BSD Portsqt6-webengine -- Multiple vulnerabilities
· CVE-2024-11477, CVE-2025-0762, CVE-2025-0996, CVE-2025-0998, CVE-2025-0999, CVE-2025-1006, CVE-2025-1426, CVE-2025-1918, CVE-2025-1919, CVE-2025-1921, CVE-2025-2036 · VuXML entry
Qt qtwebengine-chromium repo reports: Backports for 11 security bugs in Chromium: CVE-2024-11477: 7-Zip Zstd decompression integer underflow CVE-2025-0762: Use after free in DevTools CVE-2025-0996: Inappropriate implementation in Browser UI CVE-2025-0998: Out of bounds memory access in V8 CVE-2025-0999: Heap buffer overflow in V8 CVE-2025-1006: Use after free in Network CVE-2025-1426: Heap buffer overflow in GPU …
Affected versions
- qt6-pdf, qt6-webengine < 6.8.3
By system
0 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | print/qt6-pdf | 6.11.2 | fixed | |
| MidnightBSD | print/qt6-pdf | in range, by version | ||
| FreeBSD | www/qt6-webengine | 6.11.2 | fixed | |
| MidnightBSD | www/qt6-webengine | in range, by version |