Alpine/qt5-qtwebengine: critical 9.8

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.

Action: Upgrade qt5-qtwebengine to 5.15.3_git20211127-r4 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2022-23852#Alpine:v3.15/qt5-qtwebengine
• https://security.alpinelinux.org/vuln/CVE-2022-23852

published 2022-01-24T02:15:06.733Z · modified 2026-11-03T07:30:14.454986555Z · JSON