Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-qt/qtwebengine | * | < 5.15.16_p20241115 | >= 5.15.16_p20241115 |
QtWebEngine is a library for rendering dynamic web content in Qt5 and Qt6 C++ and QML applications.
Multiple vulnerabilities have been discovered in QtWebEngine. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All QtWebEngine users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-qt/qtwebengine-5.15.16_p20241115"
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-qt/qtwebengine | * | < 5.15.13_p20240322 | >= 5.15.13_p20240322 |
QtWebEngine is a library for rendering dynamic web content in Qt5 and Qt6 C++ and QML applications.
Multiple vulnerabilities have been discovered in QtWebEngine. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All QtWebEngine users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-qt/qtwebengine-5.15.13_p20240322"
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-qt/qtwebengine | * | < 5.15.12_p20240122 | >= 5.15.12_p20240122 |
QtWebEngine is a library for rendering dynamic web content in Qt5 and Qt6 C++ and QML applications.
Multiple vulnerabilities have been discovered in QtWebEngine. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All QtWebEngine users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-qt/qtwebengine-5.15.12_p20240122"
Multiple vulnerabilitiies have been discovered in QtWebEngine, the worst of which could lead to remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-qt/qtwebengine | * | < 5.15.11_p20231120 | >= 5.15.11_p20231120 |
QtWebEngine is a library for rendering dynamic web content in Qt5 and Qt6 C++ and QML applications.
Multiple vulnerabilities have been discovered in QtWebEngine. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All QtWebEngine users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-qt/qtwebengine-5.15.11_p20231120"
Multiple vulnerabilities have been discovered in QtWebEngine, the worst of which could lead to remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-qt/qtwebengine | * | < 5.15.10_p20230623 | >= 5.15.10_p20230623 |
QtWebEngine is a library for rendering dynamic web content in Qt5 and Qt6 C++ and QML applications.
Multiple vulnerabilities have been discovered in QtWebEngine. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All QtWebEngine users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-qt/qtwebengine-5.15.10_p20230623"
Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-qt/qtwebengine | * | < 5.15.5_p20220618 | >= 5.15.5_p20220618 |
| www-client/chromium | * | < 103.0.5060.53 | >= 103.0.5060.53 |
| www-client/google-chrome | * | < 103.0.5060.53 | >= 103.0.5060.53 |
| www-client/microsoft-edge | * | < 101.0.1210.47 | >= 101.0.1210.47 |
Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with sophisticated technology to make the web faster, safer, and easier.
Multiple vulnerabilities have been discovered in Chromium and its derivatives. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Chromium users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-103.0.5060.53"
All Chromium binary users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-bin-103.0.5060.53"
All Google Chrome users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/google-chrome-103.0.5060.53"
All Microsoft Edge users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-client/chromium-103.0.5060.53"
All QtWebEngine users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-qt/qtwebengine-5.15.5_p20220618"
Multiple vulnerabilities have been found in Qt WebEngine, the worst of which could result in the arbitrary execution of code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-qt/qtwebengine | * | < 5.15.2 | >= 5.15.2 |
Library for rendering dynamic web content in Qt5 C++ and QML applications.
Multiple vulnerabilities have been discovered in Qt WebEngine. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Qt WebEngine users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-qt/qtwebengine-5.15.2"
A heap use-after-free flaw in Qt WebEngine at worst might allow an attacker to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-qt/qtwebengine | * | < 5.14.1 | >= 5.14.1 |
Library for rendering dynamic web content in Qt5 C++ and QML applications.
A use-after-free vulnerability has been found in the audio component of Qt WebEngine.
A remote attacker could entice a user to open a specially crafted media file in an application linked against Qt WebEngine, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All Qt WebEngine users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-qt/qtwebengine-5.14.1"