Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

Fedora 40 High Advisory FEDORA-2024-2e27372d4c: Qt5 Buffer Issue

fedora
Calendar Grey June 5, 2024
Scroller Fedora
The Qt 5.15.14 bug fix update has been deployed for Fedora 40, remedying the security vulnerability labeled CVE-2024-36049.
Qt 5.15.14 bugfix update

Summary

Qt5 meta package.

Update Information:

Qt 5.15.14 bugfix update. Fix CVE-2024-36048

Topics%20covered

Topics Covered

security advisory high severity Fedora buffer issue qt5

Change Log

* Wed May 29 2024 Jan Grulich - 5.15.14-1 - 5.15.14 * Mon May 6 2024 Liu Yang - 5.15.13-2 - Add riscv64 to macro i386 i486 i586 i686 pentium3 pentium4 athlon geode x86_64 armv3l armv4b armv4l armv4tl armv5tl armv5tel armv5tejl armv6l armv6hl armv7l armv7hl armv7hnl armv8l armv8hl armv8hnl armv8hcnl aarch64 mips mipsel mips64el.

References


[ 1 ] Bug #2282866 - CVE-2024-36048 qt5-qtnetworkauth: qtnetworkauth: badly seeded PRNG may result in guessable values [epel-8] https://bugzilla.redhat.com/show_bug.cgi?id=2282866 [ 2 ] Bug #2282867 - CVE-2024-36048 qt5-qtnetworkauth: qtnetworkauth: badly seeded PRNG may result in guessable values [fedora-39] https://bugzilla.redhat.com/show_bug.cgi?id=2282867 [ 3 ] Bug #2282869 - CVE-2024-36048 qt5-qtnetworkauth: qtnetworkauth: badly seeded PRNG may result in guessable values [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2282869

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-2e27372d4c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: qt5
Product: Fedora 40
Version: 5.15.14
Release: 1.fc40
URL: https://fedoraproject.org/
Summary: Qt5 meta package

Topics%20covered

Topics Covered

security advisory high severity Fedora buffer issue qt5

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.