This is a copy of the qt opensource code that was obtained from Qt Downloads
Because some CVEs were not addressed in the tarball, we apply publicly available patches that address the vulnerabilities in this repo and branch(es).
Run git log
to view changes in this repository from the original sources.
- Make a new branch from
main
. E.g.git checkout -b qt-X.Y.Z
- Download sources from the official Qt Downloads page. Only download the
opensource and "single" repo version. E.g.
https://download.qt.io/official_releases/qt/X.Y/X.Y.Z/single/qt-everywhere-opensource-src-X.Y.Z.tar.xz
. You should also verify the sources you download with thehttps://download.qt.io/official_releases/qt/X.Y/X.Y.Z/single/md5sums.txt
file provided by QT. - Extract to repository E.g.
tar -xf qt-everywhere-opensource-src-X.Y.Z.tar.xz
- Add extracted sources
git add qt-everywhere-src-X.Y.Z/
& Commit & Push (make sure ALL the files are added) - Apply patches as needed. Cite where you got the patch (either from GitHub or Qt Downloads). This lets someone using this repository know what changed from QT's original sources.
- Update this README.md if this process changes (new links, etc)