{"id":"CVE-2023-33285","aliases":["ALSA-2023:6369","ALSA-2023:6967","AZL-26943","DEBIAN-CVE-2023-33285","DLA-3805-1","EUVD-2023-37450","GHSA-pwf5-mq6w-f36v","OESA-2023-1791","RHSA-2023:6369","RHSA-2023:6967","RLSA-2023:6369","SUSE-SU-2023:2971-1","SUSE-SU-2023:2982-1","SUSE-SU-2023:3018-1","SUSE-SU-2023:3207-1","SUSE-SU-2023:3225-1","SUSE-SU-2023:3380-1","UBUNTU-CVE-2023-33285","USN-7780-1","openSUSE-SU-2024:13006-1","openSUSE-SU-2024:13380-1"],"status":"published","title":"An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x...","description":"An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AC:L/AV:N/A:L/C:N/I:N/PR:N/S:U/UI:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00812,"percentile":0.57243,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2023-05-22T00:00:00Z","modified":"2026-11-09T15:30:02Z","fixes":[{"ecosystem":"Azure Linux:2","package":"qt5-qtbase","fixed_in":["5.12.11-9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"qt6-base","fixed_in":["6.4.2+dfsg-10"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qt6-base","fixed_in":["6.4.2+dfsg-10"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qt6-base","fixed_in":["6.4.2+dfsg-10"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"qtbase-opensource-src","fixed_in":["5.15.8+dfsg-11"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qtbase-opensource-src","fixed_in":["5.15.8+dfsg-11"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qtbase-opensource-src","fixed_in":["5.15.8+dfsg-11"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qtbase-opensource-src-gles","fixed_in":["5.15.10+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qtbase-opensource-src-gles","fixed_in":["5.15.10+dfsg-2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"qt5-qtbase","fixed_in":["5.11.1-18.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"qt5-qtbase","fixed_in":["5.11.1-18.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"qt5-qtbase","fixed_in":["5.15.2-11.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"qt5-qtbase","fixed_in":["5.15.2-11.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"qt5-qtbase","fixed_in":["5.15.2-11.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"qtbase-opensource-src","fixed_in":["5.5.1+dfsg-16ubuntu7.7+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qtbase-opensource-src","fixed_in":["5.9.5+dfsg-0ubuntu2.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtbase-opensource-src","fixed_in":["5.12.8+dfsg-0ubuntu2.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtbase-opensource-src","fixed_in":["5.15.3+dfsg-2ubuntu0.2+esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"qt6-base","fixed_in":["6.6.0-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-qtbase-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"qt5-srpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"qt5-qtbase-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Azure Linux:2","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.11-9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2+dfsg-10"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2+dfsg-10"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2+dfsg-10"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.8+dfsg-11"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.8+dfsg-11"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.8+dfsg-11"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10+dfsg-1","5.15.10+dfsg-2","5.15.10+dfsg-3","5.15.10+dfsg-4","5.15.10+dfsg-5","5.15.10+dfsg-6","5.15.12+dfsg-1","5.15.13+dfsg-1","5.15.13+dfsg-2","5.15.15+dfsg-1","5.15.15+dfsg-2","5.15.17+dfsg-1","5.15.17+dfsg-2","5.15.18+dfsg-1","5.15.19+dfsg-1","5.15.19+dfsg-2","5.15.8+dfsg-3","5.15.9+dfsg-1"]},{"source":"osv","ecosystem":"Debian:13","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qtbase-opensource-src-gles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.3+dfsg1-1+deb10u6"}]}],"versions":["5.11.3+dfsg1-1","5.11.3+dfsg1-1+deb10u1","5.11.3+dfsg1-1+deb10u2","5.11.3+dfsg1-1+deb10u3","5.11.3+dfsg1-1+deb10u4","5.11.3+dfsg1-1+deb10u5"],"bundled":7},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.1-18.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.11.1-18.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2-11.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2-11.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2-11.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-rpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-srpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-examples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-gui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"qt5-qtbase-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-examples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-gui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"qt5-qtbase-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-7.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-examples","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-examples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-gui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-private-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"qt5-qtbase-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-examples-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-gui-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-odbc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"qt5-qtbase-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.3-5.el8"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:9","package":"adwaita-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"python-pyqt5-sip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.11.1-1.el9.0.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"python-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qgnomeplatform","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtconnectivity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-2.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtdeclarative","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtdoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtgraphicaleffects","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtimageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtlocation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtmultimedia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtquickcontrols","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtquickcontrols2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtsensors","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtserialbus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtserialport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtsvg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-2.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qttranslations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtwayland","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtwebchannel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtwebsockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-2.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtx11extras","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:9","package":"qt5-qtxmlpatterns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.15.9-2.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-6.36.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-6.36.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.6.2-6.36.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2+kde294-150400.6.6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2+kde294-150400.6.6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2+kde294-150400.6.6.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.8+kde185-150500.4.8.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.8+kde185-150500.4.8.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.8+kde185-150500.4.8.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.7-150200.4.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.7-150200.4.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.7-150200.4.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.7-150200.4.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.7-150200.4.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.7-150200.4.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.7-150200.4.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.7-150200.4.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.7-150200.4.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.7-150200.4.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.7-150200.4.23.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2-150500.3.7.4"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2-150500.3.7.4"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2-150500.3.7.4"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"qt6-base-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2-150500.3.7.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.2-150400.4.6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.2-150400.4.6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"qt6-base-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.2-150400.4.6.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.1+dfsg-16ubuntu7.7+esm1"}]}],"versions":["5.4.2+dfsg-2ubuntu9","5.5.1+dfsg-6ubuntu4","5.5.1+dfsg-10ubuntu2","5.5.1+dfsg-13ubuntu1","5.5.1+dfsg-13ubuntu2","5.5.1+dfsg-13ubuntu3","5.5.1+dfsg-14ubuntu1","5.5.1+dfsg-14ubuntu2","5.5.1+dfsg-14ubuntu3","5.5.1+dfsg-15ubuntu1","5.5.1+dfsg-16ubuntu1","5.5.1+dfsg-16ubuntu6","5.5.1+dfsg-16ubuntu7","5.5.1+dfsg-16ubuntu7.1","5.5.1+dfsg-16ubuntu7.2","5.5.1+dfsg-16ubuntu7.5","5.5.1+dfsg-16ubuntu7.6","5.5.1+dfsg-16ubuntu7.7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5+dfsg-0ubuntu2.6+esm1"}]}],"versions":["5.9.1+dfsg-10ubuntu1","5.9.1+dfsg-10ubuntu2","5.9.2+dfsg-4ubuntu6","5.9.3+dfsg-0ubuntu1","5.9.3+dfsg-0ubuntu3","5.9.3+dfsg-0ubuntu4","5.9.4+dfsg-0ubuntu3","5.9.4+dfsg-0ubuntu4","5.9.5+dfsg-0ubuntu1","5.9.5+dfsg-0ubuntu2","5.9.5+dfsg-0ubuntu2.1","5.9.5+dfsg-0ubuntu2.3","5.9.5+dfsg-0ubuntu2.4","5.9.5+dfsg-0ubuntu2.5","5.9.5+dfsg-0ubuntu2.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.8+dfsg-0ubuntu2.1+esm1"}]}],"versions":["5.12.4+dfsg-4ubuntu1","5.12.5+dfsg-2","5.12.5+dfsg-8","5.12.5+dfsg-8build1","5.12.5+dfsg-9build1","5.12.8+dfsg-0ubuntu1","5.12.8+dfsg-0ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2.2+dfsg-5ubuntu1","6.2.2+dfsg-6ubuntu1","6.2.2+dfsg-6ubuntu2","6.2.4+dfsg-1ubuntu1","6.2.4+dfsg-2ubuntu1","6.2.4+dfsg-2ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3+dfsg-2ubuntu0.2+esm1"}]}],"versions":["5.15.2+dfsg-12","5.15.2+dfsg-13","5.15.2+dfsg-14","5.15.2+dfsg-14ubuntu1","5.15.2+dfsg-14ubuntu3","5.15.2+dfsg-15","5.15.3+dfsg-1","5.15.3+dfsg-2","5.15.3+dfsg-2ubuntu0.1","5.15.3+dfsg-2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.4.2+dfsg-18","6.4.2+dfsg-19","6.4.2+dfsg-19build1","6.4.2+dfsg-20","6.4.2+dfsg-21","6.4.2+dfsg-21.1build4","6.4.2+dfsg-21.1build5"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.8.3+dfsg-0ubuntu2","6.8.3+dfsg-0ubuntu3","6.9.2+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2+dfsg-7","6.10.2+dfsg-14ubuntu2","6.10.2+dfsg-15","6.10.2+dfsg-16","6.11.2+dfsg-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.9.2+dfsg-1ubuntu1","6.9.2+dfsg-2","6.9.2+dfsg-3ubuntu1","6.9.2+dfsg-3ubuntu2","6.9.2+dfsg-4","6.10.2+dfsg-3","6.10.2+dfsg-6","6.10.2+dfsg-7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.1+dfsg-16ubuntu7.7+esm1"}]}],"versions":["5.4.2+dfsg-2ubuntu9","5.5.1+dfsg-6ubuntu4","5.5.1+dfsg-10ubuntu2","5.5.1+dfsg-13ubuntu1","5.5.1+dfsg-13ubuntu2","5.5.1+dfsg-13ubuntu3","5.5.1+dfsg-14ubuntu1","5.5.1+dfsg-14ubuntu2","5.5.1+dfsg-14ubuntu3","5.5.1+dfsg-15ubuntu1","5.5.1+dfsg-16ubuntu1","5.5.1+dfsg-16ubuntu6","5.5.1+dfsg-16ubuntu7","5.5.1+dfsg-16ubuntu7.1","5.5.1+dfsg-16ubuntu7.2","5.5.1+dfsg-16ubuntu7.5","5.5.1+dfsg-16ubuntu7.6","5.5.1+dfsg-16ubuntu7.7"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.5+dfsg-0ubuntu2.6+esm1"}]}],"versions":["5.9.1+dfsg-10ubuntu1","5.9.1+dfsg-10ubuntu2","5.9.2+dfsg-4ubuntu6","5.9.3+dfsg-0ubuntu1","5.9.3+dfsg-0ubuntu3","5.9.3+dfsg-0ubuntu4","5.9.4+dfsg-0ubuntu3","5.9.4+dfsg-0ubuntu4","5.9.5+dfsg-0ubuntu1","5.9.5+dfsg-0ubuntu2","5.9.5+dfsg-0ubuntu2.1","5.9.5+dfsg-0ubuntu2.3","5.9.5+dfsg-0ubuntu2.4","5.9.5+dfsg-0ubuntu2.5","5.9.5+dfsg-0ubuntu2.6"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.12.8+dfsg-0ubuntu2.1+esm1"}]}],"versions":["5.12.4+dfsg-4ubuntu1","5.12.5+dfsg-2","5.12.5+dfsg-8","5.12.5+dfsg-8build1","5.12.5+dfsg-9build1","5.12.8+dfsg-0ubuntu1","5.12.8+dfsg-0ubuntu2.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtbase-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.3+dfsg-2ubuntu0.2+esm1"}]}],"versions":["5.15.2+dfsg-12","5.15.2+dfsg-13","5.15.2+dfsg-14","5.15.2+dfsg-14ubuntu1","5.15.2+dfsg-14ubuntu3","5.15.2+dfsg-15","5.15.3+dfsg-1","5.15.3+dfsg-2","5.15.3+dfsg-2ubuntu0.1","5.15.3+dfsg-2ubuntu0.2"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libqt5-qtbase","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10+kde129-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"qt6-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.6.0-3.1"}]}]}],"products":[{"vendor":"qt","product":"qt"}],"references":[{"url":"https://codereview.qt-project.org/c/qt/qtbase/+/477644","tags":["x_transferred","Vendor Advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00027.html","tags":["mailing-list","x_transferred","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-33285","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-pwf5-mq6w-f36v"},{"url":"https://access.redhat.com/errata/RHSA-2023:6369","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32573","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-33285","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-34410","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-37369","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38197","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175724","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175726","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175727","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175728","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175729","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175730","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175731","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175733","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175734","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175735","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175736","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175737","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175738","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175739","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175740","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175741","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175742","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175743","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175744","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175745","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175746","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175747","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175749","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175750","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175751","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175753","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175754","tags":["report"]},{"url":"https://bugzilla.redhat.com/2175758","tags":["report"]},{"url":"https://bugzilla.redhat.com/2178624","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188589","tags":["report"]},{"url":"https://bugzilla.redhat.com/2208135","tags":["report"]},{"url":"https://bugzilla.redhat.com/2209488","tags":["report"]},{"url":"https://bugzilla.redhat.com/2212747","tags":["report"]},{"url":"https://bugzilla.redhat.com/2222767","tags":["report"]},{"url":"https://bugzilla.redhat.com/2232173","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-6369.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:6967","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-6967.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/33xxx/CVE-2023-33285.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-33285","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1791","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175726","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175731","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175742","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175749","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2178624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188589","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2208135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222767","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232173","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6369.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32573","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32573","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-33285","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-34410","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34410","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-37369","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37369","tags":["advisory"]},{"url":"https://codereview.qt-project.org/c/qt/qtbase/+/455027","tags":["article"]},{"url":"https://www.qt.io/blog/security-advisory-qxmlstreamreader","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38197","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38197","tags":["advisory"]},{"url":"https://bugreports.qt.io/browse/QTBUG-92113","tags":["article"]},{"url":"https://bugreports.qt.io/browse/QTBUG-95188","tags":["article"]},{"url":"https://codereview.qt-project.org/c/qt/qtbase/+/488960","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6967.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:6369","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232971-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1209616","tags":["report"]},{"url":"https://bugzilla.suse.com/1211642","tags":["report"]},{"url":"https://bugzilla.suse.com/1211994","tags":["report"]},{"url":"https://bugzilla.suse.com/1213326","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-24607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-33285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38197","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232982-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1211024","tags":["report"]},{"url":"https://bugzilla.suse.com/1211797","tags":["report"]},{"url":"https://bugzilla.suse.com/1211798","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32763","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233018-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233207-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233225-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233380-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-33285","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7780-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-24607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-32762","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-34410","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-33285","description":"An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.","status":"published","published":"2023-05-22T00:00:00Z","modified":"2025-01-21T15:17:54.872Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AC:L/AV:N/A:L/C:N/I:N/PR:N/S:U/UI:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:34.170609Z"}],"euvd":[{"id":"EUVD-2023-37450","description":"An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.","status":"published","published":"2023-05-22T00:00:00Z","modified":"2025-01-21T15:17:54Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AC:L/AV:N/A:L/C:N/I:N/PR:N/S:U/UI:N","level":"medium"}],"updated_at":"2026-11-03T00:04:16.173755Z"}],"ghsa":[{"id":"GHSA-pwf5-mq6w-f36v","title":"An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x...","description":"An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.","status":"published","published":"2023-05-22T03:30:16Z","modified":"2024-05-01T03:30:31Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:57:15.605145Z"}],"nvd":[{"id":"CVE-2023-33285","description":"An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.","status":"published","published":"2023-05-22T03:15:09.72Z","modified":"2026-06-17T06:01:29.463Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:08:03.200773Z"}],"osv":[{"id":"AZL-26943","title":"CVE-2023-33285 affecting package qt5-qtbase for versions less than 5.12.11-9","description":"An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.","status":"published","published":"2023-05-22T03:15:09Z","modified":"2026-04-21T04:23:58.700621Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"CVE-2023-33285","description":"An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.","status":"published","published":"2023-05-22T00:00:00Z","modified":"2026-10-28T10:38:50.698542672Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AC:L/AV:N/A:L/C:N/I:N/PR:N/S:U/UI:N","level":"medium"}],"updated_at":"2026-11-02T15:44:32.116263Z"},{"id":"DEBIAN-CVE-2023-33285","description":"An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.","status":"published","published":"2023-05-22T03:15:09.72Z","modified":"2026-10-26T18:02:29.258275278Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"OESA-2023-1791","title":"qt5-qtbase security update","description":"Qt is a software toolkit for developing applications.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.(CVE-2023-33285)","status":"published","published":"2023-11-10T11:06:14Z","modified":"2026-08-18T01:17:56.516938796Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2023:6369","title":"Red Hat Security Advisory: qt5 security and bug fix update","status":"published","published":"2024-09-16T11:46:06Z","modified":"2026-06-26T12:22:21.418287243Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RHSA-2023:6967","title":"Red Hat Security Advisory: qt5-qtbase security update","status":"published","published":"2024-09-16T11:46:18Z","modified":"2026-06-26T12:22:05.964781991Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"RLSA-2023:6369","title":"Moderate: qt5 security and bug fix update","description":"Qt is a software toolkit for developing applications.\n\nSecurity Fix(es):\n\n* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)\n\n* qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)\n\n* qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)\n\n* qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)\n\n* qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.","status":"published","published":"2026-06-25T12:03:37.665962Z","modified":"2026-06-25T12:30:05.591227217Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2023-33285","description":"An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.","status":"published","published":"2023-05-22T03:15:00Z","modified":"2026-10-17T12:57:19.817870186Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:54:20.997471Z"},{"id":"ALSA-2023:6369","title":"Moderate: qt5 security and bug fix update","description":"Qt is a software toolkit for developing applications.\n\nSecurity Fix(es):\n\n* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)\n* qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)\n* qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)\n* qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)\n* qt: Uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-07T00:00:00Z","modified":"2026-11-09T15:30:02.448627927Z","updated_at":"2026-11-09T16:02:40.565923Z"},{"id":"ALSA-2023:6967","title":"Moderate: qt5-qtbase security update","description":"Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. \n\nSecurity Fix(es):\n\n* qt: buffer over-read via a crafted reply from a DNS server (CVE-2023-33285)\n* qt: allows remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410)\n* qtbase: buffer overflow in QXmlStreamReader (CVE-2023-37369)\n* qtbase: infinite loops in QXmlStreamReader (CVE-2023-38197)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-11-14T00:00:00Z","modified":"2026-10-29T11:02:19.305766497Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"DLA-3805-1","title":"qtbase-opensource-src - security update","status":"published","published":"2024-05-01T00:00:00Z","modified":"2026-03-09T01:18:03.69423Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"openSUSE-SU-2024:13006-1","title":"libQt5Bootstrap-devel-static-32bit-5.15.10+kde129-1.1 on GA media","description":"These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.10+kde129-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:36:59.755798Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:13380-1","title":"libQt6Concurrent6-6.6.0-3.1 on GA media","description":"These are all security issues fixed in the libQt6Concurrent6-6.6.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:15:24.790245Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2023:2971-1","title":"Security update for libqt5-qtbase","description":"This update for libqt5-qtbase fixes the following issues:\n\n- CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616).\n- CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).\n- CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994).\n- CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326).\n","status":"published","published":"2023-07-26T07:25:55Z","modified":"2026-02-04T02:55:27.018485Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2982-1","title":"Security update for libqt5-qtbase","description":"This update for libqt5-qtbase fixes the following issues:\n\n\n- CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616).\n- CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797).\n- CVE-2023-32763: Fixed buffer overflow when rendering an SVG file with an image inside it (bsc#1211798).\n- CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).\n- CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994).\n- CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326).\n","status":"published","published":"2023-07-26T08:00:21Z","modified":"2026-02-04T03:24:23.427899Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3018-1","title":"Security update for libqt5-qtbase","description":"This update for libqt5-qtbase fixes the following issues:\n\n- CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994).\n- CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).\n- CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797).\n- CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326).\n- CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616).\n","status":"published","published":"2023-07-28T19:26:21Z","modified":"2026-02-04T02:43:01.638093Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3207-1","title":"Security update for libqt5-qtbase","description":"This update for libqt5-qtbase fixes the following issues:\n\n- CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994).\n- CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).\n- CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797).\n- CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326).\n- CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616).\n","status":"published","published":"2023-08-07T13:13:37Z","modified":"2026-02-04T04:09:26.367525Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3225-1","title":"Security update for qt6-base","description":"This update for qt6-base fixes the following issues:\n\n- CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994).\n- CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).\n- CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797).\n- CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326).\n- CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616).\n","status":"published","published":"2023-08-08T07:17:27Z","modified":"2025-05-02T04:34:41.093195Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3380-1","title":"Security update for qt6-base","description":"This update for qt6-base fixes the following issues:\n\n- CVE-2023-34410: Fixed certificate validation flaw (bsc#1211994).\n- CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642).\n- CVE-2023-32762: Fixed strict-transport-security (HSTS) header parsing error (QTBUG-113392) (bsc#1211797).\n- CVE-2023-38197: Fixed infinite loops in QXmlStreamReader (QTBUG-92113, QTBUG-95188) (bsc#1213326).\n- CVE-2023-32763: Fixed buffer overflow in QTextLayout (QTBUG-113337, QTBUG-106947, QTBUG-89557, QTBUG-104986) (bsc#1211798).\n","status":"published","published":"2023-08-22T16:36:47Z","modified":"2026-02-04T03:25:01.184104Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"USN-7780-1","title":"qtbase-opensource-src vulnerabilities","description":"It was discovered that Qt did not correctly handle certain inputs when\nusing the SQL ODBC driver plugin. An attacker could possibly use this issue\nto cause a denial of service. (CVE-2023-24607)\n\nIt was discovered that Qt did not correctly parse certain strict-transport-\nsecurity headers. An attacker could possibly use this issue to leak\nsensitive information. This issue only affected Ubuntu 20.04 LTS and Ubuntu\n22.04 LTS. (CVE-2023-32762)\n\nIt was discovered that Qt did not correctly handle certain inputs from DNS\nservers. A remote attacker could possibly use this issue to execute\narbitrary code or cause a denial of service. (CVE-2023-33285)\n\nIt was discovered that Qt did not correctly validate certain CA\ncertificates for TLS. An attacker could possibly use this issue to gain\naccess to unauthorized resources. (CVE-2023-34410)","status":"published","published":"2025-09-28T23:05:58Z","modified":"2026-06-25T13:32:31.326448468Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}