openSUSE-SU-2021:0973-1
Security update for libqt5-qtwebengine
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for libqt5-qtwebengine fixes the following issues: Update to version 5.15.3 CVE fixes backported in chromium updates: - CVE-2020-16044: Use after free in WebRTC - CVE-2021-21118: Heap buffer overflow in Blink - CVE-2021-21119: Use after free in Media - CVE-2021-21120: Use after free in WebSQL - CVE-2021-21121: Use after free in Omnibox - CVE-2021-21122: Use after free in Blink - CVE-2021-21123: Insufficient data validation in File System API - CVE-2021-21125: Insufficient policy enforcement in File System API - CVE-2021-21126: Insufficient policy enforcement in extensions - CVE-2021-21127: Insufficient policy enforcement in extensions - CVE-2021-21128: Heap buffer overflow in Blink - CVE-2021-21129: Insufficient policy enforcement in File System API - CVE-2021-21130: Insufficient policy enforcement in File System API - CVE-2021-21131: Insufficient policy enforcement in File System API - CVE-2021-21132: Inappropriate implementation in DevTools - CVE-2021-21135: Inappropriate implementation in Performance API - CVE-2021-21137: Inappropriate implementation in DevTools - CVE-2021-21140: Uninitialized Use in USB - CVE-2021-21141: Insufficient policy enforcement in File System API - CVE-2021-21145: Use after free in Fonts - CVE-2021-21146: Use after free in Navigation - CVE-2021-21147: Inappropriate implementation in Skia - CVE-2021-21148: Heap buffer overflow in V8 - CVE-2021-21149: Stack overflow in Data Transfer - CVE-2021-21150: Use after free in Downloads - CVE-2021-21152: Heap buffer overflow in Media - CVE-2021-21153: Stack overflow in GPU Process - CVE-2021-21156: Heap buffer overflow in V8 - CVE-2021-21157: Use after free in Web Sockets
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 15.2 | libQt5Pdf5, libQt5PdfWidgets5, libqt5-qtpdf-devel ve 7 tane daha | 5.15.3-lp152.3.3.4 |
1 kaynaktaki 10 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 15.2 | libQt5Pdf5 | 5.15.3-lp152.3.3.4 |
| openSUSE Leap 15.2 | libQt5PdfWidgets5 | 5.15.3-lp152.3.3.4 |
| openSUSE Leap 15.2 | libqt5-qtpdf-devel | 5.15.3-lp152.3.3.4 |
| openSUSE Leap 15.2 | libqt5-qtpdf-examples | 5.15.3-lp152.3.3.4 |
| openSUSE Leap 15.2 | libqt5-qtpdf-imports | 5.15.3-lp152.3.3.4 |
| openSUSE Leap 15.2 | libqt5-qtpdf-private-headers-devel | 5.15.3-lp152.3.3.4 |
| openSUSE Leap 15.2 | libqt5-qtwebengine | 5.15.3-lp152.3.3.4 |
| openSUSE Leap 15.2 | libqt5-qtwebengine-devel | 5.15.3-lp152.3.3.4 |
| openSUSE Leap 15.2 | libqt5-qtwebengine-examples | 5.15.3-lp152.3.3.4 |
| openSUSE Leap 15.2 | libqt5-qtwebengine-private-headers-devel | 5.15.3-lp152.3.3.4 |
Referanslar
- https://bugzilla.suse.com/1130395
- https://bugzilla.suse.com/1158516
- https://bugzilla.suse.com/1163744
- https://bugzilla.suse.com/1163766
- https://bugzilla.suse.com/1182233
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5/
- https://www.suse.com/security/cve/CVE-2020-16044/
- https://www.suse.com/security/cve/CVE-2021-21118/
36 referansın hepsi
- https://www.suse.com/security/cve/CVE-2021-21119/
- https://www.suse.com/security/cve/CVE-2021-21120/
- https://www.suse.com/security/cve/CVE-2021-21121/
- https://www.suse.com/security/cve/CVE-2021-21122/
- https://www.suse.com/security/cve/CVE-2021-21123/
- https://www.suse.com/security/cve/CVE-2021-21125/
- https://www.suse.com/security/cve/CVE-2021-21126/
- https://www.suse.com/security/cve/CVE-2021-21127/
- https://www.suse.com/security/cve/CVE-2021-21128/
- https://www.suse.com/security/cve/CVE-2021-21129/
- https://www.suse.com/security/cve/CVE-2021-21130/
- https://www.suse.com/security/cve/CVE-2021-21131/
- https://www.suse.com/security/cve/CVE-2021-21132/
- https://www.suse.com/security/cve/CVE-2021-21135/
- https://www.suse.com/security/cve/CVE-2021-21137/
- https://www.suse.com/security/cve/CVE-2021-21140/
- https://www.suse.com/security/cve/CVE-2021-21141/
- https://www.suse.com/security/cve/CVE-2021-21145/
- https://www.suse.com/security/cve/CVE-2021-21146/
- https://www.suse.com/security/cve/CVE-2021-21147/
- https://www.suse.com/security/cve/CVE-2021-21148/
- https://www.suse.com/security/cve/CVE-2021-21149/
- https://www.suse.com/security/cve/CVE-2021-21150/
- https://www.suse.com/security/cve/CVE-2021-21152/
- https://www.suse.com/security/cve/CVE-2021-21153/
- https://www.suse.com/security/cve/CVE-2021-21156/
- https://www.suse.com/security/cve/CVE-2021-21157/
- https://www.suse.com/support/security/rating/