Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 40: FEDORA-2024-3f6ac82b9a Critical GStreamer Buffer Overflow Risk

fedora
Calendar Grey June 5, 2024
Dist Fedora Esm H88
Fedora has released a vital advisory concerning qt5-qtimageformats, tackling the CVE-2024-36048 vulnerability. Users are urged to update their packages for improved security
Qt 5.15.14 bugfix update

Summary

The core Qt Gui library by default supports reading and writing image

files of the most common file formats: PNG, JPEG, BMP, GIF and a few more,

ref. Reading and Writing Image Files. The Qt Image Formats add-on module

provides optional support for other image file formats, including:

MNG, TGA, TIFF, WBMP.

Update Information:

Qt 5.15.14 bugfix update. Fix CVE-2024-36048

Topics%20covered

Topics Covered

security advisory critical Fedora bugfix qtimageformats PRNG issue CVE-2024-36048

Change Log

* Wed May 29 2024 Jan Grulich - 5.15.14-1 - 5.15.14

References


[ 1 ] Bug #2282866 - CVE-2024-36048 qt5-qtnetworkauth: qtnetworkauth: badly seeded PRNG may result in guessable values [epel-8] https://bugzilla.redhat.com/show_bug.cgi?id=2282866 [ 2 ] Bug #2282867 - CVE-2024-36048 qt5-qtnetworkauth: qtnetworkauth: badly seeded PRNG may result in guessable values [fedora-39] https://bugzilla.redhat.com/show_bug.cgi?id=2282867 [ 3 ] Bug #2282869 - CVE-2024-36048 qt5-qtnetworkauth: qtnetworkauth: badly seeded PRNG may result in guessable values [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2282869

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-2e27372d4c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: qt5-qtimageformats
Product: Fedora 40
Version: 5.15.14
Release: 1.fc40
URL: http://www.qt.io
Summary: Qt5 - QtImageFormats component

Topics%20covered

Topics Covered

security advisory critical Fedora bugfix qtimageformats PRNG issue CVE-2024-36048

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here