[ubuntu/plucky-proposed] qt6-base 6.8.3+dfsg-0ubuntu2 (Accepted)
Simon Quigley
tsimonq2 at ubuntu.com
Mon Apr 14 09:15:47 UTC 2025
qt6-base (6.8.3+dfsg-0ubuntu2) plucky; urgency=high
* SECURITY UPDATE: Heap-based Buffer Overflow vulnerability in
QTextMarkdownImporter (LP: #2107302):
- debian/patches/CVE-2025-3512.patch: Fixed a heap buffer overflow in
QTextMarkdownImporter. The first marker for Front Matter must begin at
the first character of a Markdown document, and both markers must be
exactly ---\n or ---\r\n.
- CVE-2025-3512
Date: Sun, 13 Apr 2025 22:51:20 -0500
Changed-By: Simon Quigley <tsimonq2 at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/qt6-base/6.8.3+dfsg-0ubuntu2
-------------- next part --------------
Format: 1.8
Date: Sun, 13 Apr 2025 22:51:20 -0500
Source: qt6-base
Built-For-Profiles: noudeb
Architecture: source
Version: 6.8.3+dfsg-0ubuntu2
Distribution: plucky
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Simon Quigley <tsimonq2 at ubuntu.com>
Launchpad-Bugs-Fixed: 2107302
Changes:
qt6-base (6.8.3+dfsg-0ubuntu2) plucky; urgency=high
.
* SECURITY UPDATE: Heap-based Buffer Overflow vulnerability in
QTextMarkdownImporter (LP: #2107302):
- debian/patches/CVE-2025-3512.patch: Fixed a heap buffer overflow in
QTextMarkdownImporter. The first marker for Front Matter must begin at
the first character of a Markdown document, and both markers must be
exactly ---\n or ---\r\n.
- CVE-2025-3512
Checksums-Sha1:
5daf17a77388d90f1d9eab7c540426aac0eda372 5479 qt6-base_6.8.3+dfsg-0ubuntu2.dsc
8cc6073ef7d1164901425c61f1743ad47792345a 190304 qt6-base_6.8.3+dfsg-0ubuntu2.debian.tar.xz
8ff1f9965589d48b2eaba03be7b049995b9fca1f 20480 qt6-base_6.8.3+dfsg-0ubuntu2_source.buildinfo
Checksums-Sha256:
fa670fb84c56675aa28f80b15e31d868e048742dc941e99a0a558d80098b591e 5479 qt6-base_6.8.3+dfsg-0ubuntu2.dsc
91fe1cd2242363990e30e363b61e67d98a581599a7d9fc07dc28c05e2317529b 190304 qt6-base_6.8.3+dfsg-0ubuntu2.debian.tar.xz
d6a39c8e6ca6c299f614f1cb89a9016c069f667629a12150503b13dcdadf515c 20480 qt6-base_6.8.3+dfsg-0ubuntu2_source.buildinfo
Files:
4bc49a501717fd3faeefaefbf40f5bd2 5479 libs optional qt6-base_6.8.3+dfsg-0ubuntu2.dsc
c7d9f25f4b05aceba35bf1f4639c5588 190304 libs optional qt6-base_6.8.3+dfsg-0ubuntu2.debian.tar.xz
ad312c0bb5d500c09a27d136fef1039d 20480 libs optional qt6-base_6.8.3+dfsg-0ubuntu2_source.buildinfo
Original-Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde at lists.debian.org>
More information about the plucky-changes
mailing list