summaryrefslogtreecommitdiffstats
path: root/CHROMIUM_VERSION
Commit message (Collapse)AuthorAgeFilesLines
* Update Chromiumv5.15.12-vxworks-ltsv5.15.12-lts-lgplv5.15.12-lts5.15.12Michael Brüning2022-12-091-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Submodule src/3rdparty be349eaf..e0fd3a5d: * Fixup for patch for CVE-2022-3200 on OpenSuse 15.1 * [Backport] CVE-2022-4262: Type Confusion in V8 * Bump V8_PATCH_LEVEL * [Backport] CVE-2022-4174: Type Confusion in V8 * [Backport] CVE-2022-4180: Use after free in Mojo * [Backport] CVE-2022-4181: Use after free in Forms * [Backport] CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools (2/2) * [Backport] Security bug 1378916 * Fixup the patch for CVE-2022-3200 on 87-based / 5.15 * [Backport] CVE-2022-3200: Heap buffer overflow in Internals * [Backport] CVE-2022-3887: Use after free in Web Workers * [Backport] CVE-2022-3890: Heap buffer overflow in Crashpad * [Backport] CVE-2022-3889: Type Confusion in V8 * [Backport] CVE-2022-3885: Use after free in V8 * [Backport] CVE-2022-3445: Use after free in Skia. * [Backport] CVE-2022-3373: Out of bounds write in V8 * Fix building with XCode 14.1 * [Backport] CVE-2022-3046: Use after free in Browser Tag * [Backport] CVE-2022-3446 and CVE-2022-35737 * [Backport] CVE-2022-3304: Use after free in CSS * [Backport] CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools (1/2) * [Backport] Security bug 1356308 * [Backport] CVE-2022-3370: Use after free in Custom Elements * [Backport] Security bugs 1346938 and 1338114 * [Backport] CVE-2022-3199: Use after free in Frames. * [Backport] CVE-2022-3198: Use after free in PDF * [Backport] CVE-2022-3197: Use after free in PDF * [Backport] CVE-2022-3196: Use after free in PDF * [Backport] CVE-2022-3075: Insufficient data validation in Mojo * [Backport] CVE-2022-3040: Use after free in Layout * [Backport] CVE-2022-3041: Use after free in WebSQL * [Backport] CVE-2022-3038: Use after free in Network Service Task-number: QTBUG-109225 Fixes: QTBUG-108207 Fixes: QTBUG-108178 Fixes: QTBUG-108179 Fixes: QTBUG-108180 Change-Id: I5e1ebbe350e67ed888bfb07602d88bfcbecd94df Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Update documented Chromium versionMichael Brüning2022-03-101-1/+1
| | | | | | | Adjusted security patch versions. Change-Id: Id94c288faee9f16c5b24f7357728ed65b6cf77ea Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Update ChromiumMichael Brüning2021-12-091-1/+1
| | | | | | | | | | | | | | | | | | | Submodule src/3rdparty bfc2de04..b77d6430: > Bump V8_PATCH_LEVEL > [Backport] CVE-2021-4078: Type confusion in V8 > [Backport] CVE-2021-4079: Out of bounds write in WebRTC > [Backport] Security bug 1259899 > [Backport] CVE-2021-4062: Heap buffer overflow in BFCache > [Backport] CVE-2021-4059: Insufficient data validation in loader > [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (2/2) > [Backport] CVE-2021-4058: Heap buffer overflow in ANGLE (1/2) > [Backport] CVE-2021-4057: Use after free in file API > Use wglSetPixelFormat directly only if in software mode > Compile with GCC 11 -std=c++20 Task-number: QTBUG-98854 Change-Id: I7279387c9c7afece1eb51abb2f68d2e65f4dd31f Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Update ChromiumMichael Brüning2021-12-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Submodule src/3rdparty 8c0a9b44..bfc2de04: > [Backport] CVE-2021-37996 : Insufficient validation of untrusted input in Downloads > [Backport] CVE-2021-38001 : Type Confusion in V8 > [Backport] Security bug 1252858 > [Backport] CVE-2021-37989 : Inappropriate implementation in Blink > [Backport] Dependency for CVE-2021-37989 > [Backport] CVE-2021-38022: Inappropriate implementation in WebAuthentication > [Backport] CVE-2021-38012: Type Confusion in V8 > [Backport] CVE-2021-38010: Inappropriate implementation in service workers > [Backport] CVE-2021-38021: Inappropriate implementation in referrer > [Backport] CVE-2021-38005: Use after free in loader (3/3) > [Backport] CVE-2021-38005: Use after free in loader (2/3) > [Backport] CVE-2021-38005: Use after free in loader (1/3) > [Backport] CVE-2021-38019: Insufficient policy enforcement in CORS > [Backport] CVE-2021-38007: Type Confusion in V8 > [Backport] CVE-2021-38017: Insufficient policy enforcement in iframe sandbox > [Backport] CVE-2021-38009: Inappropriate implementation in cache > [Backport] Dependency for CVE-2021-38009 > [Backport] CVE-2021-38015: Inappropriate implementation in input > [Backport] CVE-2021-38018: Inappropriate implementation in navigation > Revert "Stop orphan child processes from staying alive on Windows" > Fix stack overflow on gpu channel recreate with an error > [Backport] Security bug 1245870 > [Backport] CVE-2021-37993 : Use after free in PDF Accessibility > [Backport] CVE-2021-37984 : Heap buffer overflow in PDFium > [Backport] CVE-2021-37992 : Out of bounds read in WebAudio > [Backport] CVE-2021-37987 : Use after free in Network APIs > [Backport] CVE-2021-38003 : Inappropriate implementation in V8 > [Backport] CVE-2021-3541 libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms > [Backport] CVE-2021-3517: libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c Task-number: QTBUG-98854 Fixes: QTBUG-98855 Fixes: QTBUG-98400 Fixes: QTBUG-98401 Change-Id: Idb07729bf45ed59eb8163186925095e1a1e30318 Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Update patch levelAllan Sandfeld Jensen2021-10-201-1/+1
| | | | | | | Change-Id: Id8c614ffe3ae1dc1098acc2f7d90379c81fb255c Reviewed-by: Michal Klocek <michal.klocek@qt.io> (cherry picked from commit 10449e4fb91b35572300084af4cdb1e05af9faab) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* Add Chromium version source documentationAllan Sandfeld Jensen2021-09-091-0/+2
Change-Id: Ice33d34ca8ceba745d63c129f462cca9b195e213 Reviewed-by: Michael Brüning <michael.bruning@qt.io>
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-18 09:06:45 +0000