[Git][security-tracker-team/security-tracker][master] Add CVE-2026-16762/QT

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
53df7ba3 by Salvatore Bonaccorso at 2026-10-24T12:35:11+02:00
Add CVE-2026-16762/QT

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -229,7 +229,12 @@ CVE-2026-25716 (Missing Authorization vulnerability in Hallo Welt! GmbH BlueSpic
 CVE-2026-19741 (Zephyr's OpenThread integration defined CONFIG_OPENTHREAD_JOINER_PSKD  ...)
 	NOT-FOR-US: Zephyr, different from src:zephyr
 CVE-2026-16762 (An attacker able to supply a crafted XML document to an application us ...)
-	TODO: check
+	- qt6-base 6.11.2+dfsg-5
+	- qtbase-opensource-src <unfixed>
+	- qtbase-opensource-src-gles <unfixed>
+	NOTE: https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-16762:
+	NOTE: Fixed by: https://github.com/qt/qtbase/commit/564db12e40089b946c2feaac2a029a0c56e6e588 (v6.11.2)
+	NOTE: Fixed by: https://github.com/qt/qtbase/commit/cd0f0803955a04b9d7e3a24d4e40f8405df2bba8 (v6.11.2)
 CVE-2026-115938 (Craft CMS allows any authenticated control panel user to submit an ele ...)
 	NOT-FOR-US: Craft CMS or plugin for Craft CMS
 CVE-2026-115937 (The Mollie webhook endpoint accepts two independent, attacker-controll ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53df7ba37daa2a8e014790ed7a728e134b3ee6a0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/53df7ba37daa2a8e014790ed7a728e134b3ee6a0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261024/8e673831/attachment.htm>