Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ffdeca83 by Emilio Pozuelo Monfort at 2023-07-08T00:02:23+02:00
lts: EOL webkit2gtk in buster
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -1478,12 +1478,14 @@ CVE-2023-32480 (Dell BIOS contains an Improper Input
Validation vulnerability. A
CVE-2023-32439 (A type confusion issue was addressed with improved checks.
This issue ...)
{DSA-5449-1}
- webkit2gtk 2.40.3-1
+ [buster] - webkit2gtk <end-of-life> (webkit2gtk EOL in buster)
- wpewebkit 2.40.3-1
[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security
support in Bookworm)
NOTE: https://webkitgtk.org/security/WSA-2023-0005.html
CVE-2023-32435 (A memory corruption issue was addressed with improved state
management ...)
{DSA-5396-1}
- webkit2gtk 2.40.0-1
+ [buster] - webkit2gtk <end-of-life> (webkit2gtk EOL in buster)
- wpewebkit 2.40.2-2
[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security
support in Bookworm)
NOTE: https://webkitgtk.org/security/WSA-2023-0005.html
@@ -4935,6 +4937,7 @@ CVE-2023-32409 (The issue was addressed with improved
bounds checks. This issue
CVE-2023-32373 (A use-after-free issue was addressed with improved memory
management. ...)
{DSA-5427-1}
- webkit2gtk 2.40.2-1
+ [buster] - webkit2gtk <end-of-life> (webkit2gtk EOL in buster)
- wpewebkit 2.40.2-2
[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security
support in Bookworm)
NOTE: https://bugs.webkit.org/show_bug.cgi?id=254840
@@ -16168,6 +16171,7 @@ CVE-2023-28205 (A use after free issue was addressed
with improved memory manage
CVE-2023-28204 (An out-of-bounds read was addressed with improved input
validation. Th ...)
{DSA-5427-1}
- webkit2gtk 2.40.2-1
+ [buster] - webkit2gtk <end-of-life> (webkit2gtk EOL in buster)
- wpewebkit 2.40.2-2
[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security
support in Bookworm)
NOTE: https://bugs.webkit.org/show_bug.cgi?id=254930
=====================================
data/dla-needed.txt
=====================================
@@ -244,15 +244,6 @@ thunderbird (pochu)
tiff (Adrian Bunk)
NOTE: 20230702: Added by Front-Desk (ta)
--
-webkit2gtk (Emilio)
- NOTE: 20230512: Re-added (pochu)
- NOTE: 20230512: checking if upgrade to 2.40.x is possible, otherwise we'll
have to EOL webkit (pochu)
- NOTE: 20230529: made some progress on the backport, but there are still some
blockers,
- NOTE: 20230529: particularly around (the lack of) C++20 support. (pochu)
- NOTE: 20230606: one issue remaining (cmake), but call for testing sent out
already:
- NOTE: 20230606: https://lists.debian.org/debian-lts/2023/06/msg00005.html
(pochu)
- NOTE: 20230627: will likely hold the update and mark as not-supported due to
feedback (pochu)
---
xqilla
NOTE: 20230706: Added by Front-Desk (gladk)
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ffdeca83b62c51a4ccee1a1348f9f05cb46d4e22
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ffdeca83b62c51a4ccee1a1348f9f05cb46d4e22
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
