qt4-x11 (4:4.8.7+dfsg-11+deb9u1) stretch-security; urgency=medium
authorAdrian Bunk <bunk@debian.org>
Sun, 20 Sep 2020 19:01:50 +0000 (20:01 +0100)
committerAdrian Bunk <bunk@debian.org>
Sun, 20 Sep 2020 19:01:50 +0000 (20:01 +0100)
commit3f329b02aad31d6980dbd85c58fbb0377f66b9b6
treef53c384e6de74890b8d7a4ffca24bb2ee4d63725
parentad1dcb6a46bfd3e7968de4b1d56003c5b699651f
parentd22b2573daa5fad9cb517a07fcfa14691fd88426
qt4-x11 (4:4.8.7+dfsg-11+deb9u1) stretch-security; urgency=medium

  * Non-maintainer upload by the LTS team.
  * CVE-2018-15518: Double-free or corruption in QXmlStreamReader
    during parsing of a specially crafted illegal XML document.
  * CVE-2018-19869: A malformed SVG image causes a segmentation fault.
  * CVE-2018-19870: A malformed GIF image causes a NULL pointer
    dereference in QGifHandler resulting in a segmentation fault.
  * CVE-2018-19871: Uncontrolled Resource Consumption in QTgaFile.
  * CVE-2018-19872: A malformed PPM image causes a crash.
  * CVE-2018-19873: QBmpHandler segfault on malformed BMP file.
  * CVE-2020-17507: Buffer over-read in the XBM parser.

[dgit import unpatched qt4-x11 4:4.8.7+dfsg-11+deb9u1]
195 files changed:
debian/README.source
debian/TODO.Debian
debian/changelog
debian/collection/qtdemo.qhc
debian/compat
debian/control
debian/copyright
debian/desktop/assistant-qt4.desktop
debian/desktop/assistant.png
debian/desktop/designer-qt4.desktop
debian/desktop/designer.png
debian/desktop/linguist-qt4.desktop
debian/desktop/linguist.png
debian/desktop/qtconfig-qt4.desktop
debian/desktop/qtconfig.png
debian/libqt4-declarative-folderlistmodel.install
debian/libqt4-declarative-gestures.install
debian/libqt4-declarative-particles.install
debian/libqt4-declarative-shaders.install
debian/libqt4-declarative.install
debian/libqt4-declarative.lintian-overrides
debian/libqt4-declarative.symbols
debian/libqt4-designer.install
debian/libqt4-designer.lintian-overrides
debian/libqt4-designer.symbols
debian/libqt4-dev-bin.install
debian/libqt4-dev-bin.links.in
debian/libqt4-dev-bin.manpages
debian/libqt4-dev-bin.preinst
debian/libqt4-dev.dirs
debian/libqt4-dev.install
debian/libqt4-dev.links
debian/libqt4-dev.lintian-overrides
debian/libqt4-help.install
debian/libqt4-help.lintian-overrides
debian/libqt4-help.symbols
debian/libqt4-network.install
debian/libqt4-network.lintian-overrides
debian/libqt4-network.symbols
debian/libqt4-opengl-dev.install
debian/libqt4-opengl.install
debian/libqt4-opengl.lintian-overrides
debian/libqt4-opengl.symbols
debian/libqt4-phonon.install
debian/libqt4-phonon.lintian-overrides
debian/libqt4-qt3support.install
debian/libqt4-qt3support.lintian-overrides
debian/libqt4-qt3support.symbols
debian/libqt4-script.install
debian/libqt4-script.lintian-overrides
debian/libqt4-script.symbols
debian/libqt4-scripttools.install
debian/libqt4-scripttools.lintian-overrides
debian/libqt4-scripttools.symbols
debian/libqt4-sql-ibase.install
debian/libqt4-sql-mysql.install
debian/libqt4-sql-odbc.install
debian/libqt4-sql-psql.install
debian/libqt4-sql-sqlite.install
debian/libqt4-sql-sqlite2.install
debian/libqt4-sql-tds.install
debian/libqt4-sql.install
debian/libqt4-sql.lintian-overrides
debian/libqt4-sql.symbols
debian/libqt4-svg.install
debian/libqt4-svg.lintian-overrides
debian/libqt4-svg.symbols
debian/libqt4-test.install
debian/libqt4-test.lintian-overrides
debian/libqt4-test.symbols
debian/libqt4-webkit-dbg.lintian-overrides
debian/libqt4-xml.install
debian/libqt4-xml.lintian-overrides
debian/libqt4-xml.symbols
debian/libqt4-xmlpatterns.install
debian/libqt4-xmlpatterns.lintian-overrides
debian/libqt4-xmlpatterns.symbols
debian/libqtcore4.install
debian/libqtcore4.symbols
debian/libqtdbus4.install
debian/libqtdbus4.lintian-overrides
debian/libqtdbus4.symbols
debian/libqtgui4.install
debian/libqtgui4.symbols
debian/manpages/assistant-qt4.1
debian/manpages/designer-qt4.1
debian/manpages/linguist-qt4.1
debian/manpages/lrelease-qt4.1
debian/manpages/lupdate-qt4.1
debian/manpages/moc-qt4.1
debian/manpages/qdbus.1
debian/manpages/qmake-qt4.1
debian/manpages/qtconfig-qt4.1
debian/patches/0195-compositing-properties.diff
debian/patches/0225-invalidate-tabbar-geometry-on-refresh.patch
debian/patches/02_syncqt_sane_timestamp_for_nonexisting_headers.diff
debian/patches/07_trust_dpkg-arch_over_uname-m.diff
debian/patches/08_configure_quilt_compat.diff
debian/patches/10_config_tests_fixes.diff
debian/patches/11_build_translations.diff
debian/patches/12_add_nostrip_for_debug_packages.diff
debian/patches/13_fix_prl_files_dont_link_entire_world.diff.disabled
debian/patches/15_fix_qmake_makefile_generation.diff
debian/patches/16_hide_std_symbols_on_qtwebkit.diff
debian/patches/18_enable_qt3support_qtwebkit_debug_info.diff
debian/patches/20_install_qvfb.diff
debian/patches/23_permit_plugins_built_with_future_qt.diff
debian/patches/30_webkit_unaligned_access.diff
debian/patches/40_alpha_ice.diff
debian/patches/41_disable_opengl_visibility.diff
debian/patches/50_kfreebsd_Q_OS.diff
debian/patches/51_kfreebsd_strnstr_build_fix.diff
debian/patches/70_hppa_ldcw_fix.diff
debian/patches/71_hppa_unaligned_access_fix_458133.diff
debian/patches/80_hurd_max_path.diff
debian/patches/92_armel_gcc43_valist_compat.diff
debian/patches/94_armv6_uname_entry.diff
debian/patches/96_webkit_no_gc_sections.diff
debian/patches/99_hppa_bug561203_decrease_failure_rate.diff
debian/patches/Add_support_for_QT_USE_DRAG_DISTANCE_env_var.patch
debian/patches/Better-handling-of-invalid-font-tables.patch
debian/patches/CVE-2018-15518.patch
debian/patches/CVE-2018-19869.patch
debian/patches/CVE-2018-19870.patch
debian/patches/CVE-2018-19871.patch
debian/patches/CVE-2018-19872.patch
debian/patches/CVE-2018-19873.patch
debian/patches/CVE-2020-17507.patch
debian/patches/QTBUG-21900_Buttons_in_Qt_applications_not_clickable_when_run_under_gnome-shell.patch
debian/patches/QTBUG-25324_assistant_segfault_on_start_with_gcc_4.7.patch
debian/patches/QtScript_x32_config.diff
debian/patches/aarch64_arm64_qatomic_support.patch
debian/patches/add-lxde-support.patch
debian/patches/add-mate-support.patch
debian/patches/add_missing_method_for_QBasicAtomicPointer_on_s390.patch
debian/patches/buildable_appchooser_states_demos.patch
debian/patches/dont_crash_on_broken_gif_images.patch
debian/patches/kfreebsd_monotonic_clock.diff
debian/patches/no-ssl3.patch
debian/patches/no_libicu_message.diff
debian/patches/parisc-atomic.patch
debian/patches/plugin_system_for_systemtray.patch
debian/patches/powerpc_designer_gstabs.diff
debian/patches/powerpcspe.diff
debian/patches/qt-everywhere-opensource-src-4.8.5-QTBUG-22829.patch
debian/patches/qt-everywhere-opensource-src-4.8.7-gcc6.patch
debian/patches/qt-multiarch-plugin-path-compat.diff
debian/patches/qtdebug_syslog.patch
debian/patches/qtdoc-build-offline-docs.patch
debian/patches/remove_addsense.patch
debian/patches/replace_timestamps_with_fixed_date_in_qhelpgenerator.patch
debian/patches/s390x_jscore.diff
debian/patches/series
debian/patches/sh.diff
debian/patches/x32.diff
debian/patches/xmlpatterns_stack_overflow_fix.diff
debian/qdbus.install
debian/qdbus.manpages
debian/qt4-default.install
debian/qt4-demos.install
debian/qt4-demos.lintian-overrides
debian/qt4-designer.install
debian/qt4-designer.links.in
debian/qt4-designer.manpages
debian/qt4-designer.preinst
debian/qt4-dev-tools.install
debian/qt4-dev-tools.links.in
debian/qt4-dev-tools.manpages
debian/qt4-dev-tools.preinst
debian/qt4-doc-html.doc-base
debian/qt4-doc-html.install
debian/qt4-doc-html.links
debian/qt4-doc.install
debian/qt4-linguist-tools.install
debian/qt4-linguist-tools.links.in
debian/qt4-linguist-tools.manpages
debian/qt4-linguist-tools.preinst
debian/qt4-qmake.install
debian/qt4-qmake.links.in
debian/qt4-qmake.manpages
debian/qt4-qmake.preinst
debian/qt4-qmlviewer.install
debian/qt4-qtconfig.install
debian/qt4-qtconfig.links.in
debian/qt4-qtconfig.manpages
debian/qt4-qtconfig.preinst
debian/qtcore4-l10n.install
debian/quiltrc
debian/readdir-hppa-test.c
debian/rules
debian/source/format
debian/source/include-binaries
debian/source/lintian-overrides
debian/upstreamignore
debian/watch