Superseded
by qtbase-opensource-src - 5.11.1+dfsg-7ubuntu3.1
Published
Changelog
qtbase-opensource-src (5.11.1+dfsg-7ubuntu2.1) cosmic-security; urgency=medium
* SECURITY UPDATE: double-free or corruption via illegal XML document
- debian/patches/CVE-2018-15518.patch: fix possible heap corruption in
QXmlStream in src/corelib/serialization/qxmlstream_p.h.
- CVE-2018-15518
* SECURITY UPDATE: NULL pointer dereference in QGifHandler
- debian/patches/CVE-2018-19870.patch: check for QImage allocation
failure in src/plugins/imageformats/gif/qgifhandler.cpp.
- CVE-2018-19870
* SECURITY UPDATE: buffer overflow in QBmpHandler
- debian/patches/CVE-2018-19873.patch: check for out of range image
size in src/gui/image/qbmphandler.cpp.
- CVE-2018-19873
-- Marc Deslauriers <email address hidden> Tue, 12 Feb 2019 07:23:41 -0500