Univention Bugzilla – Bug 52162
qtbase-opensource-src: Multiple issues (4.4)
Last modified: 2020-09-30 15:37:51 CEST
New Debian qtbase-opensource-src 5.7.1+dfsg-3+deb9u3 fixes: This update addresses the following issues: * Malformed PPM image causing division by zero and crash in qppmhandler.cpp (CVE-2018-19872) * buffer over-read in read_xbm_body in gui/image/qxbmhandler.cpp (CVE-2020-17507)
--- mirror/ftp/4.4/unmaintained/4.4-4/source/qtbase-opensource-src_5.7.1+dfsg-3+deb9u2.dsc +++ apt/ucs_4.4-0-errata4.4-6/source/qtbase-opensource-src_5.7.1+dfsg-3+deb9u3.dsc @@ -1,3 +1,9 @@ +5.7.1+dfsg-3+deb9u3 [Sun, 20 Sep 2020 22:02:00 +0300] Adrian Bunk <bunk@debian.org>: + + * Non-maintainer upload by the LTS team. + * CVE-2018-19872: A malformed PPM image causes a crash. + * CVE-2020-17507: Buffer over-read in the XBM parser. + 5.7.1+dfsg-3+deb9u2 [Thu, 30 Jan 2020 12:33:15 -0300] Lisandro Damián Nicanor Pérez Meyer <lisandro@debian.org>: * Backport fix for CVE-2020-0569: Do not load plugin from the CWD. <http://10.200.17.11/4.4-6/#3299992210017007037>
OK: yaml OK: announce_errata OK: patch OK: piuparts [4.4-6] 775d91ea20 Bug #52162: qtbase-opensource-src 5.7.1+dfsg-3+deb9u3 doc/errata/staging/qtbase-opensource-src.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) [4.4-6] d177dce334 Bug #52162: qtbase-opensource-src 5.7.1+dfsg-3+deb9u3 doc/errata/staging/qtbase-opensource-src.yaml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+)
<https://errata.software-univention.de/#/?erratum=4.4x756>