From The Compiler, 2 Weeks ago, written in Diff-output.
Embed
  1. From c549953cd9c8b24d8e92991a530886d29663a325 Mon Sep 17 00:00:00 2001
  2. From: Florian Bruhin <git@the-compiler.org>
  3. Date: Thu, 7 Mar 2019 10:56:44 +0100
  4. Subject: [PATCH] Add fix for CVE-2019-5786
  5.  
  6. ---
  7. qt5-webengine/PKGBUILD | 13 ++++++++++---
  8.  1 file changed, 10 insertions(+), 3 deletions(-)
  9.  
  10. diff --git a/qt5-webengine/PKGBUILD b/qt5-webengine/PKGBUILD
  11. index d7c25ed..2410d4c 100644
  12. --- a/qt5-webengine/PKGBUILD
  13. +++ b/qt5-webengine/PKGBUILD
  14. @@ -5,7 +5,7 @@ pkgname=qt5-webengine-debug
  15.  _orig_pkgname=${pkgname/-debug/}
  16.  _qtver=5.12.1
  17.  pkgver=${_qtver/-/}
  18. -pkgrel=2
  19. +pkgrel=3
  20.  arch=('x86_64')
  21.  url='https://www.qt.io'
  22.  license=('LGPL3' 'LGPL2.1' 'BSD')
  23. @@ -19,9 +19,11 @@ provides=("qt5-webengine=$pkgver")
  24.  options=("debug" "!strip")
  25.  conflicts=('qt5-webengine')
  26.  source=("https://download.qt.io/official_releases/qt/${pkgver%.*}/${_qtver}/submodules/${_pkgfqn}.tar.xz"
  27. -         qtwebengine-harmony.patch)
  28. +         qtwebengine-harmony.patch
  29. +         'cve-2019-5786.patch::http://code.qt.io/cgit/qt/qtwebengine-chromium.git/patch/?id=43316b156e65f867a76ed2afd96bf30696c5f4f6')
  30.  sha256sums=('43e91e06bc4a60ef0f91d15ae06425cf9c6b4f7dafe960259a5b013c687c3bd0'
  31. -            'feca54ab09ac0fc9d0626770a6b899a6ac5a12173c7d0c1005bc3964ec83e7b3')
  32. +            'feca54ab09ac0fc9d0626770a6b899a6ac5a12173c7d0c1005bc3964ec83e7b3'
  33. +            'd8434d27ac0dd8c4d49b0208fc2df91611440d3ee733bb8597212980f98d4b1b')
  34.  
  35.  prepare() {
  36.    mkdir -p build
  37. @@ -34,6 +36,11 @@ prepare() {
  38.  
  39.    # FreeType 2.8.1
  40.    patch -Np1 -i ../qtwebengine-harmony.patch
  41. +
  42. +  # https://bugreports.qt.io/browse/QTBUG-74254
  43. +  # https://codereview.qt-project.org/#/c/255162/
  44. +  cd src/3rdparty
  45. +  patch -p1 -i "$srcdir/cve-2019-5786.patch"
  46.  }
  47.  
  48.  build() {
  49. --
  50. 2.20.1
  51.  
  52.