[ubuntu/bionic-security] qtbase-opensource-src 5.9.5+dfsg-0ubuntu2.6 (Accepted)

[Marc Deslauriers]

qtbase-opensource-src (5.9.5+dfsg-0ubuntu2.6) bionic-security; urgency=medium

  * SECURITY UPDATE: buffer overread in read_xbm_body
    - debian/patches/CVE-2020-17507.patch: fix buffer overflow in XBM
      parser in src/gui/image/qxbmhandler.cpp,
      tests/auto/gui/image/qimagereader/tst_qimagereader.cpp.
    - CVE-2020-17507
  * SECURITY UPDATE: out-of-bounds write in QOutlineMapper::convertPath
    - debian/patches/CVE-2021-38593-1.patch: avoid processing-intensive
      painting of high number of tiny dashes in
      src/gui/painting/qpaintengineex.cpp,
      tests/auto/other/lancelot/scripts/tinydashes.qps.
    - debian/patches/CVE-2021-38593-2.patch: improve fix for avoiding huge
      number of tiny dashes in src/gui/painting/qpaintengineex.cpp.
    - CVE-2021-38593

Date: 2021-08-19 18:14:09.489235+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/qtbase-opensource-src/5.9.5+dfsg-0ubuntu2.6
-------------- next part --------------
Sorry, changesfile not available.