Jan 21, 2025
Security advisory: A read past the end of the buffer and division by zero security issue in QLowEnergyController on Linux impacts Qt
A read past the end of the buffer and division by zero security issue in..
Jul 17, 2024
Security advisory: Recently discovered HTTP2 handling issue impacts Qt
Whenever a TLS connection is started for a server that supports HTTP2 and..
May 24, 2024
Security advisory: OAuth1 in QtNetworkAuth
The OAuth1 implementation in QtNetworkAuth created nonces using a PRNG..
log4j is included with a Squish 6.7.2 install on Windows.
Update 2021-12-20
As stated by Andy below, the included file is a binding and not the problematic framework.
Thank you for clarifying, Andy!
There's a Java .jar file deep inside of the Squish IDE installation that has "log4j" in its name. But that one is just a binding for the vulnerable framework. So there is nothing to be concerned about here.
Does this statement also apply to older versions of Qt? (i.e. 5). Thanks
Yes.