Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2024-2873


Security update for qt6-base


Type: security
Severity: important
Issued: 2024-08-12
Description:
This update for qt6-base fixes the following issues:

- CVE-2024-33861: Fixed an invalid pointer being passed as a callback which coud lead to modification of the stack (bsc#1223917)
- CVE-2024-39936: Fixed information leakage due to process HTTP2 communication before encrypted() can be responded to (bsc#1227426)
- CVE-2023-45935: Fixed NULL pointer dereference in QXcbConnection::initializeAllAtoms() due to anomalous behavior from the X server (bsc#1222120)


              

Packages


  • qt6-base-6.4.2-150500.3.20.2