Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 924651 (qt-6.6.2-stable) - dev-qt/*-6.6.2: stablereq
Summary: dev-qt/*-6.6.2: stablereq
Status: RESOLVED FIXED
Alias: qt-6.6.2-stable
Product: Gentoo Linux
Classification: Unclassified
Component: Stabilization (show other bugs)
Hardware: All Linux
: Normal enhancement (vote)
Assignee: Qt Bug Alias
URL:
Whiteboard:
Keywords: CC-ARCHES, SECURITY
Depends on:
Blocks: CVE-2024-25580
  Show dependency tree
 
Reported: 2024-02-15 12:48 UTC by Ionen Wolkens
Modified: 2024-02-20 06:44 UTC (History)
1 user (show)

See Also:
Package list:
dev-qt/qt-docs-6.6.2_p202402121133 amd64 dev-qt/qt3d-6.6.2 amd64 dev-qt/qt5compat-6.6.2 amd64 dev-qt/qtbase-6.6.2 amd64 dev-qt/qtcharts-6.6.2 amd64 dev-qt/qtconnectivity-6.6.2 amd64 dev-qt/qtdeclarative-6.6.2 amd64 dev-qt/qthttpserver-6.6.2 amd64 dev-qt/qtimageformats-6.6.2 amd64 dev-qt/qtlocation-6.6.2 amd64 dev-qt/qtmultimedia-6.6.2 amd64 dev-qt/qtnetworkauth-6.6.2 amd64 dev-qt/qtpositioning-6.6.2 amd64 dev-qt/qtquick3d-6.6.2 amd64 dev-qt/qtquicktimeline-6.6.2 amd64 dev-qt/qtscxml-6.6.2 amd64 dev-qt/qtsensors-6.6.2 amd64 dev-qt/qtserialport-6.6.2 amd64 dev-qt/qtshadertools-6.6.2 amd64 dev-qt/qtspeech-6.6.2 amd64 dev-qt/qtsvg-6.6.2 amd64 dev-qt/qttools-6.6.2 amd64 dev-qt/qttranslations-6.6.2 amd64 dev-qt/qtvirtualkeyboard-6.6.2 amd64 dev-qt/qtwayland-6.6.2 amd64 dev-qt/qtwebchannel-6.6.2 amd64 dev-qt/qtwebengine-6.6.2 amd64 dev-qt/qtwebsockets-6.6.2 amd64 dev-qt/qtwebview-6.6.2 amd64 media-video/qmplay2-23.10.22-r1 amd64
Runtime testing required: ---
nattka: sanity-check+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ionen Wolkens gentoo-dev 2024-02-15 12:48:48 UTC
In preparation (no cc-arches yet), but won't wait all that long.

Want it stabled early not only due to the CVE but also to reduce amount of people building packages against Qt6.6.1 (esp. now that people are starting to switch with Plasma 6 on the horizon) given there was an upstream mishap with ABI (see below) that affects package using QDockWidget (e.g. qmplay2[qt6], but extent is unknown -- most packages do not use that afaik).

    <arojas> heads up of major ABI breakage in Qt 6.6.2 https://code.qt.io/cgit/qt/qtbase.git/commit/src/widgets/widgets/qdockwidget.h?h=6.6&id=fb92bb073e6e1dd327b9ee94bb1e5726e96396bf
    <arojas> we broke forward ABI compat in 6.6.1, so to fix it, let's break *backwards* compatibility in 6.6.2... makes sense

Stabling 6.6.2 will however break some stable packages until rebuilt (qmplay2 is stable, albeit most are likely using it with qt5 atm), does not mean should start using := (one-time mishap), but may need revbumps to trigger rebuilds as a mitigation.
Comment 1 Ionen Wolkens gentoo-dev 2024-02-15 12:57:32 UTC
(In reply to Ionen Wolkens from comment #0)
> Stabling 6.6.2 will however break some stable packages until rebuilt
> (qmplay2 is stable, albeit most are likely using it with qt5 atm), does not
> mean should start using := (one-time mishap), but may need revbumps to
> trigger rebuilds as a mitigation.
Suppose I could revbump it to ~arch and add the revbump to this stablereq to do it at same time (to help both sides) -- not that it will guarantee that portage will rebuild it *after* updating to 6.6.2 so it really is just a mitigation rather than fix.

CC'ing qmplay2 maintainer just to be in loop.
Comment 2 Larry the Git Cow gentoo-dev 2024-02-15 13:04:19 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3b51b44be176073034a7afa465c326218ba80956

commit 3b51b44be176073034a7afa465c326218ba80956
Author:     Ionen Wolkens <ionen@gentoo.org>
AuthorDate: 2024-02-15 13:00:33 +0000
Commit:     Ionen Wolkens <ionen@gentoo.org>
CommitDate: 2024-02-15 13:04:02 +0000

    media-video/qmplay2: revbump with no changes to trigger rebuild
    
    ...ideally against qt6.6.2 if USE=qt6, bug #924651 for explanations.
    
    Unfortunately is an unnecessary rebuild for qt5 users.
    
    Bug: https://bugs.gentoo.org/924651
    Signed-off-by: Ionen Wolkens <ionen@gentoo.org>

 media-video/qmplay2/qmplay2-23.10.22-r1.ebuild | 140 +++++++++++++++++++++++++
 1 file changed, 140 insertions(+)
Comment 3 Ionen Wolkens gentoo-dev 2024-02-20 00:24:50 UTC
Bit early but let's just go ahead with it, should be fine if tests pass. Keep seeing more and more stable users trying out Plasma 6 and needing it (not to mention those using the binhost and wanting a qtwebengine-6.6.2 binpkg for that).
Comment 4 Arthur Zamarin archtester Gentoo Infrastructure gentoo-dev Security 2024-02-20 06:44:47 UTC
amd64 done

all arches done