Details
-
Sub-task
-
Resolution: Fixed
-
P2: Important
-
None
-
None
-
bfe080deb (dev), 52a074ada (6.5), 3b0ccbd8e (tqtc/lts-6.2)
Description
There was related discussion in Qt Contributors Summit. Memo: https://wiki.qt.io/QtCS2018_Third-Party_Sources_Policy_and_Security
Following actions needs to be done for all Qt modules using 3rd party components
- Check if we need to update some 3rd party components used
- Check if documentation of 3rd party component usage is correct and do needed updates. Documentation here: http://doc.qt.io/qt-6/licenses-used-in-qt.html
- In case of 3rd party component update we need to document the update here: http://code.qt.io/cgit/qt/qtdoc.git/tree/doc/src/legal/licensechanges.qdoc
If there are questions, please contact dedicated R&D owner (esabraha)
Attachments
Issue Links
- resulted in
-
QTBUG-111350 Update/Patch HarfBuzz for CVE-2023-25193
-
- Closed
-
| For Gerrit Dashboard: QTBUG-110338 | ||||||
|---|---|---|---|---|---|---|
| # | Subject | Branch | Project | Status | CR | V |
| 456164,4 | Update Harfbuzz to version 6.0.0 | dev | qt/qtbase | Status: MERGED | +2 | 0 |
| 457187,3 | Update Harfbuzz to version 6.0.0 | 6.5 | qt/qtbase | Status: MERGED | +2 | 0 |
| 457242,5 | Update Harfbuzz to version 6.0.0 | tqtc/lts-6.2 | qt/tqtc-qtbase | Status: MERGED | +2 | 0 |