[SCM] Qt 4 packaging branch, master, updated. debian/4.7.3-8-19-g28f6271
Fathi Boudra
fabo at alioth.debian.org
Tue Sep 20 09:17:41 UTC 2011
The following commit has been merged in the master branch:
commit 28f6271886c861d5006ea9c8cd3eca87192808b7
Author: Fathi Boudra <fabo at debian.org>
Date: Tue Sep 20 12:16:48 2011 +0300
Drop Check_for_buffer_overflow_in_Lookup_MarkMarkPos_CVE-2011-3193.patch,
already included in Qt 4.7.4
---
debian/changelog | 3 +-
...rflow_in_Lookup_MarkMarkPos_CVE-2011-3193.patch | 26 --------------------
debian/patches/series | 1 -
3 files changed, 1 insertions(+), 29 deletions(-)
diff --git a/debian/changelog b/debian/changelog
index 33ecd28..1f1e1e3 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -2,6 +2,7 @@ qt4-x11 (4:4.7.4-1) UNRELEASED; urgency=low
* New upstream release.
- QTreeView crash in indexRowSizeHint/itemHeight. (Closes: #632855)
+ - include fixes for CVE-2011-3193 and CVE-2011-3194. (Closes: #641738)
* Add Pino Toscano to Uploaders.
* Remove patches:
- Fix_GL_problems_on_stock_1.4_SGX_drivers.patch - stolen upstream.
@@ -16,8 +17,6 @@ qt4-x11 (4:4.7.4-1) UNRELEASED; urgency=low
* Add patches:
- qt-multiarch-plugin-path-compat.diff - include legacy pre-multiarch
plugin path.
- - Check_for_buffer_overflow_in_Lookup_MarkMarkPos_CVE-2011-3193.patch
- (Closes: #641738)
- openssl_no_ssl2.patch - OpenSSL in Debian dropped the insecure SSLv2
protocol. (Closes: #640210)
- Remove_QtHelp_dependency_on_QtXml.patch - (Closes: #641753)
diff --git a/debian/patches/Check_for_buffer_overflow_in_Lookup_MarkMarkPos_CVE-2011-3193.patch b/debian/patches/Check_for_buffer_overflow_in_Lookup_MarkMarkPos_CVE-2011-3193.patch
deleted file mode 100644
index 433cb1e..0000000
--- a/debian/patches/Check_for_buffer_overflow_in_Lookup_MarkMarkPos_CVE-2011-3193.patch
+++ /dev/null
@@ -1,26 +0,0 @@
-From 9ae6f2f9a57f0c3096d5785913e437953fa6775c Mon Sep 17 00:00:00 2001
-From: Jiang Jiang <jiang.jiang at nokia.com>
-Date: Mon, 18 Jul 2011 08:49:32 +0200
-Subject: [PATCH] Check for buffer overflow in Lookup_MarkMarkPos
-
-That may cause crash in this function with certain fonts.
-
-Task-number: QTBUG-17238
-Done-by: Alberto Garcia <agarcia at igalia.com>
-Reviewed-by: Jiang Jiang
----
- src/3rdparty/harfbuzz/src/harfbuzz-gpos.c | 3 +++
- 1 file changed, 3 insertions(+)
-
---- a/src/3rdparty/harfbuzz/src/harfbuzz-gpos.c
-+++ b/src/3rdparty/harfbuzz/src/harfbuzz-gpos.c
-@@ -3015,6 +3015,9 @@ static HB_Error Lookup_MarkMarkPos( GPO
- if ( i > buffer->in_pos )
- return HB_Err_Not_Covered;
-
-+ if ( i > buffer->in_pos )
-+ return HB_Err_Not_Covered;
-+
- error = _HB_OPEN_Coverage_Index( &mmp->Mark2Coverage, IN_GLYPH( j ),
- &mark2_index );
- if ( error )
diff --git a/debian/patches/series b/debian/patches/series
index 0440c99..cbce1e3 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -10,7 +10,6 @@ Add_support_for_QT_USE_DRAG_DISTANCE_env_var.patch
Fixed_bug_in_X11_backend_when_creating_translucent_windows.patch
Take_Xft.hintstyle_by_default_to_match_the_behavior_of_GTK+.patch
Fix_fontconfig_usage_in_X11_font_database.patch
-Check_for_buffer_overflow_in_Lookup_MarkMarkPos_CVE-2011-3193.patch
# qt-copy patches
0195-compositing-properties.diff
--
Qt 4 packaging
More information about the pkg-kde-commits
mailing list