{"schemaVersion":3,"id":"OPENSUSE-SU-2021:1016-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for libqt5-qtwebengine\n\nThis update for libqt5-qtwebengine fixes the following issues:\n\nUpdate to version 5.15.3\n\nCVE fixes backported in chromium updates:\n\n- CVE-2020-16044: Use after free in WebRTC\n- CVE-2021-21118: Heap buffer overflow in Blink\n- CVE-2021-21119: Use after free in Media\n- CVE-2021-21120: Use after free in WebSQL\n- CVE-2021-21121: Use after free in Omnibox\n- CVE-2021-21122: Use after free in Blink\n- CVE-2021-21123: Insufficient data validation in File System API\n- CVE-2021-21125: Insufficient policy enforcement in File System API\n- CVE-2021-21126: Insufficient policy enforcement in extensions\n- CVE-2021-21127: Insufficient policy enforcement in extensions\n- CVE-2021-21128: Heap buffer overflow in Blink\n- CVE-2021-21129: Insufficient policy enforcement in File System API\n- CVE-2021-21130: Insufficient policy enforcement in File System API\n- CVE-2021-21131: Insufficient policy enforcement in File System API\n- CVE-2021-21132: Inappropriate implementation in DevTools\n- CVE-2021-21135: Inappropriate implementation in Performance API\n- CVE-2021-21137: Inappropriate implementation in DevTools\n- CVE-2021-21140: Uninitialized Use in USB\n- CVE-2021-21141: Insufficient policy enforcement in File System API\n- CVE-2021-21145: Use after free in Fonts\n- CVE-2021-21146: Use after free in Navigation\n- CVE-2021-21147: Inappropriate implementation in Skia\n- CVE-2021-21148: Heap buffer overflow in V8\n- CVE-2021-21149: Stack overflow in Data Transfer\n- CVE-2021-21150: Use after free in Downloads\n- CVE-2021-21152: Heap buffer overflow in Media\n- CVE-2021-21153: Stack overflow in GPU Process\n- CVE-2021-21156: Heap buffer overflow in V8\n- CVE-2021-21157: Use after free in Web Sockets\n\nThis update was imported from the openSUSE:Leap:15.2:Update update project.","dates":{"published":"2021-07-09T16:06:24.000Z","modified":"2026-02-04T02:27:55.203Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"libqt5-qtwebengine&distro=SUSE Package Hub 15 SP2","name":"libqt5-qtwebengine","label":"libqt5-qtwebengine&distro=SUSE Package Hub 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/libqt5-qtwebengine&distro=SUSE Package Hub 15 SP2","purlType":"rpm","versions":[{"text":"< 5.15.3-bp152.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.15.3-bp152.3.3.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1130395","label":"bugzilla.suse.com/1130395","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1158516","label":"bugzilla.suse.com/1158516","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1163744","label":"bugzilla.suse.com/1163744","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1163766","label":"bugzilla.suse.com/1163766","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1182233","label":"bugzilla.suse.com/1182233","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16044","label":"www.suse.com/security/cve/CVE-2020-16044","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21118","label":"www.suse.com/security/cve/CVE-2021-21118","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21119","label":"www.suse.com/security/cve/CVE-2021-21119","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21120","label":"www.suse.com/security/cve/CVE-2021-21120","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21121","label":"www.suse.com/security/cve/CVE-2021-21121","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21122","label":"www.suse.com/security/cve/CVE-2021-21122","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21123","label":"www.suse.com/security/cve/CVE-2021-21123","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21125","label":"www.suse.com/security/cve/CVE-2021-21125","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21126","label":"www.suse.com/security/cve/CVE-2021-21126","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21127","label":"www.suse.com/security/cve/CVE-2021-21127","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21128","label":"www.suse.com/security/cve/CVE-2021-21128","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21129","label":"www.suse.com/security/cve/CVE-2021-21129","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21130","label":"www.suse.com/security/cve/CVE-2021-21130","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21131","label":"www.suse.com/security/cve/CVE-2021-21131","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21132","label":"www.suse.com/security/cve/CVE-2021-21132","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21135","label":"www.suse.com/security/cve/CVE-2021-21135","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21137","label":"www.suse.com/security/cve/CVE-2021-21137","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21140","label":"www.suse.com/security/cve/CVE-2021-21140","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21141","label":"www.suse.com/security/cve/CVE-2021-21141","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21145","label":"www.suse.com/security/cve/CVE-2021-21145","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21146","label":"www.suse.com/security/cve/CVE-2021-21146","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21147","label":"www.suse.com/security/cve/CVE-2021-21147","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21148","label":"www.suse.com/security/cve/CVE-2021-21148","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21149","label":"www.suse.com/security/cve/CVE-2021-21149","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21150","label":"www.suse.com/security/cve/CVE-2021-21150","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21152","label":"www.suse.com/security/cve/CVE-2021-21152","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21153","label":"www.suse.com/security/cve/CVE-2021-21153","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21156","label":"www.suse.com/security/cve/CVE-2021-21156","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-21157","label":"www.suse.com/security/cve/CVE-2021-21157","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2020-16044","CVE-2021-21118","CVE-2021-21119","CVE-2021-21120","CVE-2021-21121","CVE-2021-21122","CVE-2021-21123","CVE-2021-21125","CVE-2021-21126","CVE-2021-21127","CVE-2021-21128","CVE-2021-21129","CVE-2021-21130","CVE-2021-21131","CVE-2021-21132","CVE-2021-21135","CVE-2021-21137","CVE-2021-21140","CVE-2021-21141","CVE-2021-21145","CVE-2021-21146","CVE-2021-21147","CVE-2021-21148","CVE-2021-21149","CVE-2021-21150","CVE-2021-21152","CVE-2021-21153","CVE-2021-21156","CVE-2021-21157"],"downstream":[],"duplicates":[],"related":["CVE-2020-16044","CVE-2021-21118","CVE-2021-21119","CVE-2021-21120","CVE-2021-21121","CVE-2021-21122","CVE-2021-21123","CVE-2021-21125","CVE-2021-21126","CVE-2021-21127","CVE-2021-21128","CVE-2021-21129","CVE-2021-21130","CVE-2021-21131","CVE-2021-21132","CVE-2021-21135","CVE-2021-21137","CVE-2021-21140","CVE-2021-21141","CVE-2021-21145","CVE-2021-21146","CVE-2021-21147","CVE-2021-21148","CVE-2021-21149","CVE-2021-21150","CVE-2021-21152","CVE-2021-21153","CVE-2021-21156","CVE-2021-21157"]},"timeline":[{"kind":"published","date":"2021-07-09T16:06:24.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T02:27:55.203Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T10:37:06.823Z","stale":false,"partial":false}}