CVE-2013-1665

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

====================
aqtinstall changeLog
====================

All notable changes to this project will be documented in this file.

`Unreleased`_
=============

Changed
-------
* Use SHA256 hash from trusted mirror for integrity check (493)
* Check Update.xml file with SHA256 hash (493)
* Update combinations.xml (495)
* QtDesignStudio, IFW version change
* Update fallback mirror list (485)

Fixed
-----
* Test: Conditionally install dependencies on Ubuntu (494)

Added
-----
* doc: warn about unrelated aqt package (490)
* doc: add explanation of --config flag in CLI docs (491)
* doc: note about MSYS2/Mingw64 environment

Security
--------
* Use secrets for secure random numbers(498)
* Use defusedxml to parse Updates.xml file to avoid attack(498)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1665