qt6-base.git
4 months ago[PATCH] Add clamping to QColorTransferGenericFunction
Samuel Gaist [Sat, 24 May 2025 19:07:37 +0000 (21:07 +0200)]
[PATCH] Add clamping to QColorTransferGenericFunction

This ensures that the inputs are within range for the use of these
function.

Depending on the values passed, they can trigger FE_INVALID errors
and thus NaN as return values.

This can happen for example when feeding an invalid ICC profile to
QColorSpace::fromIccProfile.

Credit to OSS-Fuzz

Fixes: QTBUG-137159
Origin: upstream, https://download.qt.io/official_releases/qt/6.8/CVE-2025-5992-qtbase-6.8.patch

Gbp-Pq: Name upstream_cve-2025-5992_input_range_qcolortransformation.diff

4 months ago[PATCH] QColorTransferGeneric: fix the BT.2100 PQ EOTF
Giuseppe D'Angelo [Thu, 6 Feb 2025 20:00:55 +0000 (21:00 +0100)]
[PATCH] QColorTransferGeneric: fix the BT.2100 PQ EOTF

The PQ EOTF formula for BT.2100 [1][2] was incorrect. Fix it; while at
it, rename the variables to match the symbols used in the original
formula.

The inverse EOTF was correct, but also rename the variables there (for
the same reason).

[1] https://www.itu.int/rec/R-REC-BT.2100-2-201807-I/en
[2] https://en.wikipedia.org/wiki/Perceptual_quantizer#Technical_details

Change-Id: I6ce3a609824bee82053a16b3ff3cfc7cb396ce8f
Reviewed-by: Edward Welbourne <edward.welbourne@qt.io>
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit a7ff4679facb9a44dff8b63a7e461ababa6aedfb)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 35c18eba64b6220e36ea14d32b911342e9d0921c)
Reviewed-by: Volker Hilsheimer <volker.hilsheimer@qt.io>
Gbp-Pq: Name upstream_QColorTransferGeneric_fix_BT2100PQEOTF.patch

4 months agoqt6-base (6.8.2+dfsg-9) unstable; urgency=medium
Patrick Franz [Fri, 18 Jul 2025 13:28:20 +0000 (15:28 +0200)]
qt6-base (6.8.2+dfsg-9) unstable; urgency=medium

  [ Patrick Franz ]
  * Backport patch to fix the PQ EOTF formula for BT.2100. This patch is
    needed to make the patch for CVE-2025-5992 applicable.
  * Backport patch to fix CVE-2025-5992 (Closes: #1109299).

[dgit import unpatched qt6-base 6.8.2+dfsg-9]

4 months agoImport qt6-base_6.8.2+dfsg-9.debian.tar.xz
Patrick Franz [Fri, 18 Jul 2025 13:28:20 +0000 (15:28 +0200)]
Import qt6-base_6.8.2+dfsg-9.debian.tar.xz

[dgit import tarball qt6-base 6.8.2+dfsg-9 qt6-base_6.8.2+dfsg-9.debian.tar.xz]

10 months agoImport qt6-base_6.8.2+dfsg.orig.tar.xz
Patrick Franz [Sun, 2 Feb 2025 20:05:30 +0000 (21:05 +0100)]
Import qt6-base_6.8.2+dfsg.orig.tar.xz

[dgit import orig qt6-base_6.8.2+dfsg.orig.tar.xz]