Sync from SUSE:SLFO:Main libqt5-qtbase revision 665714019aa54304e6569fed079ac719

_service

@@ -1,12 +1,12 @@
 <services>
   <service name="obs_scm" mode="disabled">
    <param name="changesgenerate">enable</param>
-   <param name="versionformat">5.15.12+kde@TAG_OFFSET@</param>
+   <param name="versionformat">5.15.14+kde@TAG_OFFSET@</param>
    <param name="url">https://invent.kde.org/qt/qt/qtbase.git</param>
    <param name="scm">git</param>
    <param name="filename">qtbase-everywhere-src</param>
    <param name="revision">kde/5.15</param>
-   <param name="parent-tag">v5.15.12-lts-lgpl</param>
+   <param name="parent-tag">v5.15.14-lts-lgpl</param>
    <param name="changesgenerate">enable</param>
   </service>
   <service name="set_version" mode="disabled"/>

_servicedata

@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://invent.kde.org/qt/qt/qtbase.git</param>
-              <param name="changesrevision">a43df98d037ad07cf096ef2f775958ceba743613</param></service></servicedata>
+              <param name="changesrevision">9f9a56d750caff8b4459e7e9bf82f1f4d725f72f</param></service></servicedata>

libqt5-qtbase.changes

@@ -1,3 +1,174 @@
+-------------------------------------------------------------------
+Mon Jul 22 12:11:38 UTC 2024 - Fabian Vogt <fvogt@suse.com>
+
+- Update to version 5.15.14+kde143:
+  * HTTP2: Delay any communication until encrypted() can be responded to
+    (bsc#1227426, CVE-2024-39936)
+  * Add missing line continuations for memory_resource opt-out on Apple systems
+  * a11y atspi: Add null checks in table iface methods
+
+-------------------------------------------------------------------
+Wed May 29 06:25:15 UTC 2024 - Fabian Vogt <fabian@ritter-vogt.de>
+
+- Update to version 5.15.14+kde140, rebased upstream:
+  * xcb: Avoid repeatedly registering xsettings callbacks
+  * Opt out of standard library memory_resource on macOS < 14 and iOS < 17
+  * QPainter: fix assert when drawing bitmaps at very near to .5 coord
+  * XCB: Unset the connection's mousePressWindow if it's this window
+  * SQL/ODBC: Pass correct length to SQLColAttribute()
+  * qxkbcommon: fix isKeypad
+  * QObjectPrivate::Signal: initialize all members
+  * gui: fix build against gcc-14 (-Werror=calloc-transposed-args)
+  * QTest::WatchDog: fix missing timeout resets on test function change
+  * tst_bench_QCryptographicHash: add benchmarks for QMessageAuthenticationCode
+  * Hsts: match header names case insensitively
+  * Blacklist tst_NetworkSelfTest::smbServer on openSUSE 15.4
+  * Blacklist tst_QGlyphRun::drawRightToLeft on openSUSE 15.4
+  * Match deadcode elimination with cpu feature check
+  * Update public suffix list for QUrl/QtNetwork
+  * QProcess: remove the note that it freezes threads on QNX
+  * Update public suffix list for QUrl/QtNetwork
+  * QNAM: Fix double-connect for manual redirect handling
+  * Android: fix build error for Qt 5.15 with NDK r24+
+  * Bump tested macOS SDK to version 13
+  * Darwin: Explicitly link to IOKit, as used by QSysInfo::machineUniqueId()
+  * Update Copyright year to 2023
+  * SQLite: Update SQLite to v3.41.2
+  * Android: remove getRootWindowInsets
+  * Blacklist tst_QItemDelegate::editorKeyPress for SLES 15.4
+  * BLACKLIST tst_QListView::internalDragDropMove for SLES 15.4
+  * Blacklist tst_QWindow:testInputEvents on SLES 15.4
+  * Blacklist tst_gestures tests for SLES 15.4
+  * Blacklist tst_QOpenGLWidget::stackWidgetOpaqueChildIsVisible for SLES 15.4
+  * Blacklist tst_qwidget::widgetAt and tst_qwidget_window::tst_dnd_events
+  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for SLES 15.4
+  * Blacklist: tst_QGraphicsAnchorLayout::layoutDirection for SLES 15.4
+  * Doc: Fix typo
+  * Android: allow using string based versions in compileSdkVersion
+  * QListView: No-op, when a list item is dropped directly behind itself
+  * Android: don't break when finding opengl plugin
+  * Change android target SDK version to 31
+  * git: ignore ._* files
+  * Android: fix manual deployment with ANDROID_DEPLOYMENT_DEPENDENCIES
+  * QMessageAuthenticationCode: fix result() non-re-entrancy
+  * QMessageAuthenticationCode: Extract Methods finalize{,Unchecked}() from result()
+  * tst_bench_QCryptographicHash: use QMetaEnum trick
+  * tst_bench_QCryptographicHash: port to QTest::addRow()
+  * tst_qtconcurrentrun: fix UB (uninit'ed values)
+  * QComboBox: Disable items marked as disabled in native popups
+  * tst_QSslSocket_onDemandCertificates_member: Blacklist & debug
+  * QSQL/ODBC: fix regression (trailing NUL) (boo#1227513)
+  * SQLite: Update SQLite to v3.41.1
+  * Android: demistify the "No platform plugin" androiddeployqt error
+  * QTest::WatchDog: Extract Method setExpectation()
+  * Tidy up qtestcase.cpp's WatchDog
+  * Fix thread-sanitizer warning about a data race
+  * macOS: Guard text input client from destroyed QCocoaWindow
+  * Accept full-width parentheses in removeMnemonics()
+  * Fix listed files for sha3_keccak
+  * Fix overflow in SHA-3/Keccak
+  * tst_QCryptographicHash: Extract Method ensureLargeData()
+  * QCryptographicHash: fix UB (data race on concurrent result()) [2nd try]
+  * QVarLengthArray: fix UBs in insert(it, n, v) ([basic.life], invariants)
+  * Add q_points_into_range to container utilities
+  * qstrncpy(): document that we don't implement strncpy() fill-all-[dst,len)
+  * QThread/Unix: fix compilation with C++11
+  * QDBusError: don't refer to a QT_NAMESPACE'ed get() as ::get()
+  * Update to Freetype 2.13.0
+  * Android: fix and document QStandardPaths behavior on different versions
+  * tst_qvarlengtharray: add test for QVLA(n) ctor
+  * Android: avoid duplicate paths from QStandardPaths::standardLocations()
+  * Android: document limitation for QFile::copy() operation for content uri
+  * Bump version to 5.15.14
+  * SQLite: Update SQLite to v3.41.0
+  * tst_QMessageAuthenticationCode: check that setKey() reset()s
+  * Avoid resetting CMAKE_AUTOMOC_MACRO_NAMES
+  * Set GenerateDebugInformation to true in vcproj if at least /DEBUG is set
+  * QCryptographicHash: add a mutex to writing to the results
+  * SQL/OCI: Correctly calculate utc offset string when icu is not available
+  * QVarLengthArray: Extract Method QtPrivate::q_rotate()
+  * Specify Android architecture in gradle files
+  * Logging: fix crash when decoding a symbol that isn't a function
+  * qstrncpy: NUL-terminate even when src is nullptr
+  * Blacklist a test in the GUI form of tst_QTimer on ubuntu-20.04
+  * Blacklist tst_QTimer::zeroTimer in its Gui form
+  * Text: fix Soft hyphen rendering in QTextLayout::glyphRuns()
+
+-------------------------------------------------------------------
+Tue Mar 19 09:55:28 UTC 2024 - Fabian Vogt <fabian@ritter-vogt.de>
+
+- Update to version 5.15.13+kde138, rebased upstream:
+  * QVarLengthArray: fix UBs in emplace()/insert() ([basic.life], broken class invariant)
+  * Android: use test QFileInfo fileName() instead of completeBaseName()
+  * Fix few QFileInfo and QDir calls
+  * savegame ex.: fix include order [2/2]: game.h
+  * savegame ex.: use NSDMI, =default the default ctor
+  * savegame ex.: fix include order
+  * savegame ex.: fix extra ';' after Q_GADGET
+  * tst_qvarlengtharray: fix MyBase trackers for swap()
+  * Apple: Add CFBundleAllowMixedLocalizations=YES to Info.plist files
+  * qmake: Add CFBundleDevelopmentRegion to iOS Info.plist
+  * Update bundled libjpeg-turbo to version 2.1.5
+  * Revert "Copy only files that belongs to QML module"
+  * savegame ex.: make Level ctor explicit
+  * macOS: Skip deployment target runtime check when detecting compat version
+  * Apple: Use 'en' instead of 'English' as development region
+  * qmake: Add CFBundleDevelopmentRegion to the macOS Info.plist
+  * Update comments in QQuaternion::getEulerAngles
+  * QtGui/math3d: Fix QQuaternion::getEulerAngles for GimbalLock cases
+  * Pass short time format to GetTimeFormat from GetLocaleInfo
+  * Android: fix height calculation
+  * SQL/ODBC: fix some users of toSQLTCHAR() to not assume identical UTF-8/16/32 string lengths
+  * ODBC SQL driver: fix conversion of QByteArray to QVLA<SQLTCHAR>
+  * Docs:Android: Add docs notes about support for content Uris
+  * QODBC: correctly fill cache when index() is called
+  * Fix ignored name filter in QFileDialog::getOpenFileContent()
+  * GTK3 theme: simplify code
+  * Fix ContextInfo example crashing on Android
+  * ibus: check object validity before honoring `inputMethodAccepted()`
+  * ODBC SQL driver: deal with different sizes of SQLTCHAR correctly
+  * Doc: Update copyright year
+  * Android: pass EXTRA_INITIAL_URI to native FileDialog
+  * Doc: Only list qt core classes in qt core io group
+  * QFileSystemEngine: URL encode path in trash info, use relative path
+  * [doc] Warn users about data races regarding qt_ntfs_permission_lookup
+  * [doc] QSharedPointer: add some missing docs
+  * Disable feature vkgen if vulkan was explicitly disabled
+  * Android: handle move operation with content uris
+  * Android: handle rename() operation with content uris
+  * Android: Add facilities to handle more content URIs operations
+  * Fix infinite loop when iterating content uri sub-files/dirs
+  * Return the QFileInfo::baseName/QDir::dirName() from fileEngine impl
+  * SQLite: Update SQLite to v3.40.1
+  * Fix cache maybe invalid while the signal is actived from queue
+  * Android A11Y: Only access the main thread when it is not blocked
+  * ibus: support high dpi for cursor rectangle
+  * QString: use inheritance, not template aliases, for arg() constraints
+  * Fix the ref-counting for the std::function version of tryStart()
+  * Android: Fix UI is scaled smaller than before
+  * Android: fix Android assets handler not listing dirs with only sub dirs
+  * Android: fix deprecations for getDrawable() on QtMessageDialogHelper
+  * Android: Fix deprecations AlertDialog.setButton()
+  * Bump version to 5.15.13
+  * Doc: Increase Test Function Timeout
+  * QtMiscUtils: add missing toAsciiUpper(), use it in moc
+  * QLatin1/String/View: don't decay the arg() arguments
+  * QBuffer: test and document open() behavior
+  * SQLite: Update SQLite to v3.40.0
+  * tst_qmlstream: re-use QBuffer instance in readBack()
+  * iOS a11y: Ensure parent elements are stacked below their children
+  * qmake: Document that QMAKE_PRE_LINK does not work with Xcode
+  * Blacklist: test cases blacklisted in tst_Gestures:
+  * Android: Fix incorrect dimensions - part 2
+  * PCRE2: upgrade to 10.42
+  * QNetworkRequest: don't assume QByteArray::constData() is NUL-terminated
+  * QNetworkRequest: Make header parsing locale-independent
+  * Doc: Change links from froglogic to qt domain
+  * Backport QtMiscUtils::toAsciiLower() from dev
+- Commits dropped by the rebase:
+  * Apply CVE-2023-24607-qtbase-5.15.diff
+  * correctly set up ref counting in QThreadPool::tryStart(std::function)
+
 -------------------------------------------------------------------
 Fri Feb 16 07:44:56 UTC 2024 - Fabian Vogt <fvogt@suse.com>
 

libqt5-qtbase.spec

@@ -29,15 +29,15 @@
 %bcond_without harfbuzz
 
 Name:           libqt5-qtbase
-Version:        5.15.12+kde151
+Version:        5.15.14+kde143
 Release:        0
 Summary:        C++ Program Library, Core Components
 License:        LGPL-3.0-only or GPL-3.0-with-Qt-Company-Qt-exception-1.1
 Group:          System/Libraries
 Url:            https://www.qt.io
 %define base_name libqt5
-%define real_version 5.15.12
+%define real_version 5.15.14
-%define so_version 5.15.12
+%define so_version 5.15.14
 %define tar_version qtbase-everywhere-src-%{version}
 Source:         %{tar_version}.tar.xz
 # to get mtime of file:

qtbase-everywhere-src.obsinfo

@@ -1,4 +1,4 @@
 name: qtbase-everywhere-src
-version: 5.15.12+kde151
+version: 5.15.14+kde143
-mtime: 1708001344
+mtime: 1721165631
-commit: a43df98d037ad07cf096ef2f775958ceba743613
+commit: 9f9a56d750caff8b4459e7e9bf82f1f4d725f72f