Security update for qt6-webengine SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2025:0024-1 Final 1 1 2025-01-23T09:21:43Z current 2025-01-23T09:21:43Z 2025-01-23T09:21:43Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for qt6-webengine This update for qt6-webengine fixes the following issues: - CVE-2024-40896: Fixed a XML external entity vulnerability related to libxml2 (boo#1234820) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2025-24 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MJTWGGN25MWIFFI6LEBRJNH3QPOW4COP/ E-Mail link for openSUSE-SU-2025:0024-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1234820 SUSE Bug 1234820 https://www.suse.com/security/cve/CVE-2024-40896/ SUSE CVE CVE-2024-40896 page SUSE Package Hub 15 SP6 openSUSE Leap 15.6 libQt6Pdf6-6.6.3-bp156.2.3.1 libQt6PdfQuick6-6.6.3-bp156.2.3.1 libQt6PdfWidgets6-6.6.3-bp156.2.3.1 libQt6WebEngineCore6-6.6.3-bp156.2.3.1 libQt6WebEngineQuick6-6.6.3-bp156.2.3.1 libQt6WebEngineWidgets6-6.6.3-bp156.2.3.1 qt6-pdf-devel-6.6.3-bp156.2.3.1 qt6-pdf-imports-6.6.3-bp156.2.3.1 qt6-pdf-private-devel-6.6.3-bp156.2.3.1 qt6-pdfquick-devel-6.6.3-bp156.2.3.1 qt6-pdfquick-private-devel-6.6.3-bp156.2.3.1 qt6-pdfwidgets-devel-6.6.3-bp156.2.3.1 qt6-pdfwidgets-private-devel-6.6.3-bp156.2.3.1 qt6-webengine-6.6.3-bp156.2.3.1 qt6-webengine-docs-html-6.6.3-bp156.2.3.1 qt6-webengine-docs-qch-6.6.3-bp156.2.3.1 qt6-webengine-examples-6.6.3-bp156.2.3.1 qt6-webengine-imports-6.6.3-bp156.2.3.1 qt6-webenginecore-devel-6.6.3-bp156.2.3.1 qt6-webenginecore-private-devel-6.6.3-bp156.2.3.1 qt6-webenginequick-devel-6.6.3-bp156.2.3.1 qt6-webenginequick-private-devel-6.6.3-bp156.2.3.1 qt6-webenginewidgets-devel-6.6.3-bp156.2.3.1 qt6-webenginewidgets-private-devel-6.6.3-bp156.2.3.1 libQt6Pdf6-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 libQt6PdfQuick6-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 libQt6PdfWidgets6-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 libQt6WebEngineCore6-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 libQt6WebEngineQuick6-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 libQt6WebEngineWidgets6-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-pdf-devel-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-pdf-imports-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-pdf-private-devel-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-pdfquick-devel-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-pdfquick-private-devel-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-pdfwidgets-devel-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-pdfwidgets-private-devel-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-webengine-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-webengine-docs-html-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-webengine-docs-qch-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-webengine-examples-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-webengine-imports-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-webenginecore-devel-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-webenginecore-private-devel-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-webenginequick-devel-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-webenginequick-private-devel-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-webenginewidgets-devel-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 qt6-webenginewidgets-private-devel-6.6.3-bp156.2.3.1 as a component of SUSE Package Hub 15 SP6 libQt6Pdf6-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 libQt6PdfQuick6-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 libQt6PdfWidgets6-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 libQt6WebEngineCore6-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 libQt6WebEngineQuick6-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 libQt6WebEngineWidgets6-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-pdf-devel-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-pdf-imports-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-pdf-private-devel-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-pdfquick-devel-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-pdfquick-private-devel-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-pdfwidgets-devel-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-pdfwidgets-private-devel-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-webengine-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-webengine-docs-html-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-webengine-docs-qch-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-webengine-examples-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-webengine-imports-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-webenginecore-devel-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-webenginecore-private-devel-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-webenginequick-devel-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-webenginequick-private-devel-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-webenginewidgets-devel-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 qt6-webenginewidgets-private-devel-6.6.3-bp156.2.3.1 as a component of openSUSE Leap 15.6 In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities even if custom SAX handlers try to override entity content (by setting "checked"). This makes classic XXE attacks possible. CVE-2024-40896 SUSE Package Hub 15 SP6:libQt6Pdf6-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:libQt6PdfQuick6-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:libQt6PdfWidgets6-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:libQt6WebEngineCore6-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:libQt6WebEngineQuick6-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:libQt6WebEngineWidgets6-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-pdf-devel-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-pdf-imports-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-pdf-private-devel-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-pdfquick-devel-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-pdfquick-private-devel-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-pdfwidgets-devel-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-pdfwidgets-private-devel-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-webengine-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-webengine-docs-html-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-webengine-docs-qch-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-webengine-examples-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-webengine-imports-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-webenginecore-devel-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-webenginecore-private-devel-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-webenginequick-devel-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-webenginequick-private-devel-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-webenginewidgets-devel-6.6.3-bp156.2.3.1 SUSE Package Hub 15 SP6:qt6-webenginewidgets-private-devel-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:libQt6Pdf6-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:libQt6PdfQuick6-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:libQt6PdfWidgets6-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:libQt6WebEngineCore6-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:libQt6WebEngineQuick6-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:libQt6WebEngineWidgets6-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-pdf-devel-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-pdf-imports-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-pdf-private-devel-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-pdfquick-devel-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-pdfquick-private-devel-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-pdfwidgets-devel-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-pdfwidgets-private-devel-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-webengine-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-webengine-docs-html-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-webengine-docs-qch-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-webengine-examples-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-webengine-imports-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-webenginecore-devel-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-webenginecore-private-devel-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-webenginequick-devel-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-webenginequick-private-devel-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-webenginewidgets-devel-6.6.3-bp156.2.3.1 openSUSE Leap 15.6:qt6-webenginewidgets-private-devel-6.6.3-bp156.2.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MJTWGGN25MWIFFI6LEBRJNH3QPOW4COP/ https://www.suse.com/security/cve/CVE-2024-40896.html CVE-2024-40896 https://bugzilla.suse.com/1234812 SUSE Bug 1234812