REDHAT-BUG-2295867: High severity trolltech qt vulnerability
An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2295867?
The severity of REDHAT-BUG-2295867 is considered high due to its impact on security decisions in established connections.
How do I fix REDHAT-BUG-2295867?
To fix REDHAT-BUG-2295867, update your Qt version to 5.15.18 or later, or 6.2.13 or later, and ensure that you are not using any affected versions.
Which versions of Qt are affected by REDHAT-BUG-2295867?
Affected versions of Qt include all versions before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3.
What type of vulnerability is REDHAT-BUG-2295867?
REDHAT-BUG-2295867 is a security vulnerability related to the HTTP2 protocol in Qt.
Is there a workaround for REDHAT-BUG-2295867?
There is no official workaround for REDHAT-BUG-2295867; the best course of action is to upgrade to the patched versions.