Описание
ELSA-2024-4617: qt5-qtbase security update (IMPORTANT)
[5.15.3-8]
- HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46340
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
qt5-qtbase
5.15.3-8.el8_10
qt5-qtbase-common
5.15.3-8.el8_10
qt5-qtbase-devel
5.15.3-8.el8_10
qt5-qtbase-examples
5.15.3-8.el8_10
qt5-qtbase-gui
5.15.3-8.el8_10
qt5-qtbase-mysql
5.15.3-8.el8_10
qt5-qtbase-odbc
5.15.3-8.el8_10
qt5-qtbase-postgresql
5.15.3-8.el8_10
qt5-qtbase-private-devel
5.15.3-8.el8_10
qt5-qtbase-static
5.15.3-8.el8_10
Oracle Linux x86_64
qt5-qtbase
5.15.3-8.el8_10
qt5-qtbase-common
5.15.3-8.el8_10
qt5-qtbase-devel
5.15.3-8.el8_10
qt5-qtbase-examples
5.15.3-8.el8_10
qt5-qtbase-gui
5.15.3-8.el8_10
qt5-qtbase-mysql
5.15.3-8.el8_10
qt5-qtbase-odbc
5.15.3-8.el8_10
qt5-qtbase-postgresql
5.15.3-8.el8_10
qt5-qtbase-private-devel
5.15.3-8.el8_10
qt5-qtbase-static
5.15.3-8.el8_10
Связанные CVE
Связанные уязвимости
An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..
An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..
An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..
An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2. ...