Bug 31545 - qbase5, qtbase6 new security issue CVE-2023-24607
Summary: qbase5, qtbase6 new security issue CVE-2023-24607
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: KDE maintainers
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on: 29359
Blocks: 29977
  Show dependency tree / graph
 
Reported: 2023-02-13 18:21 CET by David Walser
Modified: 2023-02-20 22:36 CET (History)
1 user (show)

See Also:
Source RPM: qtbase5-5.15.7-3.mga9.src.rpm, qtbase6-6.4.1-4.mga9.src.rpm
CVE:
Status comment: Patches available from Fedora

Attachments
Add an attachment (proposed patch, testcase, etc.)

David Walser 2023-02-13 18:22:16 CET

Blocks: (none) => 29977
Whiteboard: (none) => MGA8TOO
Status comment: (none) => Patches available from Fedora

Comment 1 David GEIGER 2023-02-13 19:22:50 CET 
Done for Cauldron!

CC: (none) => geiger.david68210

Comment 2 David Walser 2023-02-13 21:28:44 CET 
qtbase5-5.15.7-4.mga9 and qtbase6-6.4.1-5.mga9.

Whiteboard: MGA8TOO => (none)
Version: Cauldron => 8

Comment 3 David Walser 2023-02-17 15:28:20 CET 
Can we please address these security issues while we're pushing a qtbase5 update already?

Depends on: (none) => 29359

Comment 4 David GEIGER 2023-02-17 18:30:35 CET 
I just added the fix for CVE-2022-25255!
Comment 5 David Walser 2023-02-20 22:36:40 CET 
Fixed for Mageia 8 in:
https://advisories.mageia.org/MGASA-2023-0051.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED
Note You need to log in before you can comment on or make changes to this bug.