Fedora 40: 2024-2e27372d4c Critical: Qt5 ScXml PRNG Issue Fix
fedora
June 5, 2024
Qt 5.15.14 bugfix update
Summary
The Qt SCXML module provides functionality to create state machines from SCXML files.
This includes both dynamically creating state machines loading the SCXML file and instantiating states and transitions)
and generating a C++ file that has a class implementing the state machine.
It also contains functionality to support data models and executable content.
Update Information:
Qt 5.15.14 bugfix update. Fix CVE-2024-36048
Topics Covered
Change Log
* Wed May 29 2024 Jan Grulich
References
[ 1 ] Bug #2282866 - CVE-2024-36048 qt5-qtnetworkauth: qtnetworkauth: badly seeded PRNG may result in guessable values [epel-8]
https://bugzilla.redhat.com/show_bug.cgi?id=2282866
[ 2 ] Bug #2282867 - CVE-2024-36048 qt5-qtnetworkauth: qtnetworkauth: badly seeded PRNG may result in guessable values [fedora-39]
https://bugzilla.redhat.com/show_bug.cgi?id=2282867
[ 3 ] Bug #2282869 - CVE-2024-36048 qt5-qtnetworkauth: qtnetworkauth: badly seeded PRNG may result in guessable values [fedora-40]
https://bugzilla.redhat.com/show_bug.cgi?id=2282869
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-2e27372d4c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: qt5-qtscxml
Product: Fedora 40
Version: 5.15.14
Release: 1.fc40
URL: http://www.qt.io
Summary: Qt5 - ScXml component
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!