Bug 915465 – <dev-qt/qtwebengine-5.15.11_p20231120: Multiple vulnerabilities

• Product: Gentoo Security
• Status: RESOLVED FIXED

[Description Andreas Sturmlechner 2023-10-09 08:43:47 UTC]

* [Backport] [PA] Support 16kb pagesize on Linux+ARM6487-based
  * [Backport] Replace uses of re2::StringPiece::set().
  * Fix build with GCC 13
  * Fix errors and warnings for perfetto
  * Remove nodiscard attribute from cpwl_combo_box.h
  * FIXUP: [Backport] CVE-2023-4354: Heap buffer overflow in Skia
  * FIXUP: Disable Windows IME for GPU thread
  * Bump V8_PATCH_LEVEL
  * [Backport] CVE-2023-4762: Type Confusion in V8
  * [Backport] CVE-2023-4362: Heap buffer overflow in Mojom IDL
  * [Backport] CVE-2023-4354: Heap buffer overflow in Skia
  * [Backport] CVE-2023-4351: Use after free in Network
  * Disable Windows IME for GPU thread
  * [Backport] CVE-2023-4863: Heap buffer overflow in WebP

[Comment 1 Andreas Sturmlechner 2023-11-03 11:21:47 UTC]

* [Backport] CVE-2023-5482 and CVE-2023-584987-based
* [Backport] CVE-2023-45853: Buffer overflow in MiniZip (2/2)
* [Backport] CVE-2023-45853: Buffer overflow in MiniZip (1/2)
* [Backport] Security bug 1478470
* [Backport] Security bug 1472365 and 1472366
* [Backport] CVE-2023-5218: Use after free in Site Isolation
* [Backport] Security bug 1486316
* FIXUP: [Backport] [PA] Support 16kb pagesize on Linux+ARM64

[Comment 2 Larry the Git Cow 2023-11-06 18:10:59 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9ece4c319deb63cf49047133934814290422e0ad

commit 9ece4c319deb63cf49047133934814290422e0ad
Author:     Andreas Sturmlechner <[e-mail]>
AuthorDate: 2023-11-06 10:46:26 +0000
Commit:     Andreas Sturmlechner <[e-mail]>
CommitDate: 2023-11-06 18:10:30 +0000

    dev-qt/qtwebengine: drop 5.15.11_p20231019
    
    Bug: https://bugs.gentoo.org/915465
    Signed-off-by: Andreas Sturmlechner <[e-mail]>

 dev-qt/qtwebengine/Manifest                        |   1 -
 .../qtwebengine-5.15.11_p20231019.ebuild           | 270 ---------------------
 2 files changed, 271 deletions(-)

[Comment 3 Andreas Sturmlechner 2023-11-23 11:41:11 UTC]

Bumping to dev-qt/qtwebengine-5.15.11_p20231120 then, fixes:

  * [Backport] CVE-2023-6112: Use after free in Navigation
  * [Backport] CVE-2023-5997: Use after free in Garbage Collection
  * [Backport] CVE-2023-5996: Use after free in WebAudio

[Comment 4 Larry the Git Cow 2023-11-25 16:12:53 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=6616f0c736292450b52fe503cc1a904e55947ded

commit 6616f0c736292450b52fe503cc1a904e55947ded
Author:     Andreas Sturmlechner <[e-mail]>
AuthorDate: 2023-11-25 16:11:02 +0000
Commit:     Andreas Sturmlechner <[e-mail]>
CommitDate: 2023-11-25 16:11:29 +0000

    dev-qt/qtwebengine: Cleanup vulnerable 5.15.11_p20231102
    
    Bug: https://bugs.gentoo.org/915465
    Signed-off-by: Andreas Sturmlechner <[e-mail]>

 dev-qt/qtwebengine/Manifest                        |   1 -
 .../qtwebengine-5.15.11_p20231102.ebuild           | 283 ---------------------
 2 files changed, 284 deletions(-)

[Comment 5 Larry the Git Cow 2023-12-22 10:51:58 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=33421161add23e707a21bf30329af848c2577694

commit 33421161add23e707a21bf30329af848c2577694
Author:     GLSAMaker <[e-mail]>
AuthorDate: 2023-12-22 10:51:22 +0000
Commit:     Hans de Graaff <[e-mail]>
CommitDate: 2023-12-22 10:51:49 +0000

    [ GLSA 202312-07 ] QtWebEngine: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/913050
    Bug: https://bugs.gentoo.org/915465
    Signed-off-by: GLSAMaker <[e-mail]>
    Signed-off-by: Hans de Graaff <[e-mail]>

 glsa-202312-07.xml | 87 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 87 insertions(+)