* Tue Aug 06 2024 alarrosa@suse.com
- Add upstream patch to fix an invalid pointer being passed as a
callback in QStringConverter which can allow modification of the
stack (bsc#1223917, CVE-2024-33861):
* 0001-QStringConverterICU-Pass-correct-pointer-to-callback.patch
- Add rebased upstream patch to delay any HTTP2 communication until
encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
* 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
* Tue Mar 26 2024 christophe@krop.fr
- Update to 6.6.3:
* https://www.qt.io/blog/qt-6.6.3-released
* Includes fix for issue where the wasm component may access
QNetworkReply header data via a dangling pointer
(CVE-2024-30161, bsc#1221926, QTBUG-122893)
- Make libQt6PrintSupport6 require qt6-printsupport-cups
(boo#1221576)
* Thu Mar 21 2024 christophe@krop.fr
- Replace the postgresql-server build dependency with the client library
* Wed Feb 14 2024 christophe@krop.fr
- Update to 6.6.2
* https://www.qt.io/blog/qt-6.6.2-released
* Fix for potential buffer overflow when reading KTX
images (boo#1219996, CVE-2024-25580)
- Drop patches, merged upstream:
* 0001-QMimeDatabase-handle-buggy-type-definitions.patch
* 0001-QMimeDatabase-collect-glob-patterns-from.patch
* 0001-HPack-fix-a-Yoda-Condition.patch
* 0002-HPack-fix-incorrect-integer-overflow-check.patch
* 0001-Http2-fix-potential-overflow-in-assemble_hpack_block.patch
* Wed Jan 31 2024 christophe@krop.fr
- Switch to the latest GCC version available in Leap
- Replace 0001-Require-GCC-12.patch with 0001-Use-newer-GCC-on-Leap.patch
* Wed Jan 03 2024 alarrosa@suse.com
- Add upstream patches to fix an incorrect integer overflow check
(boo#1218413, CVE-2023-51714):
* 0001-HPack-fix-a-Yoda-Condition.patch
* 0002-HPack-fix-incorrect-integer-overflow-check.patch
- Add upstream patch to fix a potential overflow in
assemble_hpack_block():
* 0001-Http2-fix-potential-overflow-in-assemble_hpack_block.patch
* Sat Dec 30 2023 lbeltrame@kde.org
- Add upstream patch for a bug in QMimeDatabase which makes
impossible to save JPEG files in Qt6 applications:
* 0001-QMimeDatabase-collect-glob-patterns-from.patch
* https://code.qt.io/cgit/qt/qtbase.git/commit/?id=4e9944e6c8a456353d243ab268cb0f01ff006faa
* Mon Dec 04 2023 kacper.koniuszy@tuta.io
- Add upstream patch for a bug in QMimeDatabase that causes some
applications to hang:
* 0001-QMimeDatabase-handle-buggy-type-definitions.patch
* https://code.qt.io/cgit/qt/qtbase.git/commit/?id=54656da9ace06caf4a0eeb1832989c0ab211a4a0
* Mon Nov 27 2023 christophe@krop.fr
- Update to 6.6.1:
* https://www.qt.io/blog/qt-6.6.1-released
- Drop patches, merged upstream:
* 0001-xcb-replace-a-warning-with-debug-info-in-qxcbconnect.patch
* 0001-a11y-fix-race-condition-on-atspi-startup-on-Wayland.patch
* 0001-xkb-fix-build-with-libxkbcommon-1.6.0-and-later.patch
* Thu Nov 16 2023 christophe@krop.fr
- Make libQt6Network6 require the network plugins
* Fri Nov 03 2023 christophe@krop.fr
- Add upstream changes:
* 0001-xcb-replace-a-warning-with-debug-info-in-qxcbconnect.patch (QTBUG-117820)
* 0001-a11y-fix-race-condition-on-atspi-startup-on-Wayland.patch
- Turn FEATURE_forkfd_pidfd off until QTBUG-117954 gets fixed
* Wed Oct 25 2023 christophe@krop.fr
- Add upstream change:
* 0001-xkb-fix-build-with-libxkbcommon-1.6.0-and-later.patch
* Tue Oct 10 2023 christophe@krop.fr
- Update to 6.6.0
* https://www.qt.io/blog/qt-6.6-released
* Wed Oct 04 2023 christophe@krop.fr
- Add patch to fix creation of -debuginfo packages for qmake builds:
* 0001-Don-t-strip-binaries-when-building-with-qmake.patch
* Thu Sep 28 2023 christophe@krop.fr
- Update to 6.5.3
* https://www.qt.io/blog/qt-6.5.3-released
- Drop patch, merged upstream:
* CVE-2023-38197-qtbase-6.5.diff
- Enable the experimental native painting feature to improve
remote desktop performances (boo#1214915)
exporting QT_XCB_NATIVE_PAINTING is required to use the feature.
* Thu Jul 20 2023 christophe@krop.fr
- Use a mirror to download sources for all Qt packages. Upstream
servers are very slow since a couple weeks.
- Update to 6.5.2
* https://www.qt.io/blog/qt-6.5.2-released-1
* Includes fix for a buffer overflow in QXmlStreamReader
(boo#1214327, CVE-2023-37369).
- Drop patches, merged upstream:
* 0001-Schannel-Reject-certificate-not-signed-by-a-configur.patch
* 0001-Ssl-Copy-the-on-demand-cert-loading-bool-from-defaul.patch
* 0001-tabbar-fix.patch
- Add patch:
* CVE-2023-38197-qtbase-6.5.diff (boo#1213326, CVE-2023-38197)
* Fri Jun 30 2023 christophe@krop.fr
- Update subpackages requirements
* Thu Jun 29 2023 christophe@krop.fr
- Replace 0001-Require-GCC-10.patch with 0001-Require-GCC-12.patch
* Wed Jun 07 2023 jonaski@opensuse.org
- Add patch for QTabBar regression in Qt 6.5.1 (QTBUG-114204)
* 0001-tabbar-fix.patch
* Mon Jun 05 2023 christophe@krop.fr
- Add upstream changes (CVE-2023-34410, boo#1211994):
* 0001-Schannel-Reject-certificate-not-signed-by-a-configur.patch
* 0001-Ssl-Copy-the-on-demand-cert-loading-bool-from-defaul.patch