Re: [Development] WebSocket Module [CVE-2018-21035]

2020-03-13 Thread André Pönitz
or you will receive > notification of the moderator's decision. I can confirm that your message titled Fwd: Re: [Development] WebSocket Module [CVE-2018-21035] has reached the list. Regards, Andre' ___ Development mailing list Development@qt-project.org https://lists.qt-project.org/listinfo/development

Re: [Development] WebSocket Module [CVE-2018-21035]

2020-03-13 Thread enstone83
Hi, I forwarded my message to the security team on Monday (secur...@qt-project.org <mailto:secur...@qt-project.org>). I didn't get any answer except this: Your mail to 'Security' with the subject Fwd: Re: [Development] WebSocket Module [CVE-2018-21035] Is bein

Re: [Development] WebSocket Module [CVE-2018-21035]

2020-03-09 Thread Mårten Nordheim
On 09.03.2020 13:06, Sze Howe Koh wrote: On Mon, 9 Mar 2020 at 19:11, wrote: Hi, I provided a patch for CVE-2018-21035, present in Qt5 WebSocket Module. However apparently since the patch adds a new API it cannot go into Qt5. This vulnerability makes the Qt5 WebSocket module totally unusabl

Re: [Development] WebSocket Module [CVE-2018-21035]

2020-03-09 Thread Sze Howe Koh
On Mon, 9 Mar 2020 at 19:11, wrote: > Hi, > > I provided a patch for CVE-2018-21035, present in Qt5 WebSocket Module. > However apparently since the patch adds a new API it cannot go into Qt5. > > This vulnerability makes the Qt5 WebSocket module totally unusable for > use in non-trusted environme

[Development] WebSocket Module [CVE-2018-21035]

2020-03-09 Thread enstone83
Hi, I provided a patch for CVE-2018-21035, present in Qt5 WebSocket Module. However apparently since the patch adds a new API it cannot go into Qt5. This vulnerability makes the Qt5 WebSocket module totally unusable for use in non-trusted environment (like Internet). Is there anything to do a