[Git][security-tracker-team/security-tracker][master] new qt issue (fixed in sid along with another one)

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
89cbc66d by Moritz Muehlenhoff at 2023-07-27T23:24:22+02:00
new qt issue (fixed in sid along with another one)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,15 @@
+CVE-2023-37369
+	- qt6-base <unfixed>
+	[bookworm] - qt6-base <no-dsa> (Minor issue)
+	- qtbase-opensource-src-gles <unfixed>
+	[bookworm] - qtbase-opensource-src-gles <no-dsa> (Minor issue)
+	[bullseye] - qtbase-opensource-src-gles <no-dsa> (Minor issue)
+	- qtbase-opensource-src 5.15.10+dfsg-3
+	[bookworm] - qtbase-opensource-src <no-dsa> (Minor issue)
+	[bullseye] - qtbase-opensource-src <no-dsa> (Minor issue)
+	- qt4-x11 <removed>
+	NOTE: https://www.qt.io/blog/security-advisory-qxmlstreamreader
+	NOTE: https://codereview.qt-project.org/c/qt/qtbase/+/455027
 CVE-2023-3982 (Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s ...)
 	TODO: check
 CVE-2023-3981 (Server-Side Request Forgery (SSRF) in GitHub repository omeka/omeka-s  ...)
@@ -1630,7 +1642,7 @@ CVE-2023-38197 (An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10,
 	- qtbase-opensource-src-gles <unfixed> (bug #1041106)
 	[bookworm] - qtbase-opensource-src-gles <no-dsa> (Minor issue)
 	[bullseye] - qtbase-opensource-src-gles <no-dsa> (Minor issue)
-	- qtbase-opensource-src <unfixed> (bug #1041105)
+	- qtbase-opensource-src 5.15.10+dfsg-3 (bug #1041105)
 	[bookworm] - qtbase-opensource-src <no-dsa> (Minor issue)
 	[bullseye] - qtbase-opensource-src <no-dsa> (Minor issue)
 	[buster] - qtbase-opensource-src <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89cbc66d82635e90db1ed24ae95a498309029ff9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/89cbc66d82635e90db1ed24ae95a498309029ff9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230727/3101c477/attachment-0001.htm>