Changeset 5f38a07

Timestamp:

02/17/2024 05:00:29 PM (4 months ago)

Author:

Douglas R. Reno <renodr@…>

Branches:

12.1, ken/TL2024, lazarus, trunk, xry111/llvm18

Children:

f722f5b

Parents:

b335a90

Message:

Patch Qt5 against CVE-2024-25580.

Files:

• introduction/welcome/changelog.xml (modified) (1 diff)
• x/lib/qt5-alternate.xml (modified) (2 diffs)
• x/lib/qt5.xml (modified) (3 diffs)

introduction/welcome/changelog.xml

@@ -39 +39 @@
     </listitem>
     -->
+    <listitem>
+      <para>February 17th, 2024</para>
+      <itemizedlist>
+        <listitem>
+          <para>[renodr] - Patch Qt5 against CVE-2024-25580. Fixes
+          <ulink url="&blfs-ticket-root;19320">#19320</ulink>.</para>
+        </listitem>
+      </itemizedlist>
+    </listitem>
+
     <listitem>
       <para>February 16th, 2024</para>

x/lib/qt5-alternate.xml

@@ -106 +106 @@
           <ulink url="https://dot.kde.org/2021/04/06/announcing-kdes-qt-5-patch-collection"/>
           and <ulink url="https://community.kde.org/Qt5PatchCollection"/>.
+        </para>
+      </listitem>
+      <listitem>
+        <para>
+          Required patch:
+          <ulink url="&patch-root;/qt-everywhere-opensource-src-&qt5-version;-security_fix-1.patch"/>
         </para>
       </listitem>
@@ -256 +262 @@
 
     <screen><userinput remap="pre">mkdir -pv qtbase/.git</userinput></screen>
+
+    <para>
+      Fix a security vulnerability in qtbase:
+    </para>
+
+<screen><userinput>patch -Np1 -i ../qt-everywhere-opensource-src-&qt5-version;-security_fix-1.patch</userinput></screen>
 
     <para>

x/lib/qt5.xml

@@ -39 +39 @@
     </para>
 
-    &lfs120_checked;
+    &lfs121_checked;
 
     <bridgehead renderas="sect3">Package Information</bridgehead>
@@ -95 +95 @@
         </para>
       </listitem>
+      <listitem>
+        <para>
+          Required patch:
+          <ulink url="&patch-root;/qt-everywhere-opensource-src-&qt5-version;-security_fix-1.patch"/>
+        </para>
+      </listitem>
     </itemizedlist>
 
@@ -296 +302 @@
        qtlocation/src/3rdparty/mapbox-gl-native/include/mbgl/util/string.hpp   \
        qtlocation/src/3rdparty/mapbox-gl-native/src/mbgl/gl/stencil_mode.hpp</userinput></screen>
+
+    <para>
+      Fix a security vulnerability in qtbase:
+    </para>
+
+<screen><userinput>patch -Np1 -i ../qt-everywhere-opensource-src-&qt5-version;-security_fix-1.patch</userinput></screen>
 
     <para>