package/qt6: security bump version to 6.11.3

PATCH In review Angelo Compagnucci 2 participants 2 messages Nov 2 – Nov 4

lore

Share & tools

lore

Angelo Compagnucci

author

2026-11-02 09:59 UTC #0 lore raw

PATCH 1/1 package/qt6: security bump version to 6.11.3

Fixes the following security issues:

- CVE-2026-82292: issue in qtbase
- CVE-2026-95620: Use-after-free in QNetworkAccessManager HTTP/2 support (qtbase)
- CVE-2026-96432: Null pointer dereference in QNetworkAccessManager (qtbase)
- CVE-2026-97845: issue in qt5compat
- CVE-2026-100140: Integer overflow in XML parsing (qt5compat)
- CVE-2026-101201: Out-of-bounds read in JSON document parsing (qtbase, qt5compat)
- CVE-2026-103645: issue in qt5compat
- CVE-2026-103653: issue in qtcoap
- CVE-2026-105923: Null pointer dereference in QTriangulator reachable through VectorImage (qtbase)
- CVE-2026-105924: NULL pointer dereference in QCborValue to JSON conversion (qtbase)
- CVE-2026-105925: issue in qt5compat
- CVE-2026-105939: issue in qtwebsockets
- CVE-2026-107457: Memory corruption in QMqttClient (qtmqtt)
- CVE-2026-107472: Out-of-bounds read in QTextCodec TSCII encoding (qt5compat)
- CVE-2026-107479: issue in qt5compat
- CVE-2026-107590: Out-of-bounds write in QTextCodec iconv-based encoding (qt5compat)
- CVE-2026-108081: issue in qtbase
- CVE-2026-110944: issue in qthttpserver
- CVE-2026-111487: Out-of-bounds write in the assimp scene import plugin (qt3d)
- CVE-2026-114366: issue in qtwebsockets

Release notes:
https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/6.11.3/release-note.md

Signed-off-by Angelo Compagnucci <[email protected]>

---
 package/qt6/qt6.mk                                     | 2 +-
 package/qt6/qt6base/qt6base.hash                       | 4 ++--
 package/qt6/qt6charts/qt6charts.hash                   | 4 ++--
 package/qt6/qt6core5compat/qt6core5compat.hash         | 4 ++--
 package/qt6/qt6declarative/qt6declarative.hash         | 4 ++--
 package/qt6/qt6graphs/qt6graphs.hash                   | 4 ++--
 package/qt6/qt6grpc/qt6grpc.hash                       | 4 ++--
 package/qt6/qt6languageserver/qt6languageserver.hash   | 4 ++--
 package/qt6/qt6mqtt/qt6mqtt.hash                       | 2 +-
 package/qt6/qt6multimedia/qt6multimedia.hash           | 4 ++--
 package/qt6/qt6opcua/qt6opcua.hash                     | 2 +-
 package/qt6/qt6positioning/qt6positioning.hash         | 4 ++--
 package/qt6/qt6quick3d/qt6quick3d.hash                 | 4 ++--
 package/qt6/qt6quicktimeline/qt6quicktimeline.hash     | 4 ++--
 package/qt6/qt6scxml/qt6scxml.hash                     | 4 ++--
 package/qt6/qt6serialbus/qt6serialbus.hash             | 4 ++--
 package/qt6/qt6serialport/qt6serialport.hash           | 4 ++--
 package/qt6/qt6shadertools/qt6shadertools.hash         | 4 ++--
 package/qt6/qt6svg/qt6svg.hash                         | 4 ++--
 package/qt6/qt6tools/qt6tools.hash                     | 4 ++--
 package/qt6/qt6virtualkeyboard/qt6virtualkeyboard.hash | 4 ++--
 package/qt6/qt6wayland/qt6wayland.hash                 | 4 ++--
 package/qt6/qt6websockets/qt6websockets.hash           | 4 ++--
 23 files changed, 43 insertions(+), 43 deletions(-)

package/qt6/qt6.mk +1 -1

index f039ccef30..94ef6df360 100644
@@ -5,7 +5,7 @@
 ################################################################################
 
 QT6_VERSION_MAJOR = 6.11
-QT6_VERSION = $(QT6_VERSION_MAJOR).2
+QT6_VERSION = $(QT6_VERSION_MAJOR).3
 QT6_SOURCE_TARBALL_PREFIX = everywhere-src
 QT6_SITE = https://download.qt.io/archive/qt/$(QT6_VERSION_MAJOR)/$(QT6_VERSION)/submodules

package/qt6/qt6base/qt6base.hash +2 -2

index d7d0d536a3..5600cb9937 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtbase-everywhere-src-6.11.2.tar.xz.sha256
-sha256  5b2e00eccaf5a4d8c14134ffa0ea8dfd0a35ae1ffc7f8d87fa4305a1ed23cf22  qtbase-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtbase-everywhere-src-6.11.3.tar.xz.sha256
+sha256  46de0710b594945a5d446ae44354daa386141c6903c53781b2ca547bc62f8f8f  qtbase-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files
 sha256  e3ba223bb1423f0aad8c3dfce0fe3148db48926d41e6fbc3afbbf5ff9e1c89cb  LICENSES/Apache-2.0.txt

package/qt6/qt6charts/qt6charts.hash +2 -2

index b5b9eac42d..016e6d297a 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtcharts-everywhere-src-6.11.2.tar.xz.sha256
-sha256  5069e53b81d125509e937c6379cba6d664c562d5a1e5ed28dd383690d4b6fb29  qtcharts-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtcharts-everywhere-src-6.11.3.tar.xz.sha256
+sha256  1d51d18e6f36e8b0dbbcd1a59f3ce9452ca5bf9b2d2fc8465be18cd0d06d6700  qtcharts-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files
 sha256  8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903  LICENSES/GPL-3.0-only.txt

package/qt6/qt6core5compat/qt6core5compat.hash +2 -2

index ae2c040d94..db6adc896c 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qt5compat-everywhere-src-6.11.2.tar.xz.sha256
-sha256  68c320fe3391096a9f2d870170edf1b67dac8af1d0e51c0c9e5343807f114287  qt5compat-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qt5compat-everywhere-src-6.11.3.tar.xz.sha256
+sha256  2e998067417de46355b6750c3709aaa6032fb27e4b16edb5f73fba79fe436516  qt5compat-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files:
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

package/qt6/qt6declarative/qt6declarative.hash +2 -2

index 0d4f8d3a78..32aa367fa1 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtdeclarative-everywhere-src-6.11.2.tar.xz.sha256
-sha256  215b7b70517e380123eabc6b92243f3c47b6f016a91d126057dbe53551c6b430  qtdeclarative-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtdeclarative-everywhere-src-6.11.3.tar.xz.sha256
+sha256  6d6db328a02ae3bb0b1e6944aeef8dfe44cd6b55ab59b1708bbf0400f5759cb5  qtdeclarative-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files:
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

package/qt6/qt6graphs/qt6graphs.hash +2 -2

index 9cf6314aeb..3a18a1e7a3 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtgraphs-everywhere-src-6.11.2.tar.xz.sha256
-sha256  9f2109854afa45dd144116c11461989c411a17065c63da5068441a1200fb8b21  qtgraphs-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtgraphs-everywhere-src-6.11.3.tar.xz.sha256
+sha256  4e74b45c64930022a3c0127a6ea5d406ae973e1af130a9fe22158ab1d784bb6a  qtgraphs-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files
 sha256  8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903  LICENSES/GPL-3.0-only.txt

package/qt6/qt6grpc/qt6grpc.hash +2 -2

index 196e4b70ce..2ecda8548f 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtgrpc-everywhere-src-6.11.2.tar.xz.sha256
-sha256  44414617f0058ff34965fa852027bfcc7e4f71eefca8cd4406c96af22c64ad93  qtgrpc-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtgrpc-everywhere-src-6.11.3.tar.xz.sha256
+sha256  17984706311571d329cead7aff9cc9d744c10fb3004af24a82591baf758485f6  qtgrpc-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files:
 sha256  e3ba223bb1423f0aad8c3dfce0fe3148db48926d41e6fbc3afbbf5ff9e1c89cb  LICENSE.Apache-2.0.txt

package/qt6/qt6languageserver/qt6languageserver.hash +2 -2

index 1ac5820a51..cb91c6fea5 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtlanguageserver-everywhere-src-6.11.2.tar.xz.sha256
-sha256  38bc4272ecf4ca0eb1927227053e52be6b2e05733f46d03422306aace511fc5e  qtlanguageserver-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtlanguageserver-everywhere-src-6.11.3.tar.xz.sha256
+sha256  64f4310b5403157eb7652bbd57bdd09b0ed080c9cd9e98b5bf84883ecaa8d60f  qtlanguageserver-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files:
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

package/qt6/qt6mqtt/qt6mqtt.hash +1 -1

index 521b4339d4..50e63c7d51 100644
@@ -1,5 +1,5 @@
 # Locally computed
-sha256  39551cf7452bc8df60c6d0fd6f0101351c286b9754030f290b258077e7852d83  qt6mqtt-6.11.2-git4.tar.gz
+sha256  f4b9f412c6e85363fc0009c8a9333b35390bb47f1c4da44e6914fd7143bd7cc5  qt6mqtt-6.11.3-git4.tar.gz
 
 # Hashes for license files
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

package/qt6/qt6multimedia/qt6multimedia.hash +2 -2

index 5aa64bbf6a..557530a4ef 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtmultimedia-everywhere-src-6.11.2.tar.xz.sha256
-sha256  967b5e02ec6b793cdb360622cd6e703132836af983208d678dae4b50f109cd9f  qtmultimedia-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtmultimedia-everywhere-src-6.11.3.tar.xz.sha256
+sha256  3d172de9bdd137686c3871762a4adff988a1ec0faec15df0c4560cfc417288e6  qtmultimedia-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

package/qt6/qt6opcua/qt6opcua.hash +1 -1

index e05212eaa8..1c141c162f 100644
@@ -1,5 +1,5 @@
 # Locally computed
-sha256  41982d99b93bfde68f9ee5997376cd64f62d0e7cdca1a08e582a034840528ca1  qt6opcua-6.11.2-git4.tar.gz
+sha256  4d6dd7d8352597143e69bd7ec9e0cf092508a652fe3421357c0d890f1289d924  qt6opcua-6.11.3-git4.tar.gz
 
 # Hashes for license files
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

package/qt6/qt6positioning/qt6positioning.hash +2 -2

index 84e727052c..7d9352b998 100644
@@ -1,5 +1,5 @@
-# From https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtpositioning-everywhere-src-6.11.2.tar.xz.sha256
-sha256  d8cf15ad43a3b1520adac64cec5900028525cf75f01a4c82a0002e7ac1ae7499  qtpositioning-everywhere-src-6.11.2.tar.xz
+# From https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtpositioning-everywhere-src-6.11.3.tar.xz.sha256
+sha256  a38695bc412b7261476e8e96178460ec9319e61c34ecc6a14eb2e76e5c73eca1  qtpositioning-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files
 sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  LICENSES/GPL-2.0-only.txt

package/qt6/qt6quick3d/qt6quick3d.hash +2 -2

index 01f49f2458..beb7b11345 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtquick3d-everywhere-src-6.11.2.tar.xz.sha256
-sha256  3ab8e1f08edb26373a37cf9d42c23e7d092c1334566b953fbb51cb1b936737b4  qtquick3d-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtquick3d-everywhere-src-6.11.3.tar.xz.sha256
+sha256  c05d2491ead3ee22d2c8e9b7c9cc8e5874e7c05c1fc3329bc6a0ece70eaccc96  qtquick3d-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

package/qt6/qt6quicktimeline/qt6quicktimeline.hash +2 -2

index d239f95eb8..60717a3e52 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtquicktimeline-everywhere-src-6.11.2.tar.xz.sha256
-sha256  250af10500a0c4045dde74e107448a69a44d58af8b7e9a91704a808d5f881d17  qtquicktimeline-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtquicktimeline-everywhere-src-6.11.3.tar.xz.sha256
+sha256  e0e52453a4d13f6378fc4dff4cac8ef874fea35ddb9a72c1604e124ee941c692  qtquicktimeline-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files
 sha256  8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903  LICENSES/GPL-3.0-only.txt

package/qt6/qt6scxml/qt6scxml.hash +2 -2

index 823f8d2618..62b1da2cbc 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtscxml-everywhere-src-6.11.2.tar.xz.sha256
-sha256  f594c4bba7f8bffb20857973c72895669d6e54df08c8d897f50d15251cec35ff  qtscxml-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtscxml-everywhere-src-6.11.3.tar.xz.sha256
+sha256  d89d7782d24d9609695c99ffbe8775c74348dc7e742af2b153e357d0ded2081f  qtscxml-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files:
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

package/qt6/qt6serialbus/qt6serialbus.hash +2 -2

index 0e2e9ea5ab..843ba8b548 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtserialbus-everywhere-src-6.11.2.tar.xz.sha256
-sha256  8f06c9ba95f6b045ec43f011094e35a4116047310aa24280966541b720df36c1  qtserialbus-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtserialbus-everywhere-src-6.11.3.tar.xz.sha256
+sha256  934aa90721b17a7f2d7c59a9afcee2526030bfcf3a8caf95278d2690b284569e  qtserialbus-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files:
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

package/qt6/qt6serialport/qt6serialport.hash +2 -2

index 2c90412cdf..4f573a924a 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtserialport-everywhere-src-6.11.2.tar.xz.sha256
-sha256  df3a733616444f31b2ecb689218ea1444be91d8628aa3ab8e464c5eb1b17ad8e  qtserialport-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtserialport-everywhere-src-6.11.3.tar.xz.sha256
+sha256  b09bfb0eace070ce1b980f7f2c9ba9fb885c2cc29a4cd0416061496426601722  qtserialport-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files:
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

package/qt6/qt6shadertools/qt6shadertools.hash +2 -2

index 29d5aa7756..c88f40bbdb 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtshadertools-everywhere-src-6.11.2.tar.xz.sha256
-sha256  805046b8b7757665586890b375940047e874ae3ab00adb6d3f2b38fc6b200b1c  qtshadertools-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtshadertools-everywhere-src-6.11.3.tar.xz.sha256
+sha256  d86079425ec71eecbb05f4d20623b0a403a7d21a5cfa7efb9734ea3d538d801b  qtshadertools-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files:
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

package/qt6/qt6svg/qt6svg.hash +2 -2

index aefc24cc62..a520d8d79f 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtsvg-everywhere-src-6.11.2.tar.xz.sha256
-sha256  d594337feca84c26fb67fe87b85e6a5c12fda404b611d905f9d138210c311876  qtsvg-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtsvg-everywhere-src-6.11.3.tar.xz.sha256
+sha256  9bdf6fa4b5a2d91c3eaa2edd12263fdff0ae19d0ac25d3c99946cd4189a07123  qtsvg-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files:
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

package/qt6/qt6tools/qt6tools.hash +2 -2

index fb4e655e59..3a9a1e4fbe 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qttools-everywhere-src-6.11.2.tar.xz.sha256
-sha256  9ea75af35c512f7e09e61c8c3af3997f13b4d43bb099cf43fcec470126b4041e  qttools-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qttools-everywhere-src-6.11.3.tar.xz.sha256
+sha256  524ca79ee653fa36d4644ce66a5c0825930ee2550ff1d0987e703a66fd6c61ec  qttools-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files:
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

package/qt6/qt6virtualkeyboard/qt6virtualkeyboard.hash +2 -2

index af4477bab4..def4ff4b76 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtvirtualkeyboard-everywhere-src-6.11.2.tar.xz.sha256
-sha256  4c6a26734a5c4e4acd5ff9ae5f192a5b883bc4514118f9df2fcf12064e647c2f  qtvirtualkeyboard-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtvirtualkeyboard-everywhere-src-6.11.3.tar.xz.sha256
+sha256  7c0ea4c6e05cc4d8225c862781efc78284d5f61809eedc405f37ea31acbb7478  qtvirtualkeyboard-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files:
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

package/qt6/qt6wayland/qt6wayland.hash +2 -2

index 767e35c80f..37ee1b7375 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtwayland-everywhere-src-6.11.2.tar.xz.sha256
-sha256  8eb7615e39332a10f506e8dd70f02d5954bb5949ff54f6dcbf8bd6168222f9df  qtwayland-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtwayland-everywhere-src-6.11.3.tar.xz.sha256
+sha256  7f6185eb6e7d75202c42dfaf18dc54ae96f2d9a7a265358d061a6f85366f6c97  qtwayland-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files:
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

package/qt6/qt6websockets/qt6websockets.hash +2 -2

index d20f18f8bd..57c0301c7f 100644
@@ -1,5 +1,5 @@
-# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.2/submodules/qtwebsockets-everywhere-src-6.11.2.tar.xz.sha256
-sha256  2bfe25c383c37f7690e3c59b02c9907d2744cf8527b1f3f1fc2c785b2ff3c9a3  qtwebsockets-everywhere-src-6.11.2.tar.xz
+# Hash from: https://download.qt.io/official_releases/qt/6.11/6.11.3/submodules/qtwebsockets-everywhere-src-6.11.3.tar.xz.sha256
+sha256  19b39acc37ec67a344fe0f080201c2c64d04d2a3d0c7dfa84955033f1016983b  qtwebsockets-everywhere-src-6.11.3.tar.xz
 
 # Hashes for license files:
 sha256  9f0490f18656c6f2435bd14f603ef0c96434d1825615363dce43abb42ed1dcce  LICENSES/BSD-3-Clause.txt

Signature · 6 lines

2.34.1

_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot

Julien Olivain via buildroot

2026-11-04 17:16 UTC #1 lore raw

Quoted 32 lines · Angelo Compagnucci

Fixes the following security issues:
- CVE-2026-82292: issue in qtbase
- CVE-2026-95620: Use-after-free in QNetworkAccessManager HTTP/2 support (qtbase)
- CVE-2026-96432: Null pointer dereference in QNetworkAccessManager (qtbase)
- CVE-2026-97845: issue in qt5compat
- CVE-2026-100140: Integer overflow in XML parsing (qt5compat)
- CVE-2026-101201: Out-of-bounds read in JSON document parsing (qtbase, qt5compat)
- CVE-2026-103645: issue in qt5compat
- CVE-2026-103653: issue in qtcoap
- CVE-2026-105923: Null pointer dereference in QTriangulator reachable through VectorImage (qtbase)
- CVE-2026-105924: NULL pointer dereference in QCborValue to JSON conversion (qtbase)
- CVE-2026-105925: issue in qt5compat
- CVE-2026-105939: issue in qtwebsockets
- CVE-2026-107457: Memory corruption in QMqttClient (qtmqtt)
- CVE-2026-107472: Out-of-bounds read in QTextCodec TSCII encoding (qt5compat)
- CVE-2026-107479: issue in qt5compat
- CVE-2026-107590: Out-of-bounds write in QTextCodec iconv-based encoding (qt5compat)
- CVE-2026-108081: issue in qtbase
- CVE-2026-110944: issue in qthttpserver
- CVE-2026-111487: Out-of-bounds write in the assimp scene import plugin
(qt3d)
- CVE-2026-114366: issue in qtwebsockets

Quoted 4 lines

Release notes:
https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/6.11.3/release-note.md
Signed-off-by Angelo Compagnucci <[email protected]>

Applied to master, thanks.
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot