Important: qt5-qtbase security update

2024-07-1800:00:00

errata.almalinux.org

qt software toolkit

applications development

string tools

xml tools

network handling

security update

delayed communication fix

cve-2024-39936

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

AI Score

6.9

Confidence

Low

JSON

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt.

Security Fix(es):

qtbase: qtbase: Delay any communication until encrypted() can be responded to (CVE-2024-39936)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8i686qt5-qtbase-static< 5.15.3-8.el8_10qt5-qtbase-static-5.15.3-8.el8_10.i686.rpm
almalinux8noarchqt5-qtbase-common< 5.15.3-8.el8_10qt5-qtbase-common-5.15.3-8.el8_10.noarch.rpm
almalinux8i686qt5-qtbase-examples< 5.15.3-8.el8_10qt5-qtbase-examples-5.15.3-8.el8_10.i686.rpm
almalinux8i686qt5-qtbase-postgresql< 5.15.3-8.el8_10qt5-qtbase-postgresql-5.15.3-8.el8_10.i686.rpm
almalinux8i686qt5-qtbase< 5.15.3-8.el8_10qt5-qtbase-5.15.3-8.el8_10.i686.rpm
almalinux8i686qt5-qtbase-gui< 5.15.3-8.el8_10qt5-qtbase-gui-5.15.3-8.el8_10.i686.rpm
almalinux8i686qt5-qtbase-odbc< 5.15.3-8.el8_10qt5-qtbase-odbc-5.15.3-8.el8_10.i686.rpm
almalinux8i686qt5-qtbase-mysql< 5.15.3-8.el8_10qt5-qtbase-mysql-5.15.3-8.el8_10.i686.rpm
almalinux8i686qt5-qtbase-private-devel< 5.15.3-8.el8_10qt5-qtbase-private-devel-5.15.3-8.el8_10.i686.rpm
almalinux8i686qt5-qtbase-devel< 5.15.3-8.el8_10qt5-qtbase-devel-5.15.3-8.el8_10.i686.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	i686	qt5-qtbase-static	< 5.15.3-8.el8_10	qt5-qtbase-static-5.15.3-8.el8_10.i686.rpm
almalinux	8	noarch	qt5-qtbase-common	< 5.15.3-8.el8_10	qt5-qtbase-common-5.15.3-8.el8_10.noarch.rpm
almalinux	8	i686	qt5-qtbase-examples	< 5.15.3-8.el8_10	qt5-qtbase-examples-5.15.3-8.el8_10.i686.rpm
almalinux	8	i686	qt5-qtbase-postgresql	< 5.15.3-8.el8_10	qt5-qtbase-postgresql-5.15.3-8.el8_10.i686.rpm
almalinux	8	i686	qt5-qtbase	< 5.15.3-8.el8_10	qt5-qtbase-5.15.3-8.el8_10.i686.rpm
almalinux	8	i686	qt5-qtbase-gui	< 5.15.3-8.el8_10	qt5-qtbase-gui-5.15.3-8.el8_10.i686.rpm
almalinux	8	i686	qt5-qtbase-odbc	< 5.15.3-8.el8_10	qt5-qtbase-odbc-5.15.3-8.el8_10.i686.rpm
almalinux	8	i686	qt5-qtbase-mysql	< 5.15.3-8.el8_10	qt5-qtbase-mysql-5.15.3-8.el8_10.i686.rpm
almalinux	8	i686	qt5-qtbase-private-devel	< 5.15.3-8.el8_10	qt5-qtbase-private-devel-5.15.3-8.el8_10.i686.rpm
almalinux	8	i686	qt5-qtbase-devel	< 5.15.3-8.el8_10	qt5-qtbase-devel-5.15.3-8.el8_10.i686.rpm