[Git][security-tracker-team/security-tracker][master] QT patch refs

Moritz Muehlenhoff jmm at debian.org
Fri Feb 22 22:07:58 GMT 2019


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5ea8c151 by Moritz Muehlenhoff at 2019-02-22T22:07:33Z
QT patch refs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -18802,6 +18802,7 @@ CVE-2018-19873 (An issue was discovered in Qt before 5.11.3. QBmpHandler has a b
 	[jessie] - qt4-x11 <ignored> (Minor issue)
 	NOTE: https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
 	NOTE: https://codereview.qt-project.org/#/c/238749/
+	NOTE: https://github.com/qt/qtbase/commit/621ab8ab59901cc3f9bd98be709929c9eac997a8
 CVE-2018-19872
 	RESERVED
 CVE-2018-19871 (An issue was discovered in Qt before 5.11.3. There is QTgaFile ...)
@@ -18814,6 +18815,7 @@ CVE-2018-19871 (An issue was discovered in Qt before 5.11.3. There is QTgaFile .
 	NOTE: https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
 	NOTE: https://codereview.qt-project.org/#/c/237761/
 	NOTE: qt4-x11 affected in src/plugins/imageformats/tga/qtgafile.cpp
+	NOTE: https://github.com/qt/qtimageformats/commit/7cfe47a8fe2f987fb2a066a696fb3d9d0afe4d65
 CVE-2018-19870 (An issue was discovered in Qt before 5.11.3. A malformed GIF image ...)
 	{DSA-4374-1 DLA-1627-1}
 	[experimental] - qtbase-opensource-src 5.11.3+dfsg-1
@@ -18825,6 +18827,7 @@ CVE-2018-19870 (An issue was discovered in Qt before 5.11.3. A malformed GIF ima
 	NOTE: https://codereview.qt-project.org/#/c/235998/
 	NOTE: affected code can be in src/gui/image/qgifhandler.cpp or in
 	NOTE: src/plugins/imageformats/gif/qgifhandler.cpp depending on the version
+	NOTE: https://github.com/qt/qtbase/commit/2841e2b61e32f26900bde987d469c8b97ea31999
 CVE-2018-19869 (An issue was discovered in Qt before 5.11.3. A malformed SVG image ...)
 	[experimental] - qtsvg-opensource-src 5.11.3-1
 	- qtsvg-opensource-src 5.11.3-2 (low)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5ea8c15175f4a25f00db155d154e96bde7343c4a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5ea8c15175f4a25f00db155d154e96bde7343c4a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190222/a9647417/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list