Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
53ecae37 by Moritz Muehlenhoff at 2026-05-08T12:35:09+02:00
new qt6-declarative issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5248,7 +5248,9 @@ CVE-2025-51847
CVE-2025-51846 (CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A
remote, un ...)
NOT-FOR-US: CryptPad
CVE-2025-14576 (Insufficient validation of node IDs in Qt SVG module allows
arbitrary ...)
- TODO: check
+ - qt6-declarative 6.10.2+dfsg-4
+ NOTE: https://codereview.qt-project.org/c/qt/qtdeclarative/+/697273
+ NOTE:
https://github.com/qt/qtdeclarative/commit/1f35339b03fcb8787028e1301012a559328815fb
(v6.10.2)
CVE-2025-14543 (Improper Restriction of XML External Entity Reference
vulnerability in ...)
NOT-FOR-US: RTI Connext
CVE-2025-13890
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53ecae37fed48b6f031c1c9fee879b6670827305
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53ecae37fed48b6f031c1c9fee879b6670827305
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
