Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Fedora 20: FEDORA-2015-4703 Critical: mingw-qt5-qtbase DoS Issue

fedora
Calendar Grey April 5, 2015
Scroller Fedora
Uncover essential safety guidance for Fedora 20 and the denial of service remedy within mingw-qt5-qtbase to maintain system robustness.
Update to Qt 5.4.1

Summary

This package contains the Qt software toolkit for developing

cross-platform applications.

This is the Windows version of Qt, for use in conjunction with the

Fedora Windows cross-compiler.

Update Information:

Update to Qt 5.4.1

Change Log

* Sun Mar 8 2015 Erik van Pienbroek - 5.4.1-1 - Update to 5.4.1 - Added some more BuildRequires for mingw*-static libraries as the ./configure script now needs them to be available in the buildroot - Fix detection of the static dbus and harfbuzz libraries * Mon Jan 26 2015 Erik van Pienbroek - 5.4.0-4 - Rebuild against mingw-w64 v4.0rc1 * Wed Dec 31 2014 Erik van Pienbroek - 5.4.0-3 - Added some more Requires tags to the -static subpackages * Wed Dec 31 2014 Erik van Pienbroek - 5.4.0-2 - Added various Requires tags to the -static subpackages * Mon Dec 29 2014 Erik van Pienbroek - 5.4.0-1 - Update to 5.4.0 - Thanks to Philip A Reimer (ArchLinux MinGW maintainer) for rebasing the ANGLE patches - Use external harfbuzz library (unfortunately this also introduces additional runtime dependencies on mingw-freetype, mingw-bzip2, mingw-glib2 and mingw-gettext) * Thu Dec 4 2014 Erik van Pienbroek - 5.3.2-2 - Rebuild against gcc 4.9.2 (to fix paths mentioned in mkspecs/qconfig.pri) * Fri Sep 19 2014 Erik van Pienbroek - 5.3.2-1 - Update to 5.3.2 * Sun Aug 17 2014 Fedora Release Engineering - 5.3.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild * Wed Jul 23 2014 Erik van Pienbroek - 5.3.1-3 - Rebuild against gcc 4.9.1 (to fix paths mentioned in mkspecs/qconfig.pri) * Sun Jul 6 2014 Erik van Pienbroek - 5.3.1-2 - Remove references to obsolete packages * Sat Jul 5 2014 Erik van Pienbroek - 5.3.1-1 - Update to 5.3.1 * Sat Jun 7 2014 Fedora Release Engineering - 5.3.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Sat May 24 2014 Erik van Pienbroek - 5.3.0-1 - Update to 5.3.0 * Sat May 3 2014 Erik van Pienbroek - 5.2.1-3 - Fix invalid reference to qtmain when using CMake (RHBZ #1092465) - Fix DoS vulnerability in the GIF image handler (QTBUG-38367, RHBZ #1092837) * Sun Apr 13 2014 Erik van Pienbroek - 5.2.1-2 - Rebuild against gcc 4.9 (to fix paths mentioned in mkspecs/qconfig.pri) * Sat Feb 8 2014 Erik van Pienbroek - 5.2.1-1 - Update to 5.2.1 * Sat Jan 11 2014 Erik van Pienbroek - 5.2.0-4 - Remove hard dependency on qtchooser and co-own the /etc/xdg/qtchooser folder * Mon Jan 6 2014 Erik van Pienbroek - 5.2.0-3 - Split the cmake patch and moved half of its contents to the 'implib dll' patch and the other to the 'use external angle' patch as those are more proper locations * Sun Jan 5 2014 Yaakov Selkowitz - 5.2.0-2 - Fix qmake to use .dll.a extension for implibs (avoids renaming hacks in all mingw-qt5-* packages) - Force usage of system zlib in Qt5Bootstrap - Install shared libQt5BootstrapDBus for qdbuscpp2xml and qdbusxml2cpp - Fix QMAKE_LIBS_NETWORK for static linkage - Closes RHBZ #1048677 * Sun Jan 5 2014 Erik van Pienbroek - 5.2.0-1 - Update to 5.2.0 - Use the generic win32-g++ mkspecs profile instead of win32-g++-cross and win32-g++-cross-x64 (as is preferred by upstream) - Add support for qtchooser - Moved the native tools to /usr/$target/bin/qt5 (qtchooser requires the tools to be in an unique folder with their original file names) All symlinks in %{_bindir} are updated to reflect this as well - Prevent invalid Libs.private references in generated pkg-config files - Prevent patch backups from ending up in the mkspecs folders- Reorganized and cleaned up the patches * Fri Nov 29 2013 Erik van Pienbroek - 5.2.0-0.4.rc1 - Update to 5.2.0 RC 1 * Wed Nov 27 2013 Erik van Pienbroek - 5.2.0-0.3.beta1 - Try harder to fix detection of the uic tool when using CMake * Tue Nov 26 2013 Erik van Pienbroek - 5.2.0-0.2.beta1 - Fix detection of the uic tool when using CMake (RHBZ #1019952) * Tue Oct 22 2013 Erik van Pienbroek - 5.2.0-0.1.beta1 - Update to 5.2.0 beta 1 - Fix CMake support (RHBZ #1019952, RHBZ #1019947) * Thu Sep 12 2013 Erik van Pienbroek - 5.1.1-2 - Removed DBus 'interface' workaround patch as the issue is resolved in DBus upstream * Thu Aug 29 2013 Erik van Pienbroek - 5.1.1-1 - Update to 5.1.1 - Fix FTBFS against latest mingw-w64

References


[ 1 ] Bug #1204798 - mingw-qt5-qtwebkit: qt5-qtwebkit: QtWebKit logs visited URLs to WebpageIcons.db in private browsing mode [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1204798

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update mingw-qt5-qtbase' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: mingw-qt5-qtbase
Product: Fedora 20
Version: 5.4.1
Release: 1.fc20
Summary: Qt5 for Windows - QtBase component

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.