stable

qt3-3.3.8b-74.fc27

FEDORA-2018-0a0da2f3b7 created by kkofler 6 years ago for Fedora 27

This update fixes CVE-2016-10040, a stack overflow in QXmlSimpleReader due to a too lenient entityCharacterLimit in our version of the patch for CVE-2013-4549. (The limit was increased from the upstream 1024 to 65536 to address QTBUG-35459, an issue where the security fix was breaking existing real-world XML files. Unfortunately, that is too much to actually fit on the CPU stack. This fix decreases the limit to 4096.)

It also fixes the QMySql driver to work with the version of MariaDB in Fedora 27.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-0a0da2f3b7

This update has been submitted for testing by kkofler.

6 years ago

This update has been pushed to testing.

6 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

This update has been submitted for batched by kkofler.

6 years ago

This update has been submitted for stable by kkofler.

6 years ago

This update has been pushed to stable.

6 years ago

Please log in to add feedback.

Metadata
Type
security
Severity
medium
Karma
0
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-10
Stable by Karma
disabled
Stable by Time
disabled
Dates
submitted
6 years ago
in testing
6 years ago
in stable
6 years ago
BZ#1409597 CVE-2016-10040 qt: stack overflow in QXmlSimpleReader
0
0
BZ#1409603 CVE-2016-10040 qt3: qt: stack overflow in QXmlSimpleReader [fedora-all]
0
0

Automated Test Results