[Git][security-tracker-team/security-tracker][master] new qt issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5bccad1e by Moritz Muehlenhoff at 2026-09-14T09:44:34+02:00
new qt issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8313,7 +8313,12 @@ CVE-2026-12230 (The LearnPress \u2013 WordPress LMS Plugin for Create and Sell O
 CVE-2026-11891 (Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver,  ...)
 	NOT-FOR-US: Arm
 CVE-2026-11573 (Uncontrolled recursion (CWE-674) in the QDomDocument/QDomNode serializ ...)
-	TODO: check
+	- qtbase-opensource-src <unfixed> (unimportant)
+	- qt6-base 6.8.2+dfsg-5 (unimportant)
+	NOTE: https://codereview.qt-project.org/c/qt/qtbase/+/606899
+	NOTE: https://github.com/qt/qtbase/commit/387633a6069a5e0e9b976971691b1b82725b6132 (v6.9.0-beta1)
+	NOTE: https://github.com/qt/qtbase/commit/948599e7b71f59fd9c9c0f7f3d1987ec93a23490 (v6.8.2)
+	NOTE: Only exploitable on Windows
 CVE-2026-0860 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
 	NOT-FOR-US: ARM
 CVE-2026-0084 (In multiple functions of HostEmulationManager.java, there is a possibl ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5bccad1e2e564d5867ffff82a044a7a669e2a0f4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5bccad1e2e564d5867ffff82a044a7a669e2a0f4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260914/7670f52f/attachment.htm>