diff options
| author | Michael Brüning <michael.bruning@qt.io> | 2023-04-04 16:13:07 +0200 |
|---|---|---|
| committer | Michael Brüning <michael.bruning@qt.io> | 2023-04-19 07:47:38 +0000 |
| commit | ffc26420b81901bf7f47fe783f8582588451c7e9 (patch) | |
| tree | 41d68686f06af9c1263a138e99147c96cbf421de | |
| parent | 9c4782e178f3798d006e79f3b340b722556b9f8a (diff) | |
| download | qtwebengine-ffc26420b81901bf7f47fe783f8582588451c7e9.tar.gz | |
Update Chromium
Submodule src/3rdparty 22fec96c..d3c3d748:
* Revert "[Backport] CVE-2023-0704: Insufficient policy enforcement in DevTools"
* Do not stop navigation during saving the page if not necessary
* Pass through non-keymutex share handles
* [Backport] CVE-2023-1236: Inappropriate implementation in Internals
* [Backport] CVE-2023-0704: Insufficient policy enforcement in DevTools
* [Backport] Security bug 1417585
* [Backport] Security bug 1418734 (2/2)
* [Backport] Security bug 1418734 (1/2)
* [Backport] Security bug 1415249
* [Backport] Security bug 1402921
* [Backport] Security bug 1337747
* [Backport] Security bug 1412991
* [Backport] CVE-2023-1532: Out of bounds read in GPU Video
* [Backport] CVE-2023-1534: Out of bounds read in ANGLE
* [Backport] CVE-2023-1531: Use after free in ANGLE
* [Backport] CVE-2023-1530: Use after free in PDF (2/2)
* [Backport] CVE-2023-1530: Use after free in PDF (1/2)
* [Backport] CVE-2023-1529: Out of bounds memory access in WebHID
* [Backport] CVE-2023-1235: Type Confusion in DevTools
* [Backport] CVE-2023-1232: Insufficient policy enforcement in Resource Timing
* [Backport] CVE-2023-1233: Insufficient policy enforcement in Resource Timing
* [Backport] CVE-2023-1222: Heap buffer overflow in Web Audio API
* [Backport] CVE-2023-1220: Heap buffer overflow in UMA
* [Backport] CVE-2023-1219: Heap buffer overflow in Metrics (3/3)
* [Backport] CVE-2023-1219: Heap buffer overflow in Metrics (2/3)
* [Backport] CVE-2023-1219: Heap buffer overflow in Metrics (1/3)
* [Backport] CVE-2023-1218: Use after free in WebRTC
* [Backport] CVE-2023-1217: Stack buffer overflow in Crash reporting
* [Backport] CVE-2023-1215: Type Confusion in CSS
* [Backport] CVE-2023-1214: Type Confusion in V8
Pick-to: 6.5
Fixes: QTBUG-112166
Change-Id: I747f60f72cbf6847bc0ee89bee655972968da921
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
| -rw-r--r-- | CHROMIUM_VERSION | 2 | ||||
| m--------- | src/3rdparty | 0 | ||||
| -rw-r--r-- | src/core/web_engine_context.cpp | 2 |
3 files changed, 2 insertions, 2 deletions
diff --git a/CHROMIUM_VERSION b/CHROMIUM_VERSION index c87bec9a9..14249239c 100644 --- a/CHROMIUM_VERSION +++ b/CHROMIUM_VERSION @@ -1,3 +1,3 @@ Based on Chromium version: 108.0.5359.181 -Patched with security patches up to Chromium version: 110.0.5481.104 +Patched with security patches up to Chromium version: 111.0.5563.110 diff --git a/src/3rdparty b/src/3rdparty -Subproject 22fec96c83014753f8d4d709dad25902cafa1a7 +Subproject d3c3d7483efc6da75e40f37c1f36525b8663d3c diff --git a/src/core/web_engine_context.cpp b/src/core/web_engine_context.cpp index fc34957b0..769807ca2 100644 --- a/src/core/web_engine_context.cpp +++ b/src/core/web_engine_context.cpp @@ -925,7 +925,7 @@ const char *qWebEngineChromiumVersion() noexcept const char *qWebEngineChromiumSecurityPatchVersion() noexcept { - return "110.0.5481.104"; // FIXME: Remember to update + return "111.0.5563.110"; // FIXME: Remember to update } QT_END_NAMESPACE |