Are CVE patches pre-applied to the sources of older versions as well?
-
Been getting CVE emails from Qt lately. Was wondering if I download the latest sources of the affected version (e.g. 5.15.19). Would they have the CVE patches applied already?
@Taytoo said in Are CVE patches pre-applied to the sources of older versions as well?:
if I download the latest sources of the affected version (e.g. 5.15.19). Would they have the CVE patches applied already?
No, the sources of Qt 5.15.19 remain exactly as how they were released back in May 2025 (https://www.qt.io/blog/commercial-lts-qt-5.15.19-released ). You'll need to apply the patches manually or upgrade to a version that already contains the patch.
-
In those mails you should find which versions will be patched. Since Qt5 is out of support already for a while it won't receive any fixes.
-
Been getting CVE emails from Qt lately. Was wondering if I download the latest sources of the affected version (e.g. 5.15.19). Would they have the CVE patches applied already?
@Taytoo said in Are CVE patches pre-applied to the sources of older versions as well?:
if I download the latest sources of the affected version (e.g. 5.15.19). Would they have the CVE patches applied already?
No, the sources of Qt 5.15.19 remain exactly as how they were released back in May 2025 (https://www.qt.io/blog/commercial-lts-qt-5.15.19-released ). You'll need to apply the patches manually or upgrade to a version that already contains the patch.
-
T Taytoo has marked this topic as solved
