Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2aa31218 by Sylvain Beucler at 2025-11-29T11:09:26+01:00
Reserve DLA-4387-1 for qtbase-opensource-src
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -156032,7 +156032,6 @@ CVE-2024-39936 (An issue was discovered in HTTP2 in
Qt before 5.15.18, 6.x befor
[bookworm] - qt6-base <no-dsa> (Minor issue)
- qtbase-opensource-src 5.15.13+dfsg-3 (bug #1076293)
[bookworm] - qtbase-opensource-src 5.15.8+dfsg-11+deb12u3
- [bullseye] - qtbase-opensource-src <no-dsa> (Minor issue)
[experimental] - qtbase-opensource-src-gles 5.15.15+dfsg-1
- qtbase-opensource-src-gles <unfixed> (unimportant; bug #1077544)
NOTE: https://codereview.qt-project.org/c/qt/qtbase/+/571601
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[29 Nov 2025] DLA-4387-1 qtbase-opensource-src - security update
+ {CVE-2024-39936}
+ [bullseye] - qtbase-opensource-src 5.15.2+dfsg-9+deb11u2
[28 Nov 2025] DLA-4386-1 sogo - security update
{CVE-2025-63498}
[bullseye] - sogo 5.0.1-4+deb11u2
=====================================
data/dla-needed.txt
=====================================
@@ -317,11 +317,6 @@ pytorch (dleidert)
NOTE: 20250422: CVE-2025-32434 RCE need to be fixed. DoS may be postponed
(rouca/FD)
NOTE: 20251020: wip (dleidert)
--
-qtbase-opensource-src (Sylvain Beucler)
- NOTE: 20250520: Added by Front-Desk (Beuc)
- NOTE: 20250520: Follow fixes from bookworm 12.11 (CVE-2024-39936)
- NOTE: 20250520: We don't seem affected by the non-CVE crash fix #1081682
(Beuc/front-desk)
---
rails (rouca)
NOTE: 20250105: Added by Front-Desk (apo)
NOTE: 20250305: Utkarsh uploaded the CVE fixes to unstable via
rails/7.2.2.1. (utkarsh)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2aa3121875d706b6e4ac54f55198dec92e5d1048
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2aa3121875d706b6e4ac54f55198dec92e5d1048
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
