From ffc26420b81901bf7f47fe783f8582588451c7e9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michael=20Br=C3=BCning?= Date: Tue, 4 Apr 2023 16:13:07 +0200 Subject: Update Chromium Submodule src/3rdparty 22fec96c..d3c3d748: * Revert "[Backport] CVE-2023-0704: Insufficient policy enforcement in DevTools" * Do not stop navigation during saving the page if not necessary * Pass through non-keymutex share handles * [Backport] CVE-2023-1236: Inappropriate implementation in Internals * [Backport] CVE-2023-0704: Insufficient policy enforcement in DevTools * [Backport] Security bug 1417585 * [Backport] Security bug 1418734 (2/2) * [Backport] Security bug 1418734 (1/2) * [Backport] Security bug 1415249 * [Backport] Security bug 1402921 * [Backport] Security bug 1337747 * [Backport] Security bug 1412991 * [Backport] CVE-2023-1532: Out of bounds read in GPU Video * [Backport] CVE-2023-1534: Out of bounds read in ANGLE * [Backport] CVE-2023-1531: Use after free in ANGLE * [Backport] CVE-2023-1530: Use after free in PDF (2/2) * [Backport] CVE-2023-1530: Use after free in PDF (1/2) * [Backport] CVE-2023-1529: Out of bounds memory access in WebHID * [Backport] CVE-2023-1235: Type Confusion in DevTools * [Backport] CVE-2023-1232: Insufficient policy enforcement in Resource Timing * [Backport] CVE-2023-1233: Insufficient policy enforcement in Resource Timing * [Backport] CVE-2023-1222: Heap buffer overflow in Web Audio API * [Backport] CVE-2023-1220: Heap buffer overflow in UMA * [Backport] CVE-2023-1219: Heap buffer overflow in Metrics (3/3) * [Backport] CVE-2023-1219: Heap buffer overflow in Metrics (2/3) * [Backport] CVE-2023-1219: Heap buffer overflow in Metrics (1/3) * [Backport] CVE-2023-1218: Use after free in WebRTC * [Backport] CVE-2023-1217: Stack buffer overflow in Crash reporting * [Backport] CVE-2023-1215: Type Confusion in CSS * [Backport] CVE-2023-1214: Type Confusion in V8 Pick-to: 6.5 Fixes: QTBUG-112166 Change-Id: I747f60f72cbf6847bc0ee89bee655972968da921 Reviewed-by: Allan Sandfeld Jensen --- CHROMIUM_VERSION | 2 +- src/3rdparty | 2 +- src/core/web_engine_context.cpp | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/CHROMIUM_VERSION b/CHROMIUM_VERSION index c87bec9a9..14249239c 100644 --- a/CHROMIUM_VERSION +++ b/CHROMIUM_VERSION @@ -1,3 +1,3 @@ Based on Chromium version: 108.0.5359.181 -Patched with security patches up to Chromium version: 110.0.5481.104 +Patched with security patches up to Chromium version: 111.0.5563.110 diff --git a/src/3rdparty b/src/3rdparty index 22fec96c8..d3c3d7483 160000 --- a/src/3rdparty +++ b/src/3rdparty @@ -1 +1 @@ -Subproject commit 22fec96c83014753f8d4d709dad25902cafa1a75 +Subproject commit d3c3d7483efc6da75e40f37c1f36525b8663d3c1 diff --git a/src/core/web_engine_context.cpp b/src/core/web_engine_context.cpp index fc34957b0..769807ca2 100644 --- a/src/core/web_engine_context.cpp +++ b/src/core/web_engine_context.cpp @@ -925,7 +925,7 @@ const char *qWebEngineChromiumVersion() noexcept const char *qWebEngineChromiumSecurityPatchVersion() noexcept { - return "110.0.5481.104"; // FIXME: Remember to update + return "111.0.5563.110"; // FIXME: Remember to update } QT_END_NAMESPACE -- cgit v1.2.3