From e8b07fcff53936e56ca38179325c56eb3a013116 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michael=20Br=C3=BCning?= Date: Wed, 1 Jun 2022 10:58:24 +0200 Subject: Update Chromium MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Submodule src/3rdparty 5cd4e9af..660d61d9: > [Backport] Avoid using FreeType 2.11.0 COLRv1 headers > Minor. Use FilePath directly for qt sandbox path > Fix angle build after a056b2278a97 > [Backport] CVE-2022-1494: Insufficient data validation in Trusted Types > FIXUP: Disable alternate window station of Windows sandbox > [Backport] Security bug 1298867 > [Backport] Security bug 1312563 > [Backport] CVE-2022-1638: Heap buffer overflow in V8 Internationalization > [Backport] CVE-2022-1639: Use after free in ANGLE > [Backport] CVE-2022-1636: Use after free in Performance APIs > [Backport] CVE-2022-1493: Use after free in Dev Tools > Find fontconfig using pkg-config > [Backport] Security bug 1296334 > [Backport] Security bug 1307223 > [Backport] CVE-2022-1492: Insufficient data validation in Blink Editing > [Backport] CVE-2022-1498: Inappropriate implementation in HTML Parser > [Backport] CVE-2022-1497: Inappropriate implementation in Input > [Backport] CVE-2022-1487: Use after free in Ozone > [Backport] CVE-2022-1486: Type Confusion in V8 > [Backport] CVE-2022-1483: Heap buffer overflow in WebGPU > [Backport] CVE-2022-1482: Inappropriate implementation in WebGL. > [Backport] CVE-2022-1479: Use after free in ANGLE > [Backport] CVE-2022-1477: Use after free in Vulkan > [Backport] CVE-2022-1138: Inappropriate implementation in Web Cursor. > Fix no-printing builds on mac > Minor. Add defined to checks > FIXUP: Fix jumbo build > [Backport] Security bug 1292905 > [Backport] CVE-2022-1314: Type Confusion in V8 > [Backport] CVE-2022-1310: Use after free in regular expressions > [Backport] CVE-2022-1305: Use after free in storage > [Backport] Security bug 1306507 > Fix mac toolchain python linker script call > Workaround MSVC2022 ICE in constexpr functions > [Backport] CVE-2022-1364: Type Confusion in V8 Task-number: QTBUG-103032 Task-number: QTBUG-103035 Task-number: QTBUG-103036 Change-Id: I19b85bdda74d96dc597733c8dc996ab92967ee31 Reviewed-by: Michael Brüning --- CHROMIUM_VERSION | 2 +- src/3rdparty | 2 +- src/core/web_engine_context.cpp | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/CHROMIUM_VERSION b/CHROMIUM_VERSION index 2ec45229b..f30101743 100644 --- a/CHROMIUM_VERSION +++ b/CHROMIUM_VERSION @@ -1,3 +1,3 @@ Based on Chromium version: 94.0.4606.126 -Patched with security patches up to Chromium version: 99.0.4844.84 +Patched with security patches up to Chromium version: 101.0.4951.64 diff --git a/src/3rdparty b/src/3rdparty index 5cd4e9af5..660d61d9f 160000 --- a/src/3rdparty +++ b/src/3rdparty @@ -1 +1 @@ -Subproject commit 5cd4e9af5765778abc0380fc0fc6e06c43fcdfe9 +Subproject commit 660d61d9f1886367e12e741f8793df7589759695 diff --git a/src/core/web_engine_context.cpp b/src/core/web_engine_context.cpp index 9727efab1..16232d3b0 100644 --- a/src/core/web_engine_context.cpp +++ b/src/core/web_engine_context.cpp @@ -918,7 +918,7 @@ const char *qWebEngineChromiumVersion() noexcept } const char *qWebEngineChromiumSecurityPatchVersion() noexcept { - return "99.0.4844.84"; // FIXME: Remember to update + return "101.0.4951.64"; // FIXME: Remember to update } QT_END_NAMESPACE -- cgit v1.2.3