All of lore.kernel.org
 help / color / mirror / Atom feed
From: Roy Kollen Svendsen <roykollensvendsen@gmail.com>
To: buildroot@buildroot.org
Cc: Roy Kollen Svendsen <roy.kollen.svendsen@akersolutions.com>,
	Samuel Martin <s.martin49@gmail.com>,
	Roy Kollen Svendsen <roykollensvendsen@gmail.com>,
	Thomas Petazzoni <thomas.petazzoni@bootlin.com>,
	Zoltan Gyarmati <zgyarmati@zgyarmati.de>,
	Jesse Van Gavere <jesseevg@gmail.com>
Subject: [Buildroot] [PATCH v3 02/14] package/qt6/qt6base: patch CVE-2024-33861
Date: Sun, 12 May 2024 13:45:49 +0200	[thread overview]
Message-ID: <20240512114617.2564569-2-roykollensvendsen@gmail.com> (raw)
In-Reply-To: <20240512114617.2564569-1-roykollensvendsen@gmail.com>

From: Roy Kollen Svendsen <roy.kollen.svendsen@akersolutions.com>

Got patch from:

https://download.qt.io/archive/qt/6.7/
Signed-off-by: Roy Kollen Svendsen <roykollensvendsen@gmail.com>
---
Changes v2 -> v3:
  - Add this new patch to the series since a new CVE fix was recently uploaded
    to the Qt 6.7 downloads site.
 
 .../0001-Fix-CVE-2024-33861-for-Qt6.7.patch   | 36 +++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 package/qt6/qt6base/0001-Fix-CVE-2024-33861-for-Qt6.7.patch

diff --git a/package/qt6/qt6base/0001-Fix-CVE-2024-33861-for-Qt6.7.patch b/package/qt6/qt6base/0001-Fix-CVE-2024-33861-for-Qt6.7.patch
new file mode 100644
index 0000000000..f016788017
--- /dev/null
+++ b/package/qt6/qt6base/0001-Fix-CVE-2024-33861-for-Qt6.7.patch
@@ -0,0 +1,36 @@
+From 7f88945625f560796c86a267086f163e74c1407b Mon Sep 17 00:00:00 2001
+From: Roy Kollen Svendsen <roy.kollen.svendsen@akersolutions.com>
+Date: Sun, 12 May 2024 07:15:32 +0200
+Subject: [PATCH] Fix CVE-2024-33861 for Qt6.7
+
+Signed-off-by: Roy Kollen Svendsen <roy.kollen.svendsen@akersolutions.com>
+Upstream: https://download.qt.io/archive/qt/6.7/CVE-2024-33861-qtbase-6.7.diff
+---
+ src/corelib/text/qstringconverter.cpp | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/src/corelib/text/qstringconverter.cpp b/src/corelib/text/qstringconverter.cpp
+index b5749843..fd45ccf2 100644
+--- a/src/corelib/text/qstringconverter.cpp
++++ b/src/corelib/text/qstringconverter.cpp
+@@ -1954,7 +1954,7 @@ struct QStringConverterICU : QStringConverter
+         const void *context;
+         ucnv_getToUCallBack(icu_conv, &action, &context);
+         if (context != state)
+-             ucnv_setToUCallBack(icu_conv, action, &state, nullptr, nullptr, &err);
++             ucnv_setToUCallBack(icu_conv, action, state, nullptr, nullptr, &err);
+ 
+         ucnv_toUnicode(icu_conv, &target, targetLimit, &source, sourceLimit, nullptr, flush, &err);
+         // We did reserve enough space:
+@@ -1987,7 +1987,7 @@ struct QStringConverterICU : QStringConverter
+         const void *context;
+         ucnv_getFromUCallBack(icu_conv, &action, &context);
+         if (context != state)
+-             ucnv_setFromUCallBack(icu_conv, action, &state, nullptr, nullptr, &err);
++             ucnv_setFromUCallBack(icu_conv, action, state, nullptr, nullptr, &err);
+ 
+         ucnv_fromUnicode(icu_conv, &target, targetLimit, &source, sourceLimit, nullptr, flush, &err);
+         // We did reserve enough space:
+-- 
+2.45.0
+
-- 
2.45.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

  reply	other threads:[~2024-05-12 20:19 UTC|newest]

Thread overview: 19+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <1924535>
2024-05-12 11:45 ` [Buildroot] [PATCH v3 01/14] package/qt6: bump version to 6.7.0 Roy Kollen Svendsen
2024-05-12 11:45   ` Roy Kollen Svendsen [this message]
2024-05-13  6:40     ` [Buildroot] [PATCH v3 02/14] package/qt6/qt6base: patch CVE-2024-33861 Thomas Petazzoni via buildroot
2024-05-13  7:57       ` Jesse Van Gavere
2024-05-13 10:29         ` Roy Kollen Svendsen
2024-05-13 11:05           ` Jesse Van Gavere
2024-05-13 11:59             ` Thomas Petazzoni via buildroot
2024-05-12 11:45   ` [Buildroot] [PATCH v3 03/14] package/qt6/qt6base: add blind option to enable GUI support on host Roy Kollen Svendsen
2024-05-12 11:45   ` [Buildroot] [PATCH v3 04/14] package/qt6/qt6shadertools: new package Roy Kollen Svendsen
2024-05-12 11:45   ` [Buildroot] [PATCH v3 05/14] package/qt6/qt6svg: allow building for host Roy Kollen Svendsen
2024-05-12 11:45   ` [Buildroot] [PATCH v3 06/14] package/qt6/qt6languageserver: new package Roy Kollen Svendsen
2024-05-12 11:45   ` [Buildroot] [PATCH v3 07/14] package/qt6/qt6declarative: " Roy Kollen Svendsen
2024-05-12 11:45   ` [Buildroot] [PATCH v3 08/14] package/qt6/qt6declarative: fix build when Qt Network not available Roy Kollen Svendsen
2024-05-12 11:45   ` [Buildroot] [PATCH v3 09/14] package/qt6/qt6websockets: new package Roy Kollen Svendsen
2024-05-12 11:45   ` [Buildroot] [PATCH v3 10/14] package/qt6/qt6wayland: " Roy Kollen Svendsen
2024-05-12 11:45   ` [Buildroot] [PATCH v3 11/14] package/qt6/qt6base: add blind option to enable Network support on host Roy Kollen Svendsen
2024-05-12 11:45   ` [Buildroot] [PATCH v3 12/14] package/qt6/qt6tools: new package Roy Kollen Svendsen
2024-05-12 11:46   ` [Buildroot] [PATCH v3 13/14] package/qt6/qt6virtualkeyboard: " Roy Kollen Svendsen
2024-05-12 11:46   ` [Buildroot] [PATCH v3 14/14] package/qt6/qt6mqtt: " Roy Kollen Svendsen

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20240512114617.2564569-2-roykollensvendsen@gmail.com \
    --to=roykollensvendsen@gmail.com \
    --cc=buildroot@buildroot.org \
    --cc=jesseevg@gmail.com \
    --cc=roy.kollen.svendsen@akersolutions.com \
    --cc=s.martin49@gmail.com \
    --cc=thomas.petazzoni@bootlin.com \
    --cc=zgyarmati@zgyarmati.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.