diff options
author | Kai Köhne <kai.koehne@qt.io> | 2023-03-06 12:32:24 +0100 |
---|---|---|
committer | Kai Köhne <kai.koehne@qt.io> | 2023-03-31 02:10:53 +0100 |
commit | 1ba89e35bd2f10524441c1449d476ba1952c3ace (patch) | |
tree | a02a986bb23a285b0e670cadbb2998dba6aba664 /src/3rdparty/libjpeg | |
parent | 7350088ab7ef55f51325fc6a48320a1cdc87bd28 (diff) |
Highlight third-party modules that are security critical
Mark any modules listed as 'processing untrusted content' in
https://wiki.qt.io/Third_Party_Code_in_Qt also in the
qt_attribution.json files.
For reasoning, see also
https://lists.qt-project.org/pipermail/development/2023-February/043667.html
Pick-to: 6.5
Change-Id: Id547d4f7e77dac8c7e8e382e65169e7bd0330fcf
Reviewed-by: Volker Hilsheimer <volker.hilsheimer@qt.io>
Diffstat (limited to 'src/3rdparty/libjpeg')
-rw-r--r-- | src/3rdparty/libjpeg/qt_attribution.json | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/3rdparty/libjpeg/qt_attribution.json b/src/3rdparty/libjpeg/qt_attribution.json index c22c16ea9a..dc9ebdbdc1 100644 --- a/src/3rdparty/libjpeg/qt_attribution.json +++ b/src/3rdparty/libjpeg/qt_attribution.json @@ -3,10 +3,13 @@ "Name": "LibJPEG-turbo", "QDocModule": "qtgui", "QtUsage": "Used in the qjpeg image plugin. Configure with -system-libjpeg or -no-libjpeg to avoid.", + "SecurityCritical": true, "Description": "The Independent JPEG Group's JPEG software", "Homepage": "http://libjpeg-turbo.virtualgl.org/", "Version": "2.1.5", + "DownloadLocation": "https://sourceforge.net/projects/libjpeg-turbo/files/2.1.5/libjpeg-turbo-2.1.5.tar.gz", + "License": "Independent JPEG Group License and BSD 3-Clause \"New\" or \"Revised\" License and zlib License", "LicenseId": "IJG AND BSD-3-Clause AND Zlib", "LicenseFiles": [ "LICENSE", "ijg-license.txt", "zlib-license.txt"], |