id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
6564	qt-5.4.2 (qt-everywhere-opensource-src-5.4.2)	Fernando de Oliveira	Fernando de Oliveira	"[http://download.qt.io/official_releases/qt/5.4/5.4.2/single/qt-everywhere-opensource-src-5.4.2.tar.xz]

[http://download.qt.io/official_releases/qt/5.4/5.4.2/single/qt-everywhere-opensource-src-5.4.2.tar.xz.sha256]

8c6d070613b721452f8cffdea6bddc82ce4f32f96703e3af02abb91a59f1ea25

[http://blog.qt.io/blog/2015/06/02/qt-5-4-2-released/]

(Partially reproduced below. Addresses for ''The Logjam Attack'' and ''CVE'' can be found in the blog page above.)

{{{
Qt 5.4.2 Released

Published Tuesday June 2nd, 2015

Today we have released Qt 5.4.2, the second patch update to Qt 5.4. In
addition to improvements and fixes to Qt functionality it also packs new
Qt Creator 3.4.1.

Qt 5.4.2 provides important security fixes for Qt WebEngine WeakDH
vulnerability (CVE-2015-4000), DoS vulnerability in the BMP image
handler (CVE-2015-0295) as well as security fixes for vulnerabilities in
image handling of BMP (CVE-2015-1858), ICO (CVE-2015-1859) and GIF
(CVE-2015-1860). Qt 5.4.2 also contains updates to the libpng (to
version 1.6.17), the libtiff (to version 4.0.3) and the PCRE library (to
version r1530) 3rd party components. These provide fixes to known
vulnerabilities and provide general  improvements.

Qt 5.4.2 maintains backward compatibility, both source and binary, with
Qt 5.4.1 – but not to Qt 5.4.0, which unfortunately broke binary
compatibility on Windows when using MSVC 2012 or MSVC 2013. This binary
compatibility break was fixed in Qt 5.4.1, thus Qt 5.4.2 maintains full
compatibility with the Qt 5 series (except for Qt 5.4.0).

The full list of important changes can be found from the change files
for each module.

The standalone packages of Qt 5.4.2 also include new Qt Creator 3.4.1.
See the blog post about Qt Creator 3.4.1 for the main improvements.
}}}"	enhancement	closed	high	7.8	BOOK	SVN	medium	fixed