Package: qt6-base / 6.4.2+dfsg-10

Metadata

Package Version Patches format
qt6-base 6.4.2+dfsg-10 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
cve 2023 32762.diff | (download)

src/network/access/qhsts.cpp | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

---
cve 2023 32763.diff | (download)

src/gui/painting/qfixed_p.h | 17 17 + 0 - 0 !
src/gui/text/qtextlayout.cpp | 9 6 + 3 - 0 !
2 files changed, 23 insertions(+), 3 deletions(-)

---
cve 2023 33285.diff | (download)

src/network/kernel/qdnslookup_unix.cpp | 31 25 + 6 - 0 !
1 file changed, 25 insertions(+), 6 deletions(-)

---
upstream_Add HPPA detection.patch | (download)

src/corelib/global/archdetect.cpp | 2 2 + 0 - 0 !
src/corelib/global/qglobal.cpp | 9 9 + 0 - 0 !
src/corelib/global/qprocessordetection.h | 9 9 + 0 - 0 !
src/corelib/plugin/qelfparser_p.cpp | 3 3 + 0 - 0 !
4 files changed, 23 insertions(+)

 [patch] add hppa detection

- detect the HPPA architecture (PA-RISC) and define Q_PROCESSOR_HPPA
- set the right machine type in QElfParser for HPPA ELF files

upstream_Add M68k detection.patch | (download)

src/corelib/global/archdetect.cpp | 2 2 + 0 - 0 !
src/corelib/global/qglobal.cpp | 9 9 + 0 - 0 !
src/corelib/global/qprocessordetection.h | 9 9 + 0 - 0 !
src/corelib/plugin/qelfparser_p.cpp | 3 3 + 0 - 0 !
4 files changed, 23 insertions(+)

 [patch] add m68k detection

- detect the M68k architecture (Motorola 68000) and define
  Q_PROCESSOR_M68K
- set the right machine type in QElfParser for M68k ELF files

cve 2023 24607.patch | (download)

src/plugins/sqldrivers/odbc/qsql_odbc.cpp | 207 118 + 89 - 0 !
1 file changed, 118 insertions(+), 89 deletions(-)

 fix cve-2023-24607
 CVE-2023-24607 can trigger a DOS with a specifically crafted string,
 see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1031871.
 This patch https://codereview.qt-project.org/c/qt/qtbase/+/456216,
 https://codereview.qt-project.org/c/qt/qtbase/+/457637 and
 https://codereview.qt-project.org/c/qt/qtbase/+/457937
 See: https://www.qt.io/blog/security-advisory-qt-sql-odbc-driver-plugin
remove_privacy_breaches.diff | (download)

doc/global/template/scripts/main.js | 5 0 + 5 - 0 !
1 file changed, 5 deletions(-)

 remove non-used privacy-breach code
 This code makes Lintian unhappy. But we are really not using it, it only
 gets inserted when building the online doc.
 Anyways the best way to calm down Lintian is to simply remove it.
build_path_embedded_qtbuildinternalsextra_cmake.patch | (download)

cmake/QtBuildInternalsExtra.cmake.in | 3 0 + 3 - 0 !
1 file changed, 3 deletions(-)

 [patch] cmake/qtbuildinternalsextra.cmake.in: patch out embedded
 build path.

The original build path should not be needed in the shipped package,
cross.patch | (download)

cmake/QtBuildInternals/QtBuildInternalsConfig.cmake | 2 0 + 2 - 0 !
src/tools/configure.cmake | 2 1 + 1 - 0 !
2 files changed, 1 insertion(+), 3 deletions(-)

---
force_shared_libzstd.patch | (download)

cmake/FindWrapZSTD.cmake | 7 2 + 5 - 0 !
1 file changed, 2 insertions(+), 5 deletions(-)

 force the usage of the shared libzstd library.
 The library provides both versions, and the original code prefers the static
 version over the shared, while on Debian it should always use the shared
 version.
armel noyield.patch | (download)

src/corelib/global/qsimd_p.h | 2 2 + 0 - 0 !
1 file changed, 2 insertions(+)

 don't use yield on cpus that might not support it