Release note

Qt 5.12.12 release is a patch release made on the top of Qt 5.12.11.
As a patch release, Qt 5.12.12 does not add any new functionality but provides
bug fixes and other improvements and maintains both forward and backward
compatibility (source and binary) with Qt 5.12.11.

For detailed information about Qt 5.12, refer to the online documentation
included in this distribution. The documentation is also available online:

https://doc.qt.io/qt-5.12/index.html

The Qt version 5.12 series is binary compatible with the 5.11.x series.
Applications compiled for 5.11 will continue to run with 5.12.

Some of the changes listed in this file include issue tracking numbers
corresponding to tasks in the Qt Bug Tracker:

https://bugreports.qt.io/

Each of these identifiers can be entered in the bug tracker to obtain more
information about a particular change.

Important Changes

qtbase

eeedebf33e Update bundled libjpeg-turbo to version 2.1.0
libjpeg-turbo was updated to version 2.1.0
3ae80cfa8e SQLite: Update SQLite to v3.35.5
Updated SQLite to v3.35.5
c5e45d735c QVarLengthArray: fix aliasing error in insert(it, n, v)
Fixed an aliasing bug affecting insertions of objects aliasing existing
elements.
419505ab01 QXpmHandler: fix re-entrancy bug in xpm_color_name
Fixed a race condition when concurrently writing .xpm files.
1d8bcfbb55 QXpmHandler: actually limit characters-per-pixel to four
Instead of writing a corrupt file, rejects to write XPM files with more
than 64^4 colors (more than four characters per pixel) now.
508c39a3ae Fix license information for libjpeg-turbo
Clarified that libjpeg-turbo is actually covered by three licenses, not
only IJG.
ec2f36c6b2 Update bundled libjpeg-turbo to version 2.1.1
libjpeg-turbo was updated to version 2.1.1
a268e8c4f7 SQLite: Update SQLite to v3.36.0
Updated SQLite to v3.36.0

qtwayland

190646bc Fix the logic for decoding modifiers map in Wayland text
input protocol
Fix modifiers map decoding logic when receiving the map from the
compositor.

qtimageformats

370dd41 Update bundled libtiff to version 4.3.0
Bundled libtiff was updated to version 4.3.0

qtvirtualkeyboard

4ab966e9 Fix high CPU utilization caused by key repeat timer
Fixed high CPU utilization caused by key repeat timer.

Fixes

qtbase

QTBUG-91770 qvnc: Arbitrary memory read vulnerability
QTBUG-89899 Integer-overflow in QFixed::QFixed
QTBUG-89172 Integer-overflow in QFixed::fromReal(qreal r) through
QImage::.loadFromData(QByteArray);
QTBUG-93494 iOS A11Y VoiceOver: QAccessible::EditableText not
implemented as "TextField" and value is missing last character
QTBUG-93779 [elxr] (error #412) unresolved symbols: 1
QTBUG-94070 Memory corruption in sqlite plugin
QTBUG-65637 Window minimizing broken after building QT app with Mac OS
High Sierra SDK
QTBUG-89379 QQuickWindow::QtTextRendering cause font problem on Apple
M1
QTBUG-95005 Typo in QOpenGLPaintDevice::dotsPerMeterY
QTBUG-95429 Expired certificates in tst_QSslCertificate
QTBUG-56595 QXcbConnection::getTimestamp() returns old timestamp
QTBUG-86394 QNetworkInterface methods broken when targeting Android 11
(API-30)
QTBUG-95639 MariaDB 10.6 prepared queries metadata cache causes
breakage in mysql driver
QTBUG-95239 Massive memory consumption when rendering small svg
QTBUG-95661 Test result counts are incorrect
QTBUG-96399 Crash with SIGSEGV in QXcbConnection::getSelectionOwner
QTBUG-95042 QFrame Qt::WA_TranslucentBackground is broken with
specific window flags and drawable child item

qtsvg

QTBUG-95891 svg file freezes QImage

qtdeclarative

QTBUG-69577 while using both qml and JavaScriptCore.framwork, iOS app
got a non-public api references error

qttranslations

QTBUG-95014 pt_BR translations load incorrect catalogs
QTBUG-95013 pt_BR translations not loaded

qtwayland

QTBUG-94602 Releasing wayland buffer from Qt compositor side
QTBUG-97094 Wayland modifiers map decoding has flawed logic

qtwebchannel

QTBUG-74611 Flaky tests/auto/webchannel crashes on multiple platforms
in CI
QTBUG-51366 QWebChannel cannot emit signals from SIGNALS in different
QThread
QTBUG-80729 TestWebChannel::testAsyncObject() is flaky and crashes on
many platforms

qtwebengine

QTBUG-96925 tst_QWebEngineProfile::qtbug_71895 fails in 5.12
QTBUG-71895 [REG 5.10->5.11] When calling clearHttpCache() it can
cause a crash when loading a url
QTBUG-98401 CVE-2021-3517 in chromium
QTBUG-98400 CVE-2021-3541 in chromium
Security fixes from Chromium up to version 95.0.4638.69, including:
CVE-2021-3517: libxml2: Heap-based buffer overflow in
xmlEncodeEntitiesInternal() in entities.c
CVE-2021-3541: libxml2 Exponential entity expansion attack bypasses all
existing protection mechanisms
CVE-2021-30522: Use after free in WebAudio
CVE-2021-30547: Out of bounds write in ANGLE
CVE-2021-30553: Use after free in Network service
CVE-2021-30559: Out of bounds write in ANGLE
CVE-2021-30560: Use after free in Blink XSLT
CVE-2021-30569: Use after free in sqlite
CVE-2021-30585: Use after free in sensor handling
CVE-2021-30603: Race in WebAudio
CVE-2021-30618: Inappropriate implementation in DevTools
CVE-2021-30627: Type Confusion in Blink layout
Security bug 1184294
Security bug 1197786
Security bug 1198216
Security bug 1202534
Security bug 1204814
Security bug 1242257
Security bug 1252858

qtvirtualkeyboard

QTBUG-94259 High CPU load on embedded targets caused by timers
QTBUG-85245 Candidate characters are mixed in uppercase and lowercase
when using Pinyin in Simplified Chinese

Known Issues

RTA reported issues from Qt 5.12 LTS:
https://bugreports.qt.io/issues/?filter=22251

Linux

Qt Creator (or other GUI applications like Assistant, Designer, etc)
from installer won't start properly if xcb isn't installed
https://bugreports.qt.io/browse/QTBUG-94244
Workaround: Install xcb in your development host

Credits for the release goes to:

Aavitsland Eirik
Achtelik Mike
Brüning Michael
Buddenhagen Oswald
D'Angelo Giuseppe
Dawes Rodney
Heikkinen Jani
Hermann Ulf
Holland Dominik
Jensen Allan Sandfeld
Koivikko Jarkko
Kosmale Fabian
Köhne Kai
Lemire Paul
Macieira Thiago
Mutz Marc
Okada Shinichi
Pocheptsov Timur
Qi Liang
Rutledge Shawn
Shaw Andy
Sørvig Morten Johan
Thibault Samuel
Trillmann Jens
Valdmann Jüri
Vestbø Tor Arne
Welbourne Edward