openSUSE-SU-2022:10049-1

    Dashboard / Vulnerabilities / openSUSE-SU-2022:10049-1

    openSUSE-SU-2022:10049-1

    Published: 10 Jul 2022Last Modified: 4 Feb 2026

    Summary: Security update for libqt5-qtwebengine

    Details: This update for libqt5-qtwebengine fixes the following issues: Update to version 5.15.10: * Fix top level build with no widget * Fix read-after-free on EGL extensions * Update Chromium * Add workaround for unstable gn on macOS in ci * Pass archiver to gn build * Fix navigation to non-local URLs * Add support for universal builds for qtwebengine and qtpdf * Enable Apple Silicon support * Fix cross compilation x86_64->arm64 on mac * Bump version to 5.15.10 * CustomDialogs: Make custom input fields readable in dark mode * CookieBrowser: Make alternating rows readable in dark mode * Update Chromium: * Bump V8_PATCH_LEVEL * Fix clang set-but-unused-variable warning * Fix mac toolchain python linker script call * Fix missing dependency for gpu sources * Fix python calls * Fix undefined symbol for universal link * Quick fix for regression in service workers by reverting backports * [Backport] CVE-2022-0797: Out of bounds memory access in Mojo * [Backport] CVE-2022-1125 * [Backport] CVE-2022-1138: Inappropriate implementation in Web Cursor. * [Backport] CVE-2022-1305: Use after free in storage * [Backport] CVE-2022-1310: Use after free in regular expressions * [Backport] CVE-2022-1314: Type Confusion in V8 * [Backport] CVE-2022-1493: Use after free in Dev Tools * [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm' * [Backport] Security Bug 1296876 * [Backport] Security bug 1269999 * [Backport] Security bug 1280852 * [Backport] Security bug 1292905 * [Backport] Security bug 1304659 * [Backport] Security bug 1306507

    References: https://lists.opensuse.org/archives/list/[email protected]/thread/WT2AEVSRASQUW7I7AGAMZLKVP3GE3BMY/, https://www.suse.com/security/cve/CVE-2022-0797, https://www.suse.com/security/cve/CVE-2022-1125, https://www.suse.com/security/cve/CVE-2022-1138, https://www.suse.com/security/cve/CVE-2022-1305, https://www.suse.com/security/cve/CVE-2022-1310, https://www.suse.com/security/cve/CVE-2022-1314, https://www.suse.com/security/cve/CVE-2022-1493

    Affected packages

    Package

    Name: libqt5-qtwebengine

    Purl: pkg:rpm/suse/libqt5-qtwebengine&distro=SUSE%20Package%20Hub%2015%20SP4

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -5.15.10-bp154.2.3.2

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    openSUSE-SU-2022:10049-1 | CVE-DB