vulnerability
Alma Linux: CVE-2024-39936: Important: qt5-qtbase security update (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:C/I:N/A:N) | Jul 4, 2024 | Jul 22, 2024 | Apr 17, 2026 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:C/I:N/A:N)
Published
Jul 4, 2024
Added
Jul 22, 2024
Modified
Apr 17, 2026
Description
An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..
Solutions
alma-upgrade-qt5-qtbasealma-upgrade-qt5-qtbase-commonalma-upgrade-qt5-qtbase-develalma-upgrade-qt5-qtbase-examplesalma-upgrade-qt5-qtbase-guialma-upgrade-qt5-qtbase-mysqlalma-upgrade-qt5-qtbase-odbcalma-upgrade-qt5-qtbase-postgresqlalma-upgrade-qt5-qtbase-private-develalma-upgrade-qt5-qtbase-static
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.