[Interest] Glib vulnerability on QT 5.6.3 dependency

[Thiago Macieira]

On Thursday, 7 January 2021 03:15:41 -03 Ramakanth Kesireddy wrote:
> A vulnerability is found with the glib version 2.52.3 as
> https://nvd.nist.gov/vuln/detail/CVE-2019-12450.
> 
> Is it recommended to upgrade the glib version to 2.8.3 or look for any
> patch with the existing version or ignore the CVE?

First, 52 > 8, so your question makes absolutely no sense.

Second, 2.58 is not the latest stable version of glib, 2.66 is. You should 
consider upgrading to that.

Third, you should always upgrade your components to avoid security issues. 
Don't let your system get too old. Like running Qt 5.6.

-- 
Thiago Macieira - thiago.macieira (AT) intel.com
  Software Architect - Intel DPG Cloud Engineering