Tested in an Impish chroot:
root@mitya57:/test# time ./test-2021-38593 ./input.svg Testing for CVE-2021-38593... If the test doesn't finish immediately, you probably are affected. Test finished.
real 0m0.033s user 0m0.004s sys 0m0.017s root@mitya57:/test# echo $? 0 root@mitya57:/test# apt policy libqt5gui5 libqt5gui5: Installed: 5.15.2+dfsg-12ubuntu1 Candidate: 5.15.2+dfsg-12ubuntu1 Version table: *** 5.15.2+dfsg-12ubuntu1 500 500 http://archive.ubuntu.com/ubuntu impish-proposed/universe amd64 Packages 100 /var/lib/dpkg/status 5.15.2+dfsg-12 500 500 http://archive.ubuntu.com/ubuntu impish/universe amd64 Packages
With the version from release pocket, the test program does not finish after 30 seconds.
Tested in an Impish chroot:
root@mitya57:/test# time ./test-2021-38593 ./input.svg
Testing for CVE-2021-38593...
If the test doesn't finish immediately, you probably are affected.
Test finished.
real 0m0.033s dfsg-12ubuntu1 dfsg-12ubuntu1 dfsg-12ubuntu1 500 archive. ubuntu. com/ubuntu impish- proposed/ universe amd64 Packages dpkg/status archive. ubuntu. com/ubuntu impish/universe amd64 Packages
user 0m0.004s
sys 0m0.017s
root@mitya57:/test# echo $?
0
root@mitya57:/test# apt policy libqt5gui5
libqt5gui5:
Installed: 5.15.2+
Candidate: 5.15.2+
Version table:
*** 5.15.2+
500 http://
100 /var/lib/
5.15.2+dfsg-12 500
500 http://
With the version from release pocket, the test program does not finish after 30 seconds.