Patch a security vulnerability in QtSVG.

I remeasured Qt to accound for gcc-11.1.0.
This commit is contained in:
Ken Moffat 2021-06-21 19:12:00 +01:00
parent 1d37205060
commit 4d0615f14d
2 changed files with 28 additions and 2 deletions

View File

@ -42,6 +42,16 @@
</listitem>
-->
<listitem>
<para>June 21st, 2021</para>
<itemizedlist>
<listitem>
<para>[ken] - Patch Qt-5.15.2 (security fix re qtsvg). Fixes
<ulink url="&blfs-ticket-root;15197">#15197</ulink>.</para>
</listitem>
</itemizedlist>
</listitem>
<listitem>
<para>June 20th, 2021</para>
<itemizedlist>

View File

@ -11,7 +11,7 @@
<!ENTITY qt5-download-ftp " ">
<!ENTITY qt5-md5sum "e1447db4f06c841d8947f0a6ce83a7b5">
<!ENTITY qt5-size "560 MB">
<!ENTITY qt5-buildsize "14 GB (255 MB installed)">
<!ENTITY qt5-buildsize "15 GB (257 MB installed)">
<!ENTITY qt5-time "22 SBU (using parallelism=4)">
]>
@ -77,6 +77,16 @@
</listitem>
</itemizedlist>
<bridgehead renderas="sect3">Additional Downloads</bridgehead>
<itemizedlist spacing="compact">
<listitem>
<para>
Required patch:
<ulink url="&patch-root;/qt-everywhere-src-&qt5-version;-CVE-2021-3481-1.patch"/>
</para>
</listitem>
</itemizedlist>
<bridgehead renderas="sect3">Qt5 Dependencies</bridgehead>
<bridgehead renderas="sect4">Required</bridgehead>
@ -246,7 +256,13 @@ ln -sfnv qt-&qt5-version; /opt/qt5</userinput></screen>
</note>
<para>
First fix some issues using gcc-11:
First apply a patch to fix an Out Of Bounds read in QtSVG:
</para>
<screen><userinput remap="pre">patch -Np1 -i ../qt-everywhere-src-&qt5-version;-CVE-2021-3481-1.patch</userinput></screen>
<para>
Next fix some issues using gcc-11:
</para>
<screen><userinput>sed -i '/utility/a #include &lt;limits&gt;' qtbase/src/corelib/global/qglobal.h &amp;&amp;