Gentoo alert 202511-03 (qtsvg)
| From: | glsamaker@gentoo.org | |
| To: | gentoo-announce@lists.gentoo.org | |
| Subject: | [gentoo-announce] [ GLSA 202511-03 ] qtsvg: Multiple Vulnerabilities | |
| Date: | Mon, 24 Nov 2025 23:58:08 -0000 | |
| Message-ID: | <176402868871.7.6745775105050047174@3f85d36892cf> |
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202511-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: qtsvg: Multiple Vulnerabilities Date: November 24, 2025 Bugs: #915998, #963710 ID: 202511-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been discovered in qtsvg, the worst of which could lead to execution of arbitrary code. Background ========== qtsvg is a SVG rendering library for the Qt framework. Affected packages ================= Package Vulnerable Unaffected ------------ ------------ ------------ dev-qt/qtsvg < 6.9.3 >= 6.9.3 Description =========== Multiple vulnerabilities have been discovered in qtsvg. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All qtsvg users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=dev-qt/qtsvg-6.9.3" References ========== [ 1 ] CVE-2023-45872 https://nvd.nist.gov/vuln/detail/CVE-2023-45872 [ 2 ] CVE-2025-10728 https://nvd.nist.gov/vuln/detail/CVE-2025-10728 [ 3 ] CVE-2025-10729 https://nvd.nist.gov/vuln/detail/CVE-2025-10729 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202511-03 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2025 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5
Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEpqTA6ABLMxh/aChGFMQkOaVy+9kFAmkk8RAACgkQFMQkOaVy +9kshA//Qp3E6Q2X48f9vLGJRzv1zTBMbVfKs2rqh+hYLe7hdS/L7kOwKA90cttf wZljcX0NQBiCIy3OZfdApmSGP6ZZ6SMqs5pm/gpNe7pV+9qLOKGxXGPDYoHsujcZ FN6taw1cGJZ8zOeAGj/DHHyjMBinjnDuDEdzEKl4CLHmprD8DB+2GF9vx6ihObhr L1kHokR+ucoprzv6ZvALw1/ZGPPrCJi93V9fqteycKaR6SstyFJFPXwxQGE2EPxO ctKThNuLMb9dP74zhVtc9BJfMNstoqQnDEFdQ0FvJJNZrcRSd9FSPtHasCkpMv5h zNHRUnVX7ZkRVpGeHMXV+I+7cZvSL/2sdS52+6S19xnNzecNIooS9SfTpsOxN/fP V1e1gmVQokI8vai3R4i/xT2NnrxEH3j0agvUHzwXEKxDGye5YzHIk5MBA8ItJO2X DKWd4bd73xcqwNyc85mCgdDYxyrzeRjkpzsvO8qsCGv1jqpQXXZcY0teMe/hIPQN IK1nWhF+U1k+0nIsmrVQcmJynPVgmrAQbaikzu3aJXbHuDv0LjFAOdpKIbTtcALq 8PF797j4q9T9AjsC0VXyJd98j3t+DsGWxoewRY7ipv2Z4hj145hb//gP+vBTWDcG dNNeEZdmTXHJEGnuwlW2UzFOt2GuklGoqrAB279ahiokjLiyRfk= =K7K4 -----END PGP SIGNATURE-----