Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 618
Alerts This Week
Warning Icon 1 618

Fedora 39 FEDORA-2024-d9be3edddb Moderate: qt5-qtbase Buffer Overflow

fedora
Calendar Grey February 18, 2024
Dist Fedora Esm H88
A vulnerability in KTX image processing in the qt5-qtbase package on Fedora 39 could lead to buffer overflow risks, so users must update swiftly
Fix CVE-2024-25580: potential buffer overflow when reading KTX images.

Summary

Qt is a software toolkit for developing applications.

This package contains base tools, like string, xml, and network

handling.

Update Information:

Fix CVE-2024-25580: potential buffer overflow when reading KTX images.

Topics%20covered

Topics Covered

security advisory moderate buffer overflow software update Fedora qt5-qtbase KTX images

Change Log

* Thu Feb 15 2024 Jan Grulich - 5.15.12-5 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images * Wed Jan 31 2024 Pete Walter - 5.15.12-4 - Rebuild for ICU 74 * Fri Jan 26 2024 Fedora Release Engineering - 5.15.12-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering - 5.15.12-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

References


[ 1 ] Bug #2264424 - TRIAGE CVE-2024-25580 qt5-qtbase: qtbase: potential buffer overflow when reading KTX images [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2264424

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-d9be3edddb' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: qt5-qtbase
Product: Fedora 39
Version: 5.15.12
Release: 5.fc39
URL: https://contribute.qt-project.org/
Summary: Qt5 - QtBase components

Topics%20covered

Topics Covered

security advisory moderate buffer overflow software update Fedora qt5-qtbase KTX images

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.