summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
Debian Qt/KDE Maintainers [Sat, 3 Dec 2022 17:38:46 +0000 (17:38 +0000)]
update function argument of SSL_CTX_set_options
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
e995bfc0ea783c15
Backported for 5.15 by the patch author, Michael Saxl.
Last-Update: 2022-08-07
openssl3 uses uint64_t for the options argument in SSL_CTX_set_options,
older ones used long.
sizeof(long) is not the same on any platform as sizeof(uint64_t)
Gbp-Pq: Name openssl_set_options.diff
Debian Qt/KDE Maintainers [Sat, 3 Dec 2022 17:38:46 +0000 (17:38 +0000)]
QProcess: ensure we don't accidentally execute something from CWD
Origin: upstream, https://download.qt.io/official_releases/qt/5.15/CVE-2022-25255-qprocess5-15.diff
Last-Update: 2022-02-21
Unless "." (or the empty string) is in $PATH, we're not supposed to find
executables in the current directory. This is how the Unix shells behave
and we match their behavior. It's also the behavior Qt had prior to 5.9
(commit
28666d167aa8e602c0bea25ebc4d51b55005db13). On Windows, searching
the current directory is the norm, so we keep that behavior.
This commit does not add an explicit check for an empty return from
QStandardPaths::findExecutable(). Instead, we allow that empty string to
go all the way to execve(2), which will fail with ENOENT. We could catch
it early, before fork(2), but why add code for the error case?
See https://kde.org/info/security/advisory-
20220131-1.txt
Gbp-Pq: Name CVE-2022-25255.diff
Debian Qt/KDE Maintainers [Sat, 3 Dec 2022 17:38:46 +0000 (17:38 +0000)]
upstream fixes to support OpenSSL 3.0
Origin: upstream, commits
https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
3186ca3e3972cf46
https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
408656c6f9de326c
https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
ae6590e360fbb04d
and a small part of
https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
4c0f81490ba0c4ec
Last-Update: 2021-12-09
Gbp-Pq: Name openssl3.diff
Debian Qt/KDE Maintainers [Sat, 3 Dec 2022 17:38:46 +0000 (17:38 +0000)]
treat the MYSQL_FIELD as read-only
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
549ee216fd5bf2b3
Last-Update: 2021-11-13
The MariaDB-connector-c version 3.2 and MariaDB server version 10.6
cooperate to avoid re-transferring the query metadata, so the fact that
we were modifying it was causing it to improperly decode the DATETIME
data types into string, as we had asked. We ended up with a 7-byte
string that was actually the date binary-encoded.
Gbp-Pq: Name mysql_field_readonly.diff
Debian Qt/KDE Maintainers [Sat, 3 Dec 2022 17:38:46 +0000 (17:38 +0000)]
fix recursion crash when calling setStyleSheet with qproperty-styleSheet
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
e9cdcc7cb314586a
Last-Update: 2021-11-13
When calling setStyleSheet with property qproperty-styleSheet,
QStyleSheetStyle::polish will call QStyleSheetStyle::setProperties,
and then QStyleSheetStyle::setProperties goes on to call setProperty.
Because there is property qproperty-styleSheet, it will update
stylesheet by calling QStyleSheetStyle::polish.
This causes the recursive call to crash.
Gbp-Pq: Name fix_recursion_crash.diff
Debian Qt/KDE Maintainers [Sat, 3 Dec 2022 17:38:46 +0000 (17:38 +0000)]
QPushButton/fusion style: don't ignore QIcon::On icon
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
e9ccdf4d84157173
Last-Update: 2021-08-10
The fusion style did ignore the QIcon::On icon because it reset
State_On to avoid the visual shift of a pressed button.
But it's not needed to reset this flag - the shift does not happen
because the fusion style does return 0 as offset for
PM_ButtonShiftHorizontal/PM_ButtonShiftVertical so no shifting will
happen.
Gbp-Pq: Name fusion_checkable_qpushbutton.diff
Debian Qt/KDE Maintainers [Sat, 3 Dec 2022 17:38:46 +0000 (17:38 +0000)]
adjust QMimeDatabase implementation
Origin: upstream, https://code.qt.io/cgit/qt/qtbase.git/commit/?id=
0cbbba2aa5b47224
Last-Update: 2021-06-12
When multiple globs match, and the result from magic sniffing is
unrelated to any of those globs, globs have priority and one of them
should be picked up.
Gbp-Pq: Name mime_globs.diff
Dmitry Shachnev [Sat, 3 Dec 2022 17:38:46 +0000 (17:38 +0000)]
qtbase-opensource-src (5.15.6+dfsg-5) unstable; urgency=medium
* Promote qtwayland5 from Suggests to Recommends (closes: #998698).
* Make libqt5gui5 suggest qgnomeplatform-qt5 (closes: #
1024976).
* Backport upstream patch to fix Alt+` shortcut on non-US layouts.
* Build-Depends: Drop versioned constraint on dpkg-dev, libharfbuzz-dev and
pkg-kde-tools (thanks Debian Janitor).
* Drop Breaks/Replaces unnecessary since buster (thanks Debian Janitor).
[dgit import unpatched qtbase-opensource-src 5.15.6+dfsg-5]
Dmitry Shachnev [Sat, 3 Dec 2022 17:38:46 +0000 (17:38 +0000)]
Import qtbase-opensource-src_5.15.6+dfsg-5.debian.tar.xz
[dgit import tarball qtbase-opensource-src 5.15.6+dfsg-5 qtbase-opensource-src_5.15.6+dfsg-5.debian.tar.xz]
Dmitry Shachnev [Sun, 11 Sep 2022 08:44:12 +0000 (09:44 +0100)]
Import qtbase-opensource-src_5.15.6+dfsg.orig.tar.xz
[dgit import orig qtbase-opensource-src_5.15.6+dfsg.orig.tar.xz]