Third Party Code in Qt: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
(Add link to freetype upstream, and link to script used to upgrade to latest version) |
||
| Line 3: | Line 3: | ||
{| class="wikitable" | {| class="wikitable" | ||
|- | |- | ||
!repository!!Qt module | !repository!!Qt module!!3rdparty module!!processed untrusted content!!patches!!upstream!!upgrade process | ||
|- | |- | ||
|qtbase||Qt Core||pcre2||regular expressions||-|| | |qtbase||Qt Core||pcre2||regular expressions||-|| | ||
| Line 13: | Line 13: | ||
|qtbase||Qt GUI||harfbuzz-ng||fonts||-|| | |qtbase||Qt GUI||harfbuzz-ng||fonts||-|| | ||
|- | |- | ||
|qtbase||Qt GUI||freetype||fonts||-|| | |qtbase||Qt GUI||freetype||fonts||-||https://gitlab.freedesktop.org/freetype||fetch latest tar-ball, run [https://code.qt.io/cgit/qt/qtbase.git/tree/src/3rdparty/freetype/import_from_tarball.sh script]. Might involve manual fixing of license and build system files, depending on what changed upstream. | ||
|- | |- | ||
|qtbase||Qt GUI||libpng||PNG images||build fixes for Windows (CE), fix for oss-fuzz issue 23376 (memory leak)|| | |qtbase||Qt GUI||libpng||PNG images||build fixes for Windows (CE), fix for oss-fuzz issue 23376 (memory leak)|| | ||
Revision as of 08:52, 1 November 2022
This page provides security- and maintenance-relevant information for the 3rd party code in Qt. For a complete list of 3rd party modules, including the currently included version, see the documentation page with the list of licenses used in Qt.
| repository | Qt module | 3rdparty module | processed untrusted content | patches | upstream | upgrade process |
|---|---|---|---|---|---|---|
| qtbase | Qt Core | pcre2 | regular expressions | - | ||
| qtbase | Qt Core | tinycbor | Streaming CBOR object | - | ||
| qtbase | Qt Core | zlib | zlib compressed data | build fixes for Windows and Apple; exporting symbols; security fixes not yet released by upstream | ||
| qtbase | Qt GUI | harfbuzz-ng | fonts | - | ||
| qtbase | Qt GUI | freetype | fonts | - | https://gitlab.freedesktop.org/freetype | fetch latest tar-ball, run script. Might involve manual fixing of license and build system files, depending on what changed upstream. |
| qtbase | Qt GUI | libpng | PNG images | build fixes for Windows (CE), fix for oss-fuzz issue 23376 (memory leak) | ||
| qtbase | Qt GUI | libjpeg | JPEG images | - | ||
| qtbase | Qt GUI | md4c | markdown text | Fix compiler warnings with MSVC | ||
| qtbase | Qt Network | Public Suffix List | only indirectly | - | ||
| qtbase | Qt SQL | sqlite | SQL database files and queries | - | ||
| qtimageformats | Qt ImageFormats | libtiff | Loading TIFF images | - | ||
| qtimageformats | Qt ImageFormats | libwebp | Loading webp images | - | ||
| qtmultimedia | Qt Multimedia | FFmpeg | Decoding compressed audio & video | FFmpeg is provisioned in CI and used by the binary packages | ||
| qtmultimedia | Qt Spatial Audio | Eigen | Processing of audio data | |||
| qtmultimedia | Qt Spatial Audio | pffft | Processing of audio data | |||
| qtmultimedia | Qt Spatial Audio | resonance audio | Processing of audio data | |||
| qtquick3d | Qt Quick 3D | assimp | 3D assets | - | ||
| qtquick3d | Qt Quick 3D | tinyexr | Loading EXR images | - | ||
| qtquick3dphysics | Qt Quick 3D Physics | PhysX | Read/write meshes | Build fixes |