[Git][security-tracker-team/security-tracker][master] webkit2gtk / wpewebkit upstream advisory WSA-2023-0001

[Alberto Garcia (@berto)]

Alberto Garcia pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4edf3256 by Alberto Garcia at 2023-02-02T18:05:32+01:00
webkit2gtk / wpewebkit upstream advisory WSA-2023-0001

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -4172,10 +4172,16 @@ CVE-2023-23520
 	RESERVED
 CVE-2023-23519
 	RESERVED
-CVE-2023-23518
+CVE-2023-23518 [Processing maliciously crafted web content may lead to arbitrary code execution]
 	RESERVED
-CVE-2023-23517
+	- webkit2gtk 2.38.4-1
+	- wpewebkit 2.38.4-1
+	NOTE: https://webkitgtk.org/security/WSA-2023-0001.html
+CVE-2023-23517 [Processing maliciously crafted web content may lead to arbitrary code execution]
 	RESERVED
+	- webkit2gtk 2.38.4-1
+	- wpewebkit 2.38.4-1
+	NOTE: https://webkitgtk.org/security/WSA-2023-0001.html
 CVE-2023-23516
 	RESERVED
 CVE-2023-23515
@@ -27645,8 +27651,11 @@ CVE-2022-42828
 	RESERVED
 CVE-2022-42827 (An out-of-bounds write issue was addressed with improved bounds checki ...)
 	NOT-FOR-US: Apple
-CVE-2022-42826
+CVE-2022-42826 [Processing maliciously crafted web content may lead to arbitrary code execution]
 	RESERVED
+	- webkit2gtk 2.38.4-1
+	- wpewebkit 2.38.4-1
+	NOTE: https://webkitgtk.org/security/WSA-2023-0001.html
 CVE-2022-42825 (This issue was addressed by removing additional entitlements. This iss ...)
 	NOT-FOR-US: Apple
 CVE-2022-42824 (A logic issue was addressed with improved state management. This issue ...)


=====================================
data/dsa-needed.txt
=====================================
@@ -59,6 +59,10 @@ thunderbird (jmm)
 --
 tiff (aron)
 --
+webkit2gtk (berto)
+--
+wpewebkit (berto)
+--
 xrdp
   needs some additional clarification, tentatively DSA worthy
   maybe upgrade to 0.9.21 within bullseye?



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4edf32569d9d21bb7b223a0ba3293a8c98715edd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4edf32569d9d21bb7b223a0ba3293a8c98715edd
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230202/cf5a9e12/attachment-0001.htm>