Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 21 Jul 2014 21:36:54 +0000 (UTC)
From:      Raphael Kubo da Costa <rakuco@FreeBSD.org>
To:        ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org
Subject:   svn commit: r362499 - head/security/vuxml
Message-ID:  <201407212136.s6LLasG6057896@svn.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: rakuco
Date: Mon Jul 21 21:36:54 2014
New Revision: 362499
URL: http://svnweb.freebsd.org/changeset/ports/362499
QAT: https://qat.redports.org/buildarchive/r362499/

Log:
  Fix the recent Qt vulnerability entry again.
  
  The CVE patch applies to -imageformats in Qt4 but -gui in Qt5. I always get
  confused by the different port names...
  
  Noted by antoine@.
  
  MFH:		2014Q3
  Security:	904d78b8-0f7e-11e4-8b71-5453ed2e2b49

Modified:
  head/security/vuxml/vuln.xml

Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml	Mon Jul 21 21:31:27 2014	(r362498)
+++ head/security/vuxml/vuln.xml	Mon Jul 21 21:36:54 2014	(r362499)
@@ -92,15 +92,15 @@ Notes:
   </vuln>
 
   <vuln vid="904d78b8-0f7e-11e4-8b71-5453ed2e2b49">
-    <topic>qt4-imageformats, qt5-imageformats -- DoS vulnerability in the GIF image handler</topic>
+    <topic>qt4-imageformats, qt5-gui -- DoS vulnerability in the GIF image handler</topic>
     <affects>
       <package>
 	<name>qt4-imageformats</name>
 	<range><lt>4.8.6_1</lt></range>
       </package>
       <package>
-	<name>qt5-imageformats</name>
-	<range><lt>5.2.1_1</lt></range>
+	<name>qt5-gui</name>
+	<range><lt>5.2.1_4</lt></range>
       </package>
     </affects>
     <description>
@@ -122,7 +122,7 @@ Notes:
     <dates>
       <discovery>2014-04-24</discovery>
       <entry>2014-07-19</entry>
-      <modified>2014-07-20</modified>
+      <modified>2014-07-21</modified>
     </dates>
   </vuln>
 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201407212136.s6LLasG6057896>