Alerts This Week
Warning Icon 1 1,146
Alerts This Week
Warning Icon 1 1,146

Fedora 39: FEDORA-2024-3936682805 Critical: PRNG Security Issue

fedora
Calendar Grey June 5, 2024
Dist Fedora Esm H88
To fix CVE-2024-36048 in Fedora 39, update the qt5-qtnetworkauth package by applying the latest security updates to address the critical data race issue
Fix CVE-2024-36048

Summary

Qt5 - NetworkAuth component

Update Information:

Fix CVE-2024-36048

Topics%20covered

Topics Covered

security advisory Fedora critical threat PRNG qt5-qtnetworkauth

Change Log

* Mon May 27 2024 Jan Grulich - 5.15.13-2 - QAbstractOAuth: fix data race and poor seeding in generateRandomString Resolves: CVE-2024-36048

References


[ 1 ] Bug #2282866 - CVE-2024-36048 qt5-qtnetworkauth: qtnetworkauth: badly seeded PRNG may result in guessable values [epel-8] https://bugzilla.redhat.com/show_bug.cgi?id=2282866 [ 2 ] Bug #2282867 - CVE-2024-36048 qt5-qtnetworkauth: qtnetworkauth: badly seeded PRNG may result in guessable values [fedora-39] https://bugzilla.redhat.com/show_bug.cgi?id=2282867 [ 3 ] Bug #2282869 - CVE-2024-36048 qt5-qtnetworkauth: qtnetworkauth: badly seeded PRNG may result in guessable values [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2282869

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-3936682805' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: qt5-qtnetworkauth
Product: Fedora 39
Version: 5.15.13
Release: 2.fc39
URL: http://www.qt.io
Summary: Qt5 - NetworkAuth component

Topics%20covered

Topics Covered

security advisory Fedora critical threat PRNG qt5-qtnetworkauth

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here