Debian/qtbase-opensource-src: high 7.8
An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via crafted files.
Action: Upgrade qtbase-opensource-src to 5.12.5+dfsg-8 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.12.5+dfsg-8 | - |
Fixed versions
| 5.12.5+dfsg-8 |
Sources
- osv: DEBIAN-CVE-2020-24742#Debian:14/qtbase-opensource-src
- https://security-tracker.debian.org/tracker/CVE-2020-24742
published · modified · JSON