bug#33925: Qt 5.11.3 bug-fix update

bug#33925: Qt 5.11.3 bug-fix update

[Leo Famulari]

[-- Attachment #1: Type: text/plain, Size: 412 bytes --]

There is a new release of Qt, 5.11.3, which is strictly a bug-fix
release:

https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/

It includes several important security-related fixes.

We should try updating it.

`guix refresh -l qtbase` says that 471 packages will need to be rebuilt.
Maybe we can do the work on a special 'qt-updates' branch.

Would anyone like to lead this work?

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

bug#33925: Qt 5.11.3 bug-fix update

[Efraim Flashner]

[-- Attachment #1: Type: text/plain, Size: 1313 bytes --]

On Sun, Dec 30, 2018 at 01:29:11PM -0500, Leo Famulari wrote:
> There is a new release of Qt, 5.11.3, which is strictly a bug-fix
> release:
> 
> https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
> 
> It includes several important security-related fixes.
> 
> We should try updating it.
> 
> `guix refresh -l qtbase` says that 471 packages will need to be rebuilt.
> Maybe we can do the work on a special 'qt-updates' branch.
> 
> Would anyone like to lead this work?

I normally end up doing the qt updates. my work flow is to download the
md5sum file and use grep, awk or parallel, and aria2 to download the files.
After updating all the qt packages building them all (and qtwebkit)
takes hours, and then another day or two to fix build/test errors. If
you check, for example, the source for qtscript¹, it has barely changed
in the past year, so most of the updates are fairly straightforward.

Of course the fun part is figuring out all the dependant packages and
why they suddenly fail.

¹https://code.qt.io/cgit/qt/qtscript.git/log/


-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

bug#33925: Qt 5.11.3 bug-fix update

[Efraim Flashner]

[-- Attachment #1: Type: text/plain, Size: 1085 bytes --]

On Mon, Dec 31, 2018 at 08:44:01PM +0200, Efraim Flashner wrote:
> On Sun, Dec 30, 2018 at 01:29:11PM -0500, Leo Famulari wrote:
> > There is a new release of Qt, 5.11.3, which is strictly a bug-fix
> > release:
> > 
> > https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
> > 
> > It includes several important security-related fixes.
> > 
> > We should try updating it.
> > 
> > `guix refresh -l qtbase` says that 471 packages will need to be rebuilt.
> > Maybe we can do the work on a special 'qt-updates' branch.
> > 
> > Would anyone like to lead this work?
> 
I started the update process. qt, qt-modular, python-sip, pyqt-5 and
qscintilla are updated on the qt-updates branch. I tested python-qscintilla
with python-pyqt-without-qtwebkit. Qtwebkit is still untested, as are
all the packages which depend on them.


-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

bug#33925: Qt 5.11.3 bug-fix update

[Leo Famulari]

[-- Attachment #1: Type: text/plain, Size: 92 bytes --]

Qt was updated to 5.11.3 in commit
c82cd3a7bd5d7a85fb48a37c3a5e37fbe3ed6738. Thanks Efraim!

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]