MGASA-2023-0190

Source
https://advisories.mageia.org/MGASA-2023-0190.html
Import Source
https://advisories.mageia.org/MGASA-2023-0190.json
JSON Data
https://api.test.osv.dev/v1/vulns/MGASA-2023-0190
Related
Published
2023-05-31T06:41:32Z
Modified
2023-05-31T05:32:27Z
Summary
Updated qtbase5 packages fix security vulnerability
Details

Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match. (CVE-2023-32762) QTextLayout buffer overflow in SVG file rendering. (CVE-2023-32763)

References
Credits

Affected packages