Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 7 articles for you...
89
security advisoryupdateFedoraFedora 42 Update: qt6-qtwebengine 6.9.1 Critical Denial of Service Fix
Qt 6.9.1 bugfix release.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-c546fd3f09 2025-06-11 02:45:06.590648+00:00 -------------------------------------------------------------------------------- Name : qt6-qtwebengine Product : Fedora 42 Version : 6.9.1 Release : 1.fc42 URL : http://www.qt.io Summary : Qt6 - QtWebEngine components Description : Qt6 - QtWebEngine components. -------------------------------------------------------------------------------- Update Information: Qt 6.9.1 bugfix release. -------------------------------------------------------------------------------- ChangeLog: * Tue Jun 3 2025 Jan Grulich - 6.9.1-1 - 6.9.1 * Tue Apr 22 2025 Marie Loise Nolden - 6.9.0-2 - global define all optional system libs, enable XFA - cleanup spec -------------------------------------------------------------------------------- References: [ 1 ] Bug #2369872 - CVE-2025-5455 qt6: QtCore Assertion Failure Denial of Service [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2369872 [ 2 ] Bug #2371133 - CVE-2025-5683 qt5: Qt ICNS Image Crash Vulnerability [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2371133 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-c546fd3f09' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list
Jun 11, 2025
•Critical
Fedora
89
security advisoryFedoralibxml2Fedora 42: qt6-qtwebengine 2025-2e4ccde927 Security Advisory Updates
Unbundle libxml2.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-2e4ccde927 2025-03-15 00:23:42.171976+00:00 -------------------------------------------------------------------------------- Name : qt6-qtwebengine Product : Fedora 42 Version : 6.8.2 Release : 4.fc42 URL : https://www.qt.io/ Summary : Qt6 - QtWebEngine components Description : Qt6 - QtWebEngine components. -------------------------------------------------------------------------------- Update Information: Unbundle libxml2. -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 4 2025 Jan Grulich - 6.8.2-4 - Unbundle libxml and libxslt * Mon Mar 3 2025 Jan Grulich - 6.8.2-3 - Rework OpenH264 support following Chromium package - Backport upstream change for ffmpeg codec selection issues. -------------------------------------------------------------------------------- References: [ 1 ] Bug #2280538 - CVE-2024-34459 qt6-qtwebengine: libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2280538 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-2e4ccde927' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Mar 15, 2025
•Critical
Fedora
89
security advisorybuffer overflowFedoraFedora 40: qt6-qtwebengine 2025-af22a87e43 Security Advisory Updates
Unbundle libxml.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-af22a87e43 2025-03-13 01:47:29.556536+00:00 -------------------------------------------------------------------------------- Name : qt6-qtwebengine Product : Fedora 40 Version : 6.8.2 Release : 4.fc40 URL : http://www.qt.io Summary : Qt6 - QtWebEngine components Description : Qt6 - QtWebEngine components. -------------------------------------------------------------------------------- Update Information: Unbundle libxml. -------------------------------------------------------------------------------- ChangeLog: * Tue Mar 4 2025 Jan Grulich - 6.8.2-4 - Unbundle libxml and libxslt * Mon Mar 3 2025 Jan Grulich - 6.8.2-3 - Rework OpenH264 support following Chromium package - Backport upstream change for ffmpeg codec selection issues. * Mon Feb 17 2025 Jan Grulich - 6.8.2-2 - Bump build for ppc64le enablement -------------------------------------------------------------------------------- References: [ 1 ] Bug #2280538 - CVE-2024-34459 qt6-qtwebengine: libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2280538 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-af22a87e43' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list
Mar 13, 2025
•Critical
Fedora
91
security advisoryhigh severityarbitrary code executionGentoo: GLSA-202501-09 critical: QtWebEngine multiple issues
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to arbitrary code execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202501-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: QtWebEngine: Multiple Vulnerabilities Date: January 23, 2025 Bugs: #944807 ID: 202501-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to arbitrary code execution. Background ========== QtWebEngine is a library for rendering dynamic web content in Qt5 and Qt6 C++ and QML applications. Affected packages ================= Package Vulnerable Unaffected ------------------ ------------------- -------------------- dev-qt/qtwebengine < 5.15.16_p20241115 > = 5.15.16_p20241115 Description =========== Multiple vulnerabilities have been discovered in QtWebEngine. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All QtWebEngine users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-qt/qtwebengine-5.15.16_p20241115" References ========== [ 1 ] CVE-2024-4058 https://nvd.nist.gov/vuln/detail/CVE-2024-4058 [ 2 ] CVE-2024-4059 https://nvd.nist.gov/vuln/detail/CVE-2024-4059 [ 3 ] CVE-2024-4060 https://nvd.nist.gov/vuln/detail/CVE-2024-4060 [ 4 ] CVE-2024-4558 https://nvd.nist.gov/vuln/detail/CVE-2024-4558 [ 5 ] CVE-2024-4559 https://nvd.nist.gov/vuln/detail/CVE-2024-4559 [ 6 ]CVE-2024-4761 https://nvd.nist.gov/vuln/detail/CVE-2024-4761 [ 7 ] CVE-2024-5157 https://nvd.nist.gov/vuln/detail/CVE-2024-5157 [ 8 ] CVE-2024-5158 https://nvd.nist.gov/vuln/detail/CVE-2024-5158 [ 9 ] CVE-2024-5159 https://nvd.nist.gov/vuln/detail/CVE-2024-5159 [ 10 ] CVE-2024-5160 https://nvd.nist.gov/vuln/detail/CVE-2024-5160 [ 11 ] CVE-2024-5830 https://nvd.nist.gov/vuln/detail/CVE-2024-5830 [ 12 ] CVE-2024-5831 https://nvd.nist.gov/vuln/detail/CVE-2024-5831 [ 13 ] CVE-2024-5832 https://nvd.nist.gov/vuln/detail/CVE-2024-5832 [ 14 ] CVE-2024-5833 https://nvd.nist.gov/vuln/detail/CVE-2024-5833 [ 15 ] CVE-2024-5834 https://nvd.nist.gov/vuln/detail/CVE-2024-5834 [ 16 ] CVE-2024-5835 https://nvd.nist.gov/vuln/detail/CVE-2024-5835 [ 17 ] CVE-2024-5836 https://nvd.nist.gov/vuln/detail/CVE-2024-5836 [ 18 ] CVE-2024-5837 https://nvd.nist.gov/vuln/detail/CVE-2024-5837 [ 19 ] CVE-2024-5838 https://nvd.nist.gov/vuln/detail/CVE-2024-5838 [ 20 ] CVE-2024-5839 https://nvd.nist.gov/vuln/detail/CVE-2024-5839 [ 21 ] CVE-2024-5840 https://nvd.nist.gov/vuln/detail/CVE-2024-5840 [ 22 ] CVE-2024-5841 https://nvd.nist.gov/vuln/detail/CVE-2024-5841 [ 23 ] CVE-2024-5842 https://nvd.nist.gov/vuln/detail/CVE-2024-5842 [ 24 ] CVE-2024-5843 https://nvd.nist.gov/vuln/detail/CVE-2024-5843 [ 25 ] CVE-2024-5844 https://nvd.nist.gov/vuln/detail/CVE-2024-5844 [ 26 ] CVE-2024-5845 https://nvd.nist.gov/vuln/detail/CVE-2024-5845 [ 27 ] CVE-2024-5846 https://nvd.nist.gov/vuln/detail/CVE-2024-5846 [ 28 ] CVE-2024-5847 https://nvd.nist.gov/vuln/detail/CVE-2024-5847 [ 29 ] CVE-2024-6290 https://nvd.nist.gov/vuln/detail/CVE-2024-6290 [ 30 ] CVE-2024-6291 https://nvd.nist.gov/vuln/detail/CVE-2024-6291 [ 31 ] CVE-2024-6292 https://nvd.nist.gov/vuln/detail/CVE-2024-6292 [ 32 ] CVE-2024-6293 https://nvd.nist.gov/vuln/detail/CVE-2024-6293 [ 33 ] CVE-2024-6988 https://nvd.nist.gov/vuln/detail/CVE-2024-6988 [ 34 ] CVE-2024-6989 https://nvd.nist.gov/vuln/detail/CVE-2024-6989 [ 35 ] CVE-2024-6991 https://nvd.nist.gov/vuln/detail/CVE-2024-6991 [ 36 ] CVE-2024-6994 https://nvd.nist.gov/vuln/detail/CVE-2024-6994 [ 37 ] CVE-2024-6995 https://nvd.nist.gov/vuln/detail/CVE-2024-6995 [ 38 ] CVE-2024-6996 https://nvd.nist.gov/vuln/detail/CVE-2024-6996 [ 39 ] CVE-2024-6997 https://nvd.nist.gov/vuln/detail/CVE-2024-6997 [ 40 ] CVE-2024-6998 https://nvd.nist.gov/vuln/detail/CVE-2024-6998 [ 41 ] CVE-2024-6999 https://nvd.nist.gov/vuln/detail/CVE-2024-6999 [ 42 ] CVE-2024-7000 https://nvd.nist.gov/vuln/detail/CVE-2024-7000 [ 43 ] CVE-2024-7001 https://nvd.nist.gov/vuln/detail/CVE-2024-7001 [ 44 ] CVE-2024-7003 https://nvd.nist.gov/vuln/detail/CVE-2024-7003 [ 45 ] CVE-2024-7004 https://nvd.nist.gov/vuln/detail/CVE-2024-7004 [ 46 ] CVE-2024-7005 https://nvd.nist.gov/vuln/detail/CVE-2024-7005 [ 47 ] CVE-2024-7532 https://nvd.nist.gov/vuln/detail/CVE-2024-7532 [ 48 ] CVE-2024-7533 https://nvd.nist.gov/vuln/detail/CVE-2024-7533 [ 49 ] CVE-2024-7534 https://nvd.nist.gov/vuln/detail/CVE-2024-7534 [ 50 ] CVE-2024-7535 https://nvd.nist.gov/vuln/detail/CVE-2024-7535 [ 51 ] CVE-2024-7536 https://nvd.nist.gov/vuln/detail/CVE-2024-7536 [ 52 ] CVE-2024-7550 https://nvd.nist.gov/vuln/detail/CVE-2024-7550 [ 53 ] CVE-2024-7964 https://nvd.nist.gov/vuln/detail/CVE-2024-7964 [ 54 ] CVE-2024-7965 https://nvd.nist.gov/vuln/detail/CVE-2024-7965 [ 55 ] CVE-2024-7966 https://nvd.nist.gov/vuln/detail/CVE-2024-7966 [ 56 ] CVE-2024-7967 https://nvd.nist.gov/vuln/detail/CVE-2024-7967 [ 57 ] CVE-2024-7968 https://nvd.nist.gov/vuln/detail/CVE-2024-7968 [ 58 ] CVE-2024-7969 https://nvd.nist.gov/vuln/detail/CVE-2024-7969 [ 59 ] CVE-2024-7971 https://nvd.nist.gov/vuln/detail/CVE-2024-7971 [ 60 ] CVE-2024-7972 https://nvd.nist.gov/vuln/detail/CVE-2024-7972 [61 ] CVE-2024-7973 https://nvd.nist.gov/vuln/detail/CVE-2024-7973 [ 62 ] CVE-2024-7974 https://nvd.nist.gov/vuln/detail/CVE-2024-7974 [ 63 ] CVE-2024-7975 https://nvd.nist.gov/vuln/detail/CVE-2024-7975 [ 64 ] CVE-2024-7976 https://nvd.nist.gov/vuln/detail/CVE-2024-7976 [ 65 ] CVE-2024-7977 https://nvd.nist.gov/vuln/detail/CVE-2024-7977 [ 66 ] CVE-2024-7978 https://nvd.nist.gov/vuln/detail/CVE-2024-7978 [ 67 ] CVE-2024-7979 https://nvd.nist.gov/vuln/detail/CVE-2024-7979 [ 68 ] CVE-2024-7980 https://nvd.nist.gov/vuln/detail/CVE-2024-7980 [ 69 ] CVE-2024-7981 https://nvd.nist.gov/vuln/detail/CVE-2024-7981 [ 70 ] CVE-2024-8033 https://nvd.nist.gov/vuln/detail/CVE-2024-8033 [ 71 ] CVE-2024-8034 https://nvd.nist.gov/vuln/detail/CVE-2024-8034 [ 72 ] CVE-2024-8035 https://nvd.nist.gov/vuln/detail/CVE-2024-8035 [ 73 ] CVE-2024-8193 https://nvd.nist.gov/vuln/detail/CVE-2024-8193 [ 74 ] CVE-2024-8194 https://nvd.nist.gov/vuln/detail/CVE-2024-8194 [ 75 ] CVE-2024-8198 https://nvd.nist.gov/vuln/detail/CVE-2024-8198 [ 76 ] CVE-2024-8636 https://nvd.nist.gov/vuln/detail/CVE-2024-8636 [ 77 ] CVE-2024-8637 https://nvd.nist.gov/vuln/detail/CVE-2024-8637 [ 78 ] CVE-2024-8638 https://nvd.nist.gov/vuln/detail/CVE-2024-8638 [ 79 ] CVE-2024-8639 https://nvd.nist.gov/vuln/detail/CVE-2024-8639 [ 80 ] CVE-2024-9120 https://nvd.nist.gov/vuln/detail/CVE-2024-9120 [ 81 ] CVE-2024-9121 https://nvd.nist.gov/vuln/detail/CVE-2024-9121 [ 82 ] CVE-2024-9122 https://nvd.nist.gov/vuln/detail/CVE-2024-9122 [ 83 ] CVE-2024-9123 https://nvd.nist.gov/vuln/detail/CVE-2024-9123 [ 84 ] CVE-2024-9602 https://nvd.nist.gov/vuln/detail/CVE-2024-9602 [ 85 ] CVE-2024-9603 https://nvd.nist.gov/vuln/detail/CVE-2024-9603 [ 86 ] CVE-2024-10229 https://nvd.nist.gov/vuln/detail/CVE-2024-10229 [ 87 ] CVE-2024-10230 https://nvd.nist.gov/vuln/detail/CVE-2024-10230 [ 88 ] CVE-2024-10231 https://nvd.nist.gov/vuln/detail/CVE-2024-10231 [ 89 ] CVE-2024-10826 https://nvd.nist.gov/vuln/detail/CVE-2024-10826 [ 90 ] CVE-2024-10827 https://nvd.nist.gov/vuln/detail/CVE-2024-10827 [ 91 ] CVE-2024-45490 https://nvd.nist.gov/vuln/detail/CVE-2024-45490 [ 92 ] CVE-2024-45491 https://nvd.nist.gov/vuln/detail/CVE-2024-45491 [ 93 ] CVE-2024-45492 https://nvd.nist.gov/vuln/detail/CVE-2024-45492 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202501-09 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Jan 23, 2025
Gentoo
91
security advisoryhigh severitygentooGentoo 202405-14: High Assessment of QtWebEngine Remote Threats
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202405-14 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: QtWebEngine: Multiple Vulnerabilities Date: May 05, 2024 Bugs: #927746 ID: 202405-14 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution. Background ========== QtWebEngine is a library for rendering dynamic web content in Qt5 and Qt6 C++ and QML applications. Affected packages ================= Package Vulnerable Unaffected ------------------ ------------------- -------------------- dev-qt/qtwebengine < 5.15.13_p20240322 > = 5.15.13_p20240322 Description =========== Multiple vulnerabilities have been discovered in QtWebEngine. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All QtWebEngine users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-qt/qtwebengine-5.15.13_p20240322" References ========== [ 1 ] CVE-2024-0804 https://nvd.nist.gov/vuln/detail/CVE-2024-0804 [ 2 ] CVE-2024-0805 https://nvd.nist.gov/vuln/detail/CVE-2024-0805 [ 3 ] CVE-2024-0806 https://nvd.nist.gov/vuln/detail/CVE-2024-0806 [ 4 ] CVE-2024-0807 https://nvd.nist.gov/vuln/detail/CVE-2024-0807 [ 5 ] CVE-2024-0808 https://nvd.nist.gov/vuln/detail/CVE-2024-0808 [ 6 ] CVE-2024-0809 https://nvd.nist.gov/vuln/detail/CVE-2024-0809 [ 7 ] CVE-2024-0810 https://nvd.nist.gov/vuln/detail/CVE-2024-0810 [ 8 ] CVE-2024-0811 https://nvd.nist.gov/vuln/detail/CVE-2024-0811 [ 9 ] CVE-2024-0812 https://nvd.nist.gov/vuln/detail/CVE-2024-0812 [ 10 ] CVE-2024-0813 https://nvd.nist.gov/vuln/detail/CVE-2024-0813 [ 11 ] CVE-2024-0814 https://nvd.nist.gov/vuln/detail/CVE-2024-0814 [ 12 ] CVE-2024-1059 https://nvd.nist.gov/vuln/detail/CVE-2024-1059 [ 13 ] CVE-2024-1060 https://nvd.nist.gov/vuln/detail/CVE-2024-1060 [ 14 ] CVE-2024-1077 https://nvd.nist.gov/vuln/detail/CVE-2024-1077 [ 15 ] CVE-2024-1283 https://nvd.nist.gov/vuln/detail/CVE-2024-1283 [ 16 ] CVE-2024-1284 https://nvd.nist.gov/vuln/detail/CVE-2024-1284 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202405-14 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
May 05, 2024
Gentoo
89
security advisoryfedorasoftware maintenanceFedora 39: FEDORA-2024-bf2399e5e5 Moderate: QtWebEngine Bugfix
QtWebEngine 5.15.16 bugfix update.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-bf2399e5e5 2024-02-06 01:17:01.499283 -------------------------------------------------------------------------------- Name : qt5-qtwebengine Product : Fedora 39 Version : 5.15.16 Release : 1.fc39 URL : https://www.qt.io/ Summary : Qt5 - QtWebEngine components Description : Qt5 - QtWebEngine components. -------------------------------------------------------------------------------- Update Information: QtWebEngine 5.15.16 bugfix update. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 1 2024 Jan Grulich - 5.15.16-1 - 5.15.16 * Fri Jan 26 2024 Fedora Release Engineering - 5.15.12-12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Mon Jan 22 2024 Fedora Release Engineering - 5.15.12-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2262191 - qt5-qtwebengine is more than 1 year behind security updates https://bugzilla.redhat.com/show_bug.cgi?id=2262191 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-bf2399e5e5' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Feb 06, 2024
Fedora
91
security advisoryhigh severitygentooGentoo: GLSA-202312-07 High: QtWebEngine Remote Code Execution Threat
Multiple vulnerabilitiies have been discovered in QtWebEngine, the worst of which could lead to remote code execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202312-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: QtWebEngine: Multiple Vulnerabilities Date: December 22, 2023 Bugs: #913050, #915465 ID: 202312-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilitiies have been discovered in QtWebEngine, the worst of which could lead to remote code execution. Background ========== QtWebEngine is a library for rendering dynamic web content in Qt5 and Qt6 C++ and QML applications. Affected packages ================= Package Vulnerable Unaffected ------------------ ------------------- -------------------- dev-qt/qtwebengine < 5.15.11_p20231120 > = 5.15.11_p20231120 Description =========== Multiple vulnerabilities have been discovered in QtWebEngine. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All QtWebEngine users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-qt/qtwebengine-5.15.11_p20231120" References ========== [ 1 ] CVE-2023-4068 https://nvd.nist.gov/vuln/detail/CVE-2023-4068 [ 2 ] CVE-2023-4069 https://nvd.nist.gov/vuln/detail/CVE-2023-4069 [ 3 ] CVE-2023-4070 https://nvd.nist.gov/vuln/detail/CVE-2023-4070 [ 4 ] CVE-2023-4071 https://nvd.nist.gov/vuln/detail/CVE-2023-4071 [ 5 ] CVE-2023-4072 https://nvd.nist.gov/vuln/detail/CVE-2023-4072 [ 6 ]CVE-2023-4073 https://nvd.nist.gov/vuln/detail/CVE-2023-4073 [ 7 ] CVE-2023-4074 https://nvd.nist.gov/vuln/detail/CVE-2023-4074 [ 8 ] CVE-2023-4075 https://nvd.nist.gov/vuln/detail/CVE-2023-4075 [ 9 ] CVE-2023-4076 https://nvd.nist.gov/vuln/detail/CVE-2023-4076 [ 10 ] CVE-2023-4077 https://nvd.nist.gov/vuln/detail/CVE-2023-4077 [ 11 ] CVE-2023-4078 https://nvd.nist.gov/vuln/detail/CVE-2023-4078 [ 12 ] CVE-2023-4761 https://nvd.nist.gov/vuln/detail/CVE-2023-4761 [ 13 ] CVE-2023-4762 https://nvd.nist.gov/vuln/detail/CVE-2023-4762 [ 14 ] CVE-2023-4763 https://nvd.nist.gov/vuln/detail/CVE-2023-4763 [ 15 ] CVE-2023-4764 https://nvd.nist.gov/vuln/detail/CVE-2023-4764 [ 16 ] CVE-2023-5218 https://nvd.nist.gov/vuln/detail/CVE-2023-5218 [ 17 ] CVE-2023-5473 https://nvd.nist.gov/vuln/detail/CVE-2023-5473 [ 18 ] CVE-2023-5474 https://nvd.nist.gov/vuln/detail/CVE-2023-5474 [ 19 ] CVE-2023-5475 https://nvd.nist.gov/vuln/detail/CVE-2023-5475 [ 20 ] CVE-2023-5476 https://nvd.nist.gov/vuln/detail/CVE-2023-5476 [ 21 ] CVE-2023-5477 https://nvd.nist.gov/vuln/detail/CVE-2023-5477 [ 22 ] CVE-2023-5478 https://nvd.nist.gov/vuln/detail/CVE-2023-5478 [ 23 ] CVE-2023-5479 https://nvd.nist.gov/vuln/detail/CVE-2023-5479 [ 24 ] CVE-2023-5480 https://nvd.nist.gov/vuln/detail/CVE-2023-5480 [ 25 ] CVE-2023-5481 https://nvd.nist.gov/vuln/detail/CVE-2023-5481 [ 26 ] CVE-2023-5482 https://nvd.nist.gov/vuln/detail/CVE-2023-5482 [ 27 ] CVE-2023-5483 https://nvd.nist.gov/vuln/detail/CVE-2023-5483 [ 28 ] CVE-2023-5484 https://nvd.nist.gov/vuln/detail/CVE-2023-5484 [ 29 ] CVE-2023-5485 https://nvd.nist.gov/vuln/detail/CVE-2023-5485 [ 30 ] CVE-2023-5486 https://nvd.nist.gov/vuln/detail/CVE-2023-5486 [ 31 ] CVE-2023-5487 https://nvd.nist.gov/vuln/detail/CVE-2023-5487 [ 32 ] CVE-2023-5849 https://nvd.nist.gov/vuln/detail/CVE-2023-5849 [ 33 ] CVE-2023-5850 https://nvd.nist.gov/vuln/detail/CVE-2023-5850 [ 34 ] CVE-2023-5851 https://nvd.nist.gov/vuln/detail/CVE-2023-5851 [ 35 ] CVE-2023-5852 https://nvd.nist.gov/vuln/detail/CVE-2023-5852 [ 36 ] CVE-2023-5853 https://nvd.nist.gov/vuln/detail/CVE-2023-5853 [ 37 ] CVE-2023-5854 https://nvd.nist.gov/vuln/detail/CVE-2023-5854 [ 38 ] CVE-2023-5855 https://nvd.nist.gov/vuln/detail/CVE-2023-5855 [ 39 ] CVE-2023-5856 https://nvd.nist.gov/vuln/detail/CVE-2023-5856 [ 40 ] CVE-2023-5857 https://nvd.nist.gov/vuln/detail/CVE-2023-5857 [ 41 ] CVE-2023-5858 https://nvd.nist.gov/vuln/detail/CVE-2023-5858 [ 42 ] CVE-2023-5859 https://nvd.nist.gov/vuln/detail/CVE-2023-5859 [ 43 ] CVE-2023-5996 https://nvd.nist.gov/vuln/detail/CVE-2023-5996 [ 44 ] CVE-2023-5997 https://nvd.nist.gov/vuln/detail/CVE-2023-5997 [ 45 ] CVE-2023-6112 https://nvd.nist.gov/vuln/detail/CVE-2023-6112 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202312-07 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Dec 22, 2023
Gentoo
91
security advisoryhigh severitygentooGentoo: GLSA-202311-11 High: QtWebEngine Remote Code Execution
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202311-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: QtWebEngine: Multiple Vulnerabilities Date: November 25, 2023 Bugs: #866332, #888181, #903544, #904290, #906857, #909778 ID: 202311-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution. Background ========== QtWebEngine is a library for rendering dynamic web content in Qt5 and Qt6 C++ and QML applications. Affected packages ================= Package Vulnerable Unaffected ------------------ ------------------- -------------------- dev-qt/qtwebengine < 5.15.10_p20230623 > = 5.15.10_p20230623 Description =========== Multiple vulnerabilities have been discovered in QtWebEngine. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All QtWebEngine users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-qt/qtwebengine-5.15.10_p20230623" References ========== [ 1 ] CVE-2022-2294 https://nvd.nist.gov/vuln/detail/CVE-2022-2294 [ 2 ] CVE-2022-3201 https://nvd.nist.gov/vuln/detail/CVE-2022-3201 [ 3 ] CVE-2022-4174 https://nvd.nist.gov/vuln/detail/CVE-2022-4174 [ 4 ] CVE-2022-4175 https://nvd.nist.gov/vuln/detail/CVE-2022-4175 [ 5 ] CVE-2022-4176 https://nvd.nist.gov/vuln/detail/CVE-2022-4176 [ 6 ] CVE-2022-4177 https://nvd.nist.gov/vuln/detail/CVE-2022-4177 [ 7 ] CVE-2022-4178 https://nvd.nist.gov/vuln/detail/CVE-2022-4178 [ 8 ] CVE-2022-4179 https://nvd.nist.gov/vuln/detail/CVE-2022-4179 [ 9 ] CVE-2022-4180 https://nvd.nist.gov/vuln/detail/CVE-2022-4180 [ 10 ] CVE-2022-4181 https://nvd.nist.gov/vuln/detail/CVE-2022-4181 [ 11 ] CVE-2022-4182 https://nvd.nist.gov/vuln/detail/CVE-2022-4182 [ 12 ] CVE-2022-4183 https://nvd.nist.gov/vuln/detail/CVE-2022-4183 [ 13 ] CVE-2022-4184 https://nvd.nist.gov/vuln/detail/CVE-2022-4184 [ 14 ] CVE-2022-4185 https://nvd.nist.gov/vuln/detail/CVE-2022-4185 [ 15 ] CVE-2022-4186 https://nvd.nist.gov/vuln/detail/CVE-2022-4186 [ 16 ] CVE-2022-4187 https://nvd.nist.gov/vuln/detail/CVE-2022-4187 [ 17 ] CVE-2022-4188 https://nvd.nist.gov/vuln/detail/CVE-2022-4188 [ 18 ] CVE-2022-4189 https://nvd.nist.gov/vuln/detail/CVE-2022-4189 [ 19 ] CVE-2022-4190 https://nvd.nist.gov/vuln/detail/CVE-2022-4190 [ 20 ] CVE-2022-4191 https://nvd.nist.gov/vuln/detail/CVE-2022-4191 [ 21 ] CVE-2022-4192 https://nvd.nist.gov/vuln/detail/CVE-2022-4192 [ 22 ] CVE-2022-4193 https://nvd.nist.gov/vuln/detail/CVE-2022-4193 [ 23 ] CVE-2022-4194 https://nvd.nist.gov/vuln/detail/CVE-2022-4194 [ 24 ] CVE-2022-4195 https://nvd.nist.gov/vuln/detail/CVE-2022-4195 [ 25 ] CVE-2022-4436 https://nvd.nist.gov/vuln/detail/CVE-2022-4436 [ 26 ] CVE-2022-4437 https://nvd.nist.gov/vuln/detail/CVE-2022-4437 [ 27 ] CVE-2022-4438 https://nvd.nist.gov/vuln/detail/CVE-2022-4438 [ 28 ] CVE-2022-4439 https://nvd.nist.gov/vuln/detail/CVE-2022-4439 [ 29 ] CVE-2022-4440 https://nvd.nist.gov/vuln/detail/CVE-2022-4440 [ 30 ] CVE-2022-41115 https://nvd.nist.gov/vuln/detail/CVE-2022-41115 [ 31 ] CVE-2022-44688 https://nvd.nist.gov/vuln/detail/CVE-2022-44688 [ 32 ] CVE-2022-44708 https://nvd.nist.gov/vuln/detail/CVE-2022-44708 [ 33 ] CVE-2023-0128 https://nvd.nist.gov/vuln/detail/CVE-2023-0128 [ 34 ] CVE-2023-0129 https://nvd.nist.gov/vuln/detail/CVE-2023-0129 [ 35 ] CVE-2023-0130 https://nvd.nist.gov/vuln/detail/CVE-2023-0130 [ 36 ] CVE-2023-0131 https://nvd.nist.gov/vuln/detail/CVE-2023-0131 [ 37 ] CVE-2023-0132 https://nvd.nist.gov/vuln/detail/CVE-2023-0132 [ 38 ] CVE-2023-0133 https://nvd.nist.gov/vuln/detail/CVE-2023-0133 [ 39 ] CVE-2023-0134 https://nvd.nist.gov/vuln/detail/CVE-2023-0134 [ 40 ] CVE-2023-0135 https://nvd.nist.gov/vuln/detail/CVE-2023-0135 [ 41 ] CVE-2023-0136 https://nvd.nist.gov/vuln/detail/CVE-2023-0136 [ 42 ] CVE-2023-0137 https://nvd.nist.gov/vuln/detail/CVE-2023-0137 [ 43 ] CVE-2023-0138 https://nvd.nist.gov/vuln/detail/CVE-2023-0138 [ 44 ] CVE-2023-0139 https://nvd.nist.gov/vuln/detail/CVE-2023-0139 [ 45 ] CVE-2023-0140 https://nvd.nist.gov/vuln/detail/CVE-2023-0140 [ 46 ] CVE-2023-0141 https://nvd.nist.gov/vuln/detail/CVE-2023-0141 [ 47 ] CVE-2023-2721 https://nvd.nist.gov/vuln/detail/CVE-2023-2721 [ 48 ] CVE-2023-2722 https://nvd.nist.gov/vuln/detail/CVE-2023-2722 [ 49 ] CVE-2023-2723 https://nvd.nist.gov/vuln/detail/CVE-2023-2723 [ 50 ] CVE-2023-2724 https://nvd.nist.gov/vuln/detail/CVE-2023-2724 [ 51 ] CVE-2023-2725 https://nvd.nist.gov/vuln/detail/CVE-2023-2725 [ 52 ] CVE-2023-2726 https://nvd.nist.gov/vuln/detail/CVE-2023-2726 [ 53 ] CVE-2023-2929 https://nvd.nist.gov/vuln/detail/CVE-2023-2929 [ 54 ] CVE-2023-2930 https://nvd.nist.gov/vuln/detail/CVE-2023-2930 [ 55 ] CVE-2023-2931 https://nvd.nist.gov/vuln/detail/CVE-2023-2931 [ 56 ] CVE-2023-2932 https://nvd.nist.gov/vuln/detail/CVE-2023-2932 [ 57 ] CVE-2023-2933 https://nvd.nist.gov/vuln/detail/CVE-2023-2933 [ 58 ] CVE-2023-2934 https://nvd.nist.gov/vuln/detail/CVE-2023-2934 [ 59 ] CVE-2023-2935 https://nvd.nist.gov/vuln/detail/CVE-2023-2935 [60 ] CVE-2023-2936 https://nvd.nist.gov/vuln/detail/CVE-2023-2936 [ 61 ] CVE-2023-2937 https://nvd.nist.gov/vuln/detail/CVE-2023-2937 [ 62 ] CVE-2023-2938 https://nvd.nist.gov/vuln/detail/CVE-2023-2938 [ 63 ] CVE-2023-2939 https://nvd.nist.gov/vuln/detail/CVE-2023-2939 [ 64 ] CVE-2023-2940 https://nvd.nist.gov/vuln/detail/CVE-2023-2940 [ 65 ] CVE-2023-2941 https://nvd.nist.gov/vuln/detail/CVE-2023-2941 [ 66 ] CVE-2023-3079 https://nvd.nist.gov/vuln/detail/CVE-2023-3079 [ 67 ] CVE-2023-3214 https://nvd.nist.gov/vuln/detail/CVE-2023-3214 [ 68 ] CVE-2023-3215 https://nvd.nist.gov/vuln/detail/CVE-2023-3215 [ 69 ] CVE-2023-3216 https://nvd.nist.gov/vuln/detail/CVE-2023-3216 [ 70 ] CVE-2023-3217 https://nvd.nist.gov/vuln/detail/CVE-2023-3217 [ 71 ] CVE-2023-4068 https://nvd.nist.gov/vuln/detail/CVE-2023-4068 [ 72 ] CVE-2023-4069 https://nvd.nist.gov/vuln/detail/CVE-2023-4069 [ 73 ] CVE-2023-4070 https://nvd.nist.gov/vuln/detail/CVE-2023-4070 [ 74 ] CVE-2023-4071 https://nvd.nist.gov/vuln/detail/CVE-2023-4071 [ 75 ] CVE-2023-4072 https://nvd.nist.gov/vuln/detail/CVE-2023-4072 [ 76 ] CVE-2023-4073 https://nvd.nist.gov/vuln/detail/CVE-2023-4073 [ 77 ] CVE-2023-4074 https://nvd.nist.gov/vuln/detail/CVE-2023-4074 [ 78 ] CVE-2023-4075 https://nvd.nist.gov/vuln/detail/CVE-2023-4075 [ 79 ] CVE-2023-4076 https://nvd.nist.gov/vuln/detail/CVE-2023-4076 [ 80 ] CVE-2023-4077 https://nvd.nist.gov/vuln/detail/CVE-2023-4077 [ 81 ] CVE-2023-4078 https://nvd.nist.gov/vuln/detail/CVE-2023-4078 [ 82 ] CVE-2023-4761 https://nvd.nist.gov/vuln/detail/CVE-2023-4761 [ 83 ] CVE-2023-4762 https://nvd.nist.gov/vuln/detail/CVE-2023-4762 [ 84 ] CVE-2023-4763 https://nvd.nist.gov/vuln/detail/CVE-2023-4763 [ 85 ] CVE-2023-4764 https://nvd.nist.gov/vuln/detail/CVE-2023-4764 [ 86 ] CVE-2023-5218 https://nvd.nist.gov/vuln/detail/CVE-2023-5218 [ 87 ] CVE-2023-5473 https://nvd.nist.gov/vuln/detail/CVE-2023-5473 [ 88 ] CVE-2023-5474 https://nvd.nist.gov/vuln/detail/CVE-2023-5474 [ 89 ] CVE-2023-5475 https://nvd.nist.gov/vuln/detail/CVE-2023-5475 [ 90 ] CVE-2023-5476 https://nvd.nist.gov/vuln/detail/CVE-2023-5476 [ 91 ] CVE-2023-5477 https://nvd.nist.gov/vuln/detail/CVE-2023-5477 [ 92 ] CVE-2023-5478 https://nvd.nist.gov/vuln/detail/CVE-2023-5478 [ 93 ] CVE-2023-5479 https://nvd.nist.gov/vuln/detail/CVE-2023-5479 [ 94 ] CVE-2023-5480 https://nvd.nist.gov/vuln/detail/CVE-2023-5480 [ 95 ] CVE-2023-5481 https://nvd.nist.gov/vuln/detail/CVE-2023-5481 [ 96 ] CVE-2023-5482 https://nvd.nist.gov/vuln/detail/CVE-2023-5482 [ 97 ] CVE-2023-5483 https://nvd.nist.gov/vuln/detail/CVE-2023-5483 [ 98 ] CVE-2023-5484 https://nvd.nist.gov/vuln/detail/CVE-2023-5484 [ 99 ] CVE-2023-5485 https://nvd.nist.gov/vuln/detail/CVE-2023-5485 [ 100 ] CVE-2023-5486 https://nvd.nist.gov/vuln/detail/CVE-2023-5486 [ 101 ] CVE-2023-5487 https://nvd.nist.gov/vuln/detail/CVE-2023-5487 [ 102 ] CVE-2023-5849 https://nvd.nist.gov/vuln/detail/CVE-2023-5849 [ 103 ] CVE-2023-5850 https://nvd.nist.gov/vuln/detail/CVE-2023-5850 [ 104 ] CVE-2023-5851 https://nvd.nist.gov/vuln/detail/CVE-2023-5851 [ 105 ] CVE-2023-5852 https://nvd.nist.gov/vuln/detail/CVE-2023-5852 [ 106 ] CVE-2023-5853 https://nvd.nist.gov/vuln/detail/CVE-2023-5853 [ 107 ] CVE-2023-5854 https://nvd.nist.gov/vuln/detail/CVE-2023-5854 [ 108 ] CVE-2023-5855 https://nvd.nist.gov/vuln/detail/CVE-2023-5855 [ 109 ] CVE-2023-5856 https://nvd.nist.gov/vuln/detail/CVE-2023-5856 [ 110 ] CVE-2023-5857 https://nvd.nist.gov/vuln/detail/CVE-2023-5857 [ 111 ] CVE-2023-5858 https://nvd.nist.gov/vuln/detail/CVE-2023-5858 [ 112 ] CVE-2023-5859 https://nvd.nist.gov/vuln/detail/CVE-2023-5859 [ 113 ] CVE-2023-5996 https://nvd.nist.gov/vuln/detail/CVE-2023-5996 [ 114 ] CVE-2023-5997 https://nvd.nist.gov/vuln/detail/CVE-2023-5997 [ 115 ] CVE-2023-6112 https://nvd.nist.gov/vuln/detail/CVE-2023-6112 [ 116 ] CVE-2023-21775 https://nvd.nist.gov/vuln/detail/CVE-2023-21775 [ 117 ] CVE-2023-21796 https://nvd.nist.gov/vuln/detail/CVE-2023-21796 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202311-11 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Nov 25, 2023
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!