diff options
| author | A. Wilcox <awilcox@wilcox-tech.com> | 2020-04-05 03:53:24 +0000 |
|---|---|---|
| committer | A. Wilcox <awilcox@wilcox-tech.com> | 2020-04-05 03:53:24 +0000 |
| commit | 32c4884ced79362bb0f24585f523ed5ff04daade (patch) | |
| tree | 49cd897810543f2eb86f8656416e8ccb61679108 /user/qt5-qtbase/CVE-2020-0569.patch | |
| parent | 2ce327f2b426d3d8f44e1b5ae7dcdab70248a2d3 (diff) | |
| parent | 0401ed06b3057dd45a935b9a82acc7980a064abe (diff) | |
| download | packages-32c4884ced79362bb0f24585f523ed5ff04daade.tar.gz packages-32c4884ced79362bb0f24585f523ed5ff04daade.tar.bz2 packages-32c4884ced79362bb0f24585f523ed5ff04daade.tar.xz packages-32c4884ced79362bb0f24585f523ed5ff04daade.zip | |
Merge branch 'sec/2020.03.29' into 'master'
Security updates for 2020.03.29
See merge request adelie/packages!419
Diffstat (limited to 'user/qt5-qtbase/CVE-2020-0569.patch')
| -rw-r--r-- | user/qt5-qtbase/CVE-2020-0569.patch | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/user/qt5-qtbase/CVE-2020-0569.patch b/user/qt5-qtbase/CVE-2020-0569.patch new file mode 100644 index 000000000..fa0efdce3 --- /dev/null +++ b/user/qt5-qtbase/CVE-2020-0569.patch @@ -0,0 +1,29 @@ +From bf131e8d2181b3404f5293546ed390999f760404 Mon Sep 17 00:00:00 2001 +From: Olivier Goffart <ogoffart@woboq.com> +Date: Fri, 8 Nov 2019 11:30:40 +0100 +Subject: Do not load plugin from the $PWD + +I see no reason why this would make sense to look for plugins in the current +directory. And when there are plugins there, it may actually be wrong + +Change-Id: I5f5aa168021fedddafce90effde0d5762cd0c4c5 +Reviewed-by: Thiago Macieira <thiago.macieira@intel.com> +--- + src/corelib/plugin/qpluginloader.cpp | 1 - + 1 file changed, 1 deletion(-) + +diff --git a/src/corelib/plugin/qpluginloader.cpp b/src/corelib/plugin/qpluginloader.cpp +index cadff4f32b..c2443dbdda 100644 +--- a/src/corelib/plugin/qpluginloader.cpp ++++ b/src/corelib/plugin/qpluginloader.cpp +@@ -305,7 +305,6 @@ static QString locatePlugin(const QString& fileName) + paths.append(fileName.left(slash)); // don't include the '/' + } else { + paths = QCoreApplication::libraryPaths(); +- paths.prepend(QStringLiteral(".")); // search in current dir first + } + + for (const QString &path : qAsConst(paths)) { +-- +cgit v1.2.1 + |