Raspbian automatic forward porter [Tue, 25 Aug 2020 16:27:28 +0000 (17:27 +0100)]
Merge version 5.14.2+dfsg-5+rpi1 and 5.14.2+dfsg-6 to produce 5.14.2+dfsg-6+rpi1
Dmitry Shachnev [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
Merge qtbase-opensource-src (5.14.2+dfsg-6) import into refs/heads/workingbranch
Pino Toscano [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
Limit Linux-only code with Q_OS_LINUX
Forwarded: no
Last-Update: 2020-04-19
The QStorageInfo/QStorageIterator implementation used for Linux is used also
on Hurd, as it uses an interface provided by GNU libc.
QStorageIterator::device() tries to use PATH_MAX (unavailable on the Hurd)
to lookup a /dev/block/ path, which exists on Linux only; hence, perform that
check within a Q_OS_LINUX block.
Gbp-Pq: Name qstorageinfo_linux.diff
Pino Toscano [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
Avoid unconditional PATH_MAX usage
Forwarded: no
Last-Update: 2020-04-19
Use a "safe" size in case PATH_MAX is not defined; in the end, this should not
be used, as a allocating realpath() will be used instead.
Gbp-Pq: Name path_max.diff
Martin Smith [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
pass default include directories to qdoc
Bug: https://bugs.debian.org/908328
Forwarded: no
Last-Update: 2020-01-28
Gbp-Pq: Name qdoc_default_incdirs.diff
Dmitry Shachnev [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
guard UTIME_NOW/UTIME_OMIT usages
Forwarded: no
Last-Update: 2018-02-22
Gbp-Pq: Name nonlinux_utime.diff
Dmitry Shachnev [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
support ARMv4 architecture, needed for armel builds
Forwarded: no
Last-Update: 2016-07-01
Gbp-Pq: Name armv4.diff
Dmitry Shachnev [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
catch linker warnings in some config tests
Forwarded: https://codereview.qt-project.org/163214 (rejected)
Bug: https://bugs.debian.org/827935
Last-Update: 2019-03-02
Without this, qmake wrongly thinks that the tests succeed, for example:
./config.tests/unix/futimens/futimens.cpp:44: warning: futimens is not implemented and will always fail
test config.corelib.tests.futimens succeeded
Gbp-Pq: Name gnukfreebsd_linker_warnings.diff
Fathi Boudra [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
build ibase sql plugin against firebird
Forwarded: no
Last-Update: 2017-06-30
Gbp-Pq: Name link_fbclient.diff
Lisandro Damián Nicanor Pérez Meyer [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
remove non-used privacy-breach code
Forwarded: not-needed
Last-Update: 2015-02-18
This code makes Lintian unhappy. But we are really not using it, it only
gets inserted when building the online doc.
Anyways the best way to calm down Lintian is to simply remove it.
Gbp-Pq: Name remove_privacy_breaches.diff
Dmitry Shachnev [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
disable htmlinfo example which contains non-free files
Forwarded: not-needed
Last-Update: 2014-12-17
Gbp-Pq: Name no_htmlinfo_example.diff
Pino Toscano [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
Initial GNU/kFreeBSD support
Last-Update: 2015-06-03
Forwarded: no
- add a gnukfreebsd-g++ qmake mkspec, mostly copied from the hurd-g++ one
- properly use LD_LIBRARY_PATH on GNU/* systems
Gbp-Pq: Name gnukfreebsd.diff
Debian Qt/KDE Maintainers [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
OpenSSL: handle SSL_shutdown's errors properly
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
8ddffc6ba4f38bb8
Last-Update: 2020-08-19
Do not call SSL_shutdown on a session that is in handshake state (SSL_in_init(s)
returns 1). Also, do not call SSL_shutdown if a session encountered a fatal
error (SSL_ERROR_SYSCALL or SSL_ERROR_SSL was found before). If SSL_shutdown
was unsuccessful (returned code != 1), we have to clear the error(s) it queued.
Unfortunately, SSL_in_init was a macro in OpenSSL 1.0.x. We have to
resolve SSL_state to implement SSL_in_init.
Gbp-Pq: Name CVE-2020-13962.diff
Debian Qt/KDE Maintainers [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
fix buffer overflow in XBM parser
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
1616c71921b73b22
Last-Update: 2020-08-18
Gbp-Pq: Name CVE-2020-17507.diff
Debian Qt/KDE Maintainers [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
clarify warning message about PIC/PIE
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
e2265965083343aa
Last-Update: 2020-07-08
Gbp-Pq: Name clarify_pic_message.diff
Debian Qt/KDE Maintainers [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
qmake: stop using -isystem flag
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
a5dd0b4e68724ecd
Last-Update: 2020-06-29
Gbp-Pq: Name no_isystem.diff
Debian Qt/KDE Maintainers [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
moc: handle include directives in enums
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
98cb33115089eebc
Last-Update: 2020-06-29
When including files, moc inserts a MOC_INCLUDE_BEGIN and
MOC_INCLUDE_END token into the token stream. Those are already handled
in the toplevel Moc::parse function, but parseEnum lacked support so
far.
Gbp-Pq: Name moc_handle_includes.diff
Debian Qt/KDE Maintainers [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
QLibrary: fix deadlock caused by fix to QTBUG-39642
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
276fa8383a753576
Last-Update: 2020-04-17
Commit
ae6f73e8566fa76470937aca737141183929a5ec inserted a mutex around
the entire load_sys(). We had reasoned that deadlocks would only occur if
the object creation in instance() recursed into its own instance(),
which was already a bug. But we had forgotten that dlopen()/
LoadLibrary() executes initialization code from the module being loaded,
which could cause a recursion back into the same QPluginLoader or
QLibrary object. This recursion is benign because the module *is* loaded
and dlopen()/LoadLibrary() returns the same handle.
Gbp-Pq: Name fix_qlibrary_deadlock.diff
Debian Qt/KDE Maintainers [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
enable accessibility on Linux when org.a11y.Status IsEnabled is true
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
54886d7f81175ac6
Last-Update: 2020-04-16
Otherwise accessibility would only work when Orca is set to be started
in the session preference, and it would not work when running Orca or
compiz' zoom by hand.
The existing comment said that it was always true since gnome 3.6, but at
least in Debian 8's gnome 3.14, Debian 9's gnome 3.22, and Debian 10's
3.30 it is not always true, it is Orca which sets it on startup. Compiz's
focuspoll module also does so for people with low vision using zoom with
focus tracking.
Gbp-Pq: Name enable_a11y_on_linux.diff
Debian Qt/KDE Maintainers [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
add an expansion limit for entities
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
fd4be84d23a0db41
Last-Update: 2020-02-27
Recursively defined entities can easily exhaust all available
memory. Limit entity expansion to a default of 4096 characters to
avoid DoS attacks when a user loads untrusted content.
Added a setter and getter to allow modifying the expansion limit.
QXmlStreamReader does now by default limit the expansion of entities
to 4096 characters. Documents where a single entity expands to more
characters than the limit are not considered well formed. The limit
is there to avoid DoS attacks through recursively expanding entities
when loading untrusted content. The limit can be changed through the
QXmlStreamReader::setEntityExpansionLimit() method.
Gbp-Pq: Name CVE-2015-9541.diff
Dmitry Shachnev [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
qtbase-opensource-src (5.14.2+dfsg-6) unstable; urgency=medium
* Backport upstream patch to fix buffer overflow in XBM parser
(CVE-2020-17507, closes: #968444).
* Backport upstream patch to handle SSL_shutdown's errors properly
(CVE-2020-13962).
* Update symbols files from buildds’ logs.
[dgit import unpatched qtbase-opensource-src 5.14.2+dfsg-6]
Dmitry Shachnev [Wed, 19 Aug 2020 17:40:32 +0000 (18:40 +0100)]
Import qtbase-opensource-src_5.14.2+dfsg-6.debian.tar.xz
[dgit import tarball qtbase-opensource-src 5.14.2+dfsg-6 qtbase-opensource-src_5.14.2+dfsg-6.debian.tar.xz]
Raspbian automatic forward porter [Sun, 16 Aug 2020 23:56:16 +0000 (00:56 +0100)]
Merge version 5.14.2+dfsg-4+rpi1 and 5.14.2+dfsg-5 to produce 5.14.2+dfsg-5+rpi1
Dmitry Shachnev [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
Merge qtbase-opensource-src (5.14.2+dfsg-5) import into refs/heads/workingbranch
Pino Toscano [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
Limit Linux-only code with Q_OS_LINUX
Forwarded: no
Last-Update: 2020-04-19
The QStorageInfo/QStorageIterator implementation used for Linux is used also
on Hurd, as it uses an interface provided by GNU libc.
QStorageIterator::device() tries to use PATH_MAX (unavailable on the Hurd)
to lookup a /dev/block/ path, which exists on Linux only; hence, perform that
check within a Q_OS_LINUX block.
Gbp-Pq: Name qstorageinfo_linux.diff
Pino Toscano [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
Avoid unconditional PATH_MAX usage
Forwarded: no
Last-Update: 2020-04-19
Use a "safe" size in case PATH_MAX is not defined; in the end, this should not
be used, as a allocating realpath() will be used instead.
Gbp-Pq: Name path_max.diff
Martin Smith [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
pass default include directories to qdoc
Bug: https://bugs.debian.org/908328
Forwarded: no
Last-Update: 2020-01-28
Gbp-Pq: Name qdoc_default_incdirs.diff
Dmitry Shachnev [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
guard UTIME_NOW/UTIME_OMIT usages
Forwarded: no
Last-Update: 2018-02-22
Gbp-Pq: Name nonlinux_utime.diff
Dmitry Shachnev [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
support ARMv4 architecture, needed for armel builds
Forwarded: no
Last-Update: 2016-07-01
Gbp-Pq: Name armv4.diff
Dmitry Shachnev [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
catch linker warnings in some config tests
Forwarded: https://codereview.qt-project.org/163214 (rejected)
Bug: https://bugs.debian.org/827935
Last-Update: 2019-03-02
Without this, qmake wrongly thinks that the tests succeed, for example:
./config.tests/unix/futimens/futimens.cpp:44: warning: futimens is not implemented and will always fail
test config.corelib.tests.futimens succeeded
Gbp-Pq: Name gnukfreebsd_linker_warnings.diff
Fathi Boudra [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
build ibase sql plugin against firebird
Forwarded: no
Last-Update: 2017-06-30
Gbp-Pq: Name link_fbclient.diff
Lisandro Damián Nicanor Pérez Meyer [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
remove non-used privacy-breach code
Forwarded: not-needed
Last-Update: 2015-02-18
This code makes Lintian unhappy. But we are really not using it, it only
gets inserted when building the online doc.
Anyways the best way to calm down Lintian is to simply remove it.
Gbp-Pq: Name remove_privacy_breaches.diff
Dmitry Shachnev [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
disable htmlinfo example which contains non-free files
Forwarded: not-needed
Last-Update: 2014-12-17
Gbp-Pq: Name no_htmlinfo_example.diff
Pino Toscano [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
Initial GNU/kFreeBSD support
Last-Update: 2015-06-03
Forwarded: no
- add a gnukfreebsd-g++ qmake mkspec, mostly copied from the hurd-g++ one
- properly use LD_LIBRARY_PATH on GNU/* systems
Gbp-Pq: Name gnukfreebsd.diff
Debian Qt/KDE Maintainers [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
clarify warning message about PIC/PIE
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
e2265965083343aa
Last-Update: 2020-07-08
Gbp-Pq: Name clarify_pic_message.diff
Debian Qt/KDE Maintainers [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
qmake: stop using -isystem flag
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
a5dd0b4e68724ecd
Last-Update: 2020-06-29
Gbp-Pq: Name no_isystem.diff
Debian Qt/KDE Maintainers [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
moc: handle include directives in enums
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
98cb33115089eebc
Last-Update: 2020-06-29
When including files, moc inserts a MOC_INCLUDE_BEGIN and
MOC_INCLUDE_END token into the token stream. Those are already handled
in the toplevel Moc::parse function, but parseEnum lacked support so
far.
Gbp-Pq: Name moc_handle_includes.diff
Debian Qt/KDE Maintainers [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
QLibrary: fix deadlock caused by fix to QTBUG-39642
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
276fa8383a753576
Last-Update: 2020-04-17
Commit
ae6f73e8566fa76470937aca737141183929a5ec inserted a mutex around
the entire load_sys(). We had reasoned that deadlocks would only occur if
the object creation in instance() recursed into its own instance(),
which was already a bug. But we had forgotten that dlopen()/
LoadLibrary() executes initialization code from the module being loaded,
which could cause a recursion back into the same QPluginLoader or
QLibrary object. This recursion is benign because the module *is* loaded
and dlopen()/LoadLibrary() returns the same handle.
Gbp-Pq: Name fix_qlibrary_deadlock.diff
Debian Qt/KDE Maintainers [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
enable accessibility on Linux when org.a11y.Status IsEnabled is true
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
54886d7f81175ac6
Last-Update: 2020-04-16
Otherwise accessibility would only work when Orca is set to be started
in the session preference, and it would not work when running Orca or
compiz' zoom by hand.
The existing comment said that it was always true since gnome 3.6, but at
least in Debian 8's gnome 3.14, Debian 9's gnome 3.22, and Debian 10's
3.30 it is not always true, it is Orca which sets it on startup. Compiz's
focuspoll module also does so for people with low vision using zoom with
focus tracking.
Gbp-Pq: Name enable_a11y_on_linux.diff
Debian Qt/KDE Maintainers [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
add an expansion limit for entities
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
fd4be84d23a0db41
Last-Update: 2020-02-27
Recursively defined entities can easily exhaust all available
memory. Limit entity expansion to a default of 4096 characters to
avoid DoS attacks when a user loads untrusted content.
Added a setter and getter to allow modifying the expansion limit.
QXmlStreamReader does now by default limit the expansion of entities
to 4096 characters. Documents where a single entity expands to more
characters than the limit are not considered well formed. The limit
is there to avoid DoS attacks through recursively expanding entities
when loading untrusted content. The limit can be changed through the
QXmlStreamReader::setEntityExpansionLimit() method.
Gbp-Pq: Name CVE-2015-9541.diff
Dmitry Shachnev [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
qtbase-opensource-src (5.14.2+dfsg-5) unstable; urgency=medium
* Backport upstream patch for moc to handle include directives in enums
(closes: #963955).
* Stop using -isystem flag in qmake (closes: #958479).
* Clarify warning message about PIC/PIE, thanks Daniel Kahn Gillmor
(closes: #879014).
* Update symbols files for GCC 10.
* Update libqt5gui5.lintian-overrides for tag renames in Lintian 2.79.
[dgit import unpatched qtbase-opensource-src 5.14.2+dfsg-5]
Dmitry Shachnev [Sun, 2 Aug 2020 08:49:03 +0000 (09:49 +0100)]
Import qtbase-opensource-src_5.14.2+dfsg-5.debian.tar.xz
[dgit import tarball qtbase-opensource-src 5.14.2+dfsg-5 qtbase-opensource-src_5.14.2+dfsg-5.debian.tar.xz]
Raspbian automatic forward porter [Fri, 3 Jul 2020 20:04:17 +0000 (21:04 +0100)]
Merge version 5.12.5+dfsg-10+rpi1 and 5.14.2+dfsg-4 to produce 5.14.2+dfsg-4+rpi1
Dmitry Shachnev [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
Merge qtbase-opensource-src (5.14.2+dfsg-4) import into refs/heads/workingbranch
Pino Toscano [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
Limit Linux-only code with Q_OS_LINUX
Forwarded: no
Last-Update: 2020-04-19
The QStorageInfo/QStorageIterator implementation used for Linux is used also
on Hurd, as it uses an interface provided by GNU libc.
QStorageIterator::device() tries to use PATH_MAX (unavailable on the Hurd)
to lookup a /dev/block/ path, which exists on Linux only; hence, perform that
check within a Q_OS_LINUX block.
Gbp-Pq: Name qstorageinfo_linux.diff
Pino Toscano [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
Avoid unconditional PATH_MAX usage
Forwarded: no
Last-Update: 2020-04-19
Use a "safe" size in case PATH_MAX is not defined; in the end, this should not
be used, as a allocating realpath() will be used instead.
Gbp-Pq: Name path_max.diff
Martin Smith [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
pass default include directories to qdoc
Bug: https://bugs.debian.org/908328
Forwarded: no
Last-Update: 2020-01-28
Gbp-Pq: Name qdoc_default_incdirs.diff
Dmitry Shachnev [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
guard UTIME_NOW/UTIME_OMIT usages
Forwarded: no
Last-Update: 2018-02-22
Gbp-Pq: Name nonlinux_utime.diff
Dmitry Shachnev [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
support ARMv4 architecture, needed for armel builds
Forwarded: no
Last-Update: 2016-07-01
Gbp-Pq: Name armv4.diff
Dmitry Shachnev [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
catch linker warnings in some config tests
Forwarded: https://codereview.qt-project.org/163214 (rejected)
Bug: https://bugs.debian.org/827935
Last-Update: 2019-03-02
Without this, qmake wrongly thinks that the tests succeed, for example:
./config.tests/unix/futimens/futimens.cpp:44: warning: futimens is not implemented and will always fail
test config.corelib.tests.futimens succeeded
Gbp-Pq: Name gnukfreebsd_linker_warnings.diff
Fathi Boudra [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
build ibase sql plugin against firebird
Forwarded: no
Last-Update: 2017-06-30
Gbp-Pq: Name link_fbclient.diff
Lisandro Damián Nicanor Pérez Meyer [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
remove non-used privacy-breach code
Forwarded: not-needed
Last-Update: 2015-02-18
This code makes Lintian unhappy. But we are really not using it, it only
gets inserted when building the online doc.
Anyways the best way to calm down Lintian is to simply remove it.
Gbp-Pq: Name remove_privacy_breaches.diff
Dmitry Shachnev [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
disable htmlinfo example which contains non-free files
Forwarded: not-needed
Last-Update: 2014-12-17
Gbp-Pq: Name no_htmlinfo_example.diff
Pino Toscano [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
Initial GNU/kFreeBSD support
Last-Update: 2015-06-03
Forwarded: no
- add a gnukfreebsd-g++ qmake mkspec, mostly copied from the hurd-g++ one
- properly use LD_LIBRARY_PATH on GNU/* systems
Gbp-Pq: Name gnukfreebsd.diff
Debian Qt/KDE Maintainers [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
QLibrary: fix deadlock caused by fix to QTBUG-39642
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
276fa8383a753576
Last-Update: 2020-04-17
Commit
ae6f73e8566fa76470937aca737141183929a5ec inserted a mutex around
the entire load_sys(). We had reasoned that deadlocks would only occur if
the object creation in instance() recursed into its own instance(),
which was already a bug. But we had forgotten that dlopen()/
LoadLibrary() executes initialization code from the module being loaded,
which could cause a recursion back into the same QPluginLoader or
QLibrary object. This recursion is benign because the module *is* loaded
and dlopen()/LoadLibrary() returns the same handle.
Gbp-Pq: Name fix_qlibrary_deadlock.diff
Debian Qt/KDE Maintainers [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
enable accessibility on Linux when org.a11y.Status IsEnabled is true
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
54886d7f81175ac6
Last-Update: 2020-04-16
Otherwise accessibility would only work when Orca is set to be started
in the session preference, and it would not work when running Orca or
compiz' zoom by hand.
The existing comment said that it was always true since gnome 3.6, but at
least in Debian 8's gnome 3.14, Debian 9's gnome 3.22, and Debian 10's
3.30 it is not always true, it is Orca which sets it on startup. Compiz's
focuspoll module also does so for people with low vision using zoom with
focus tracking.
Gbp-Pq: Name enable_a11y_on_linux.diff
Debian Qt/KDE Maintainers [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
add an expansion limit for entities
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
fd4be84d23a0db41
Last-Update: 2020-02-27
Recursively defined entities can easily exhaust all available
memory. Limit entity expansion to a default of 4096 characters to
avoid DoS attacks when a user loads untrusted content.
Added a setter and getter to allow modifying the expansion limit.
QXmlStreamReader does now by default limit the expansion of entities
to 4096 characters. Documents where a single entity expands to more
characters than the limit are not considered well formed. The limit
is there to avoid DoS attacks through recursively expanding entities
when loading untrusted content. The limit can be changed through the
QXmlStreamReader::setEntityExpansionLimit() method.
Gbp-Pq: Name CVE-2015-9541.diff
Dmitry Shachnev [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
qtbase-opensource-src (5.14.2+dfsg-4) unstable; urgency=medium
* Restore debian/patches/armv4.diff, it is still needed for clang
(see https://bugs.debian.org/963709#20 for details).
[dgit import unpatched qtbase-opensource-src 5.14.2+dfsg-4]
Dmitry Shachnev [Fri, 26 Jun 2020 16:47:18 +0000 (17:47 +0100)]
Import qtbase-opensource-src_5.14.2+dfsg-4.debian.tar.xz
[dgit import tarball qtbase-opensource-src 5.14.2+dfsg-4 qtbase-opensource-src_5.14.2+dfsg-4.debian.tar.xz]
Raspbian automatic forward porter [Fri, 24 Apr 2020 03:43:43 +0000 (04:43 +0100)]
Merge version 5.12.5+dfsg-9+rpi1 and 5.12.5+dfsg-10 to produce 5.12.5+dfsg-10+rpi1
Dmitry Shachnev [Sat, 18 Apr 2020 17:50:59 +0000 (18:50 +0100)]
Import qtbase-opensource-src_5.14.2+dfsg.orig.tar.xz
[dgit import orig qtbase-opensource-src_5.14.2+dfsg.orig.tar.xz]
Dmitry Shachnev [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
Merge qtbase-opensource-src (5.12.5+dfsg-10) import into refs/heads/workingbranch
Martin Smith [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
pass default include directories to qdoc
Bug: https://bugs.debian.org/908328
Forwarded: no
Last-Update: 2018-10-29
Gbp-Pq: Name qdoc_default_incdirs.diff
Dmitry Shachnev [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
guard UTIME_NOW/UTIME_OMIT usages
Forwarded: no
Last-Update: 2018-02-22
Gbp-Pq: Name nonlinux_utime.diff
Dmitry Shachnev [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
support ARMv4 architecture, needed for armel builds
Forwarded: no
Last-Update: 2016-07-01
Gbp-Pq: Name armv4.diff
Dmitry Shachnev [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
catch linker warnings in some config tests
Forwarded: https://codereview.qt-project.org/163214 (rejected)
Bug: https://bugs.debian.org/827935
Last-Update: 2019-03-02
Without this, qmake wrongly thinks that the tests succeed, for example:
./config.tests/unix/futimens/futimens.cpp:44: warning: futimens is not implemented and will always fail
test config.corelib.tests.futimens succeeded
Gbp-Pq: Name gnukfreebsd_linker_warnings.diff
Fathi Boudra [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
build ibase sql plugin against firebird
Forwarded: no
Last-Update: 2017-06-30
Gbp-Pq: Name link_fbclient.diff
Lisandro Damián Nicanor Pérez Meyer [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
remove non-used privacy-breach code
Forwarded: not-needed
Last-Update: 2015-02-18
This code makes Lintian unhappy. But we are really not using it, it only
gets inserted when building the online doc.
Anyways the best way to calm down Lintian is to simply remove it.
Gbp-Pq: Name remove_privacy_breaches.diff
Dmitry Shachnev [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
disable htmlinfo example which contains non-free files
Forwarded: not-needed
Last-Update: 2014-12-17
Gbp-Pq: Name no_htmlinfo_example.diff
Pino Toscano [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
Initial GNU/kFreeBSD support
Last-Update: 2015-06-03
Forwarded: no
- add a gnukfreebsd-g++ qmake mkspec, mostly copied from the hurd-g++ one
- properly use LD_LIBRARY_PATH on GNU/* systems
Gbp-Pq: Name gnukfreebsd.diff
Debian Qt/KDE Maintainers [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
fix iteration in source check in error case
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
37df81b788ebe700
Last-Update: 2020-04-16
It was accessing the deleted current element in a potentially
reallocated container.
Gbp-Pq: Name qeventdispatcher_glib_use_after_free.diff
Debian Qt/KDE Maintainers [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
enable accessibility on Linux when org.a11y.Status IsEnabled is true
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
54886d7f81175ac6
Last-Update: 2020-04-16
Otherwise accessibility would only work when Orca is set to be started
in the session preference, and it would not work when running Orca or
compiz' zoom by hand.
The existing comment said that it was always true since gnome 3.6, but at
least in Debian 8's gnome 3.14, Debian 9's gnome 3.22, and Debian 10's
3.30 it is not always true, it is Orca which sets it on startup. Compiz's
focuspoll module also does so for people with low vision using zoom with
focus tracking.
Gbp-Pq: Name enable_a11y_on_linux.diff
Debian Qt/KDE Maintainers [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
add an expansion limit for entities
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
fd4be84d23a0db41
Last-Update: 2020-02-27
Recursively defined entities can easily exhaust all available
memory. Limit entity expansion to a default of 4096 characters to
avoid DoS attacks when a user loads untrusted content.
Added a setter and getter to allow modifying the expansion limit.
QXmlStreamReader does now by default limit the expansion of entities
to 4096 characters. Documents where a single entity expands to more
characters than the limit are not considered well formed. The limit
is there to avoid DoS attacks through recursively expanding entities
when loading untrusted content. The limit can be changed through the
QXmlStreamReader::setEntityExpansionLimit() method.
Gbp-Pq: Name CVE-2015-9541.diff
Debian Qt/KDE Maintainers [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
QLibrary/Unix: do not attempt to load a library relative to $PWD
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
e6f1fde24f77f63f
Last-Update: 2020-01-30
I added the code in commit
5219c37f7c98f37f078fee00fe8ca35d83ff4f5d to
find libraries in a haswell/ subdir of the main path, but we only need
to do that transformation if the library is contains at least one
directory separator. That is, if the user asks to load "lib/foo", then we
should try "lib/haswell/foo" (often, the path prefix will be absolute).
When the library name the user requested has no directory separators, we
let dlopen() do the transformation for us. Testing on Linux confirms
glibc does so:
$ LD_DEBUG=libs /lib64/ld-linux-x86-64.so.2 --inhibit-cache ./qml -help |& grep Xcursor
1972475: find library=libXcursor.so.1 [0]; searching
1972475: trying file=/usr/lib64/haswell/avx512_1/libXcursor.so.1
1972475: trying file=/usr/lib64/haswell/libXcursor.so.1
1972475: trying file=/usr/lib64/libXcursor.so.1
1972475: calling init: /usr/lib64/libXcursor.so.1
1972475: calling fini: /usr/lib64/libXcursor.so.1 [0]
Gbp-Pq: Name CVE-2020-0570.diff
Debian Qt/KDE Maintainers [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
do not load plugin from the $PWD
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
bf131e8d2181b340
Last-Update: 2020-01-30
Gbp-Pq: Name CVE-2020-0569.diff
Debian Qt/KDE Maintainers [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
add RISC-V detection
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
9a6a84731131b205
Last-Update: 2019-12-31
Gbp-Pq: Name riscv.diff
Debian Qt/KDE Maintainers [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
Ignore non-existent .ui file dependencies
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
90779d96adfa51a3
Last-Update: 2019-11-05
Commit
80dea664 broke .ui files with global includes that are not part
of the project, because we blindly added every file path that falls
out of 'uic -d' as dependency.
Introduce the extra compiler CONFIG flag dep_existing_only to bring
back the old behavior that ignores non-existent dependencies and set
it for uic.
Gbp-Pq: Name uic_global_includes.diff
Debian Qt/KDE Maintainers [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
QPSQL: Add support for PostgreSQL 12
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
14b61d48e8bad622
Last-Update: 2019-10-20
Gbp-Pq: Name postgresql_12.diff
Debian Qt/KDE Maintainers [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
backport some fixes related to documentation building
Origin: upstream, this is a backport of four commits:
- https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
0014d81b1907621e
doc: Revert to documenting the actual functions
- https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
81d8319276f26d39
doc: Fix all clang parse errors in QtBase during PCH build
- https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
c306663990ba8681
Fix qdoc errors in QProcess header
- https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
98cb9275d064d8b9
doc: clang reported two fake declarations to be the same
Last-Update: 2019-06-15
These changes help us to eliminate most of the warnings like this:
(qdoc) warning: No documentation for 'QRect::bottom() const'
There were 3603 such warnings without this patch, with it only 76
are left.
Gbp-Pq: Name docs_fixes.diff
Debian Qt/KDE Maintainers [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
fix notification of QDockWidget when it gets undocked
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
06b8644953fc5267
Last-Update: 2019-06-14
Before the patch the notification was emitted only when the docker
was attached to the panel or changed a position on it.
It looks like the old behavior was documented in a unittest,
so this patch might actually be a "behavior change".
Note: https://mail.kde.org/pipermail/distributions/2019-April/000317.html
Gbp-Pq: Name qdockwidget_undocked_notification.diff
Daniel Vrátil [Sat, 1 Dec 2018 16:56:41 +0000 (17:56 +0100)]
[PATCH] MySQL: Free the results when QSqlQuery::finished() is called
Calling mysql_stmt_free_result() frees the results of the last
executed query while keeping the prepared statement valid. This
allows one to keep around prepared QSqlQueries without the overhead
of keeping all the results in memory.
Change-Id: I4589e90857cc4e9a6f9612799bfca967a67e2ab2
Reviewed-by: Thiago Macieira <thiago.macieira@intel.com>
Reviewed-by: Andy Shaw <andy.shaw@qt.io>
Gbp-Pq: Name mysql_free_results_when_qsqlquery_finished_is_called.patch
Dmitry Shachnev [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
qtbase-opensource-src (5.12.5+dfsg-10) unstable; urgency=medium
* Enable accessibility on Linux when org.a11y.Status IsEnabled is true.
Thanks to Samuel Thibault (closes: #948676).
* Backport upstream patch to fix use-after-free in GLib event dispatcher
(closes: #953401).
[dgit import unpatched qtbase-opensource-src 5.12.5+dfsg-10]
Dmitry Shachnev [Thu, 16 Apr 2020 17:05:12 +0000 (18:05 +0100)]
Import qtbase-opensource-src_5.12.5+dfsg-10.debian.tar.xz
[dgit import tarball qtbase-opensource-src 5.12.5+dfsg-10 qtbase-opensource-src_5.12.5+dfsg-10.debian.tar.xz]
Raspbian automatic forward porter [Thu, 5 Mar 2020 09:30:02 +0000 (09:30 +0000)]
Merge version 5.12.5+dfsg-8+rpi1 and 5.12.5+dfsg-9 to produce 5.12.5+dfsg-9+rpi1
Dmitry Shachnev [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
Merge qtbase-opensource-src (5.12.5+dfsg-9) import into refs/heads/workingbranch
Martin Smith [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
pass default include directories to qdoc
Bug: https://bugs.debian.org/908328
Forwarded: no
Last-Update: 2018-10-29
Gbp-Pq: Name qdoc_default_incdirs.diff
Dmitry Shachnev [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
guard UTIME_NOW/UTIME_OMIT usages
Forwarded: no
Last-Update: 2018-02-22
Gbp-Pq: Name nonlinux_utime.diff
Dmitry Shachnev [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
support ARMv4 architecture, needed for armel builds
Forwarded: no
Last-Update: 2016-07-01
Gbp-Pq: Name armv4.diff
Dmitry Shachnev [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
catch linker warnings in some config tests
Forwarded: https://codereview.qt-project.org/163214 (rejected)
Bug: https://bugs.debian.org/827935
Last-Update: 2019-03-02
Without this, qmake wrongly thinks that the tests succeed, for example:
./config.tests/unix/futimens/futimens.cpp:44: warning: futimens is not implemented and will always fail
test config.corelib.tests.futimens succeeded
Gbp-Pq: Name gnukfreebsd_linker_warnings.diff
Fathi Boudra [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
build ibase sql plugin against firebird
Forwarded: no
Last-Update: 2017-06-30
Gbp-Pq: Name link_fbclient.diff
Lisandro Damián Nicanor Pérez Meyer [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
remove non-used privacy-breach code
Forwarded: not-needed
Last-Update: 2015-02-18
This code makes Lintian unhappy. But we are really not using it, it only
gets inserted when building the online doc.
Anyways the best way to calm down Lintian is to simply remove it.
Gbp-Pq: Name remove_privacy_breaches.diff
Dmitry Shachnev [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
disable htmlinfo example which contains non-free files
Forwarded: not-needed
Last-Update: 2014-12-17
Gbp-Pq: Name no_htmlinfo_example.diff
Pino Toscano [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
Initial GNU/kFreeBSD support
Last-Update: 2015-06-03
Forwarded: no
- add a gnukfreebsd-g++ qmake mkspec, mostly copied from the hurd-g++ one
- properly use LD_LIBRARY_PATH on GNU/* systems
Gbp-Pq: Name gnukfreebsd.diff
Debian Qt/KDE Maintainers [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
add an expansion limit for entities
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
fd4be84d23a0db41
Last-Update: 2020-02-27
Recursively defined entities can easily exhaust all available
memory. Limit entity expansion to a default of 4096 characters to
avoid DoS attacks when a user loads untrusted content.
Added a setter and getter to allow modifying the expansion limit.
QXmlStreamReader does now by default limit the expansion of entities
to 4096 characters. Documents where a single entity expands to more
characters than the limit are not considered well formed. The limit
is there to avoid DoS attacks through recursively expanding entities
when loading untrusted content. The limit can be changed through the
QXmlStreamReader::setEntityExpansionLimit() method.
Gbp-Pq: Name CVE-2015-9541.diff
Debian Qt/KDE Maintainers [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
QLibrary/Unix: do not attempt to load a library relative to $PWD
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
e6f1fde24f77f63f
Last-Update: 2020-01-30
I added the code in commit
5219c37f7c98f37f078fee00fe8ca35d83ff4f5d to
find libraries in a haswell/ subdir of the main path, but we only need
to do that transformation if the library is contains at least one
directory separator. That is, if the user asks to load "lib/foo", then we
should try "lib/haswell/foo" (often, the path prefix will be absolute).
When the library name the user requested has no directory separators, we
let dlopen() do the transformation for us. Testing on Linux confirms
glibc does so:
$ LD_DEBUG=libs /lib64/ld-linux-x86-64.so.2 --inhibit-cache ./qml -help |& grep Xcursor
1972475: find library=libXcursor.so.1 [0]; searching
1972475: trying file=/usr/lib64/haswell/avx512_1/libXcursor.so.1
1972475: trying file=/usr/lib64/haswell/libXcursor.so.1
1972475: trying file=/usr/lib64/libXcursor.so.1
1972475: calling init: /usr/lib64/libXcursor.so.1
1972475: calling fini: /usr/lib64/libXcursor.so.1 [0]
Gbp-Pq: Name CVE-2020-0570.diff
Debian Qt/KDE Maintainers [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
do not load plugin from the $PWD
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
bf131e8d2181b340
Last-Update: 2020-01-30
Gbp-Pq: Name CVE-2020-0569.diff
Debian Qt/KDE Maintainers [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
add RISC-V detection
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
9a6a84731131b205
Last-Update: 2019-12-31
Gbp-Pq: Name riscv.diff
Debian Qt/KDE Maintainers [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
Ignore non-existent .ui file dependencies
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
90779d96adfa51a3
Last-Update: 2019-11-05
Commit
80dea664 broke .ui files with global includes that are not part
of the project, because we blindly added every file path that falls
out of 'uic -d' as dependency.
Introduce the extra compiler CONFIG flag dep_existing_only to bring
back the old behavior that ignores non-existent dependencies and set
it for uic.
Gbp-Pq: Name uic_global_includes.diff
Debian Qt/KDE Maintainers [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
QPSQL: Add support for PostgreSQL 12
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
14b61d48e8bad622
Last-Update: 2019-10-20
Gbp-Pq: Name postgresql_12.diff
Debian Qt/KDE Maintainers [Thu, 27 Feb 2020 13:52:19 +0000 (13:52 +0000)]
backport some fixes related to documentation building
Origin: upstream, this is a backport of four commits:
- https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
0014d81b1907621e
doc: Revert to documenting the actual functions
- https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
81d8319276f26d39
doc: Fix all clang parse errors in QtBase during PCH build
- https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
c306663990ba8681
Fix qdoc errors in QProcess header
- https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
98cb9275d064d8b9
doc: clang reported two fake declarations to be the same
Last-Update: 2019-06-15
These changes help us to eliminate most of the warnings like this:
(qdoc) warning: No documentation for 'QRect::bottom() const'
There were 3603 such warnings without this patch, with it only 76
are left.
Gbp-Pq: Name docs_fixes.diff