Alberto Garcia pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4edf3256 by Alberto Garcia at 2023-02-02T18:05:32+01:00
webkit2gtk / wpewebkit upstream advisory WSA-2023-0001
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -4172,10 +4172,16 @@ CVE-2023-23520
RESERVED
CVE-2023-23519
RESERVED
-CVE-2023-23518
+CVE-2023-23518 [Processing maliciously crafted web content may lead to
arbitrary code execution]
RESERVED
-CVE-2023-23517
+ - webkit2gtk 2.38.4-1
+ - wpewebkit 2.38.4-1
+ NOTE: https://webkitgtk.org/security/WSA-2023-0001.html
+CVE-2023-23517 [Processing maliciously crafted web content may lead to
arbitrary code execution]
RESERVED
+ - webkit2gtk 2.38.4-1
+ - wpewebkit 2.38.4-1
+ NOTE: https://webkitgtk.org/security/WSA-2023-0001.html
CVE-2023-23516
RESERVED
CVE-2023-23515
@@ -27645,8 +27651,11 @@ CVE-2022-42828
RESERVED
CVE-2022-42827 (An out-of-bounds write issue was addressed with improved
bounds checki ...)
NOT-FOR-US: Apple
-CVE-2022-42826
+CVE-2022-42826 [Processing maliciously crafted web content may lead to
arbitrary code execution]
RESERVED
+ - webkit2gtk 2.38.4-1
+ - wpewebkit 2.38.4-1
+ NOTE: https://webkitgtk.org/security/WSA-2023-0001.html
CVE-2022-42825 (This issue was addressed by removing additional entitlements.
This iss ...)
NOT-FOR-US: Apple
CVE-2022-42824 (A logic issue was addressed with improved state management.
This issue ...)
=====================================
data/dsa-needed.txt
=====================================
@@ -59,6 +59,10 @@ thunderbird (jmm)
--
tiff (aron)
--
+webkit2gtk (berto)
+--
+wpewebkit (berto)
+--
xrdp
needs some additional clarification, tentatively DSA worthy
maybe upgrade to 0.9.21 within bullseye?
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4edf32569d9d21bb7b223a0ba3293a8c98715edd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4edf32569d9d21bb7b223a0ba3293a8c98715edd
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
