Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 888946 (qt-5.15.8-stable) - Qt 5.15.8, LO 7.4.4.2, app-text/poppler-23.01.0, dev-libs/boost-1.81.0-r1, dev-libs/re2-0.2022.12.01, dev-tcltk/tkimg-1.4.14, media-libs/harfbuzz-6.0.0, media-libs/libraw-0.21.1, media-libs/tiff-4.5.0, media-libs/zxing-cpp-2.0.0: stabilisation
Summary: Qt 5.15.8, LO 7.4.4.2, app-text/poppler-23.01.0, dev-libs/boost-1.81.0-r1, de...
Status: RESOLVED FIXED
Alias: qt-5.15.8-stable
Product: Gentoo Linux
Classification: Unclassified
Component: Stabilization (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: David Seifert
URL:
Whiteboard:
Keywords: CC-ARCHES, SECURITY
: 890808 (view as bug list)
Depends on: 886303 889160 889696 890342 890804 890806
Blocks: CVE-2022-2056, CVE-2022-2057, CVE-2022-2058, CVE-2022-2519, CVE-2022-2520, CVE-2022-2521, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2953, CVE-2022-3570, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626, CVE-2022-3627, CVE-2022-3970, CVE-2023-30086, CVE-2023-30774, CVE-2023-30775 888181 plasma-5.26.5-stable CVE-2023-0128, CVE-2023-0129, CVE-2023-0130, CVE-2023-0131, CVE-2023-0132, CVE-2023-0133, CVE-2023-0134, CVE-2023-0135, CVE-2023-0136, CVE-2023-0137, CVE-2023-0138, CVE-2023-0139, CVE-2023-0140, CVE-2023-0141 CVE-2023-23597, CVE-2023-23600, CVE-2023-23604, CVE-2023-23606 891217 892704
  Show dependency tree
 
Reported: 2022-12-30 07:48 UTC by Sam James
Modified: 2023-01-31 09:30 UTC (History)
16 users (show)

See Also:
Package list:
app-text/poppler-23.01.0 dev-libs/boost-1.81.0-r1 dev-util/b2-4.9.3 dev-libs/re2-0.2022.12.01 amd64 arm arm64 x86 dev-tcltk/tkimg-1.4.14-r1 amd64 ppc x86 kde-apps/libkdcraw-22.08.3-r1 amd64 arm64 x86 media-gfx/krita-5.1.5 amd64 media-gfx/gimp-2.10.32-r4 amd64 arm64 ppc64 x86 media-libs/babl-0.1.98 amd64 arm64 ppc64 x86 media-libs/gegl-0.4.40-r1 amd64 arm64 ppc64 x86 media-libs/harfbuzz-6.0.0 media-libs/libraw-0.21.1 amd64 arm arm64 ppc ppc64 sparc x86 media-libs/tiff-4.5.0 media-libs/tiff-compat-4.4.0-r1 amd64 x86 media-libs/zxing-cpp-2.0.0 amd64 arm64 x86 app-text/libwps-0.4.13 amd64 arm64 x86 dev-libs/librevenge-0.0.5 amd64 arm64 ppc ppc64 x86 dev-cpp/libcmis-0.5.2-r2 amd64 arm64 x86 app-office/libreoffice-7.4.4.2 amd64 arm64 x86 app-office/libreoffice-bin-7.4.4.2 amd64 x86 app-office/libreoffice-bin-debug-7.4.4.2 amd64 x86 app-office/libreoffice-l10n-7.4.4.2 amd64 arm64 x86 dev-qt/assistant-5.15.8 amd64 arm64 ppc64 x86 dev-qt/designer-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/linguist-5.15.8 amd64 arm64 ppc64 x86 dev-qt/linguist-tools-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/pixeltool-5.15.8 amd64 arm64 ppc64 x86 dev-qt/qdbus-5.15.8 amd64 arm64 ppc ppc64 x86 dev-qt/qdbusviewer-5.15.8 amd64 arm64 ppc64 x86 dev-qt/qdoc-5.15.8 amd64 arm64 x86 dev-qt/qt3d-5.15.8 amd64 arm64 x86 dev-qt/qtbluetooth-5.15.8 amd64 arm arm64 x86 dev-qt/qtcharts-5.15.8 amd64 arm64 ppc ppc64 x86 dev-qt/qtconcurrent-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtcore-5.15.8-r1 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtdatavis3d-5.15.8 amd64 arm64 x86 dev-qt/qtdbus-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtdeclarative-5.15.8-r2 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtdiag-5.15.8 amd64 x86 dev-qt/qtgamepad-5.15.8 amd64 arm64 x86 dev-qt/qtgraphicaleffects-5.15.8 amd64 arm64 ppc ppc64 x86 dev-qt/qtgui-5.15.8-r1 amd64 arm arm64 ppc ppc64 x86 dev-qt/qthelp-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtimageformats-5.15.8 amd64 arm64 ppc64 x86 dev-qt/qtlocation-5.15.8 amd64 arm arm64 ppc64 x86 dev-qt/qtmultimedia-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtnetwork-5.15.8-r1 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtnetworkauth-5.15.8 amd64 arm64 x86 dev-qt/qtopengl-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtpaths-5.15.8 amd64 arm64 ppc ppc64 x86 dev-qt/qtpositioning-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtprintsupport-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtquickcontrols-5.15.8 amd64 arm64 ppc ppc64 x86 dev-qt/qtquickcontrols2-5.15.8 amd64 arm64 x86 dev-qt/qtscript-5.15.8 amd64 arm64 ppc ppc64 x86 dev-qt/qtscxml-5.15.8 amd64 arm64 x86 dev-qt/qtsensors-5.15.8 amd64 arm arm64 ppc64 x86 dev-qt/qtserialport-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtspeech-5.15.8 amd64 arm arm64 ppc64 x86 dev-qt/qtsql-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtsvg-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qttest-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qttranslations-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtvirtualkeyboard-5.15.8 amd64 arm64 x86 dev-qt/qtwayland-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtwaylandscanner-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtwebchannel-5.15.8 amd64 arm arm64 ppc64 x86 dev-qt/qtwebengine-5.15.8_p20230112 amd64 arm64 x86 dev-qt/qtwebview-5.15.8 amd64 arm64 x86 dev-qt/qtwebsockets-5.15.8-r1 amd64 arm arm64 ppc64 x86 dev-qt/qtwidgets-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtx11extras-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtxml-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-qt/qtxmlpatterns-5.15.8 amd64 arm arm64 ppc ppc64 x86 dev-util/kdevelop-pg-qt-2.2.2 amd64 arm64 x86 kde-apps/kdenlive-22.08.3-r1 amd64 arm64 x86 www-client/chromium-109.0.5414.74-r1 amd64 arm64 www-client/firefox-102.7.0 amd64 arm64 x86 mail-client/thunderbird-102.6.1 x86
Runtime testing required: ---
nattka: sanity-check+

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-12-30 07:48:15 UTC 
In preparation. Just collecting common stuff w/ bumped subslots. Can always split later if we want.
Comment 1 NATTkA bot gentoo-dev 2023-01-06 19:16:16 UTC Comment hidden (obsolete)
Comment 2 Andreas Sturmlechner gentoo-dev 2023-01-10 20:54:33 UTC 
Adding media-libs/zxing-cpp-2.0.0 in advance of LO 7.4.4.2.
Comment 3 NATTkA bot gentoo-dev 2023-01-11 08:52:14 UTC Comment hidden (obsolete)
Comment 4 NATTkA bot gentoo-dev 2023-01-11 08:58:13 UTC Comment hidden (obsolete)
Comment 5 NATTkA bot gentoo-dev 2023-01-12 20:18:28 UTC Comment hidden (obsolete)
Comment 6 NATTkA bot gentoo-dev 2023-01-12 20:26:21 UTC Comment hidden (obsolete)
Comment 7 Andreas Sturmlechner gentoo-dev 2023-01-12 20:50:06 UTC 
Adding media-libs/gegl-0.4.40-r1 for the libraw-0.21 fix (bug 887421).
Comment 8 NATTkA bot gentoo-dev 2023-01-12 20:54:19 UTC Comment hidden (obsolete)
Comment 9 Andreas Sturmlechner gentoo-dev 2023-01-12 21:05:12 UTC 
Adding dev-util/kdevelop-pg-qt-2.2.2 for a Qt 5.15.8 fix.
Comment 10 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-01-14 11:44:47 UTC 
*** Bug 890808 has been marked as a duplicate of this bug. ***
Comment 11 Larry the Git Cow gentoo-dev 2023-01-14 23:34:04 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=44aa16ce26f1be6e0fe352a8a21f4a9d6c7f3c55

commit 44aa16ce26f1be6e0fe352a8a21f4a9d6c7f3c55
Author:     Andreas Sturmlechner <asturm@gentoo.org>
AuthorDate: 2023-01-14 12:19:58 +0000
Commit:     Andreas Sturmlechner <asturm@gentoo.org>
CommitDate: 2023-01-14 23:32:12 +0000

    kde-apps/kdenlive: Fix Clip and project monitor broken with Qt 5.15.8
    
    KDE-bug: https://bugs.kde.org/show_bug.cgi?id=464027
    
    Bug: https://bugs.gentoo.org/888946
    Signed-off-by: Andreas Sturmlechner <asturm@gentoo.org>

 .../files/kdenlive-22.08.3-qt-5.15.8.patch         | 34 +++++++++
 kde-apps/kdenlive/kdenlive-22.08.3-r1.ebuild       | 85 +++++++++++++++++++++
 kde-apps/kdenlive/kdenlive-22.12.1-r1.ebuild       | 86 ++++++++++++++++++++++
 3 files changed, 205 insertions(+)
Comment 12 NATTkA bot gentoo-dev 2023-01-14 23:36:13 UTC Comment hidden (obsolete)
Comment 13 Andreas Sturmlechner gentoo-dev 2023-01-14 23:37:40 UTC 
Adding kde-apps/kdenlive-22.08.3-r1 for Qt 5.15.8 runtime fix, bump to dev-qt/qtcore-5.15.8-r1.
Comment 14 NATTkA bot gentoo-dev 2023-01-14 23:42:24 UTC Comment hidden (obsolete)
Comment 15 Larry the Git Cow gentoo-dev 2023-01-15 12:36:50 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=90c0da93ba084e79f9e5468d1b3759bc0a351a89

commit 90c0da93ba084e79f9e5468d1b3759bc0a351a89
Author:     Andreas Sturmlechner <asturm@gentoo.org>
AuthorDate: 2023-01-14 12:12:33 +0000
Commit:     Andreas Sturmlechner <asturm@gentoo.org>
CommitDate: 2023-01-15 12:36:32 +0000

    dev-qt/qtwebengine: add 5.15.8_p20230112
    
    Fixes CVE-2022-4437 and CVE-2022-4438.
    
    Snapshotted at:
    Branch: 5.15
    Commit: 38e0df6c6e5a1186b68df9b3d6f4cafbb211f2da
    
    Submodule qtwebengine-chromium.git:
    Branch: 87-based
    Commit: 97a1254923022e66fa75245c3ace64f58112cba6
    
    Patched with security patches up to Chromium version: 98.0.4758.102
    
    Bug: https://bugs.gentoo.org/888946
    Bug: https://bugs.gentoo.org/888181
    Signed-off-by: Andreas Sturmlechner <asturm@gentoo.org>

 dev-qt/qtwebengine/Manifest                        |   1 +
 .../qtwebengine-5.15.8_p20230112.ebuild            | 284 +++++++++++++++++++++
 2 files changed, 285 insertions(+)
Comment 16 Andreas Sturmlechner gentoo-dev 2023-01-15 12:38:03 UTC 
Bumping to dev-qt/qtwebengine-5.15.8_p20230112.
Comment 17 Joonas Niilola gentoo-dev 2023-01-17 09:52:54 UTC 
Adding Firefox-esr to the list since harfbuzz will cause a rebuild.
Comment 18 Arthur Zamarin archtester Gentoo Infrastructure gentoo-dev Security 2023-01-17 19:52:06 UTC 
sparc done
Comment 19 Arthur Zamarin archtester Gentoo Infrastructure gentoo-dev Security 2023-01-17 20:55:37 UTC 
arm64 done
Comment 20 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-01-17 20:58:03 UTC 
amd64 done
Comment 21 Jan Henke 2023-01-18 09:41:16 UTC 
Sorry, I am not sure if this is the right bug or a new bug is required.

The stabilization causes a subslot conflict on dev-lib/libportal-0.6.0

dev-qt/qtcore:5

  (dev-qt/qtcore-5.15.8-r1:5/5.15.8::gentoo, ebuild scheduled for merge) USE="icu -debug -old-kernel -systemd -test" ABI_X86="(64)" pulled in by
    =dev-qt/qtcore-5.15.8*:5= required by (dev-qt/qtwidgets-5.15.8:5/5.15::gentoo, ebuild scheduled for merge) USE="X dbus gtk png -debug -gles2-only -test" ABI_X86="(64)"
    ^              ^^^^^^^^^^                                                                                                                                                                                                                                                                                                                                                                                
    (and 14 more with the same problem)

  (dev-qt/qtcore-5.15.7:5/5.15.7::gentoo, installed) USE="icu -debug -old-kernel -systemd -test" ABI_X86="(64)" pulled in by
    dev-qt/qtcore:5/5.15.7= required by (dev-libs/libportal-0.6:0/1-1-1-1::gentoo, installed) USE="gtk introspection qt5 vala -gtk-doc -test" ABI_X86="(64)"
Comment 22 Andreas Sturmlechner gentoo-dev 2023-01-18 09:51:40 UTC 
It is the wrong bug because there is no conflict. You can seek help on IRC or the forums instead for help with Portage handling.
Comment 23 Andreas K. Hüttel archtester gentoo-dev 2023-01-21 00:02:21 UTC 
[00:59:04] <gentoovcs> dilfridge → repo/gentoo (app-office/libreoffice-bin/) app-office/libreoffice-bin: Version  bump 7.4.4.2
[00:59:04] <gentoovcs> dilfridge → repo/gentoo (app-office/libreoffice-bin-debug/) app-office/libreoffice-bin-debug: Version bump 7.4.4.2
Comment 24 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-01-21 06:48:52 UTC Comment hidden (obsolete)
Comment 25 Arthur Zamarin archtester Gentoo Infrastructure gentoo-dev Security 2023-01-21 09:14:14 UTC 
x86 done
Comment 26 Arthur Zamarin archtester Gentoo Infrastructure gentoo-dev Security 2023-01-21 09:15:37 UTC 
amd64 done
Comment 27 Arthur Zamarin archtester Gentoo Infrastructure gentoo-dev Security 2023-01-21 19:29:14 UTC 
ppc64 done
Comment 28 Arthur Zamarin archtester Gentoo Infrastructure gentoo-dev Security 2023-01-21 19:32:53 UTC 
arm done
Comment 29 Arthur Zamarin archtester Gentoo Infrastructure gentoo-dev Security 2023-01-21 19:36:43 UTC 
ppc done
Comment 30 Arthur Zamarin archtester Gentoo Infrastructure gentoo-dev Security 2023-01-21 19:41:24 UTC 
hppa done

all arches done