{
	"document":{
		"aggregate_severity":{
			"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
			"text":"Medium"
		},
		"category":"csaf_vex",
		"csaf_version":"2.0",
		"distribution":{
			"tlp":{
				"label":"WHITE",
				"url":"https:/www.first.org/tlp/"
			}
		},
		"lang":"en",
		"notes":[
			{
				"text":"qt6-qt5compat security update",
				"category":"general",
				"title":"Synopsis"
			},
			{
				"text":"An update for qt6-qt5compat is now available for openEuler-24.03-LTS-SP1",
				"category":"general",
				"title":"Summary"
			},
			{
				"text":".\n\nSecurity Fix(es):\n\nAn out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Applications that convert text to the TSCII encoding through QTextCodec may read memory outside the input buffer, which can cause the application to crash or misinterpret the data.(CVE-2026-107472)",
				"category":"general",
				"title":"Description"
			},
			{
				"text":"An update for qt6-qt5compat is now available for openEuler-24.03-LTS-SP1.\n\nopenEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.",
				"category":"general",
				"title":"Topic"
			},
			{
				"text":"Medium",
				"category":"general",
				"title":"Severity"
			},
			{
				"text":"qt6-qt5compat",
				"category":"general",
				"title":"Affected Component"
			}
		],
		"publisher":{
			"issuing_authority":"openEuler security committee",
			"name":"openEuler",
			"namespace":"https://www.openeuler.org",
			"contact_details":"openeuler-security@openeuler.org",
			"category":"vendor"
		},
		"references":[
			{
				"summary":"openEuler-SA-2026-4670",
				"category":"self",
				"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4670"
			},
			{
				"summary":"CVE-2026-107472",
				"category":"self",
				"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-107472&packageName=qt6-qt5compat"
			},
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107472"
			},
			{
				"summary":"openEuler-SA-2026-4670 vex file",
				"category":"self",
				"url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-4670.json"
			}
		],
		"title":"An update for qt6-qt5compat is now available for openEuler-24.03-LTS-SP1",
		"tracking":{
			"initial_release_date":"2026-11-09T09:27:02+08:00",
			"revision_history":[
				{
					"date":"2026-11-09T09:27:02+08:00",
					"summary":"Initial",
					"number":"1.0.0"
				}
			],
			"generator":{
				"date":"2026-11-09T09:27:02+08:00",
				"engine":{
					"name":"openEuler CSAF Tool V1.0"
				}
			},
			"current_release_date":"2026-11-09T09:27:02+08:00",
			"id":"openEuler-SA-2026-4670",
			"version":"1.0.0",
			"status":"final"
		}
	},
	"product_tree":{
		"branches":[
			{
				"name":"openEuler",
				"category":"vendor",
				"branches":[
					{
						"name":"openEuler",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openEuler-24.03-LTS-SP1",
									"name":"openEuler-24.03-LTS-SP1"
								},
								"name":"openEuler-24.03-LTS-SP1",
								"category":"product_version"
							}
						],
						"category":"product_name"
					},
					{
						"name":"aarch64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"qt6-qt5compat-6.5.2-4.oe2403sp1.aarch64.rpm",
									"name":"qt6-qt5compat-6.5.2-4.oe2403sp1.aarch64.rpm"
								},
								"name":"qt6-qt5compat-6.5.2-4.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.aarch64.rpm",
									"name":"qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.aarch64.rpm"
								},
								"name":"qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.aarch64.rpm",
									"name":"qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.aarch64.rpm"
								},
								"name":"qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"qt6-qt5compat-devel-6.5.2-4.oe2403sp1.aarch64.rpm",
									"name":"qt6-qt5compat-devel-6.5.2-4.oe2403sp1.aarch64.rpm"
								},
								"name":"qt6-qt5compat-devel-6.5.2-4.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"src",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"qt6-qt5compat-6.5.2-4.oe2403sp1.src.rpm",
									"name":"qt6-qt5compat-6.5.2-4.oe2403sp1.src.rpm"
								},
								"name":"qt6-qt5compat-6.5.2-4.oe2403sp1.src.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"x86_64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"qt6-qt5compat-6.5.2-4.oe2403sp1.x86_64.rpm",
									"name":"qt6-qt5compat-6.5.2-4.oe2403sp1.x86_64.rpm"
								},
								"name":"qt6-qt5compat-6.5.2-4.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.x86_64.rpm",
									"name":"qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.x86_64.rpm"
								},
								"name":"qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.x86_64.rpm",
									"name":"qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.x86_64.rpm"
								},
								"name":"qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"qt6-qt5compat-devel-6.5.2-4.oe2403sp1.x86_64.rpm",
									"name":"qt6-qt5compat-devel-6.5.2-4.oe2403sp1.x86_64.rpm"
								},
								"name":"qt6-qt5compat-devel-6.5.2-4.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					}
				]
			}
		],
		"relationships":[
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"qt6-qt5compat-6.5.2-4.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:qt6-qt5compat-6.5.2-4.oe2403sp1.aarch64",
					"name":"qt6-qt5compat-6.5.2-4.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.aarch64",
					"name":"qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.aarch64",
					"name":"qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"qt6-qt5compat-devel-6.5.2-4.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:qt6-qt5compat-devel-6.5.2-4.oe2403sp1.aarch64",
					"name":"qt6-qt5compat-devel-6.5.2-4.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"qt6-qt5compat-6.5.2-4.oe2403sp1.src.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:qt6-qt5compat-6.5.2-4.oe2403sp1.src",
					"name":"qt6-qt5compat-6.5.2-4.oe2403sp1.src as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"qt6-qt5compat-6.5.2-4.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:qt6-qt5compat-6.5.2-4.oe2403sp1.x86_64",
					"name":"qt6-qt5compat-6.5.2-4.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.x86_64",
					"name":"qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.x86_64",
					"name":"qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"qt6-qt5compat-devel-6.5.2-4.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:qt6-qt5compat-devel-6.5.2-4.oe2403sp1.x86_64",
					"name":"qt6-qt5compat-devel-6.5.2-4.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			}
		]
	},
	"vulnerabilities":[
		{
			"cve":"CVE-2026-107472",
			"notes":[
				{
					"text":"An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Applications that convert text to the TSCII encoding through QTextCodec may read memory outside the input buffer, which can cause the application to crash or misinterpret the data.",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-24.03-LTS-SP1:qt6-qt5compat-6.5.2-4.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:qt6-qt5compat-devel-6.5.2-4.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:qt6-qt5compat-6.5.2-4.oe2403sp1.src",
					"openEuler-24.03-LTS-SP1:qt6-qt5compat-6.5.2-4.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:qt6-qt5compat-devel-6.5.2-4.oe2403sp1.x86_64"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-6.5.2-4.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-devel-6.5.2-4.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-6.5.2-4.oe2403sp1.src",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-6.5.2-4.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-devel-6.5.2-4.oe2403sp1.x86_64"
					],
					"details":"qt6-qt5compat security update",
					"category":"vendor_fix",
					"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4670"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"MEDIUM",
						"baseScore":4.3,
						"vectorString":"CVSS:3.1/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/R:U/RE:L/U:Green",
						"version":"3.1"
					},
					"products":[
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-6.5.2-4.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-devel-6.5.2-4.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-6.5.2-4.oe2403sp1.src",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-6.5.2-4.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-debuginfo-6.5.2-4.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-debugsource-6.5.2-4.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:qt6-qt5compat-devel-6.5.2-4.oe2403sp1.x86_64"
					]
				}
			],
			"threats":[
				{
					"details":"Medium",
					"category":"impact"
				}
			],
			"title":"CVE-2026-107472"
		}
	]
}