Publishing details

Changelog

qtbase-opensource-src (5.9.5+dfsg-0ubuntu2.6) bionic-security; urgency=medium

  * SECURITY UPDATE: buffer overread in read_xbm_body
    - debian/patches/CVE-2020-17507.patch: fix buffer overflow in XBM
      parser in src/gui/image/qxbmhandler.cpp,
      tests/auto/gui/image/qimagereader/tst_qimagereader.cpp.
    - CVE-2020-17507
  * SECURITY UPDATE: out-of-bounds write in QOutlineMapper::convertPath
    - debian/patches/CVE-2021-38593-1.patch: avoid processing-intensive
      painting of high number of tiny dashes in
      src/gui/painting/qpaintengineex.cpp,
      tests/auto/other/lancelot/scripts/tinydashes.qps.
    - debian/patches/CVE-2021-38593-2.patch: improve fix for avoiding huge
      number of tiny dashes in src/gui/painting/qpaintengineex.cpp.
    - CVE-2021-38593

 -- Marc Deslauriers <email address hidden>  Thu, 19 Aug 2021 09:17:52 -0400

Available diffs

Builds

Built packages

Package files