BSD Portsqt6-webengine -- Multiple vulnerabilities
· CVE-2025-9866, CVE-2025-10200, CVE-2025-10201, CVE-2025-10500, CVE-2025-10501, CVE-2025-10502, CVE-2025-10890, CVE-2025-10891, CVE-2025-10892 · VuXML entry
Qt qtwebengine-chromium repo reports: Backports for 9 security bugs in Chromium: CVE-2025-9866: Determine whether to bypass redirect checks per request CVE-2025-10200: Use after free in Serviceworker CVE-2025-10201: Inappropriate implementation in Mojo CVE-2025-10500: Use after free in Dawn CVE-2025-10501: Use after free in WebRTC CVE-2025-10502: Heap buffer overflow in ANGLE CVE-2025-10890: Side-channel information …
Affected versions
- qt6-pdf, qt6-webengine < 6.9.3
By system
0 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | print/qt6-pdf | 6.11.2 | fixed | |
| MidnightBSD | print/qt6-pdf | in range, by version | ||
| FreeBSD | www/qt6-webengine | 6.11.2 | fixed | |
| MidnightBSD | www/qt6-webengine | in range, by version |