qt5-webengine -- Multiple vulnerabilities

2024-10-31 · CVE-2024-4761, CVE-2024-5158, CVE-2024-7532, CVE-2024-7965, CVE-2024-7967, CVE-2024-7971, CVE-2024-8198, CVE-2024-8636, CVE-2024-9123, CVE-2024-9602, CVE-2024-9603, CVE-2024-10229, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492 · VuXML entry

Backports for 15 security bugs in Chromium: CVE-2024-4761: Out of bounds write in V8 CVE-2024-5158: Type confusion in V8 CVE-2024-7532: Out of bounds memory access in ANGLE CVE-2024-7965: Inappropriate implementation in V8 CVE-2024-7967: Heap buffer overflow in Fonts CVE-2024-7971: Type confusion in V8 CVE-2024-8198: Heap buffer overflow in Skia CVE-2024-8636: Heap buffer overflow in Skia CVE-2024-9123: Integer …

Affected versions

• qt5-webengine < 5.15.18p2

By system

0 still vulnerable, 3 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.