Login
Newsletter
Werbung

Sicherheit: Denial of Service in mingw-qt5-qtbase
Aktuelle Meldungen Distributionen
Name: Denial of Service in mingw-qt5-qtbase
ID: FEDORA-2014-5999
Distribution: Fedora
Plattformen: Fedora 19
Datum: Di, 13. Mai 2014, 22:56
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0190
Applikationen: Qt

Originalnachricht

Name        : mingw-qt5-qtbase
Product : Fedora 19
Version : 5.2.1
Release : 3.fc19
URL : http://www.qtsoftware.com/
Summary : Qt5 for Windows - QtBase component
Description :
This package contains the Qt software toolkit for developing
cross-platform applications.

This is the Windows version of Qt, for use in conjunction with the
Fedora Windows cross-compiler.

-------------------------------------------------------------------------------
-
Update Information:

* Fix invalid reference to qtmain when using CMake (RHBZ #1092465)
* Fix DoS vulnerability in the GIF image handler (QTBUG-38367, RHBZ #1092837)
-------------------------------------------------------------------------------
-
ChangeLog:

* Sat May 3 2014 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.2.1-3
- Fix invalid reference to qtmain when using CMake (RHBZ #1092465)
- Fix DoS vulnerability in the GIF image handler (QTBUG-38367, RHBZ #1092837)
* Sun Apr 13 2014 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.2.1-2
- Rebuild against gcc 4.9 (to fix paths mentioned in mkspecs/qconfig.pri)
* Sat Feb 8 2014 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.2.1-1
- Update to 5.2.1
* Sat Jan 11 2014 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.2.0-4
- Remove hard dependency on qtchooser and co-own the /etc/xdg/qtchooser folder
* Mon Jan 6 2014 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.2.0-3
- Split the cmake patch and moved half of its contents to the 'implib
dll'
patch and the other to the 'use external angle' patch as those are
more
proper locations
* Sun Jan 5 2014 Yaakov Selkowitz <yselkowitz@users.sourceforge.net> -
5.2.0-2
- Fix qmake to use .dll.a extension for implibs (avoids renaming hacks in
all mingw-qt5-* packages)
- Force usage of system zlib in Qt5Bootstrap
- Install shared libQt5BootstrapDBus for qdbuscpp2xml and qdbusxml2cpp
- Fix QMAKE_LIBS_NETWORK for static linkage
- Closes RHBZ #1048677
* Sun Jan 5 2014 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.2.0-1
- Update to 5.2.0
- Use the generic win32-g++ mkspecs profile instead of win32-g++-cross
and win32-g++-cross-x64 (as is preferred by upstream)
- Add support for qtchooser
- Moved the native tools to /usr/$target/bin/qt5 (qtchooser requires the
tools to be in an unique folder with their original file names)
All symlinks in %{_bindir} are updated to reflect this as well
- Prevent invalid Libs.private references in generated pkg-config files
- Prevent patch backups from ending up in the mkspecs folders
- Reorganized and cleaned up the patches
* Fri Nov 29 2013 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.2.0-0.4.rc1
- Update to 5.2.0 RC 1
* Wed Nov 27 2013 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.2.0-0.3.beta1
- Try harder to fix detection of the uic tool when using CMake
* Tue Nov 26 2013 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.2.0-0.2.beta1
- Fix detection of the uic tool when using CMake (RHBZ #1019952)
* Tue Oct 22 2013 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.2.0-0.1.beta1
- Update to 5.2.0 beta 1
- Fix CMake support (RHBZ #1019952, RHBZ #1019947)
* Thu Sep 12 2013 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.1.1-2
- Removed DBus 'interface' workaround patch as the issue is resolved in
DBus upstream
* Thu Aug 29 2013 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.1.1-1
- Update to 5.1.1
- Fix FTBFS against latest mingw-w64
* Fri Aug 2 2013 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.1.0-5
- Re-enable R: mingw{32,64}-qt5-qttools-lrelease now that
bootstrapping Qt5 on ARM has completed
* Wed Jul 31 2013 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.1.0-4
- Make sure the native Qt5Bootstrap library is a shared library
- Enabled PostgreSQL support
- Removed the reference to the 'demos' folder as demos are
bundled as separate tarballs
* Tue Jul 30 2013 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.1.0-3
- Temporary build without R: mingw{32,64}-qt5-qttools-lrelease
to allow mingw-qt5-qttools to be built on arm
* Sat Jul 13 2013 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.1.0-2
- Rebuild against libpng 1.6
* Wed Jul 10 2013 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.1.0-1
- Update to 5.1.0
- Fix detection of external pcre library
- Added BR: mingw32-pcre mingw64-pcre
* Wed Jul 10 2013 Erik van Pienbroek <epienbro@fedoraproject.org> -
5.0.2-3
- Display message box if platform plugin cannot be found (QTBUG-31765,
QTBUG-31760)
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #1092465 - Linking fails on a cmake based project using Qt 5 since
libqtmain.a is not found
https://bugzilla.redhat.com/show_bug.cgi?id=1092465
[ 2 ] Bug #1092837 - CVE-2014-0190 mingw-qt5-qtbase: qt: NULL pointer
dereference flaw in QGIFFormat::fillRect [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1092837
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update mingw-qt5-qtbase' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung