id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
7025	qt5-5.5.1 qt-5.5.1 (qt-everywhere-opensource-src-5.5.1)	Fernando de Oliveira	bdubbs@…	"== Security Fixes ==

'''Qt WebEngine in Qt 5.5.1 includes a couple of security fixes for
known vulnerabilities.'''

Although we skip the Qt WebEngine, I include this release in the
Security category, just in case somebody uses it.

[http://download.qt.io/official_releases/qt/5.5/5.5.1/single/qt-everywhere-opensource-src-5.5.1.tar.xz]

[http://download.qt.io/official_releases/qt/5.5/5.5.1/single/md5sums.txt]

c2a249e8795d45200d997d96860d0353  qt-everywhere-opensource-src-5.5.1.tar.xz

[http://code.qt.io/cgit/qt/qtwebengine.git/plain/dist/changes-5.5.1?h=5.5.1]

{{{
****************************************************************************
*                          General                                         *
****************************************************************************

QtWebEngineCore
--------
 - Security fixes
   * ICU: CVE-2014-8146, CVE-2014-8147
   * Blink: CVE-2015-1284, CVE-2015-1291, CVE-2015-1292
   * Skia: CVE-2015-1294
   * V8: CVE-2015-1290
 - [QTBUG-47945, QTBUG-48088] Fixed crashes and asserts on exit


****************************************************************************
*                      Platform Specific Changes                           *
****************************************************************************

Linux
-----
 - [QTBUG-47301] Fixed crash on XCB GLES2 and Wayland
 - [QTBUG-45801] Find libEGL and libEGLES2v2 without development packages
}}}

[http://blog.qt.io/blog/2015/10/15/qt-5-5-1-released/]

{{{
Qt 5.5.1 Released

Published Thursday October 15th, 2015
24 Comments on Qt 5.5.1 Released
Posted in Releases

Today we have released Qt 5.5.1, the first update to Qt 5.5. In addition
to improvements and fixes to Qt functionality, it also packs in new Qt
Creator 3.5.1.

Qt 5.5.0 released in July introduced many new features and refinements
to existing functionality, and the Qt 5.5.1 patch release provides close
to 1.000 improvements and fixes on top of it. One of the key drivers for
Qt 5.5 has been quality and maturity and we have continued to address
items reported by the Qt users with Qt 5.5.1. I am really happy about
all the feedback and especially all the contributions we have received.

Qt WebEngine in Qt 5.5.1 includes a couple of security fixes for known
vulnerabilities. The list of important changes in Qt 5.5.1 can be found
from the change logs. Note that only the most important items are listed
in the change logs, for full list of changes it is best to check the git
logs.

The Qt 5.5.1 packages also include new Qt Creator 3.5.1. See Qt Creator
3.5.1 change log for the main improvements.

The Qt for Device Creation embedded Linux stack has been updated to use
Qt 5.5.1. Support for a new reference device: Kontron SMARC-sAMX6i has
also been added. Furthermore, Qt Virtual Keyboard version 1.3.1 is also
released today, as well as a technology preview of Qt Virtual Keyboard
2.0.

If you are using the online installer, Qt 5.5.1 and Creator 3.5.1 can be
updated using the maintenance tool. Offline packages are available for
commercial users in the Qt Account portal and at qt.io/download for
open-source and commercial evaluation users.
}}}"	enhancement	closed	high	7.9	BOOK	SVN	medium	fixed