Skip to content

我用一些工具扫描出Notepad--v2.20.0-win10-portable.zip、Notepad--v3.8-win10-portable.zip里都存在一样的漏洞,我们是否能修复? #721

Description

@xieale

漏洞应该都是里面的开源组件导致的,看下是否更新下里面的开源组件版本来修复此漏洞(libjpeg-turbo 2.0.5、libtiff 4.1.0、qt 5.15.2)
libjpeg-turbo建议升级到3.1.0、libtiff 建议升级到4.7.2、qt 建议升到5.15.17,或更高版本;

漏洞具体情况:
Component Version CVE
libjpeg-turbo 2.0.5 CVE-2020-35538
libjpeg-turbo 2.0.5 CVE-2021-46822
libtiff - tiff library and utilities 4.1.0 CVE-2020-35521
libtiff - tiff library and utilities 4.1.0 CVE-2020-35522
libtiff - tiff library and utilities 4.1.0 CVE-2020-35523
libtiff - tiff library and utilities 4.1.0 CVE-2020-35524
libtiff - tiff library and utilities 4.1.0 CVE-2022-0561
libtiff - tiff library and utilities 4.1.0 CVE-2022-0562
libtiff - tiff library and utilities 4.1.0 CVE-2022-0891
libtiff - tiff library and utilities 4.1.0 CVE-2022-0908
libtiff - tiff library and utilities 4.1.0 CVE-2022-1354
libtiff - tiff library and utilities 4.1.0 CVE-2022-1355
libtiff - tiff library and utilities 4.1.0 CVE-2022-2867
libtiff - tiff library and utilities 4.1.0 CVE-2022-2868
libtiff - tiff library and utilities 4.1.0 CVE-2022-2869
libtiff - tiff library and utilities 4.1.0 CVE-2022-2953
libtiff - tiff library and utilities 4.1.0 CVE-2022-3570
libtiff - tiff library and utilities 4.1.0 CVE-2022-3597
libtiff - tiff library and utilities 4.1.0 CVE-2022-3598
libtiff - tiff library and utilities 4.1.0 CVE-2022-3599
libtiff - tiff library and utilities 4.1.0 CVE-2022-3626
libtiff - tiff library and utilities 4.1.0 CVE-2022-3627
libtiff - tiff library and utilities 4.1.0 CVE-2022-3970
libtiff - tiff library and utilities 4.1.0 CVE-2022-40090
libtiff - tiff library and utilities 4.1.0 CVE-2022-48281
libtiff - tiff library and utilities 4.1.0 CVE-2023-0795
libtiff - tiff library and utilities 4.1.0 CVE-2023-0796
libtiff - tiff library and utilities 4.1.0 CVE-2023-0797
libtiff - tiff library and utilities 4.1.0 CVE-2023-0798
libtiff - tiff library and utilities 4.1.0 CVE-2023-0799
libtiff - tiff library and utilities 4.1.0 CVE-2023-0800
libtiff - tiff library and utilities 4.1.0 CVE-2023-0801
libtiff - tiff library and utilities 4.1.0 CVE-2023-0802
libtiff - tiff library and utilities 4.1.0 CVE-2023-0803
libtiff - tiff library and utilities 4.1.0 CVE-2023-0804
libtiff - tiff library and utilities 4.1.0 CVE-2023-1916
libtiff - tiff library and utilities 4.1.0 CVE-2023-25433
libtiff - tiff library and utilities 4.1.0 CVE-2023-25434
libtiff - tiff library and utilities 4.1.0 CVE-2023-25435
libtiff - tiff library and utilities 4.1.0 CVE-2023-26965
libtiff - tiff library and utilities 4.1.0 CVE-2023-26966
libtiff - tiff library and utilities 4.1.0 CVE-2023-2908
libtiff - tiff library and utilities 4.1.0 CVE-2023-30774
libtiff - tiff library and utilities 4.1.0 CVE-2023-3164
libtiff - tiff library and utilities 4.1.0 CVE-2023-3316
libtiff - tiff library and utilities 4.1.0 CVE-2023-3576
libtiff - tiff library and utilities 4.1.0 CVE-2023-52355
libtiff - tiff library and utilities 4.1.0 CVE-2023-6228
libtiff - tiff library and utilities 4.1.0 CVE-2023-6277
libtiff - tiff library and utilities 4.1.0 CVE-2024-7006
qt 5.15.2 CVE-2021-3481
qt 5.15.2 CVE-2021-38593
qt 5.15.2 CVE-2022-25255
qt 5.15.2 CVE-2022-25634
qt 5.15.2 CVE-2023-24607
qt 5.15.2 CVE-2023-32573
qt 5.15.2 CVE-2023-32762
qt 5.15.2 CVE-2023-32763
qt 5.15.2 CVE-2023-33285
qt 5.15.2 CVE-2023-34410
qt 5.15.2 CVE-2023-37369
qt 5.15.2 CVE-2023-38197
qt 5.15.2 CVE-2023-43114
qt 5.15.2 CVE-2023-51714
qt 5.15.2 CVE-2024-36048
qt 5.15.2 CVE-2024-39936
qt 5.15.2 CVE-2025-30348

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions