<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<h3>
Salvatore Bonaccorso pushed to branch master
at <a href="https://salsa.debian.org/security-tracker-team/security-tracker">Debian Security Tracker / security-tracker</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/security-tracker-team/security-tracker/commit/8c111845d14aefa1ccbc019b3badd75db3f7f011">8c111845</a></strong>
<div>
<span>by Salvatore Bonaccorso</span>
<i>at 2019-04-17T06:54:35Z</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">Remove tracking of src:epiphany-browser for CVE-2019-6251
The issue is in webkit2gtk and was adressed there[1]. Updated
description to "WebKitGTK and WPE WebKit prior to version 2.24.1 are
vulnerable to address bar spoofing upon certain JavaScript redirections.
An attacker could cause malicious web content to be displayed as if for
a trusted URI."
[1] https://gitlab.gnome.org/GNOME/epiphany/issues/532
</pre>
</li>
</ul>
<h4>1 changed file:</h4>
<ul>
<li class="file-stats">
<a href="#4716ef5aa8f2742228ba3b3633215c8b808565e3">
data/CVE/list
</a>
</li>
</ul>
<h4>Changes:</h4>
<li id="4716ef5aa8f2742228ba3b3633215c8b808565e3">
<a href="https://salsa.debian.org/security-tracker-team/security-tracker/commit/8c111845d14aefa1ccbc019b3badd75db3f7f011#4716ef5aa8f2742228ba3b3633215c8b808565e3"><strong>data/CVE/list</strong></a>
<hr>
No preview for this file type
<br>
</li>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #777;">
—
<br>
<a href="https://salsa.debian.org/security-tracker-team/security-tracker/commit/8c111845d14aefa1ccbc019b3badd75db3f7f011">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.
<script type="application/ld+json">{"@context":"http://schema.org","@type":"EmailMessage","action":{"@type":"ViewAction","name":"View Commit","url":"https://salsa.debian.org/security-tracker-team/security-tracker/commit/8c111845d14aefa1ccbc019b3badd75db3f7f011"}}</script>
</p>
</div>
</body>
</html>