Bug#1006182: buster-pu: package qtbase-opensource-src/5.11.3+dfsg1-1+deb10u5

[Emilio Pozuelo Monfort <pochu@debian.org>]

On 18/03/2022 12:28, Adam D. Barratt wrote:
> On Fri, 2022-03-18 at 12:24 +0100, Emilio Pozuelo Monfort wrote:
> > On 18/03/2022 11:48, Adam D. Barratt wrote:
> > > Control: tags -1 + confirmed
> > >
> > > On Sun, 2022-02-20 at 21:13 +0300, Dmitry Shachnev wrote:
> > > > One of our users requested a new upload to fix this bug:
> > > > https://bugs.debian.org/1001082.
> > > >
> > > > [ Impact ]
> > > > This bug causes various applications to segfault on exit.
> > >
> > > Please go ahead; thanks.
> >
> > There are a couple of CVEs open (one of them a no-dsa, DOS one).
> > Perhaps they
> > can be addressed in this update as well, provided the patches (which
> > seem rather
> > small) are fine for the buster version?
> >
> > I know the deadline for the point release is just around the corner,
> > so if
> > there's not enough time to address those then that'd be alright.
>
> Well, we'd need to see a diff. :-)

Heh sure. This was more meant for Dmitry...

> (Was Dmitry intentionally not CCed on your mail?)

My bad, I hit reply rather than reply to all... Dmitry, see my comments above 
regarding the couple CVEs open in buster, in case they can be included in this 
update.

Cheers,
Emilio