[ubuntu/bionic-updates] qtsvg-opensource-src 5.9.5-0ubuntu1.1 (Accepted)

Ubuntu Archive Robot ubuntu-archive-robot at lists.canonical.com
Wed Jan 19 18:58:08 UTC 2022

qtsvg-opensource-src (5.9.5-0ubuntu1.1) bionic-security; urgency=medium

  * SECURITY UPDATE: segfault via malformed image
    - debian/patches/CVE-2018-19869.patch: fix crash when parsing malformed
      url reference in src/svg/qsvghandler.cpp,
    - CVE-2018-19869
  * SECURITY UPDATE: Out of bounds read
    - debian/patches/CVE-2021-3481-pre1.patch: improve handling of
      malformed numeric values in svg files in src/svg/qsvghandler.cpp.
    - debian/patches/CVE-2021-3481.patch: clamp parsed doubles to float
      representable values in src/svg/qsvghandler.cpp.
    - CVE-2021-3481
  * SECURITY UPDATE: Out of bounds write
    - debian/patches/CVE-2021-45930.patch: do stricter error checking when
      parsing path nodes in src/svg/qsvghandler.cpp.
    - CVE-2021-45930

Date: 2022-01-13 16:12:10.039039+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
-------------- next part --------------
Sorry, changesfile not available.

More information about the Bionic-changes mailing list