openSUSE-SU-2024:0402-1

Details

This update for qt6-webengine fixes the following issues:

CVE-2024-11403: Fixed out of bounds memory read/write in libjxl (boo#1233764)

Affected Packages(25 packages)

libQt6Pdf6

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

6.4.2-bp155.2.6.1

libQt6PdfQuick6

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

6.4.2-bp155.2.6.1

libQt6PdfWidgets6

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

6.4.2-bp155.2.6.1

libQt6WebEngineCore6

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

6.4.2-bp155.2.6.1

libQt6WebEngineQuick6

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

6.4.2-bp155.2.6.1

libQt6WebEngineWidgets6

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

6.4.2-bp155.2.6.1

qt6-pdf-devel

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

6.4.2-bp155.2.6.1

qt6-pdf-imports

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

6.4.2-bp155.2.6.1

qt6-pdf-private-devel

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

6.4.2-bp155.2.6.1

qt6-pdfquick-devel

SUSE Package Hub 15 SP5openSUSE Leap 15.5

Fixed in:

6.4.2-bp155.2.6.1

References

REPORT

https://bugzilla.suse.com/1233764

ADVISORY

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TGCRWIE4IMT4IZHYUTUPMPDFR46SJODV/

WEB

https://www.suse.com/security/cve/CVE-2024-11403