-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 26 Mar 2022 10:12:03 +0300 Source: qtbase-opensource-src Architecture: source Version: 5.11.3+dfsg1-1+deb10u5 Distribution: buster Urgency: medium Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org> Changed-By: Dmitry Shachnev <mitya57@debian.org> Closes: 951066 1001082 Changes: qtbase-opensource-src (5.11.3+dfsg1-1+deb10u5) buster; urgency=medium . * Backport two upstream commits to fix setTabOrder for compound widgets (closes: #1001082). * Backport upstream patch to add an expansion limit for XML entities (CVE-2015-9541, closes: #951066). Checksums-Sha1: c7cd454059b44b99595edaf4de665ed1e16b1e60 5206 qtbase-opensource-src_5.11.3+dfsg1-1+deb10u5.dsc 1d847167d68040d5b9faeb72d7fd4ce220b7e485 245720 qtbase-opensource-src_5.11.3+dfsg1-1+deb10u5.debian.tar.xz b4d178846280df3fbca33f39080c598c189f9d89 14873 qtbase-opensource-src_5.11.3+dfsg1-1+deb10u5_source.buildinfo Checksums-Sha256: 6b711df3b6c2a6efa7d5655fb8dbb35f69485ff4d43c179ac9b28d4b1ad7131a 5206 qtbase-opensource-src_5.11.3+dfsg1-1+deb10u5.dsc 9fe6338b9397f22eaac1d727abf9826b09b9e226713ac385588c4c23929c069a 245720 qtbase-opensource-src_5.11.3+dfsg1-1+deb10u5.debian.tar.xz 9cb3c127f6f9d089aca0c8888dc67483adf0d6e7091c7396c951747c6c785a75 14873 qtbase-opensource-src_5.11.3+dfsg1-1+deb10u5_source.buildinfo Files: 149fa6b457ff8066836379de4597ca8e 5206 libs optional qtbase-opensource-src_5.11.3+dfsg1-1+deb10u5.dsc d23b700f84b21ce15b82a36f5653d460 245720 libs optional qtbase-opensource-src_5.11.3+dfsg1-1+deb10u5.debian.tar.xz 6f4cc29634956d76129a7dd473c9237e 14873 libs optional qtbase-opensource-src_5.11.3+dfsg1-1+deb10u5_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJHBAEBCgAxFiEE5688gqe4PSusUZcLZkYmW1hrg8sFAmLvyjYTHG1pdHlhNTdA ZGViaWFuLm9yZwAKCRBmRiZbWGuDy+6AD/9QqpirNFfBbmKlUjxKLpVnhv0wNKHg fMmgP+k0klxPilgwzATUf371nygnR05kXv+fReSTDkDzgoQB2iFdEnBETwYMN/OU 8lMRkHYscDkzIX1mmQEa2Th6dZEz69mbR70b3rstbxipvbbKRo/DzXX9R8aUiIRF urUu6LCU+sGmCvjcwK5HUmR3hR7UykXCQr2IGZTKaIcnnNYiF9dDG38uv9dzDSJ3 zTpC5/kHimE7xbmqJi2mZC2O5CvCMgwYJhBX3P2YOlfOgYWr6n0azEoEjLunCTp0 MiL9vlkUSRBjYgEeKEwbyG1EUsw8RRsnDVFW6eyS3TSot5QwhWHzs4C6UvSkDtUG VS32FhNG2EnY+/WTsVuCehgQ4CBZpp8ylSX1GclBPOYk6hIbPsULnvxsce7vvHgv 73Vr9SeZeVUawLyquvRhzAMDNElBXs858DmAzYC99TBYUkQ3BO3GUWjmQ/cQyAyH VO8fZ+uqUDFdtxkOtzZSd8vHmQ3225OFK7xD1E0fvgMWotj1knWOyDJg7xamKO7l 0eoptZG3N1aaC8aV+vrtQrl0MaDy5vNXcwDeC+n1xEw3ZIq0B0pqQqEQ5GGf4x3P 1uPGR4sWTRP6A+w83NsxCD6NQm8klc6ajAznycmj/SYS6n+yfjGftHwoIr4ACsLa bI7xKFl3m59WFA== =RJxN -----END PGP SIGNATURE-----