[ubuntu/bionic-security] qtsvg-opensource-src 5.9.5-0ubuntu1.1 (Accepted)

[Marc Deslauriers]

qtsvg-opensource-src (5.9.5-0ubuntu1.1) bionic-security; urgency=medium

  * SECURITY UPDATE: segfault via malformed image
    - debian/patches/CVE-2018-19869.patch: fix crash when parsing malformed
      url reference in src/svg/qsvghandler.cpp,
      tests/auto/qsvgrenderer/tst_qsvgrenderer.cpp.
    - CVE-2018-19869
  * SECURITY UPDATE: Out of bounds read
    - debian/patches/CVE-2021-3481-pre1.patch: improve handling of
      malformed numeric values in svg files in src/svg/qsvghandler.cpp.
    - debian/patches/CVE-2021-3481.patch: clamp parsed doubles to float
      representable values in src/svg/qsvghandler.cpp.
    - CVE-2021-3481
  * SECURITY UPDATE: Out of bounds write
    - debian/patches/CVE-2021-45930.patch: do stricter error checking when
      parsing path nodes in src/svg/qsvghandler.cpp.
    - CVE-2021-45930

Date: 2022-01-13 16:12:10.039039+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/qtsvg-opensource-src/5.9.5-0ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.