ALT Linux Team

Package qt6-quicktimeline update in sisyphus on 2024-02-22

ALT-PU-2024-2816-2

Package qt6-quicktimeline updated to version 6.6.2-alt1 for branch sisyphus in task 341139.

Closed vulnerabilities

Published: 2024-01-06
Modified: 2024-11-11

BDU:2024-00093

Уязвимость реализации протокола HTTP2 (network/access/http2/hpacktable.cpp) кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызывать отказ в обслуживании

Severity: MEDIUM (6.2)Vector: AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity: MEDIUM (4.9)Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
References:
Published: 2024-04-15
Modified: 2026-02-16

BDU:2024-02875

Уязвимость компонента gui/util/qktxhandler.cpp модуля обработки изображений KTX кроссплатформенного фреймворка для разработки программного обеспечения Qt, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (6.2)Vector: AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity: MEDIUM (4.9)Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
References:
Published: 2023-12-24
Modified: 2025-03-20

CVE-2023-51714

An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check.

Severity: CRITICAL (9.8)Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2024-03-27
Modified: 2025-11-04

CVE-2024-25580

An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.

Severity: MEDIUM (6.2)Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: 2.1.2
Back to top