Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libqt5-qtwebengine for openSUSE:Factory checked in at 2024-05-24 19:50:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libqt5-qtwebengine (Old) and /work/SRC/openSUSE:Factory/.libqt5-qtwebengine.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libqt5-qtwebengine" Fri May 24 19:50:08 2024 rev:98 rq:1176497 version:5.15.17 Changes: -------- --- /work/SRC/openSUSE:Factory/libqt5-qtwebengine/libqt5-qtwebengine.changes 2024-05-20 18:12:18.363826248 +0200 +++ /work/SRC/openSUSE:Factory/.libqt5-qtwebengine.new.24587/libqt5-qtwebengine.changes 2024-05-24 19:50:18.563688748 +0200 @@ -1,0 +2,53 @@ +Thu May 23 00:21:22 UTC 2024 - Christophe Marin <christo...@krop.fr> + +- Add compatibility patches for ICU 75: + * qt5-webengine-icu-75.patch + * 0001-Use-default-constructor-in-place-of-self-delegation-.patch +- Consequently build with a newer compiler on Leap 15 + +------------------------------------------------------------------- +Wed May 22 08:20:33 UTC 2024 - christo...@krop.fr + +- Update to version 5.15.17: + * Add option to chose python version for building 5.15 WebEngine + * Update Chromium. Backported fixes: + * [Backport] Security bug 325296797 + * [Backport] CVE-2024-1059: Use after free in WebRTC + * [Backport] Security bug 1518994 + * Fixup for [Backport] Security bug 1519980 + * [Backport] CVE-2024-1283: Heap buffer overflow in Skia + * [Backport] CVE-2024-1060: Use after free in Canvas + * [Backport] CVE-2024-1077: Use after free in Network + * [Backport] Security bug 1519980 + * [Backport] CVE-2024-0808: Integer underflow in WebUI + * [Backport] CVE-2024-0807: Use after free in WebAudio + * Fix ffmpeg assembly with newer binutil + * [Backport] Security bug 1511689 + * [Backport] CVE-2024-0224: Use after free in WebAudio + * [Backport] CVE-2023-7024: Heap buffer overflow in WebRTC + * [Backport] Security bug 1506535 + * [Backport] CVE-2024-0519: Out of bounds memory access in V8 + * [Backport] CVE-2024-0518: Type Confusion in V8 + * [Backport] CVE-2024-0333: Insufficient data validation in Extensions + * [Backport] CVE-2024-0222: Use after free in ANGLE + * Fixup: [Backport] Security bug 1488199 + * FIXUP: Fix compilation with system ICU + * Fixup: [Backport] Security bug 1505632 + * [Backport] Security bug 1505632 + * [Backport] CVE-2023-6702: Type Confusion in V8 + * [Backport] CVE-2023-6345: Integer overflow in Skia + * Bump V8_PATCH_LEVEL + * [Backport] Security bug 1488199 (2/2) + * [Backport] Security bug 1488199 (1/2) + * [Backport] CVE-2023-6510: Use after free in Media Capture + * Fix building with system libxml2 + * [Backport] CVE-2023-6347: Use after free in Mojo + * [Backport] CVE-2023-6112: Use after free in Navigation + * [Backport] CVE-2023-5997: Use after free in Garbage Collection +- Drop patches, merged upstream: + * 0001-Fix-building-with-system-libxml2.patch + * qtwebengine-python3.patch + * python311-fixes.patch +- Update _service file, catapult snapshots are not needed anymore + +------------------------------------------------------------------- Old: ---- 0001-Fix-building-with-system-libxml2.patch catapult-git.tar.xz python311-fixes.patch qtwebengine-everywhere-src-5.15.16.tar.xz qtwebengine-python3.patch New: ---- 0001-Use-default-constructor-in-place-of-self-delegation-.patch qt5-webengine-icu-75.patch qtwebengine-everywhere-src-5.15.17.tar.xz BETA DEBUG BEGIN: Old:- Drop patches, merged upstream: * 0001-Fix-building-with-system-libxml2.patch * qtwebengine-python3.patch Old: * qtwebengine-python3.patch * python311-fixes.patch - Update _service file, catapult snapshots are not needed anymore Old: * 0001-Fix-building-with-system-libxml2.patch * qtwebengine-python3.patch * python311-fixes.patch BETA DEBUG END: BETA DEBUG BEGIN: New: * qt5-webengine-icu-75.patch * 0001-Use-default-constructor-in-place-of-self-delegation-.patch - Consequently build with a newer compiler on Leap 15 New:- Add compatibility patches for ICU 75: * qt5-webengine-icu-75.patch * 0001-Use-default-constructor-in-place-of-self-delegation-.patch BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libqt5-qtwebengine.spec ++++++ --- /var/tmp/diff_new_pack.lxkQVb/_old 2024-05-24 19:50:26.627983217 +0200 +++ /var/tmp/diff_new_pack.lxkQVb/_new 2024-05-24 19:50:26.631983363 +0200 @@ -32,19 +32,17 @@ %global _qtwebengine_dictionaries_dir %{_libqt5_datadir}/qtwebengine_dictionaries Name: libqt5-qtwebengine -Version: 5.15.16 +Version: 5.15.17 Release: 0 Summary: Qt 5 WebEngine Library License: LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only Group: Development/Libraries/X11 URL: https://www.qt.io %define base_name libqt5 -%define real_version 5.15.16 -%define so_version 5.15.16 +%define real_version 5.15.17 +%define so_version 5.15.17 %define tar_version qtwebengine-everywhere-src-%{version} Source: %{tar_version}.tar.xz -# Use a git snapshot for catapult to build with python3 (git rev: 2da767c6) -Source1: catapult-git.tar.xz Source99: libqt5-qtwebengine-rpmlintrc # PATCH-FIX-UPSTREAM armv6-ffmpeg-no-thumb.patch - Fix ffmpeg configuration for armv6 Patch0: armv6-ffmpeg-no-thumb.patch @@ -56,16 +54,13 @@ Patch3: 0001-skia-Some-includes-to-fix-build-with-GCC-12.patch # PATCH-FIX-UPSTREAM -- build with pipewire 0.3 Patch4: qtwebengine-pipewire-0.3.patch -# PATCH-FIX-OPENSUSE -- build with python 3 -Patch5: qtwebengine-python3.patch # PATCH-FIX-UPSTREAM -- handle futex_time64 -Patch6: sandbox_futex_time64.patch -# PATCH-FIX-UPSTREAM -- python 3.11 fixes -Patch7: python311-fixes.patch -# PATCH-FIX-UPSTREAM -- libxml 2.12 support -Patch8: 0001-Fix-building-with-system-libxml2.patch +Patch5: sandbox_futex_time64.patch # PATCH-FIX-UPSTREAM -- Add missing dependencies for compatibility with Ninja 1.12 -Patch9: Add-missing-dependencies.patch +Patch6: Add-missing-dependencies.patch +# PATCH-FIX-UPSTREAM -- ICU 75 compatibility +Patch7: qt5-webengine-icu-75.patch +Patch8: 0001-Use-default-constructor-in-place-of-self-delegation-.patch ### Patch 50-99 are applied conditionally # PATCH-FIX-OPENSUSE -- allow building qtwebengine with ffmpeg5 Patch50: qtwebengine-ffmpeg5.patch @@ -78,6 +73,10 @@ BuildRequires: fdupes BuildRequires: flac-devel BuildRequires: flex +%if 0%{?suse_version} < 1550 +BuildRequires: gcc13-PIE +BuildRequires: gcc13-c++ +%endif BuildRequires: git-core BuildRequires: gperf BuildRequires: krb5 @@ -108,6 +107,7 @@ BuildRequires: pkgconfig BuildRequires: %{pyver} BuildRequires: %{pyver}-devel +BuildRequires: %{pyver}-html5lib BuildRequires: %{pyver}-xml BuildRequires: re2c BuildRequires: sed @@ -302,14 +302,6 @@ %patch -P6 -p1 %patch -P7 -p1 %patch -P8 -p1 -%patch -P9 -p1 - -# Replace the whole catapult folder rather than picking individual changes -pushd src/3rdparty/chromium/third_party -rm -r catapult -tar xJf %{SOURCE1} -mv catapult-git catapult -popd # FFmpeg 5 %if %{with system_ffmpeg} @@ -327,12 +319,11 @@ sed -i -e '/toolprefix = /d' -e 's/\${toolprefix}//g' \ src/3rdparty/chromium/build/toolchain/linux/BUILD.gn -%build rm -r src/3rdparty/chromium/third_party/openh264/src -%if "%{pyver}" == "python311" -sed -i 's#QMAKE_PYTHON = python3#QMAKE_PYTHON = python3.11#' mkspecs/features/functions.prf -sed -i 's#python3#python3.11#' configure.pri +%build +%if 0%{?suse_version} < 1550 +export CC=gcc-13 CXX=g++-13 %endif %ifnarch x86_64 @@ -349,6 +340,14 @@ gn_args+="link_pulseaudio=true" \ gn_args+="media_use_openh264=false" \ gn_args+="use_system_libxml=true use_system_libxslt=true" \ +%if "%{pyver}" == "python311" + config.input.python_override=python3.11 \ +%endif +%if 0%{?suse_version} < 1550 + QMAKE_CC=gcc-13 \ + QMAKE_CXX=g++-13 \ + QMAKE_LINK=g++-13 \ +%endif qtwebengine.pro -- \ -webengine-alsa \ -no-webengine-embedded-build \ @@ -363,7 +362,10 @@ -webengine-proprietary-codecs \ %endif %if %{with pipewire} - -webengine-webrtc-pipewire + -webengine-webrtc-pipewire \ +%endif +%if 0%{?suse_version} > 1500 + -webengine-python-version python3 %endif # Determine the right number of parallel processes based on the available memory ++++++ 0001-Use-default-constructor-in-place-of-self-delegation-.patch ++++++ >From 1b74bce8ba1322d1853c7fd4467504a4a0d32d7b Mon Sep 17 00:00:00 2001 From: Adam Klein <ad...@chromium.org> Date: Mon, 29 Nov 2021 15:11:39 -0800 Subject: [PATCH] Use default constructor in place of self-delegation for Symbol() This avoids a compile error when building with GCC in C++17 mode. Bug: v8:12449 Change-Id: I14817895d31019fb71fc71b061f2ecf576dbc711 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3307102 Commit-Queue: Adam Klein <ad...@chromium.org> Reviewed-by: Leszek Swirski <lesz...@chromium.org> Reviewed-by: Tobias Tebbi <te...@chromium.org> Cr-Commit-Position: refs/heads/main@{#78171} --- src/3rdparty/chromium/v8/src/torque/earley-parser.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/3rdparty/chromium/v8/src/torque/earley-parser.h b/src/3rdparty/chromium/v8/src/torque/earley-parser.h index e0dca24..0429fd2 100644 --- a/src/3rdparty/chromium/v8/src/torque/earley-parser.h +++ b/src/3rdparty/chromium/v8/src/torque/earley-parser.h @@ -248,7 +248,7 @@ class Rule final { // used in the parser. class Symbol { public: - Symbol() : Symbol({}) {} + Symbol() = default; Symbol(std::initializer_list<Rule> rules) { *this = rules; } V8_EXPORT_PRIVATE Symbol& operator=(std::initializer_list<Rule> rules); -- 2.45.1 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.lxkQVb/_old 2024-05-24 19:50:26.703985992 +0200 +++ /var/tmp/diff_new_pack.lxkQVb/_new 2024-05-24 19:50:26.707986138 +0200 @@ -1,19 +1,11 @@ <services> <service name="tar_scm" mode="disabled"> <param name="changesgenerate">enable</param> - <param name="version">5.15.16</param> + <param name="version">5.15.17</param> <param name="url">git://code.qt.io/qt/qtwebengine.git</param> <param name="scm">git</param> <param name="filename">qtwebengine-everywhere-src</param> - <param name="revision">v5.15.16-lts</param> - </service> - <service name="tar_scm" mode="disabled"> - <param name="changesgenerate">disable</param> - <param name="url">https://chromium.googlesource.com/catapult</param> - <param name="revision">main</param> - <param name="scm">git</param> - <param name="filename">catapult</param> - <param name="versionformat">git</param> + <param name="revision">v5.15.17-lts</param> </service> <service name="recompress" mode="disabled"> <param name="file">*.tar</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.lxkQVb/_old 2024-05-24 19:50:26.727986869 +0200 +++ /var/tmp/diff_new_pack.lxkQVb/_new 2024-05-24 19:50:26.731987014 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">git://code.qt.io/qt/qtwebengine.git</param> - <param name="changesrevision">224806a7022eed6d5c75b486bec8715a618cb314</param></service></servicedata> + <param name="changesrevision">17fd3176988586168bee8654008a097a5f23ec1d</param></service></servicedata> (No newline at EOF) ++++++ qt5-webengine-icu-75.patch ++++++ Fix build with ICU 75. Origin: Arch linux: https://gitlab.archlinux.org/archlinux/packaging/packages/qt5-webengine/-/blob/main/qt5-webengine-icu-75.patch?ref_type=heads diff --git a/src/3rdparty/chromium/build/config/compiler/BUILD.gn b/src/3rdparty/chromium/build/config/compiler/BUILD.gn index b511a58c5a8..abd78a74ead 100644 --- a/src/3rdparty/chromium/build/config/compiler/BUILD.gn +++ b/src/3rdparty/chromium/build/config/compiler/BUILD.gn @@ -566,7 +566,7 @@ config("compiler") { # Override Chromium's default for projects that wish to stay on C++11. cflags_cc += [ "-std=${standard_prefix}++11" ] } else { - cflags_cc += [ "-std=${standard_prefix}++14" ] + cflags_cc += [ "-std=${standard_prefix}++17" ] } } else if (!is_win && !is_nacl) { if (target_os == "android") { diff --git a/src/3rdparty/chromium/base/allocator/partition_allocator/partition_alloc_constants.h b/src/3rdparty/chromium/base/allocator/partition_allocator/partition_alloc_constants.h index f03ba1e4ab4..b1495f7ae74 100644 --- a/src/3rdparty/chromium/base/allocator/partition_allocator/partition_alloc_constants.h +++ b/src/3rdparty/chromium/base/allocator/partition_allocator/partition_alloc_constants.h @@ -195,7 +195,7 @@ NumPartitionPagesPerSuperPage() { // // __STDCPP_DEFAULT_NEW_ALIGNMENT__ is C++17. As such, it is not defined on all // platforms, as Chrome's requirement is C++14 as of 2020. -#if defined(__STDCPP_DEFAULT_NEW_ALIGNMENT__) +#if 0 static constexpr size_t kAlignment = std::max(alignof(std::max_align_t), __STDCPP_DEFAULT_NEW_ALIGNMENT__); #else diff --git a/src/3rdparty/chromium/third_party/webrtc/common_video/h264/sps_parser.h b/src/3rdparty/chromium/third_party/webrtc/common_video/h264/sps_parser.h index 76e627d27a3..942435f44a0 100644 --- a/src/3rdparty/chromium/third_party/webrtc/common_video/h264/sps_parser.h +++ b/src/3rdparty/chromium/third_party/webrtc/common_video/h264/sps_parser.h @@ -12,6 +12,7 @@ #define COMMON_VIDEO_H264_SPS_PARSER_H_ #include "absl/types/optional.h" +#include <cstdint> namespace rtc { class BitBuffer; diff --git a/src/3rdparty/chromium/third_party/webrtc/common_video/h264/pps_parser.h b/src/3rdparty/chromium/third_party/webrtc/common_video/h264/pps_parser.h index d6c31b06887..d8852dfd186 100644 --- a/src/3rdparty/chromium/third_party/webrtc/common_video/h264/pps_parser.h +++ b/src/3rdparty/chromium/third_party/webrtc/common_video/h264/pps_parser.h @@ -12,6 +12,7 @@ #define COMMON_VIDEO_H264_PPS_PARSER_H_ #include "absl/types/optional.h" +#include <cstdint> namespace rtc { class BitBuffer; diff --git a/src/3rdparty/chromium/third_party/webrtc/modules/audio_processing/aec3/reverb_model_estimator.h b/src/3rdparty/chromium/third_party/webrtc/modules/audio_processing/aec3/reverb_model_estimator.h index 3b9971abae1..d4458038527 100644 --- a/src/3rdparty/chromium/third_party/webrtc/modules/audio_processing/aec3/reverb_model_estimator.h +++ b/src/3rdparty/chromium/third_party/webrtc/modules/audio_processing/aec3/reverb_model_estimator.h @@ -13,6 +13,7 @@ #include <array> #include <vector> +#include <memory> #include "absl/types/optional.h" #include "api/array_view.h" diff --git a/src/3rdparty/chromium/third_party/webrtc/modules/include/module_common_types_public.h b/src/3rdparty/chromium/third_party/webrtc/modules/include/module_common_types_public.h index 345e45ce127..e686e5d691a 100644 --- a/src/3rdparty/chromium/third_party/webrtc/modules/include/module_common_types_public.h +++ b/src/3rdparty/chromium/third_party/webrtc/modules/include/module_common_types_public.h @@ -12,6 +12,7 @@ #define MODULES_INCLUDE_MODULE_COMMON_TYPES_PUBLIC_H_ #include <limits> +#include <cstdint> #include "absl/types/optional.h" diff --git a/src/3rdparty/chromium/third_party/blink/renderer/core/page/scrolling/text_fragment_selector_generator.cc b/src/3rdparty/chromium/third_party/blink/renderer/core/page/scrolling/text_fragment_selector_generator.cc index 8fcc799b795..bc69ddcf18c 100644 --- a/src/3rdparty/chromium/third_party/blink/renderer/core/page/scrolling/text_fragment_selector_generator.cc +++ b/src/3rdparty/chromium/third_party/blink/renderer/core/page/scrolling/text_fragment_selector_generator.cc @@ -15,6 +15,7 @@ #include "third_party/blink/renderer/core/page/scrolling/text_fragment_anchor_metrics.h" #include "third_party/blink/renderer/core/page/scrolling/text_fragment_finder.h" #include "third_party/blink/renderer/platform/text/text_boundaries.h" +#include "absl/base/attributes.h" namespace blink { diff --git a/src/3rdparty/chromium/third_party/abseil-cpp/absl/base/options.h b/src/3rdparty/chromium/third_party/abseil-cpp/absl/base/options.h index df506f0fae6..1de105fed4a 100644 --- a/src/3rdparty/chromium/third_party/abseil-cpp/absl/base/options.h +++ b/src/3rdparty/chromium/third_party/abseil-cpp/absl/base/options.h @@ -180,7 +180,7 @@ // absl::variant is a typedef of std::variant, use the feature macro // ABSL_USES_STD_VARIANT. -#define ABSL_OPTION_USE_STD_VARIANT 2 +#define ABSL_OPTION_USE_STD_VARIANT 0 // ABSL_OPTION_USE_INLINE_NAMESPACE ++++++ qtwebengine-everywhere-src-5.15.16.tar.xz -> qtwebengine-everywhere-src-5.15.17.tar.xz ++++++ /work/SRC/openSUSE:Factory/libqt5-qtwebengine/qtwebengine-everywhere-src-5.15.16.tar.xz /work/SRC/openSUSE:Factory/.libqt5-qtwebengine.new.24587/qtwebengine-everywhere-src-5.15.17.tar.xz differ: char 15, line 1