Linux · Security advisory · November 7, 2023

ALSA-2023:6369: Security update for 14 packages

ALSA-2023:6369, released November 7, 2023, fixes 5 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0158
75th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
qt5almalinux 95.15.9-1.el9
qt5-develalmalinux 95.15.9-1.el9
qt5-qtbasealmalinux 95.15.9-7.el9
qt5-qtbase-commonalmalinux 95.15.9-7.el9
qt5-qtbase-develalmalinux 95.15.9-7.el9
qt5-qtbase-examplesalmalinux 95.15.9-7.el9
qt5-qtbase-guialmalinux 95.15.9-7.el9
qt5-qtbase-mysqlalmalinux 95.15.9-7.el9
qt5-qtbase-odbcalmalinux 95.15.9-7.el9
qt5-qtbase-postgresqlalmalinux 95.15.9-7.el9
qt5-qtbase-private-develalmalinux 95.15.9-7.el9
qt5-qtbase-staticalmalinux 95.15.9-7.el9
qt5-rpm-macrosalmalinux 95.15.9-1.el9
qt5-srpm-macrosalmalinux 95.15.9-1.el9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-37369 qt6-base: In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QX... 7.5 0.0158 None reported
High CVE-2023-38197 qt5-qtbase: Qt is a software toolkit for developing applications 7.5 0.0128 None reported
High CVE-2023-32573 qt6-svg: In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsP... 7.5 0.0088 None reported
High CVE-2023-33285 qt6-base: An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1 7.5 0.0081 None reported
High CVE-2023-34410 qt6-base: An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2 7.5 0.0074 None reported
Showing 1 to 5 of 5 1