Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:0194-1

Опубликовано: 20 янв. 2025
Источник: suse-cvrf

Описание

Security update for libqt5-qtwebkit

This update for libqt5-qtwebkit fixes the following issues:

  • CVE-2024-40779: Fixed heap buffer overflow in computeSampleUsingLinearInterpolation (bsc#1228693)

Список пакетов

SUSE Linux Enterprise Server 12 SP5-LTSS
libQt5WebKit-private-headers-devel-5.6.2-3.3.1
libQt5WebKit5-5.6.2-3.3.1
libQt5WebKit5-devel-5.6.2-3.3.1
libQt5WebKit5-imports-5.6.2-3.3.1
libQt5WebKitWidgets-devel-5.6.2-3.3.1
libQt5WebKitWidgets-private-headers-devel-5.6.2-3.3.1
libQt5WebKitWidgets5-5.6.2-3.3.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
libQt5WebKit-private-headers-devel-5.6.2-3.3.1
libQt5WebKit5-5.6.2-3.3.1
libQt5WebKit5-devel-5.6.2-3.3.1
libQt5WebKit5-imports-5.6.2-3.3.1
libQt5WebKitWidgets-devel-5.6.2-3.3.1
libQt5WebKitWidgets-private-headers-devel-5.6.2-3.3.1
libQt5WebKitWidgets5-5.6.2-3.3.1

Ссылки

Описание

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:libQt5WebKit-private-headers-devel-5.6.2-3.3.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libQt5WebKit5-5.6.2-3.3.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libQt5WebKit5-devel-5.6.2-3.3.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libQt5WebKit5-imports-5.6.2-3.3.1
Ссылки