[packages/qt5-qtwebengine] up to 5.15.9

atler atler at pld-linux.org
Wed Apr 6 19:57:14 CEST 2022


commit 756ef5d7645f95c5f66abbb7bd0a82f8d8d317a0
Author: Jan Palus <atler at pld-linux.org>
Date:   Wed Apr 6 19:22:30 2022 +0200

    up to 5.15.9

 CVE-2022-1096-qtwebengine-5.15.diff | 27 ---------------------------
 qt5-qtwebengine.spec                |  8 +++-----
 2 files changed, 3 insertions(+), 32 deletions(-)
---
diff --git a/qt5-qtwebengine.spec b/qt5-qtwebengine.spec
index d2b7179..4a1560f 100644
--- a/qt5-qtwebengine.spec
+++ b/qt5-qtwebengine.spec
@@ -15,16 +15,15 @@
 Summary:	The Qt5 WebEngine library
 Summary(pl.UTF-8):	Biblioteka Qt5 WebEngine
 Name:		qt5-%{orgname}
-Version:	%{base_version}.8
-Release:	4
+Version:	%{base_version}.9
+Release:	1
 License:	LGPL v3 or GPL v2 or GPL v3 or commercial
 Group:		X11/Libraries
 Source0:	qtwebengine-%{version}.tar.xz
-# Source0-md5:	57a2dbd98e641803478b6a04978a5c8b
+# Source0-md5:	f4641431940f77f3ea6848ad6726ae3f
 Patch0:		x32.patch
 Patch1:		%{name}-gn-dynamic.patch
 Patch2:		icu.patch
-Patch3:		CVE-2022-1096-qtwebengine-5.15.diff
 URL:		https://www.qt.io/
 BuildRequires:	Qt5Core-devel >= %{qtbase_ver}
 BuildRequires:	Qt5Designer-devel >= %{qttools_ver}
@@ -282,7 +281,6 @@ Przykłady do biblioteki Qt5 WebEngine.
 %endif
 %patch1 -p1
 %patch2 -p1
-%patch3 -p1
 
 %{qt5bindir}/syncqt.pl -version %{version}
 
diff --git a/CVE-2022-1096-qtwebengine-5.15.diff b/CVE-2022-1096-qtwebengine-5.15.diff
deleted file mode 100644
index 65d25b5..0000000
--- a/CVE-2022-1096-qtwebengine-5.15.diff
+++ /dev/null
@@ -1,27 +0,0 @@
---- a/src/3rdparty/chromium/v8/src/objects/objects.cc
-+++ b/src/3rdparty/chromium/v8/src/objects/objects.cc
-@@ -2481,6 +2481,12 @@ Maybe<bool> Object::SetPropertyInternal(LookupIterator* it,
-           Maybe<bool> result =
-               JSObject::SetPropertyWithInterceptor(it, should_throw, value);
-           if (result.IsNothing() || result.FromJust()) return result;
-+          // Assuming that the callback have side effects, we use
-+          // Object::SetSuperProperty() which works properly regardless on
-+          // whether the property was present on the receiver or not when
-+          // storing to the receiver.
-+          // Proceed lookup from the next state.
-+          it->Next();
-         } else {
-           Maybe<PropertyAttributes> maybe_attributes =
-               JSObject::GetPropertyAttributesWithInterceptor(it);
-@@ -2501,10 +2507,8 @@ Maybe<bool> Object::SetPropertyInternal(LookupIterator* it,
-             // property to the receiver.
-             it->NotFound();
-           }
--          return Object::SetSuperProperty(it, value, store_origin,
--                                          should_throw);
-         }
--        break;
-+        return Object::SetSuperProperty(it, value, store_origin, should_throw);
-       }
-
-       case LookupIterator::ACCESSOR: {
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/qt5-qtwebengine.git/commitdiff/756ef5d7645f95c5f66abbb7bd0a82f8d8d317a0



More information about the pld-cvs-commit mailing list