Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-39936: An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | qt5-qtserialport | 0:5.15.3-1.amzn2.0.1 |
| Amazon Linux · 2 | qt5-qtserialport-debuginfo | 0:5.15.3-1.amzn2.0.1 |
| Amazon Linux · 2 | qt5-qtserialport-devel | 0:5.15.3-1.amzn2.0.1 |
| Amazon Linux · 2 | qt5-qtserialport-examples | 0:5.15.3-1.amzn2.0.1 |
Vulnerabilities 1
-
High 8.6
An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x t…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-39936.html