[Desktop-packages] [Bug 1970783] Re: Multiple vulnerabilities in Bionic

** Changed in: webkit2gtk (Ubuntu) Status: In Progress => Won't Fix -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to webkit2gtk in Ubuntu. https://bugs.launchpad.net/bugs/1970783 Title: Multiple vulnerabilities in Bionic Status

[Desktop-packages] [Bug 1970783] Re: Multiple vulnerabilities in Bionic

** Changed in: webkit2gtk (Ubuntu) Assignee: Luís Infante da Câmara (luis220413) => (unassigned) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to webkit2gtk in Ubuntu. https://bugs.launchpad.net/bugs/1970783 Title: Multiple

[Desktop-packages] [Bug 1970783] Re: Multiple vulnerabilities in Bionic

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-32893 ** Description changed: The version in Bionic has multiple vulnerabilities. - Please backport version 2.36.0 or at least the security fixes in that + Please backport version 2.36.7 or at least the security fixes in that

[Desktop-packages] [Bug 1970783] Re: Multiple vulnerabilities in Bionic

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-32792 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-32816 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to webkit2gtk in Ubuntu.

[Desktop-packages] [Bug 1970783] Re: Multiple vulnerabilities in Bionic

** Attachment added: "Build log" https://bugs.launchpad.net/ubuntu/+source/webkit2gtk/+bug/1970783/+attachment/5598235/+files/webkit2gtk_2.36.3-0ubuntu0.18.04.1_amd64.build -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to webkit2gtk

[Desktop-packages] [Bug 1970783] Re: Multiple vulnerabilities in Bionic

Upstream bugs for CMake and ICU requirements: * CMake (3.12 then 3.21, Bionic has 3.10): https://bugs.webkit.org/show_bug.cgi?id=221727 * ICU (61.2, Bionic has 60.3): https://bugs.webkit.org/show_bug.cgi?id=229608 When I tried to build the new version (merged from Debian testing and with the

[Desktop-packages] [Bug 1970783] Re: Multiple vulnerabilities in Bionic

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-26700 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-26709 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-26717 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-26716 ** CVE

[Desktop-packages] [Bug 1970783] Re: Multiple vulnerabilities in Bionic

We are no longer able to update webkit2gtk in bionic as it has new toolchain requirements that can't be met. See: https://wiki.ubuntu.com/SecurityTeam/FAQ#WebKitGTK ** Changed in: webkit2gtk (Ubuntu) Importance: Undecided => Wishlist ** Changed in: webkit2gtk (Ubuntu) Status: New =>

[Desktop-packages] [Bug 1970783] Re: Multiple vulnerabilities in Bionic

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-42762 ** Description changed: - *** Incomplete - Do not fix now *** - The version in Bionic has multiple vulnerabilities. Please backport version 2.36.0 or at least the security fixes in that version. Upstream and

[Desktop-packages] [Bug 1970783] Re: Multiple vulnerabilities in Bionic

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-30934 ** Description changed: + *** Incomplete - Do not fix now *** + The version in Bionic has multiple vulnerabilities. Please backport version 2.36.0 or at least the security fixes in that version. Upstream and

[Desktop-packages] [Bug 1970783] Re: Multiple vulnerabilities in Bionic

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-22620 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-22589 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-22592 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-22590 --