[Git][security-tracker-team/security-tracker][master] Add CVE-2023-32573/qt

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a79dc3b8 by Salvatore Bonaccorso at 2023-05-18T07:04:24+02:00
Add CVE-2023-32573/qt

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -631,7 +631,11 @@ CVE-2023-XXXX [several critical memory corruption vulnerabilities]
 	- osslsigncode 2.3.0-1 (bug #1035875)
 	NOTE: https://github.com/mtrojnar/osslsigncode/releases/tag/2.3
 CVE-2023-32573 (In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x thro ...)
-	TODO: check
+	- qt6-svg <unfixed>
+	- qtsvg-opensource-src <unfixed>
+	- qt4-x11 <removed>
+	NOTE: https://codereview.qt-project.org/c/qt/qtsvg/+/474093
+	TODO: check details
 CVE-2023-32570 (VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that ca ...)
 	[experimental] - dav1d 1.2.0-1
 	- dav1d <unfixed> (bug #1035950)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a79dc3b8dc3311dd1f67b3b64e64ec732b86112a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a79dc3b8dc3311dd1f67b3b64e64ec732b86112a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230518/3260328b/attachment.htm>