openSUSE Security Update: Security update for qt6-webengine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2025:0024-1 Rating: important References: #1234820 Cross-References: CVE-2024-40896 CVSS scores: CVE-2024-40896 (SUSE): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for qt6-webengine fixes the following issues: - CVE-2024-40896: Fixed a XML external entity vulnerability related to libxml2 (boo#1234820) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2025-24=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 x86_64): libQt6Pdf6-6.6.3-bp156.2.3.1 libQt6PdfQuick6-6.6.3-bp156.2.3.1 libQt6PdfWidgets6-6.6.3-bp156.2.3.1 libQt6WebEngineCore6-6.6.3-bp156.2.3.1 libQt6WebEngineQuick6-6.6.3-bp156.2.3.1 libQt6WebEngineWidgets6-6.6.3-bp156.2.3.1 qt6-pdf-devel-6.6.3-bp156.2.3.1 qt6-pdf-imports-6.6.3-bp156.2.3.1 qt6-pdf-private-devel-6.6.3-bp156.2.3.1 qt6-pdfquick-devel-6.6.3-bp156.2.3.1 qt6-pdfquick-private-devel-6.6.3-bp156.2.3.1 qt6-pdfwidgets-devel-6.6.3-bp156.2.3.1 qt6-pdfwidgets-private-devel-6.6.3-bp156.2.3.1 qt6-webengine-6.6.3-bp156.2.3.1 qt6-webengine-docs-html-6.6.3-bp156.2.3.1 qt6-webengine-docs-qch-6.6.3-bp156.2.3.1 qt6-webengine-examples-6.6.3-bp156.2.3.1 qt6-webengine-imports-6.6.3-bp156.2.3.1 qt6-webenginecore-devel-6.6.3-bp156.2.3.1 qt6-webenginecore-private-devel-6.6.3-bp156.2.3.1 qt6-webenginequick-devel-6.6.3-bp156.2.3.1 qt6-webenginequick-private-devel-6.6.3-bp156.2.3.1 qt6-webenginewidgets-devel-6.6.3-bp156.2.3.1 qt6-webenginewidgets-private-devel-6.6.3-bp156.2.3.1 References: https://www.suse.com/security/cve/CVE-2024-40896.html https://bugzilla.suse.com/1234820