Fix CVE-2023-24607
authorDebian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Tue, 28 Feb 2023 22:22:10 +0000 (22:22 +0000)
committerPatrick Franz <deltaone@debian.org>
Tue, 28 Feb 2023 22:22:10 +0000 (22:22 +0000)
commit1d56ef871ea455b00cdaed490788fab8e1accf50
tree70f020bfa6d9a2f487490f45217c09baa0fcca1b
parenta720feff9e9fc5fc717db3c48dfc00f9c74b586a
Fix CVE-2023-24607

Forwarded: not-needed

CVE-2023-24607 can trigger a DOS with a specifically crafted string,
see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031871.
This patch https://codereview.qt-project.org/c/qt/qtbase/+/456216,
https://codereview.qt-project.org/c/qt/qtbase/+/457637 and
https://codereview.qt-project.org/c/qt/qtbase/+/457937
See: https://www.qt.io/blog/security-advisory-qt-sql-odbc-driver-plugin

Gbp-Pq: Name cve-2023-24607.patch
src/plugins/sqldrivers/odbc/qsql_odbc.cpp