[Git][security-tracker-team/security-tracker][master] Reserve DLA-4387-1 for qtbase-opensource-src

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2aa31218 by Sylvain Beucler at 2025-11-29T11:09:26+01:00
Reserve DLA-4387-1 for qtbase-opensource-src

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -156032,7 +156032,6 @@ CVE-2024-39936 (An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x befor
 	[bookworm] - qt6-base <no-dsa> (Minor issue)
 	- qtbase-opensource-src 5.15.13+dfsg-3 (bug #1076293)
 	[bookworm] - qtbase-opensource-src 5.15.8+dfsg-11+deb12u3
-	[bullseye] - qtbase-opensource-src <no-dsa> (Minor issue)
 	[experimental] - qtbase-opensource-src-gles 5.15.15+dfsg-1
 	- qtbase-opensource-src-gles <unfixed> (unimportant; bug #1077544)
 	NOTE: https://codereview.qt-project.org/c/qt/qtbase/+/571601


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[29 Nov 2025] DLA-4387-1 qtbase-opensource-src - security update
+	{CVE-2024-39936}
+	[bullseye] - qtbase-opensource-src 5.15.2+dfsg-9+deb11u2
 [28 Nov 2025] DLA-4386-1 sogo - security update
 	{CVE-2025-63498}
 	[bullseye] - sogo 5.0.1-4+deb11u2


=====================================
data/dla-needed.txt
=====================================
@@ -317,11 +317,6 @@ pytorch (dleidert)
   NOTE: 20250422: CVE-2025-32434 RCE need to be fixed. DoS may be postponed (rouca/FD)
   NOTE: 20251020: wip (dleidert)
 --
-qtbase-opensource-src (Sylvain Beucler)
-  NOTE: 20250520: Added by Front-Desk (Beuc)
-  NOTE: 20250520: Follow fixes from bookworm 12.11 (CVE-2024-39936)
-  NOTE: 20250520: We don't seem affected by the non-CVE crash fix #1081682 (Beuc/front-desk)
---
 rails (rouca)
   NOTE: 20250105: Added by Front-Desk (apo)
   NOTE: 20250305: Utkarsh uploaded the CVE fixes to unstable via rails/7.2.2.1. (utkarsh)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2aa3121875d706b6e4ac54f55198dec92e5d1048

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2aa3121875d706b6e4ac54f55198dec92e5d1048
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251129/cd89559e/attachment-0001.htm>