aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJason E. Hale <jhale@FreeBSD.org>2025-08-28 04:36:52 +0000
committerJason E. Hale <jhale@FreeBSD.org>2025-08-28 05:06:27 +0000
commite544b072152b2178db0ea8fb055af06a8e0cc67e (patch)
treeab0200575a9e55bbb1b6a254919809ae2dc70b5e
parenta3496c5b8a05878249847fb36f865c3d9baad65c (diff)
security/vuxml: Add devel/qt6-base < 6.9.2
-rw-r--r--security/vuxml/vuln/2025.xml28
1 files changed, 28 insertions, 0 deletions
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index e26c41309771..2009194bf407 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -1,3 +1,31 @@
+ <vuln vid="2a11aa1e-83c7-11f0-b6e5-4ccc6adda413">
+ <topic>qt6-base -- DoS in QColorTransferGenericFunction</topic>
+ <affects>
+ <package>
+ <name>qt6-base</name>
+ <range><lt>6.9.2</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>Andy Shaw reports:</p>
+ <blockquote cite="https://www.qt.io/blog/security-advisory-recently-reported-denial-of-service-issue-in-qcolortransfergenericfunction-impacts-qt">
+ <p>When passing values outside of the expected range to QColorTransferGenericFunction
+ it can cause a denial of service, for example, this can happen when passing a
+ specifically crafted ICC profile to QColorSpace::fromICCProfile.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2025-5992</cvename>
+ <url>https://www.qt.io/blog/security-advisory-recently-reported-denial-of-service-issue-in-qcolortransfergenericfunction-impacts-qt</url>
+ </references>
+ <dates>
+ <discovery>2025-07-11</discovery>
+ <entry>2025-08-28</entry>
+ </dates>
+ </vuln>
+
<vuln vid="edf83c10-83b8-11f0-b6e5-4ccc6adda413">
<topic>qt6-webengine -- Multiple vulnerabilities</topic>
<affects>