CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

x11-toolkits/qt5-gui5.15.19p96

Qt graphical user interface module (KDE patched)

Maintainer
kde@FreeBSD.org
Packages
qt5-gui 5.15.19p96
Upstream
Higher version available: 6.12.0
CPE
qt:qt
WWW
https://www.qt.io/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (3)

Show 3 fixed
VuXML entries whose affected range this version has left.

Commits (101)

Jason E. Hale (jhale) · 5.15.19p96
Qt5: Update to 5.15.19

This is the final release of Qt5. If your port still uses Qt5 and could
possibly use Qt6 instead, now would be a good time to make the switch.

PySide2: Update to 5.15.19

Announcement:
https://lists.qt-project.org/pipermail/announce/2026-May/000626.html
Release notes:
https://code.qt.io/cgit/qt/qtreleasenotes.git/tree/qt/5.15.19/release-note.md
1817deda1e
Jason E. Hale (jhale)
Qt5: Update to 5.15.18

This is the penultimate release of Qt5. While Qt5 is EOL, due to the
LGPL releases being a year behind the commercial releases, there will
still be one more patch release in May 2026.

PySide2: Update to 5.15.18

Announcement:
https://lists.qt-project.org/pipermail/announce/2025-October/000592.html
Release notes:
https://code.qt.io/cgit/qt/qtreleasenotes.git/tree/qt/5.15.18/release-note.md

MFH:		2025Q4
bc01cbb5a1
Jason E. Hale (jhale)
Qt5: Update to 5.15.17 (getting down to the end)

Upstream standard support for Qt5 is officially over. [1] In short,
that means get your ports off of Qt5 ASAP, especially end-user
applications. FreeBSD deprecation of Qt5 is coming soon! It will likely
be a year of lead time, but please help in the meantime and remove qt5
flavors and child ports whenever possible.

www/qt5-webengine has been updated to 5.15.19 with security patches up to
Chromium 135.0.7049.95. It's unclear at this point if further security
patches will be publically available. The Qt5 WebEngine component,
however, is and forever will be based on Chromium 87.0.4280.144, which
is over 4 years old. Props to upstream for their backports over all
these years and making them publically available (probably more to do
with licensing constraints than anything, but hey).

We otherwise depend on KDE as our direct upstream to roll our distfiles,
which we have been hosting locally for over 3 years. Since Qt upstream
drops the LGPL releases of Qt 5.15.x a year later, there's no guarantee
KDE will rebase their patchset over the next year for the remaining two
.18 and .19 releases. This might be the last update for Qt5 on FreeBSD.

[1] https://www.qt.io/blog/qt-5.15-extended-support-for-subscription-license-holders
9d76916067
Gleb Popov (arrowd)
x11-toolkits/qt5-gui: Add USE_LDCONFIG

Reported by:	pkg-devel exp-run
4bfac5ce7f
Gleb Popov (arrowd)
*: Bump revisions after dbus update

PR:		285253
Reported by:	Martin Birgmeier <d8zNeCFG@aon.at>
a347a92e6e
Jason E. Hale (jhale)
Qt5: Update to 5.15.16

Update devel/pyside2* and devel/shiboken2 to 5.15.16

Update www/qt5-webengine to include the latest security fixes in
the chromium submodule [1]

Release note:
https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/5.15.16/release-note.md

MFH:		2024Q4
Security:	16e472d5-a8aa-11ef-b680-4ccc6adda413 [1]
501ccfe6dd
Jason E. Hale (jhale)
PySide2: Add workaround for devel/shiboken2 issues with LLVM >= 16

Shiboken2 itself builds fine, but the code it generates for devel/pyside2
is broken.

In file included from /wrkdirs/usr/ports/devel/pyside2/work-py311/.build/PySide2/QtGui/PySide2/QtGui/qdragmoveevent_wrapper.cpp:63:
/wrkdirs/usr/ports/devel/pyside2/work-py311/.build/PySide2/QtGui/PySide2/QtGui/qdragmoveevent_wrapper.h:55:220:
error: no member named 'DragMove' in 'QOpenGLShader'; did you mean simply 'DragMove'?

PR:		270715, 282433
Obtained from:	OpenMandriva
MFH:		2024Q4
1c4bdeedd0
Jason E. Hale (jhale)
Qt5: Update to 5.15.15

Update devel/pyside2* and devel/shiboken2 to 5.15.15

Update www/qt5-webengine to include the latest security fixes in
the chromium submodule

Release note: https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/5.15.15/release-note.md

MFH:		2024Q3
Security:	66907dab-6bb2-11ef-b813-4ccc6adda413
9e1e9e17c5
Jason E. Hale (jhale)
Qt5: Update to 5.15.14

Update devel/pyside2* and devel/shiboken to 5.15.14

Update devel/qt5-script* and www/qt5-webengine to 5.15.17

Release note: https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/5.15.14/release-note.md
72a628f271
Jason E. Hale (jhale)
Qt5: Update to 5.15.13

Update devel/pyside2* and devel/shiboken to 5.15.13

Update www/qt5-webengine to latest commit. Python 3.x support has been
integrated upstream, so local patches have been removed.

Release note: https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/5.15.13/release-note.md
9793a1e61a
Jason E. Hale (jhale)
Qt5: Update to 5.15.12

Update devel/pyside2* and devel/shiboken2 to 5.15.12

Release note: https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/5.15.12/release-note.md
dc05989834
Jan Beich (jbeich)
x11/libxkbcommon: update to 1.6.0

Changes:	https://lists.freedesktop.org/archives/wayland-devel/2023-October/043121.html
PR:		274373
Exp-run by:	antoine
Approved by:	manu
6154950f6c
Jason E. Hale (jhale)
Qt5: Update to 5.15.11

Update devel/pyside2* and devel/shiboken2 to 5.15.11

Release note: https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/5.15.11/release-note.md
7f496af089
Jason E. Hale (jhale)
Qt5: Update to 5.15.10

Update devel/qt5-script* and www/qt5-webengine to 5.15.15-lts
Update devel/pyside2* and devel/shiboken2 to 5.15.10

Release note: https://code.qt.io/cgit/qt/qtreleasenotes.git/about/qt/5.15.10/release-note.md

PR:		273934
Exp-run by:	antoine
2a5c778173
Daniel Engberg (diizzy)
*/*: Bump jpeg-turbo users treewide

New major version 3.0.0
664a2fa1e5
Jan Beich (jbeich)
x11-toolkits/qt5-gui: drop mesa-dri dependency (optional at runtime)

This reverts commit 48249f104e80680f36280b54657528c9d7af120b.

PR:		266007
Approved by:	tcberner
Exp-run by:	antoine
b61703c49e
Jan Beich (jbeich)
x11-toolkits/qt5-gui: restore mesa-dri dependency until exp-run

This reverts commit 020693c166d18f55c760793095996f470d434474.

PR:		266007
16770c54b8
Jan Beich (jbeich)
x11-toolkits/qt5-gui: drop mesa-dri dependency (optional at runtime)

This reverts commit 48249f104e80680f36280b54657528c9d7af120b.

PR:		266007
Approved by:	tcberner
020693c166
Tobias C. Berner (tcberner)
Qt: Update Qt 5 to 5.15.8

- update distfiles to be rebased on the Qt 5.15.8 branch

PR:		268773
Exp-run by:	antoine
1fe9749d83
Tobias C. Berner (tcberner)
Qt5: Update Qt 5 to 5.15.7

* rebase the KDE patched Qt5 ontop of the 5.15.7 branch
* update qt5-script to 5.15.11

Exp-run by:	antoine
PR:		268533
3aeb8b79ba
Adriaan de Groot (adridg)
x11-toolkits/qt5-gui: minimal plugin independent of option X11

The "minimal" plugin is always needed (or just **one** of
the plugins, but this will do) to allow QtGui applications
to function. Turning off X11 turned them all off (I supposed
"if you're not using X11, you must install the Wayland bits
instead" would work, but that's hard to express in ports).

So remove the plist-sub from the minimal plugin -- there is
enough X11 pulled in regardless of the X11 option, that
the plugin builds (and links against X11 libraries, so
the option is a lie).

The linked PR is not for this port, but demonstrates a problem:
if X11 is turned off, there is no platform plugins at all,
and then there is no way to run Qt-Gui applications (even with
minimal / no graphics). For "command-line" Qt-Gui applications
like qhelpgenerator, that is a problem.

PR:		267949
934e8c6541
Felix Palmen (zirias)
Mk/Uses: always use colon for build/run suffix

Most USES use a colon for build/run(/test) suffixes. Change kde.mk,
qt.mk and pyqt.mk to do the same, and update all ports using that.

Document in CHANGES.

PR:			266034
Exp-run by:		antoine
Approved by:		tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D36349
ddae4e92d8
Tobias C. Berner (tcberner)
qt5: Update Qt to 5.15.5 (KDE patched)

- update patch-collection diff to be at the highest patch-level
- update patch-collection diff to be against 5.15.5 instead of 5.15.2
- update devel/qt5-script to 5.15.10
- libressl support by Felix Palmen <felix@palmen-it.de>

PR:			264944
Exp-run by:		antoine
Differential Revision:	https://reviews.freebsd.org/D35619
787e501e3d
Tobias C. Berner (tcberner)
Qt: Switch Qt5 to use KDE's Qt patch collection

From [1]
    What's this?

	This is a set of git repositories based on the last public
	commits available for Qt 5.15 branches with a curated collection
	of patches on top to ensure open source products can be used
	comfortably until users transition to their Qt 6-based ports.

    Which patches does it include?

	This collection of patches includes patches that fix at least
	one of the following:

	    * Security issues
	    * Crashes
	    * Functional defects

	We only include patches that have been approved upstream in the
	Qt project. If a patch cannot be merged upstream for technical
	reasons (e.g. the class no longer exists), it can also be
	merged.

	The patches to merge will be decided based on their relevance
	towards Open Source products and their viability.

PR:		260548
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D33446

[1] https://community.kde.org/Qt5PatchCollection
6b3bece75a
Jan Beich (jbeich)
x11-toolkits/qt5-gui: unbreak with libglvnd >= 1.3.4

executing config test egl-x11
[...]
> main.cpp:13:14: error: cannot initialize a variable of type 'Display *' (aka '_XDisplay *') with an rvalue of type 'EGLNativeDisplayType' (aka 'void *')
>     Display *dpy = EGL_DEFAULT_DISPLAY;
>              ^     ~~~~~~~~~~~~~~~~~~~
[...]
QPA backends:
  XCB:
    GL integrations:
      EGL-X11 Plugin ..................... no
[...]
====> Checking for pkg-plist issues (check-plist)
===> Parsing plist
===> Checking for items in STAGEDIR missing from pkg-plist
===> Checking for items in pkg-plist which are not in STAGEDIR
Error: Missing: %%QT_CMAKEDIR%%/Qt5Gui/Qt5Gui_QXcbEglIntegrationPlugin.cmake
Error: Missing: %%QT_PLUGINDIR%%/xcbglintegrations/libqxcb-egl-integration.so
===> Error: Plist issues found.
*** Error code 1

PR:		258269
See also:	https://bugs.gentoo.org/810343
faa54c8325
Adriaan de Groot (adridg)
x11-toolkits/qt5-gui: add missing dependency

devel/libmtdev is always a dependency, but wasn't listed as such.

PR:		257117
Obtained from:	Philipp Ost
7be3eabb1a
Tobias C. Berner (tcberner)
x11-toolkits/qt5-gui: add upstream fix to clipboard

Bug description from [2]:
	QXcbConnection::getTimestamp() returns a timestamp from an
	earlier PropertyNotify event which was already in the event
	queue. I found this issue when I was trying to figure out why
	gvim (with GTK+) exits with a BadWindow error when selecting or
	copying a large text to the clipboard in a KDE environment. It
	turns out that GTK+ uses the INCR protocol to send the data and
	QT uses getTimestamp (in QXcbClipboard::clipboardReadProperty)
	to set the start time of the transfer. Since that start time is
	incorrect QT expects data which hasn't been sent yet and closes
	the window. GTK+ still tries to add the data to the window which
	causes a BadWindow error.

From [1]:
	xcb: add a timeout control when reading INCR property

	For the first call of QXcbClipboard::clipboardReadProperty()
	inside of clipboardReadIncrementalProperty() in getSelection(),
	it will get a XCB_NONE reply before the contents arrived via
	property change. Then we give a chance to read more.

Upstream Code Review [1]:
	https://codereview.qt-project.org/c/qt/qtbase/+/364040

Upstream Bug Report [2]:
	https://bugreports.qt.io/browse/QTBUG-56595
43f4cf9162
Kevin Bowling (kbowling)
graphics/mesa-libs: Bump reverse deps for libglvnd

Per discussion with bapt on helping pkg handle the changing of these
deps and avoiding impossible upgrade senarios.

PR:		246767
Reviewed by:	manu, bapt
Approved by:	x11
Differential Revision:	https://reviews.freebsd.org/D30824
da3162c7c9
Mathieu Arnold (mat)
cleanup: Add those files back, with newline at eol.
7368e4a615
Mathieu Arnold (mat)
cleanup: Remove files without newline at end of file.
ebcd703357
Jan Beich (jbeich)
x11-toolkits/qt5-gui: unbreak on FreeBSD >= 13.0 armv[67]

/usr/bin/cc ... -fno-integrated-as ... ../3rdparty/pixman/pixman-arm-neon-asm.S -o .obj/pixman-arm-neon-asm.o
cc: error: unable to execute command: Executable "as" doesn't exist!
cc: error: assembler command failed with exit code 1 (use -v to see invocation)

Reported by:	pkg-fallout
7ebdbb52f8
Piotr Kubaj (pkubaj)
x11-toolkits/qt5-gui: fix scrollwheel on big endian platforms

Submitted by: jhibbits
1dfefe461b
Mathieu Arnold (mat)
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat)
Remove # $FreeBSD$ from Makefiles.
305f148f48
Adriaan de Groot (adridg)
Add mesa-dri dependency for qt5-gui

There are cases (headless, no xorg-server) where a qt5-gui application
still needs to run. It can use swrast, but only if that is installed.
Add the mesa-dri dependency to make that happen automatically.

For "normal" Qt5 usage, that is, Qt5 on the desktop, xorg-server already
pulls this in. The only change is for systems with no X11, no Wayland,
but with Qt5 GUI applications.

PR:		241490
Submitted by:	madpilot
Reported by:	madpilot
48249f104e
Jan Beich (jbeich)
devel/vulkan-*: move to graphics/ where vulkan-loader is

Vulkan isn't used for generic compute workloads unlike OpenCL.
For example, waifu2x-ncnn-vulkan is still graphics-related.
8d2b2a2768
Tobias C. Berner (tcberner)
Only define USE_LDCONFIG in devel/qt5-core

All the qt5-ports share the same library directory. devel/qt5-core is dependet on
by all others.
So there is no need to add identical entries to libdata/ldconfig, and restart the
ldconfig service on every pkg change of those ports.

Reported by:	bapt
Reviewed by:	bapt
Differential Revision:	https://reviews.freebsd.org/D27224
93b90c42e3
Tobias C. Berner (tcberner)
x11-toolkits/qt5-gui: add X11 option

This change makes it possible to build Qt5 without a big dependency on X11,
which you might want to do when only requiring Qt for wkhtmltopdf or similar
"headless" setups.

- Some additional port formatting

PR:		247994
Submitted by:	Ralf van der Enden <tremere@cainites.net>
Reported by:	Markus Mann <freebsd-public@it64.de>
f59cca24e5
Niclas Zeising (zeising)
Bump portrevision for devel/evdev-proto

Bump portrevision on everything with a build dependency on
devel/evdev-proto, to chace the update of evdev-proto in r550442.
a8d9df7e30
Tobias C. Berner (tcberner)
Update Qt5 to 5.15

This is a major upgrade of the Qt libraries [1], [2].

* People that use upgrading mechanisms with incomplete dependency handling
  (portmaster & Co) should make sure to manually remove the existing Qt
  packages to guarantee a safe upgrade. Keep in mind, that Qt does not like if
  you have an incomplete upgrade.

* This version of Qt drops support for OpenSSL 1.0 -- this means that there
  won't be any binary packages for Qt5 provided by the FreeBSD package builders
  for FreeBSD 11.x anymore -- and the same for *all* the ports depending on
  net/qt5-network [3]. If you cannot upgrade to a more recent FreeBSD
  version (12.x, 13.x), you will need to build Qt5 from ports while switching
  to an SSL implementation from ports.

Big thanks are due for
* kai@ for updating webengine (also mikael@)
* Felix Palmen for providing LibreSSL support patches
* adridg@ and lbartoletti@ for helping me fix the fallout

[1] https://www.qt.io/blog/qt-5.15-released
[2] https://wiki.qt.io/New_Features_in_Qt_5.15
[3] https://www.freshports.org/net/qt5-network

PR:		247010
Exp-run by:	antoine
5f34284e7c
Jan Beich (jbeich)
x11-toolkits/qt5-gui: unbreak with libglvnd

===>  Building package for qt5-gui-5.14.2
pkg-static: Unable to access file /wrkdirs/usr/ports/x11-toolkits/qt5-gui/work/stage/usr/local/include/qt5/QtKmsSupport/5.14.2/QtKmsSupport/private/qkmsdevice_p.h:No such file or directory
pkg-static: Unable to access file /wrkdirs/usr/ports/x11-toolkits/qt5-gui/work/stage/usr/local/include/qt5/QtKmsSupport/QtKmsSupport:No such file or directory
pkg-static: Unable to access file /wrkdirs/usr/ports/x11-toolkits/qt5-gui/work/stage/usr/local/include/qt5/QtKmsSupport/QtKmsSupportDepends:No such file or directory
pkg-static: Unable to access file /wrkdirs/usr/ports/x11-toolkits/qt5-gui/work/stage/usr/local/include/qt5/QtKmsSupport/QtKmsSupportVersion:No such file or directory
pkg-static: Unable to access file /wrkdirs/usr/ports/x11-toolkits/qt5-gui/work/stage/usr/local/include/qt5/QtKmsSupport/qtkmssupportversion.h:No such file or directory
pkg-static: Unable to access file /wrkdirs/usr/ports/x11-toolkits/qt5-gui/work/stage/usr/local/lib/cmake/Qt5KmsSupport/Qt5KmsSupportConfig.cmake:No such file or directory
pkg-static: Unable to access file /wrkdirs/usr/ports/x11-toolkits/qt5-gui/work/stage/usr/local/lib/cmake/Qt5KmsSupport/Qt5KmsSupportConfigVersion.cmake:No such file or directory
pkg-static: Unable to access file /wrkdirs/usr/ports/x11-toolkits/qt5-gui/work/stage/usr/local/lib/qt5/libQt5KmsSupport.a:No such file or directory
pkg-static: Unable to access file /wrkdirs/usr/ports/x11-toolkits/qt5-gui/work/stage/usr/local/lib/qt5/libQt5KmsSupport.prl:No such file or directory
pkg-static: Unable to access file /wrkdirs/usr/ports/x11-toolkits/qt5-gui/work/stage/usr/local/lib/qt5/mkspecs/modules/qt_lib_kms_support_private.pri:No such file or directory
*** Error code 1
9d42dc6603
Tobias C. Berner (tcberner)
Update Qt5 to 5.14.2

Very big thanks go again to kai@ who provided the www/qt5-webengine upgrade (to 5.14.0).
Notably, video capture support was re-enabled.

Announcement:
        https://www.qt.io/blog/qt-5.14-has-released

PR:		244964
Exp-run by:	antoine
a25eafc3bc
Tobias C. Berner (tcberner)
misc/qtchooser: do not create unnecessary wrappers

misc/qtchooser provides a wrapper binary bin/qtchooser, that when called with
name foo, will lauch the corresponding binary from lib/qt${current_qt_version}/bin/foo.

Previously qtchooser would install a list of 30-ish symlinks to itself automatically.
Now we switch this around.

qt-dist ports that define QT_BINARIES will now have a @postexec and @postunexec
entry added to their plist to run the shell-script update-qtchooser-wrapper
(installed by qtchooser).

update-qtchooser-wrapper removes all symlinks to bin/qtcreator that have no
corresponding binary in lib/qt*/bin, and readds links that are missing.

Exp-run by:	antoine
PR:		242905
PR:		243443
Reported by:	grarpamp@gmail.com
Reviewed by:	adridg
Differential Revision:	https://reviews.freebsd.org/D22991
93eea426e8
Adriaan de Groot (adridg)
Add Vulkan headers to the run-depends of x11-toolkits/qt5-gui

This was already added to the build-deps; however now users of qt5-gui
run into Vulkan problems, in particular sysutils/qt5-qtdiag, which is
now fixed with this build-depends.
b8c33b75c3
Adriaan de Groot (adridg)
Add vulkan dependency to x11-toolkits/qt5-gui

If the Vulkan headers are installed, builds would fail with extra
artifacts produced. Since those headers are small, header-only, and
only drag in cmake which is probably needed by dependencies anyway,
push Vulkan forward.

PR:		242017
Submitted by:	jbeich
6e6f99aa20
Tobias C. Berner (tcberner)
Update Qt5 to 5.13.2

Announcement:
        https://www.qt.io/blog/qt-5.13.2-released

Thanks to kai@ for updating webengine.

PR:		241649
Exp-run by:	antoine
a008399a74
Adriaan de Groot (adridg)
Fix build of x11-toolkits/qt5-gui

<linux/kd.h> isn't needed here.

Pointy hat to adridg@, for mixing up pou-build tree and the SVN tree.

PR:		240964
Reported by:	vvd@unislabs.com
0ae3d94da8
Adriaan de Groot (adridg)
Try to fix build of qt5-gui in the presence of evdev-proto

In Qt 5.13, a "helpful" upstream added #includes of the interal
FreeBSD event headers; these conflict with evdev-proto headers.
Back out that helpful fix, and rely on evdev-proto everywhere
(in particular, for dependent ports that use evdev-proto themselves).

PR:		240965
Reported by:	Walter Schwarzenfeld
c0558c205f
Adriaan de Groot (adridg)
Fix more trivial typo's / wording
674a0db749
Mark Linimon (linimon)
Fix trivial typo (follow-on to previous commit).
3721a94151