BSD Portsqt6-webengine -- Multiple vulnerabilities
· CVE-2024-12693, CVE-2024-12694, CVE-2025-0436, CVE-2025-0437, CVE-2025-0438, CVE-2025-0441, CVE-2025-0443, CVE-2025-0447, CVE-2025-0611 · VuXML entry
Qt qtwebengine-chromium repo reports: Backports for 9 security bugs in Chromium: CVE-2024-12693: Out of bounds memory access in V8 CVE-2024-12694: Use after free in Compositing CVE-2025-0436: Integer overflow in Skia CVE-2025-0437: Out of bounds read in Metrics CVE-2025-0438: Stack buffer overflow in Tracing CVE-2025-0441: Inappropriate implementation in Fenced Frames CVE-2025-0443: Insufficient data validation in …
Affected versions
- qt6-webengine < 6.8.2
By system
0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | www/qt6-webengine | 6.11.2 | fixed | |
| MidnightBSD | www/qt6-webengine | in range, by version |