[Git][security-tracker-team/security-tracker][master] add more qt references

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
06927a4c by Moritz Muehlenhoff at 2023-05-22T16:16:34+02:00
add more qt references

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -159,7 +159,11 @@ CVE-2023-32763
 	- qt6-base <unfixed>
 	- qtbase-opensource-src <unfixed>
 	- qtbase-opensource-src-gles <unfixed>
-	TODO: check for more details on actual fixes needed for network/access/qhsts.cpp
+	NOTE: https://lists.qt-project.org/pipermail/announce/2023-May/000413.html
+	NOTE: https://download.qt.io/official_releases/qt/5.15/CVE-2023-32763-qtbase-5.15.diff
+	NOTE: https://download.qt.io/official_releases/qt/6.5/CVE-2023-32763-qtbase-6.5.diff
+	NOTE: https://codereview.qt-project.org/c/qt/qtbase/+/476490
+	NOTE: https://bugreports.qt.io/browse/QTBUG-113337
 CVE-2023-32762
 	- qt6-base <unfixed>
 	- qtbase-opensource-src <unfixed>
@@ -869,7 +873,9 @@ CVE-2023-32573 (In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.
 	- qtsvg-opensource-src <unfixed>
 	- qt4-x11 <removed>
 	NOTE: https://codereview.qt-project.org/c/qt/qtsvg/+/474093
-	TODO: check details
+	NOTE: https://lists.qt-project.org/pipermail/announce/2023-May/000411.html
+	NOTE: https://codereview.qt-project.org/c/qt/qtsvg/+/474404
+	NOTE: https://download.qt.io/official_releases/qt/5.15/CVE-2023-32573-qtsvg-5.15.diff
 CVE-2023-32570 (VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that ca ...)
 	[experimental] - dav1d 1.2.0-1
 	- dav1d <unfixed> (bug #1035950)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/06927a4cf507edf53d02c2bd50184e8e44b5deb9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/06927a4cf507edf53d02c2bd50184e8e44b5deb9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230522/b2735e24/attachment.htm>