qtbase-opensource-src <no-dsa> (Minor issue) [bullseye] - qtbase-opensource-src <no-dsa> (Minor issue) [buster] - qtbase-opensource-src <no-dsa> (Minor issue) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89cbc66d82635e90db1ed24ae95a498309029ff9 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89cbc66d82635e90db1ed24ae95a498309029ff9 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
