[Git][security-tracker-team/security-tracker][master] lts: EOL webkit2gtk in buster

[Emilio Pozuelo Monfort (@pochu)]

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ffdeca83 by Emilio Pozuelo Monfort at 2023-07-08T00:02:23+02:00
lts: EOL webkit2gtk in buster

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1478,12 +1478,14 @@ CVE-2023-32480 (Dell BIOS contains an Improper Input Validation vulnerability. A
 CVE-2023-32439 (A type confusion issue was addressed with improved checks. This issue  ...)
 	{DSA-5449-1}
 	- webkit2gtk 2.40.3-1
+	[buster] - webkit2gtk <end-of-life> (webkit2gtk EOL in buster)
 	- wpewebkit 2.40.3-1
 	[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security support in Bookworm)
 	NOTE: https://webkitgtk.org/security/WSA-2023-0005.html
 CVE-2023-32435 (A memory corruption issue was addressed with improved state management ...)
 	{DSA-5396-1}
 	- webkit2gtk 2.40.0-1
+	[buster] - webkit2gtk <end-of-life> (webkit2gtk EOL in buster)
 	- wpewebkit 2.40.2-2
 	[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security support in Bookworm)
 	NOTE: https://webkitgtk.org/security/WSA-2023-0005.html
@@ -4935,6 +4937,7 @@ CVE-2023-32409 (The issue was addressed with improved bounds checks. This issue
 CVE-2023-32373 (A use-after-free issue was addressed with improved memory management.  ...)
 	{DSA-5427-1}
 	- webkit2gtk 2.40.2-1
+	[buster] - webkit2gtk <end-of-life> (webkit2gtk EOL in buster)
 	- wpewebkit 2.40.2-2
 	[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security support in Bookworm)
 	NOTE: https://bugs.webkit.org/show_bug.cgi?id=254840
@@ -16168,6 +16171,7 @@ CVE-2023-28205 (A use after free issue was addressed with improved memory manage
 CVE-2023-28204 (An out-of-bounds read was addressed with improved input validation. Th ...)
 	{DSA-5427-1}
 	- webkit2gtk 2.40.2-1
+	[buster] - webkit2gtk <end-of-life> (webkit2gtk EOL in buster)
 	- wpewebkit 2.40.2-2
 	[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security support in Bookworm)
 	NOTE: https://bugs.webkit.org/show_bug.cgi?id=254930


=====================================
data/dla-needed.txt
=====================================
@@ -244,15 +244,6 @@ thunderbird (pochu)
 tiff (Adrian Bunk)
   NOTE: 20230702: Added by Front-Desk (ta)
 --
-webkit2gtk (Emilio)
-  NOTE: 20230512: Re-added (pochu)
-  NOTE: 20230512: checking if upgrade to 2.40.x is possible, otherwise we'll have to EOL webkit (pochu)
-  NOTE: 20230529: made some progress on the backport, but there are still some blockers,
-  NOTE: 20230529: particularly around (the lack of) C++20 support. (pochu)
-  NOTE: 20230606: one issue remaining (cmake), but call for testing sent out already:
-  NOTE: 20230606: https://lists.debian.org/debian-lts/2023/06/msg00005.html (pochu)
-  NOTE: 20230627: will likely hold the update and mark as not-supported due to feedback (pochu)
---
 xqilla
   NOTE: 20230706: Added by Front-Desk (gladk)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ffdeca83b62c51a4ccee1a1348f9f05cb46d4e22

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ffdeca83b62c51a4ccee1a1348f9f05cb46d4e22
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230707/1cb01018/attachment-0001.htm>