Bug#1036702: qtbase-opensource-src-gles: CVE-2023-32762

To: submit@bugs.debian.org
Subject: Bug#1036702: qtbase-opensource-src-gles: CVE-2023-32762
From: Moritz Mühlenhoff <jmm@inutil.org>
Date: Wed, 24 May 2023 15:50:06 +0200
Message-id: <[🔎] ZG4WDsHHheFgDq9k@pisco.westfalen.local>
Reply-to: Moritz Mühlenhoff <jmm@inutil.org>, 1036702@bugs.debian.org

Source: qtbase-opensource-src-gles
X-Debbugs-CC: team@security.debian.org
Severity: important
Tags: security

Hi,

The following vulnerability was published for qtbase-opensource-src-gles.

CVE-2023-32762[0]:
https://github.com/qt/qtbase/commit/1b736a815be0222f4b24289cf17575fc15707305

Per IRC thus likely also affects the -gles variant

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2023-32762
    https://www.cve.org/CVERecord?id=CVE-2023-32762

Please adjust the affected versions in the BTS as needed.

Reply to:

Follow-Ups:
- Bug#1036702: qtbase-opensource-src-gles: CVE-2023-32762
  - From: Moritz Mühlenhoff <jmm@inutil.org>
- Processed: Re: Bug#1036702: qtbase-opensource-src-gles: CVE-2023-32762
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>
- Processed: Bug#1036702 marked as pending in qtbase-opensource-src
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>
- Bug#1036702: marked as done (qtbase-opensource-src-gles: CVE-2023-32763)
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>

Prev by Date: Bug#1034457: libqt5quick5: Qt segfault on amd64
Next by Date: Re: Checksum error in some packages
Previous by thread: Bug#1036602: marked as done (plasma-discover-backend-fwupd: fwupd backend can fail to download from fwupd.org because user-agent is blocked)
Next by thread: Bug#1036702: qtbase-opensource-src-gles: CVE-2023-32762
Index(es):
- Date
- Thread