-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 07 Apr 2024 12:45:51 +0300
Source: qtbase-opensource-src
Architecture: source
Version: 5.15.8+dfsg-11+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Dmitry Shachnev <mitya57@debian.org>
Closes: 1037210 1041105 1055280
Changes:
qtbase-opensource-src (5.15.8+dfsg-11+deb12u1) bookworm; urgency=medium
.
[ Alexander Volkov ]
* Backport upstream patches to fix regression caused by CVE-2023-24607.diff
(closes: #1055280).
.
[ Dmitry Shachnev ]
* Backport fixes for three CVEs from Debian unstable:
- CVE-2023-34410: use of system CA certificates when not wanted
(closes: #1037210).
- CVE-2023-37369: potential buffer overflow in QXmlStreamReader.
- CVE-2023-38197: infinite loop in XML recursive entity expansion
(closes: #1041105).
Checksums-Sha1:
f5911485458c4d45980843d4fe17f876a82e63fa 5466 qtbase-opensource-src_5.15.8+dfsg-11+deb12u1.dsc
62276547b690ecb1221bce4c524cb757127c70f9 239660 qtbase-opensource-src_5.15.8+dfsg-11+deb12u1.debian.tar.xz
d6f4e3b40820a8f2f65a86dcbe5c1b4619a16cbe 17085 qtbase-opensource-src_5.15.8+dfsg-11+deb12u1_source.buildinfo
Checksums-Sha256:
565b67bb51232ebdc5ca4b33f94954e3b9f2725dbe3f80fa0c06376ac27dea72 5466 qtbase-opensource-src_5.15.8+dfsg-11+deb12u1.dsc
afd5ae59d2155d6c8629b5ecbf39462040606238cdd8dc9229b208c469fbc146 239660 qtbase-opensource-src_5.15.8+dfsg-11+deb12u1.debian.tar.xz
ceb2b31c46ed4bd256912db58d3cfc42fc63bbcd3cd249c813b7124491994a92 17085 qtbase-opensource-src_5.15.8+dfsg-11+deb12u1_source.buildinfo
Files:
0b6ccd2fab5dcb59e3a2fe19fbcfaaea 5466 libs optional qtbase-opensource-src_5.15.8+dfsg-11+deb12u1.dsc
79756a4abc5cfc5f0c598637926c38b3 239660 libs optional qtbase-opensource-src_5.15.8+dfsg-11+deb12u1.debian.tar.xz
3794909ffa63dcccd90015a0437c64e1 17085 libs optional qtbase-opensource-src_5.15.8+dfsg-11+deb12u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=X/Fj
-----END PGP SIGNATURE-----
Attachment:
pgp9pOt4mg2CT.pgp
Description: PGP signature