[arch-commits] Commit in qt5-webengine/trunk (PKGBUILD)

Antonio Rojas arojas at archlinux.org
Fri Mar 8 09:21:29 UTC 2019


    Date: Friday, March 8, 2019 @ 09:21:29
  Author: arojas
Revision: 347435

Fix CVE-2019-5786 (FS#61947)

Modified:
  qt5-webengine/trunk/PKGBUILD

----------+
 PKGBUILD |   11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

Modified: PKGBUILD
===================================================================
--- PKGBUILD	2019-03-08 09:13:55 UTC (rev 347434)
+++ PKGBUILD	2019-03-08 09:21:29 UTC (rev 347435)
@@ -4,7 +4,7 @@
 pkgname=qt5-webengine
 _qtver=5.12.1
 pkgver=${_qtver/-/}
-pkgrel=2
+pkgrel=3
 arch=('x86_64')
 url='https://www.qt.io'
 license=('LGPL3' 'LGPL2.1' 'BSD')
@@ -15,9 +15,11 @@
 groups=('qt' 'qt5')
 _pkgfqn="${pkgname/5-/}-everywhere-src-${_qtver}"
 source=("https://download.qt.io/official_releases/qt/${pkgver%.*}/${_qtver}/submodules/${_pkgfqn}.tar.xz"
-         qtwebengine-harmony.patch)
+         qtwebengine-harmony.patch
+         CVE-2019-5786.patch::"http://code.qt.io/cgit/qt/qtwebengine-chromium.git/patch/?id=43316b15")
 sha256sums=('43e91e06bc4a60ef0f91d15ae06425cf9c6b4f7dafe960259a5b013c687c3bd0'
-            'feca54ab09ac0fc9d0626770a6b899a6ac5a12173c7d0c1005bc3964ec83e7b3')
+            'feca54ab09ac0fc9d0626770a6b899a6ac5a12173c7d0c1005bc3964ec83e7b3'
+            'd8434d27ac0dd8c4d49b0208fc2df91611440d3ee733bb8597212980f98d4b1b')
 
 prepare() {
   mkdir -p build
@@ -30,6 +32,9 @@
 
   # FreeType 2.8.1
   patch -Np1 -i ../qtwebengine-harmony.patch
+  
+  cd src/3rdparty
+  patch -p1 -i "$srcdir"/CVE-2019-5786.patch # https://bugreports.qt.io/browse/QTBUG-74254
 }
 
 build() {



More information about the arch-commits mailing list