-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 20 Sep 2020 22:01:50 +0300 Source: qt4-x11 Binary: libqtcore4 qtcore4-l10n libqtgui4 libqt4-network libqt4-opengl libqt4-script libqt4-scripttools libqt4-sql libqt4-sql-ibase libqt4-sql-mysql libqt4-sql-odbc libqt4-sql-psql libqt4-sql-sqlite libqt4-sql-sqlite2 libqt4-sql-tds libqt4-svg libqt4-xml libqt4-xmlpatterns libqt4-dbus libqtdbus4 libqt4-qt3support libqt4-designer libqt4-help libqt4-test libqt4-phonon libqt4-declarative libqt4-declarative-folderlistmodel libqt4-declarative-gestures libqt4-declarative-particles libqt4-declarative-shaders libqt4-dev libqt4-dev-bin libqt4-opengl-dev libqt4-dbg libqt4-designer-dbg libqt4-qt3support-dbg libqt4-script-dbg libqt4-xmlpatterns-dbg qt4-bin-dbg qt4-demos-dbg qt4-designer qt4-dev-tools qt4-qmake qt4-qtconfig qt4-demos qt4-qmlviewer qt4-linguist-tools qdbus qt4-doc qt4-doc-html qt4-default Architecture: source Version: 4:4.8.7+dfsg-11+deb9u1 Distribution: stretch-security Urgency: medium Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Description: libqt4-dbg - Qt 4 library debugging symbols libqt4-dbus - Qt 4 D-Bus module libqt4-declarative - Qt 4 Declarative module libqt4-declarative-folderlistmodel - Qt 4 folderlistmodel QML plugin libqt4-declarative-gestures - Qt 4 gestures QML plugin libqt4-declarative-particles - Qt 4 particles QML plugin libqt4-declarative-shaders - Qt 4 shaders QML plugin libqt4-designer - Qt 4 designer module libqt4-designer-dbg - Qt 4 designer library debugging symbols libqt4-dev - Qt 4 development files libqt4-dev-bin - Qt 4 development programs libqt4-help - Qt 4 help module libqt4-network - Qt 4 network module libqt4-opengl - Qt 4 OpenGL module libqt4-opengl-dev - Qt 4 OpenGL library development files libqt4-phonon - Qt 4 Phonon module libqt4-qt3support - Qt 3 compatibility library for Qt 4 libqt4-qt3support-dbg - Qt 3 compatibility library for Qt 4 debugging symbols libqt4-script - Qt 4 script module libqt4-script-dbg - Qt 4 script library debugging symbols libqt4-scripttools - Qt 4 script tools module libqt4-sql - Qt 4 SQL module libqt4-sql-ibase - Qt 4 InterBase/FireBird database driver libqt4-sql-mysql - Qt 4 MySQL database driver libqt4-sql-odbc - Qt 4 ODBC database driver libqt4-sql-psql - Qt 4 PostgreSQL database driver libqt4-sql-sqlite - Qt 4 SQLite 3 database driver libqt4-sql-sqlite2 - Qt 4 SQLite 2 database driver libqt4-sql-tds - Qt 4 FreeTDS database driver libqt4-svg - Qt 4 SVG module libqt4-test - Qt 4 test module libqt4-xml - Qt 4 XML module libqt4-xmlpatterns - Qt 4 XML patterns module libqt4-xmlpatterns-dbg - Qt 4 XML patterns library debugging symbols libqtcore4 - Qt 4 core module libqtdbus4 - Qt 4 D-Bus module library libqtgui4 - Qt 4 GUI module qdbus - Qt 4 D-Bus tool qt4-bin-dbg - Qt 4 binaries debugging symbols qt4-default - Qt 4 development defaults package qt4-demos - Qt 4 examples and demos qt4-demos-dbg - Qt 4 examples and demos debugging symbols qt4-designer - graphical designer for Qt 4 applications qt4-dev-tools - Qt 4 development tools qt4-doc - Qt 4 API documentation qt4-doc-html - Qt 4 API documentation (HTML format) qt4-linguist-tools - Qt 4 Linguist tools qt4-qmake - Qt 4 qmake Makefile generator tool qt4-qmlviewer - Qt 4 QML viewer qt4-qtconfig - Qt 4 configuration tool qtcore4-l10n - Qt 4 core module translations Changes: qt4-x11 (4:4.8.7+dfsg-11+deb9u1) stretch-security; urgency=medium . * Non-maintainer upload by the LTS team. * CVE-2018-15518: Double-free or corruption in QXmlStreamReader during parsing of a specially crafted illegal XML document. * CVE-2018-19869: A malformed SVG image causes a segmentation fault. * CVE-2018-19870: A malformed GIF image causes a NULL pointer dereference in QGifHandler resulting in a segmentation fault. * CVE-2018-19871: Uncontrolled Resource Consumption in QTgaFile. * CVE-2018-19872: A malformed PPM image causes a crash. * CVE-2018-19873: QBmpHandler segfault on malformed BMP file. * CVE-2020-17507: Buffer over-read in the XBM parser. Checksums-Sha1: 957898b689faca005fa2b563f078fbfdb39f9cad 5961 qt4-x11_4.8.7+dfsg-11+deb9u1.dsc 051d10326cb95eda77a6834eace7fc929dbe4676 199073788 qt4-x11_4.8.7+dfsg.orig.tar.xz fa56fa3bf0fab54759212347a0db542cbf6435df 322704 qt4-x11_4.8.7+dfsg-11+deb9u1.debian.tar.xz Checksums-Sha256: 9d03544e9068480eb81630d013be90d0c27a537a11d947d87ef0bd2fb7cd1290 5961 qt4-x11_4.8.7+dfsg-11+deb9u1.dsc 4d33e5516c19e166e9090edc36f77f8249d2d83ef939ba68e2a542de7a196eaf 199073788 qt4-x11_4.8.7+dfsg.orig.tar.xz e28e2e3f0af65a7b3d505b060dc7ea19b1f96aca986f14f867e168fb859837eb 322704 qt4-x11_4.8.7+dfsg-11+deb9u1.debian.tar.xz Files: dcb89e56c310e1c547e970ec8c15e03b 5961 libs optional qt4-x11_4.8.7+dfsg-11+deb9u1.dsc be7dc671c64894c29ab392577fc81c2d 199073788 libs optional qt4-x11_4.8.7+dfsg.orig.tar.xz bb606d1a5f43606001867229b07cce5c 322704 libs optional qt4-x11_4.8.7+dfsg-11+deb9u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAl9xXjgACgkQiNJCh6LY mLHcoRAAlMC3wKcquqUILwyNcBErAEJ4iWSU0jfXjPo5L4b2k7Njf6HyJ0v+SEVM QvW2ycYq/611XezVxjV+WkOtbwfxhgPFzycptGgNXf/8ucsQ1i4gNlTKvuLhILpk 0ATmXtvplyzsaHdxdaErILFF3SMGFH8mHqQrH9MQdCl/ri3Wfq2codnaNGuEyjy0 aLkPCRcbSCFE8QuwnkFgRB+axtdLSZ9fNUHmPC9Wx+3QgnReKjdXSeO/3VhTc1pr C0FCJD0wSsXUi8KoxAdRTGEDcvwp/2UnW41mbGAHZV+gsfLiW0+9w8U7QQ8wD07C K4QnVfWTRIbWofiYgzYhsfwoLCHRLrRTszjJZik22Ml3eIe39ZUQ3EylHbK1/OUL WxooTLR1VGLCfsKxPtHQ9AUIQgfJK+uSc0fxH5i4QLLisam/qRGvnw4Up+ak4PRo /hhuY0q0tkjTF3wUauKdEAcpqIKpIUcvYFUoZnNMajFVnTNJAZ99KI1kib1v+DB4 ToI9hgz/aWfwCTlKR3unqUPScBqPmsJYb9UUhS1irTOUA+dedogvqHCanbfDfqIP 3CuqIXgLPzDnX9tbHk3AwENotp3GA8pecBkNvlKe8l8OQypxYzHj7Zu+swVeZi7p ISycq2uYWzM6qz8BC3uAgOAXDSUBgDIgBR8uqmw8EvSq8fGrKlE= =9dHH -----END PGP SIGNATURE-----