Ubuntu
qtsvg-opensource-src package

qtsvg-opensource-src 5.9.5-0ubuntu1.1 source package in Ubuntu

Changelog

qtsvg-opensource-src (5.9.5-0ubuntu1.1) bionic-security; urgency=medium

  * SECURITY UPDATE: segfault via malformed image
    - debian/patches/CVE-2018-19869.patch: fix crash when parsing malformed
      url reference in src/svg/qsvghandler.cpp,
      tests/auto/qsvgrenderer/tst_qsvgrenderer.cpp.
    - CVE-2018-19869
  * SECURITY UPDATE: Out of bounds read
    - debian/patches/CVE-2021-3481-pre1.patch: improve handling of
      malformed numeric values in svg files in src/svg/qsvghandler.cpp.
    - debian/patches/CVE-2021-3481.patch: clamp parsed doubles to float
      representable values in src/svg/qsvghandler.cpp.
    - CVE-2021-3481
  * SECURITY UPDATE: Out of bounds write
    - debian/patches/CVE-2021-45930.patch: do stricter error checking when
      parsing path nodes in src/svg/qsvghandler.cpp.
    - CVE-2021-45930

 -- Marc Deslauriers <email address hidden>  Thu, 13 Jan 2022 10:25:08 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates main libs
Bionic security main libs

Downloads

File Size SHA-256 Checksum
qtsvg-opensource-src_5.9.5.orig.tar.xz 1.7 MiB 62222e435cee458c67c810832aae68b90a11285e486473fe2675cd6ed4f4e3c2
qtsvg-opensource-src_5.9.5-0ubuntu1.1.debian.tar.xz 13.7 KiB 737cf28f9d3896ed9d51848f9e2d97d44f44222008967fa385ee7fa1748e5bab
qtsvg-opensource-src_5.9.5-0ubuntu1.1.dsc 2.8 KiB 46d70c07b46cfb216cf165d0ae58214de91eb171ba874c9bc680a6191f643a65

View changes file

Binary packages built by this source

libqt5svg5: Qt 5 SVG module

 Qt is a cross-platform C++ application framework. Qt's primary feature
 is its rich set of widgets that provide standard GUI functionality.
 .
 The QtSvg module provides classes for displaying the contents of SVG files.
 .
 Scalable Vector Graphics (SVG) is a language for describing two-dimensional
 graphics and graphical applications in XML.

libqt5svg5-dbgsym: debug symbols for libqt5svg5
libqt5svg5-dev: Qt 5 SVG module development files

 Qt is a cross-platform C++ application framework. Qt's primary feature
 is its rich set of widgets that provide standard GUI functionality.
 .
 The QtSvg module provides classes for displaying the contents of SVG files.
 .
 Scalable Vector Graphics (SVG) is a language for describing two-dimensional
 graphics and graphical applications in XML.
 .
 This package contains the header development files used for building Qt 5
 applications using QtSvg library.

qtsvg5-doc: Qt 5 SVG documentation

 Qt is a cross-platform C++ application framework. Qt's primary feature
 is its rich set of widgets that provide standard GUI functionality.
 .
 This package contains the documentation for the Qt 5 SVG libraries.

qtsvg5-doc-html: Qt 5 SVG HTML documentation

 Qt is a cross-platform C++ application framework. Qt's primary feature
 is its rich set of widgets that provide standard GUI functionality.
 .
 This package contains the HTML documentation for the Qt 5 SVG
 libraries.

qtsvg5-examples: Qt 5 SVG examples

 Qt is a cross-platform C++ application framework. Qt's primary feature
 is its rich set of widgets that provide standard GUI functionality.
 .
 This package contains Qt 5 SVG examples.

qtsvg5-examples-dbgsym: debug symbols for qtsvg5-examples