qt6-base - Debian Package Tracker

general

source: qt6-base (main)
version: 6.8.2+dfsg-5
maintainer: Debian Qt/KDE Maintainers (archive) (DMD)
uploaders: Patrick Franz [DMD]
arch: all any
std-ver: 4.7.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

old-bpo: 6.4.2+dfsg-11~bpo11+1
stable: 6.4.2+dfsg-10
testing: 6.8.2+dfsg-5
unstable: 6.8.2+dfsg-5

versioned links

6.4.2+dfsg-10: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
6.4.2+dfsg-11~bpo11+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
6.8.2+dfsg-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libqt6concurrent6
libqt6core6t64
libqt6dbus6
libqt6gui6 (3 bugs: 0, 2, 1, 0)
libqt6network6
libqt6opengl6 (1 bugs: 0, 1, 0, 0)
libqt6openglwidgets6
libqt6printsupport6
libqt6sql6
libqt6sql6-ibase
libqt6sql6-mysql
libqt6sql6-odbc
libqt6sql6-psql
libqt6sql6-sqlite
libqt6test6
libqt6widgets6 (1 bugs: 0, 1, 0, 0)
libqt6xml6
qmake6
qmake6-bin
qt6-base-dev (3 bugs: 0, 3, 0, 0)
qt6-base-dev-tools (1 bugs: 0, 1, 0, 0)
qt6-base-doc
qt6-base-doc-dev
qt6-base-doc-html
qt6-base-examples
qt6-base-private-dev
qt6-gtk-platformtheme (2 bugs: 0, 2, 0, 0)
qt6-qpa-plugins
qt6-xdgdesktopportal-platformtheme

action needed

2 security issues in trixie high

There are 2 open security issues in trixie.

2 important issues:

CVE-2024-25580: An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.
CVE-2024-39936: An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..

Created: 2023-07-14 Last update: 2025-03-22 04:01

2 security issues in sid high

There are 2 open security issues in sid.

2 important issues:

CVE-2024-25580: An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.
CVE-2024-39936: An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..

Created: 2023-07-14 Last update: 2025-03-22 04:01

lintian reports 12 errors and 98 warnings high

Lintian reports 12 errors and 98 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2024-10-24 Last update: 2025-03-15 09:02

2 bugs tagged patch in the BTS normal

The BTS contains patches fixing 2 bugs, consider including or untagging them.

Created: 2025-02-12 Last update: 2025-03-25 12:01

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2025-02-10 Last update: 2025-03-25 07:00

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 6.8.2+dfsg-6, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit dc5a671ad17ef8830538ff3e14371646d3b782c2
Author: Patrick Franz <deltaone@debian.org>
Date:   Sat Mar 8 14:47:40 2025 +0100

    Backport patch to fix issue when configuring Plasma to have multiple Notification widgets, fixes QTBUG-134210:

commit 9e8e48c53c4c82bfe573af6066ad7165f4d50f88
Author: Patrick Franz <deltaone@debian.org>
Date:   Sat Mar 8 14:31:59 2025 +0100

    New changelog entry.

Created: 2025-03-08 Last update: 2025-03-23 16:58

7 low-priority security issues in bookworm low

There are 7 open security issues in bookworm.

6 issues left for the package maintainer to handle:

CVE-2023-34410: (needs triaging) An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate validation for TLS does not always consider whether the root of a chain is a configured CA certificate.
CVE-2023-37369: (needs triaging) In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefix is greater than a length.
CVE-2023-51714: (needs triaging) An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check.
CVE-2024-25580: (needs triaging) An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file.
CVE-2024-39936: (needs triaging) An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted() signal has not yet been emitted and processed..
CVE-2025-30348: (needs triaging) encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation of later data).

You can find information about how to handle these issues in the security team's documentation.

1 ignored issue:

CVE-2023-38197: An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expansion.

Created: 2024-06-29 Last update: 2025-03-22 04:01

debian/patches: 11 patches to forward upstream low

Among the 14 debian patches available in version 6.8.2+dfsg-5 of the package, we noticed the following issues:

11 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2025-03-01 18:34

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2024-03-11 Last update: 2024-06-06 21:42

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.2 instead of 4.7.0).

Created: 2025-02-21 Last update: 2025-03-01 19:25

news

[rss feed]

[2025-03-14] qt6-base 6.8.2+dfsg-5 MIGRATED to testing (Debian testing watch)
[2025-03-01] Accepted qt6-base 6.8.2+dfsg-5 (source) into unstable (Patrick Franz)
[2025-02-15] Accepted qt6-base 6.8.2+dfsg-4 (source) into experimental (Patrick Franz)
[2025-02-07] qt6-base 6.7.2+dfsg-6 MIGRATED to testing (Debian testing watch)
[2025-02-04] Accepted qt6-base 6.8.2+dfsg-3 (source) into experimental (Pino Toscano)
[2025-02-03] Accepted qt6-base 6.8.2+dfsg-2 (source) into experimental (Pino Toscano)
[2025-02-02] Accepted qt6-base 6.8.2+dfsg-1 (source) into experimental (Patrick Franz)
[2025-02-02] Accepted qt6-base 6.7.2+dfsg-6 (source) into unstable (Sandro Knauß)
[2024-12-14] qt6-base 6.7.2+dfsg-5 MIGRATED to testing (Debian testing watch)
[2024-12-08] Accepted qt6-base 6.7.2+dfsg-5 (source) into unstable (Patrick Franz)
[2024-10-30] qt6-base 6.7.2+dfsg-4 MIGRATED to testing (Debian testing watch)
[2024-10-24] qt6-base 6.7.2+dfsg-3 MIGRATED to testing (Debian testing watch)
[2024-10-23] Accepted qt6-base 6.7.2+dfsg-4 (source) into unstable (Pino Toscano)
[2024-10-05] Accepted qt6-base 6.7.2+dfsg-3 (source) into unstable (Patrick Franz)
[2024-09-29] qt6-base 6.6.2+dfsg-12 MIGRATED to testing (Debian testing watch)
[2024-09-22] Accepted qt6-base 6.6.2+dfsg-12 (source) into unstable (Dmitry Shachnev)
[2024-08-30] Accepted qt6-base 6.7.2+dfsg-2 (source) into experimental (Patrick Franz)
[2024-08-28] Accepted qt6-base 6.7.2+dfsg-1 (source) into experimental (Patrick Franz)
[2024-08-08] qt6-base 6.6.2+dfsg-11 MIGRATED to testing (Debian testing watch)
[2024-08-02] Accepted qt6-base 6.6.2+dfsg-11 (source) into unstable (Dmitry Shachnev)
[2024-07-22] qt6-base 6.6.2+dfsg-10 MIGRATED to testing (Debian testing watch)
[2024-07-16] Accepted qt6-base 6.6.2+dfsg-10 (source) into unstable (Pino Toscano)
[2024-07-10] qt6-base 6.6.2+dfsg-9 MIGRATED to testing (Debian testing watch)
[2024-07-05] Accepted qt6-base 6.6.2+dfsg-9 (source) into unstable (Pino Toscano)
[2024-06-20] qt6-base 6.6.2+dfsg-8 MIGRATED to testing (Debian testing watch)
[2024-06-06] Accepted qt6-base 6.6.2+dfsg-8 (source) into unstable (Patrick Franz)
[2024-05-03] Accepted qt6-base 6.6.2+dfsg-7 (source) into experimental (Patrick Franz)
[2024-05-01] Accepted qt6-base 6.6.2+dfsg-6 (source) into experimental (Patrick Franz)
[2024-05-01] qt6-base 6.4.2+dfsg-21.1 MIGRATED to testing (Debian testing watch)
[2024-04-30] Accepted qt6-base 6.6.2+dfsg-5 (source) into experimental (Patrick Franz)

bugs [bug history graph]

all: 17 18
RC: 0
I&N: 16 17
M&W: 1
F&P: 0
patch: 2

links

homepage
lintian (12, 98)
buildd: logs, checks, reproducibility, cross
popcon
browse source code
edit tags
other distros
security tracker
debian patches

ubuntu

[Information about Ubuntu for Debian Developers]

version: 6.8.2+dfsg-5
7 bugs