From nobody Sun Feb 08 06:44:22 2026 X-Original-To: dev-commits-ports-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4f7ywk5Npvz6RGSC for ; Sun, 08 Feb 2026 06:44:22 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4f7ywk36DGz3f07 for ; Sun, 08 Feb 2026 06:44:22 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1770533062; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=0qh+NwXZmknoKSJnIqQkNG2rKsyqi3ILRY6UpFWssD8=; b=Q8yO9n+lradXV7Yyx+XCpz7Ev2Rx9hUHBeg1Z86QfKmzpC+gdJGSHe0PcjxtBstqF+b1I4 CwlIwKdHi2yjKFyswzckwtWcLkqMhGFVuTEQleuCvW0ggRi4BYx3gwfcNT5nR5x5q7ryKj 0Lho3jaxVNZqBgkH3Gv0Ms4goNlc/b0DDPIRHF+4o+AYtY8O6eJzOC9eJH4YjzufmQ8qi2 9Wo6XHTY6XpRZ80qPdc3X659wBE0epKS1AxNZb7JKp2w2n5C+YhSJQQOC8LLzyajsbN81b DDXihrXHfF/WsH7k+H0eQpC8TJLZthLebRk6RjuI3a3DPOppIluIhO2EsRx0kg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1770533062; a=rsa-sha256; cv=none; b=LioGExSBCyPzP2WUnBwU2DaTb2dUoGZt9Af0jXGdbIozm8ZEWZrNJjeWI75kZ4FEcGzbpb xTDXNCR4NV5j8DytgVPvD/7IWNjvY5Y8SbOLK1ZWvxnDvOXtvSK8G/hvuxEzhzq7exG3/Y WqyjTSoADAkYzlQxPWmkW5pSgd+uGjt0zNfY1Qn5lEbiwpOZHWc0XezzEA6Wh0JUhHaZKY qSMH+w/wVWnsMsQbF5ghLCOeKRjGrIAXBR0vsfHTMLqscwEB9Jctv+m3M0R2RflZgon9TI A3EtoOC2/R+ZX73zG42OFxyMQYxLK37whJHfDC7qhXXmUlda8nT9kBqwT19MQQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1770533062; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=0qh+NwXZmknoKSJnIqQkNG2rKsyqi3ILRY6UpFWssD8=; b=aBpXYNDcscPpfHee+k4Py+OvXkyTRH6xML9Ek0DAe+uG2w8C6RG3zMhAO6u2BzgNJ9Fdub 4e97u1vQe/IpUHh88BYiYJLMMuBzt7YEenmRdkFKEdej2/O5CPgxDDYcB4XOnkz+A2n71E ENyGadGwHs+DR//HaQXQxWHSS9Wuf0SyznGy0Gxs16CjnvPtqeNFy+8yID49odcSPXaZp2 ZorgrWr5dC8sx+q/kC+CNEMKN58wbc2jih5MRa6b3kqcGTlLju2vU7F7vySJ7ZM/6xw+KF 1PMroZuTFfiXR/prKeAD5GkBhf1AZt+GkObxRNxkISXnD5/uqDq7RxixYAgMFA== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4f7ywk2jcBzcgn for ; Sun, 08 Feb 2026 06:44:22 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 275be by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Sun, 08 Feb 2026 06:44:22 +0000 To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Jason E. Hale Subject: git: 30e17b515d41 - main - security/vuxml: Add www/qt6-webengine < 6.10.2 List-Id: Commit messages for all branches of the ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-all@freebsd.org Sender: owner-dev-commits-ports-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: jhale X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 30e17b515d41333799cbc5c8977d73ab47a0361c Auto-Submitted: auto-generated Date: Sun, 08 Feb 2026 06:44:22 +0000 Message-Id: <698830c6.275be.1a24c04e@gitrepo.freebsd.org> The branch main has been updated by jhale: URL: https://cgit.FreeBSD.org/ports/commit/?id=30e17b515d41333799cbc5c8977d73ab47a0361c commit 30e17b515d41333799cbc5c8977d73ab47a0361c Author: Jason E. Hale AuthorDate: 2026-02-08 06:20:00 +0000 Commit: Jason E. Hale CommitDate: 2026-02-08 06:21:25 +0000 security/vuxml: Add www/qt6-webengine < 6.10.2 --- security/vuxml/vuln/2026.xml | 42 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml index e3f40c15cdf0..25d343d6e437 100644 --- a/security/vuxml/vuln/2026.xml +++ b/security/vuxml/vuln/2026.xml @@ -1,3 +1,45 @@ + + qt6-webengine -- multiple vulnerabilities + + +qt6-pdf +qt6-webengine +6.10.2 + + + + +

Qt qtwebengine-chromium repo reports:

+
+

Backports for 7 security bugs in Chromium:

+
    +
  • CVE-2025-13638: Prevent media element GC in callbacks in WebMediaPlayerMS
    • +
  • CVE-2025-13639: Improve validation of SDP direction in remote description
    • +
  • CVE-2025-13720: Avoid downcasting Hash and Integrity reports
    • +
  • CVE-2025-14174: Metal: Don't use pixelsDepthPitch to size buffers
    • +
  • CVE-2025-14765: Polyfill unary negation and abs for amd mesa frontend
    • +
  • CVE-2026-0908: Use CheckedNumerics in HandleAllocator
    • +
  • CVE-2026-1504: Block opaque 416 responses to non-range requests
    • +
+
+ + + + CVE-2025-13638 + CVE-2025-13639 + CVE-2025-13720 + CVE-2025-14174 + CVE-2025-14765 + CVE-2026-0908 + CVE-2026-1504 + https://code.qt.io/cgit/qt/qtwebengine-chromium.git/log/?h=134-based + + + 2026-02-02 + 2026-02-08 + + + navidrome -- multiple vulnerabilities