Changeset 4d0615f1


Ignore:
Timestamp:
06/21/2021 06:12:00 PM (6 weeks ago)
Author:
Ken Moffat <ken@…>
Branches:
trunk
Children:
e7cae3c
Parents:
1d37205
Message:

Patch a security vulnerability in QtSVG.

I remeasured Qt to accound for gcc-11.1.0.

Files:
2 edited

Legend:

Unmodified
Added
Removed
  • introduction/welcome/changelog.xml

    r1d37205 r4d0615f1  
    4444
    4545    <listitem>
     46      <para>June 21st, 2021</para>
     47      <itemizedlist>
     48        <listitem>
     49          <para>[ken] - Patch Qt-5.15.2 (security fix re qtsvg). Fixes
     50          <ulink url="&blfs-ticket-root;15197">#15197</ulink>.</para>
     51        </listitem>
     52      </itemizedlist>
     53    </listitem>
     54
     55    <listitem>
    4656      <para>June 20th, 2021</para>
    4757      <itemizedlist>
  • x/lib/qt5.xml

    r1d37205 r4d0615f1  
    1212  <!ENTITY qt5-md5sum        "e1447db4f06c841d8947f0a6ce83a7b5">
    1313  <!ENTITY qt5-size          "560 MB">
    14   <!ENTITY qt5-buildsize     "14 GB (255 MB installed)">
     14  <!ENTITY qt5-buildsize     "15 GB (257 MB installed)">
    1515  <!ENTITY qt5-time          "22 SBU (using parallelism=4)">
    1616]>
     
    7878    </itemizedlist>
    7979
     80    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
     81    <itemizedlist spacing="compact">
     82      <listitem>
     83        <para>
     84          Required patch:
     85          <ulink url="&patch-root;/qt-everywhere-src-&qt5-version;-CVE-2021-3481-1.patch"/>
     86        </para>
     87      </listitem>
     88    </itemizedlist>
     89
    8090    <bridgehead renderas="sect3">Qt5 Dependencies</bridgehead>
    8191
     
    247257
    248258    <para>
    249       First fix some issues using gcc-11:
     259      First apply a patch to fix an Out Of Bounds read in QtSVG:
     260    </para>
     261
     262<screen><userinput remap="pre">patch -Np1 -i ../qt-everywhere-src-&qt5-version;-CVE-2021-3481-1.patch</userinput></screen>
     263
     264    <para>
     265      Next fix some issues using gcc-11:
    250266    </para>
    251267
Note: See TracChangeset for help on using the changeset viewer.