[Git][security-tracker-team/security-tracker][master] new QT issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f268a50b by Moritz Muehlenhoff at 2026-10-26T09:18:03+01:00
new QT issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9069,7 +9069,12 @@ CVE-2026-101296 (A missing critical step in authentication vulnerability in Apac
 	NOTE: https://github.com/apache/tomcat/commit/8fafc6f263311b7a0b7ce67477822175d1adf7ce (10.1.61)
 	NOTE: https://github.com/apache/tomcat/commit/42827afa4d073ac3d9f8b3cc81b857aa455bf1e6 (9.0.123)
 CVE-2026-101201 (A malformed header in the binary file fed to QBinaryJson::fromBinaryDa ...)
-	TODO: check
+	- qt6-5compat <unfixed>
+	- qtbase-opensource-src <unfixed>
+	- qtbase-opensource-src-gles <unfixed>
+	NOTE: https://wiki.qt.io/List_of_known_vulnerabilities_in_Qt_products#CVE-2026-101201
+	NOTE: https://github.com/qt/qt5compat/commit/721ed576391211ca53ecdaaecf6dd41df7bc962e
+	NOTE: https://github.com/qt/qt5compat/commit/c0a495894d83a3c48055bd1e544f93147fc6ade1
 CVE-2026-100134 (Acrobat for Edge is affected by an out-of-bounds write vulnerability t ...)
 	NOT-FOR-US: Adobe
 CVE-2026-100132 (Acrobat for Edge is affected by an out-of-bounds read vulnerability th ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f268a50bd3a365ac8be900f32b06c4be84be7f85

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f268a50bd3a365ac8be900f32b06c4be84be7f85
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261026/c6e99bd0/attachment.htm>