Changeset adf64fa0 for x

Timestamp:

05/09/2014 01:55:59 AM (10 years ago)

Author:

Fernando de Oliveira <fernando@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 7.10, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

87dddd1e

Parents:

c84611be

Message:

Fix DoS vulnerability in the GIF image handler affecting Qt-4.8.5 and Qt-5.2.1 and several previous and more recent versions.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@13026 af4574ff-66df-0310-9fd7-8a98e5e911e0

Location:

x/lib

Files:

• qt4.xml (modified) (1 diff)
• qt5.xml (modified) (1 diff)

x/lib/qt4.xml

@@ -146 +146 @@
     </note>
 
+    <para>
+      Fix DoS vulnerability in the GIF image handler:
+    </para>
+
+<screen><userinput>sed -i -e '631a if (image->isNull()) { state = Error; return -1; }' \
+    src/gui/image/qgifhandler.cpp</userinput></screen>
+
 <!-- ==== Method 1 ====== -->
     <bridgehead renderas="sect3">Method 1: Installing in /usr</bridgehead>

x/lib/qt5.xml

@@ -150 +150 @@
       </para>
     </warning>
+
+    <para>
+      Fix DoS vulnerability in the GIF image handler:
+    </para>
+
+<screen><userinput>sed -i -e '631a if (image->isNull()) { state = Error; return -1; }' \
+    src/gui/image/qgifhandler.cpp</userinput></screen>
+
 <!-- ==== Method 1 ====== -->
     <bridgehead renderas="sect3">Method 1: Installing in /usr</bridgehead>