{"id":"CVE-2024-36048","aliases":["DEBIAN-CVE-2024-36048","EUVD-2024-35852","GHSA-r8x8-rv8c-j266","MGASA-2024-0197","OESA-2025-1140","OESA-2025-1141","OESA-2025-1142","OESA-2025-1143","UBUNTU-CVE-2024-36048","openSUSE-SU-2024:0138-1","openSUSE-SU-2024:0143-1","openSUSE-SU-2024:14003-1","openSUSE-SU-2024:14006-1"],"status":"published","title":"QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through...","description":"QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.0097,"percentile":0.62373,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-335"],"published":"2024-05-18T00:00:00Z","modified":"2026-11-02T12:02:42Z","fixes":[{"ecosystem":"Debian:13","package":"qt6-networkauth","fixed_in":["6.7.2-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qt6-networkauth","fixed_in":["6.7.2-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qtnetworkauth-everywhere-src","fixed_in":["5.15.13-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qtnetworkauth-everywhere-src","fixed_in":["5.15.13-3"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"qtnetworkauth5","fixed_in":["5.15.7-1.1.mga9"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"qtnetworkauth6","fixed_in":["6.4.1-1.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"qt5-qtnetworkauth","fixed_in":["5.15.10-2.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"qt5-qtnetworkauth","fixed_in":["5.15.10-2.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"qt6-qtnetworkauth","fixed_in":["6.5.2-2.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"qt6-qtnetworkauth","fixed_in":["6.5.2-2.oe2403sp1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP5","package":"qt6-networkauth","fixed_in":["6.4.2-bp155.2.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP5","package":"qt6-networkauth-docs","fixed_in":["6.4.2-bp155.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"qt6-networkauth","fixed_in":["6.4.2-bp155.2.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"qt6-networkauth-docs","fixed_in":["6.4.2-bp155.2.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP5","package":"libqt5-qtnetworkauth","fixed_in":["5.15.2+kde2-bp155.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libqt5-qtnetworkauth","fixed_in":["5.15.2+kde2-bp155.3.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"qt6-networkauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.10.2-1","6.10.2-2","6.10.2-3","6.11.2-1","6.11.2-2","6.4.2-1","6.4.2-2","6.4.2-3","6.4.2-4","6.4.2-5","6.6.1-1","6.6.1-2","6.6.2-1","6.6.2-2","6.7.2-1","6.7.2-2","6.8.2-1","6.8.2-2","6.8.2-3","6.8.2-4","6.9.1-1","6.9.1-2","6.9.1-3","6.9.2-1","6.9.2-2","6.9.2-3"]},{"source":"osv","ecosystem":"Debian:13","package":"qt6-networkauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.2-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qt6-networkauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.2-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"qtnetworkauth-everywhere-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10-1","5.15.10-2","5.15.12-1","5.15.13-1","5.15.13-2","5.15.13-3","5.15.15-1","5.15.15-2","5.15.15-3","5.15.17-1","5.15.17-2","5.15.18-1","5.15.19-1","5.15.19-2","5.15.8-2","5.15.9-1"]},{"source":"osv","ecosystem":"Debian:13","package":"qtnetworkauth-everywhere-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.13-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qtnetworkauth-everywhere-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.13-3"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"qtnetworkauth5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.7-1.1.mga9"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"qtnetworkauth6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.1-1.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"qt5-qtnetworkauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10-2.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"qt5-qtnetworkauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.10-2.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"qt6-qtnetworkauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-2.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"qt6-qtnetworkauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.5.2-2.oe2403sp1"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtnetworkauth-everywhere-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4-1","5.12.5-1","5.12.8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtnetworkauth-everywhere-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.2-2","5.15.3-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtnetworkauth-everywhere-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.10-2","5.15.12-1","5.15.12-1build1","5.15.12-1build2","5.15.13-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtnetworkauth-everywhere-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15-3","5.15.17-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtnetworkauth-everywhere-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18-1","5.15.19-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"qtnetworkauth-everywhere-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.17-1","5.15.17-2","5.15.18-1"]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"qt6-networkauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2-bp155.2.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"qt6-networkauth-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2-bp155.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"qt6-networkauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2-bp155.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"qt6-networkauth-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.2-bp155.2.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"libqt5-qtnetworkauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2+kde2-bp155.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libqt5-qtnetworkauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.2+kde2-bp155.3.3.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"qt","product":"qt"},{"vendor":"qt","product":"qt_network_authorization"}],"references":[{"url":"https://codereview.qt-project.org/c/qt/qtnetworkauth/+/560317","tags":["x_transferred","Patch","web","report"]},{"url":"https://codereview.qt-project.org/c/qt/qtnetworkauth/+/560368","tags":["x_transferred","Patch","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGB6KUPJFQWUBKXVDPJUMAD6KNJJEWPW/","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPHAI3DKDCIU6XLNS6PV6GFS2PHH3GZM/","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZOOZZZSK5PNRHFGQMUGUHVYWLILFJCRS/","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGB6KUPJFQWUBKXVDPJUMAD6KNJJEWPW/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZPHAI3DKDCIU6XLNS6PV6GFS2PHH3GZM/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZOOZZZSK5PNRHFGQMUGUHVYWLILFJCRS/","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36048","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGB6KUPJFQWUBKXVDPJUMAD6KNJJEWPW"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZOOZZZSK5PNRHFGQMUGUHVYWLILFJCRS"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPHAI3DKDCIU6XLNS6PV6GFS2PHH3GZM"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGB6KUPJFQWUBKXVDPJUMAD6KNJJEWPW"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZPHAI3DKDCIU6XLNS6PV6GFS2PHH3GZM"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZOOZZZSK5PNRHFGQMUGUHVYWLILFJCRS"},{"url":"https://github.com/advisories/GHSA-r8x8-rv8c-j266"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36048.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-36048","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0197.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33247","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/55ZLZN7U7KUGQ7YANJIPQP7R7ESP6B3L/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1140","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1141","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1142","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1143","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-36048","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-36048","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/55ZLZN7U7KUGQ7YANJIPQP7R7ESP6B3L/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1224782","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36048","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5URUTAIVXSJ76TICREGEFK7QSJ244FKX/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-36048","description":"QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.","status":"published","published":"2024-05-18T00:00:00Z","modified":"2025-11-04T22:06:19.365Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-335"],"updated_at":"2026-11-02T14:34:14.985673Z"}],"euvd":[{"id":"EUVD-2024-35852","description":"QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.","status":"published","published":"2024-05-18T00:00:00Z","modified":"2025-11-04T22:06:19Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:49:20.707326Z"}],"ghsa":[{"id":"GHSA-r8x8-rv8c-j266","title":"QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through...","description":"QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.","status":"published","published":"2024-05-18T21:30:35Z","modified":"2025-11-05T00:31:18Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-335"],"updated_at":"2026-11-02T15:04:38.82847Z"}],"nvd":[{"id":"CVE-2024-36048","description":"QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.","status":"published","published":"2024-05-18T21:15:47.673Z","modified":"2026-06-17T07:36:01.763Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-335"],"updated_at":"2026-11-02T14:10:01.327642Z"}],"osv":[{"id":"CVE-2024-36048","description":"QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.","status":"published","published":"2024-05-18T00:00:00Z","modified":"2026-10-28T10:44:02.712937459Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:40.704083Z"},{"id":"DEBIAN-CVE-2024-36048","description":"QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.","status":"published","published":"2024-05-18T21:15:47.673Z","modified":"2026-11-02T12:02:42.125918238Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:42.835825Z"},{"id":"OESA-2025-1140","title":"qt5-qtnetworkauth security update","description":"Qt5 - NetworkAuth component\r\n\r\nSecurity Fix(es):\n\nQAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.(CVE-2024-36048)","status":"published","published":"2025-02-21T11:08:14Z","modified":"2026-08-18T01:18:47.063999357Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1141","title":"qt5-qtnetworkauth security update","description":"Qt5 - NetworkAuth component\r\n\r\nSecurity Fix(es):\n\nQAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.(CVE-2024-36048)","status":"published","published":"2025-02-21T11:08:14Z","modified":"2026-08-18T01:18:47.246079318Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1142","title":"qt6-qtnetworkauth security update","description":"Qt6 - NetworkAuth component\r\n\r\nSecurity Fix(es):\n\nQAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.(CVE-2024-36048)","status":"published","published":"2025-02-21T11:08:14Z","modified":"2026-08-18T01:18:47.264588855Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2025-1143","title":"qt6-qtnetworkauth security update","description":"Qt6 - NetworkAuth component\r\n\r\nSecurity Fix(es):\n\nQAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.(CVE-2024-36048)","status":"published","published":"2025-02-21T11:08:14Z","modified":"2026-08-18T01:18:46.984640605Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"UBUNTU-CVE-2024-36048","description":"QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.","status":"published","published":"2024-05-18T21:15:00Z","modified":"2026-10-17T12:56:45.161640658Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:54:50.784131Z"},{"id":"MGASA-2024-0197","title":"Updated qtnetworkauth5 \u0026 qtnetworkauth6 packages fix security vulnerability","description":"QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x\nbefore 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x\nbefore 6.7.1 uses only the time to seed the PRNG, which may result in\nguessable values.\n","status":"published","published":"2024-05-29T18:08:09Z","modified":"2026-04-16T04:43:16.858440631Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:0138-1","title":"Security update for qt6-networkauth","description":"This update for qt6-networkauth fixes the following issues:\n\n- CVE-2024-36048: Fixed data race and poor seeding in generateRandomString() (boo#1224782).\n","status":"published","published":"2024-05-24T16:01:04Z","modified":"2026-02-04T02:46:51.407505Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:0143-1","title":"Security update for libqt5-qtnetworkauth","description":"This update for libqt5-qtnetworkauth fixes the following issues:\n\n- CVE-2024-36048: Fixed data race and poor seeding in generateRandomString() (boo#1224782).\n","status":"published","published":"2024-05-27T13:00:29Z","modified":"2026-02-04T03:04:13.305388Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:14003-1","title":"libQt6NetworkAuth6-6.7.1-1.1 on GA media","description":"These are all security issues fixed in the libQt6NetworkAuth6-6.7.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:39:05.927134Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2024:14006-1","title":"libQt5NetworkAuth5-5.15.13+kde1-1.1 on GA media","description":"These are all security issues fixed in the libQt5NetworkAuth5-5.15.13+kde1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:19:25.467586Z","updated_at":"2026-11-02T16:58:36.662953Z"}]}}