Amazon Linux 2 Security Advisory: ALAS-2024-2677
Advisory Release Date: 2024-10-24 23:54 Pacific
Advisory Updated Date: 2024-10-31 18:00 Pacific
Severity:
Important
Issue Overview:
An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed.. (CVE-2024-39936)
Affected Packages:
qt5-qttools
Note:
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update qt5-qttools to update your system.
New Packages:
aarch64:
qt5-qttools-5.15.3-4.amzn2.0.1.aarch64
qt5-qttools-devel-5.15.3-4.amzn2.0.1.aarch64
qt5-qttools-static-5.15.3-4.amzn2.0.1.aarch64
qt5-qttools-libs-designer-5.15.3-4.amzn2.0.1.aarch64
qt5-qttools-libs-designercomponents-5.15.3-4.amzn2.0.1.aarch64
qt5-qttools-libs-help-5.15.3-4.amzn2.0.1.aarch64
qt5-assistant-5.15.3-4.amzn2.0.1.aarch64
qt5-designer-5.15.3-4.amzn2.0.1.aarch64
qt5-linguist-5.15.3-4.amzn2.0.1.aarch64
qt5-qdbusviewer-5.15.3-4.amzn2.0.1.aarch64
qt5-doctools-5.15.3-4.amzn2.0.1.aarch64
qt5-qttools-examples-5.15.3-4.amzn2.0.1.aarch64
qt5-qttools-debuginfo-5.15.3-4.amzn2.0.1.aarch64
i686:
qt5-qttools-5.15.3-4.amzn2.0.1.i686
qt5-qttools-devel-5.15.3-4.amzn2.0.1.i686
qt5-qttools-static-5.15.3-4.amzn2.0.1.i686
qt5-qttools-libs-designer-5.15.3-4.amzn2.0.1.i686
qt5-qttools-libs-designercomponents-5.15.3-4.amzn2.0.1.i686
qt5-qttools-libs-help-5.15.3-4.amzn2.0.1.i686
qt5-assistant-5.15.3-4.amzn2.0.1.i686
qt5-designer-5.15.3-4.amzn2.0.1.i686
qt5-linguist-5.15.3-4.amzn2.0.1.i686
qt5-qdbusviewer-5.15.3-4.amzn2.0.1.i686
qt5-doctools-5.15.3-4.amzn2.0.1.i686
qt5-qttools-examples-5.15.3-4.amzn2.0.1.i686
qt5-qttools-debuginfo-5.15.3-4.amzn2.0.1.i686
noarch:
qt5-qttools-common-5.15.3-4.amzn2.0.1.noarch
src:
qt5-qttools-5.15.3-4.amzn2.0.1.src
x86_64:
qt5-qttools-5.15.3-4.amzn2.0.1.x86_64
qt5-qttools-devel-5.15.3-4.amzn2.0.1.x86_64
qt5-qttools-static-5.15.3-4.amzn2.0.1.x86_64
qt5-qttools-libs-designer-5.15.3-4.amzn2.0.1.x86_64
qt5-qttools-libs-designercomponents-5.15.3-4.amzn2.0.1.x86_64
qt5-qttools-libs-help-5.15.3-4.amzn2.0.1.x86_64
qt5-assistant-5.15.3-4.amzn2.0.1.x86_64
qt5-designer-5.15.3-4.amzn2.0.1.x86_64
qt5-linguist-5.15.3-4.amzn2.0.1.x86_64
qt5-qdbusviewer-5.15.3-4.amzn2.0.1.x86_64
qt5-doctools-5.15.3-4.amzn2.0.1.x86_64
qt5-qttools-examples-5.15.3-4.amzn2.0.1.x86_64
qt5-qttools-debuginfo-5.15.3-4.amzn2.0.1.x86_64