Alberto Garcia pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c0e3e59c by Alberto Garcia at 2024-04-12T01:23:47+02:00
Add the wpewebkit versions that fix the CVEs from WSA-2024-0002
See also commit bcbc48122cd575b0d938c82183ab1e8b384bf5d1
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6688,7 +6688,7 @@ CVE-2024-0957 (The WooCommerce PDF Invoices, Packing
Slips, Delivery Notes and S
CVE-2023-42956 (The issue was addressed with improved memory handling. This
issue is f ...)
- webkit2gtk 2.44.0-1
[buster] - webkit2gtk <end-of-life> (EOL in buster LTS)
- - wpewebkit <unfixed>
+ - wpewebkit 2.44.1-1
[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security
support in Bookworm)
[bullseye] - wpewebkit <ignored> (wpewebkit >= 2.40 can no longer be
sensibly backported)
NOTE: https://webkitgtk.org/security/WSA-2024-0002.html
@@ -6697,7 +6697,7 @@ CVE-2023-42954 (A privilege escalation issue existed in
FileMaker Server, potent
CVE-2023-42950 (A use after free issue was addressed with improved memory
management. ...)
- webkit2gtk 2.44.0-1
[buster] - webkit2gtk <end-of-life> (EOL in buster LTS)
- - wpewebkit <unfixed>
+ - wpewebkit 2.44.1-1
[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security
support in Bookworm)
[bullseye] - wpewebkit <ignored> (wpewebkit >= 2.40 can no longer be
sensibly backported)
NOTE: https://webkitgtk.org/security/WSA-2024-0002.html
@@ -10178,7 +10178,7 @@ CVE-2024-23285 (This issue was addressed with improved
handling of symlinks. Thi
CVE-2024-23284 (A logic issue was addressed with improved state management.
This issue ...)
- webkit2gtk 2.44.0-1
[buster] - webkit2gtk <end-of-life> (EOL in buster LTS)
- - wpewebkit <unfixed>
+ - wpewebkit 2.44.1-1
[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security
support in Bookworm)
[bullseye] - wpewebkit <ignored> (wpewebkit >= 2.40 can no longer be
sensibly backported)
NOTE: https://webkitgtk.org/security/WSA-2024-0002.html
@@ -10189,7 +10189,7 @@ CVE-2024-23281 (This issue was addressed with improved
state management. This is
CVE-2024-23280 (An injection issue was addressed with improved validation.
This issue ...)
- webkit2gtk 2.44.0-1
[buster] - webkit2gtk <end-of-life> (EOL in buster LTS)
- - wpewebkit <unfixed>
+ - wpewebkit 2.44.1-1
[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security
support in Bookworm)
[bullseye] - wpewebkit <ignored> (wpewebkit >= 2.40 can no longer be
sensibly backported)
NOTE: https://webkitgtk.org/security/WSA-2024-0002.html
@@ -10226,7 +10226,7 @@ CVE-2024-23264 (A validation issue was addressed with
improved input sanitizatio
CVE-2024-23263 (A logic issue was addressed with improved validation. This
issue is fi ...)
- webkit2gtk 2.44.0-1
[buster] - webkit2gtk <end-of-life> (EOL in buster LTS)
- - wpewebkit <unfixed>
+ - wpewebkit 2.44.1-1
[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security
support in Bookworm)
[bullseye] - wpewebkit <ignored> (wpewebkit >= 2.40 can no longer be
sensibly backported)
NOTE: https://webkitgtk.org/security/WSA-2024-0002.html
@@ -10245,7 +10245,7 @@ CVE-2024-23255 (An authentication issue was addressed
with improved state manage
CVE-2024-23254 (The issue was addressed with improved UI handling. This issue
is fixed ...)
- webkit2gtk 2.44.0-1
[buster] - webkit2gtk <end-of-life> (EOL in buster LTS)
- - wpewebkit <unfixed>
+ - wpewebkit 2.44.1-1
[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security
support in Bookworm)
[bullseye] - wpewebkit <ignored> (wpewebkit >= 2.40 can no longer be
sensibly backported)
NOTE: https://webkitgtk.org/security/WSA-2024-0002.html
@@ -14884,7 +14884,7 @@ CVE-2023-42848 (The issue was addressed with improved
bounds checks. This issue
CVE-2023-42843 (An inconsistent user interface issue was addressed with
improved state ...)
- webkit2gtk 2.44.0-1
[buster] - webkit2gtk <end-of-life> (EOL in buster LTS)
- - wpewebkit <unfixed>
+ - wpewebkit 2.44.1-1
[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security
support in Bookworm)
[bullseye] - wpewebkit <ignored> (wpewebkit >= 2.40 can no longer be
sensibly backported)
NOTE: https://webkitgtk.org/security/WSA-2024-0002.html
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c0e3e59c020065868649e86bd7e58f1386352f42
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c0e3e59c020065868649e86bd7e58f1386352f42
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
