[Git][security-tracker-team/security-tracker][master] new qt issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8de4aa7a by Moritz Muehlenhoff at 2023-02-14T15:29:51+01:00
new qt issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3105,8 +3105,16 @@ CVE-2022-48287 (The HwContacts module has a logic bypass vulnerability. Successf
 	NOT-FOR-US: Huawei
 CVE-2022-48286 (The multi-screen collaboration module has a privilege escalation vulne ...)
 	NOT-FOR-US: Huawei
-CVE-2023-24607
+CVE-2023-24607 [When using the Qt SQL ODBC driver plugin, then it is possible to trigger a DOS with a specifically crafted string]
 	RESERVED
+	- qtbase-opensource-src <unfixed>
+	[bullseye] - qtbase-opensource-src <no-dsa> (Minor issue)
+	- qt6-base <unfixed>
+	- qtbase-opensource-src-gles <unfixed>
+	[bullseye] - qtbase-opensource-src-gles <no-dsa> (Minor issue)
+	NOTE: https://www.qt.io/blog/security-advisory-qt-sql-odbc-driver-plugin
+	NOTE: https://github.com/qt/qtbase/commit/aaf1381eab6292aa0444a5eadcc24165b6e1c02d (6.4)
+	NOTE: https://download.qt.io/official_releases/qt/5.15/CVE-2023-24607-qtbase-5.15.diff
 CVE-2023-24606
 	RESERVED
 CVE-2023-24605



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8de4aa7a443e846dddbe9ea3485b4db0d3e52466

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8de4aa7a443e846dddbe9ea3485b4db0d3e52466
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230214/d0de7cd2/attachment.htm>