[Git][security-tracker-team/security-tracker][master] Add the wpewebkit versions that fix the CVEs from WSA-2024-0002

[Alberto Garcia (@berto)]

Alberto Garcia pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c0e3e59c by Alberto Garcia at 2024-04-12T01:23:47+02:00
Add the wpewebkit versions that fix the CVEs from WSA-2024-0002

See also commit bcbc48122cd575b0d938c82183ab1e8b384bf5d1

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6688,7 +6688,7 @@ CVE-2024-0957 (The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and S
 CVE-2023-42956 (The issue was addressed with improved memory handling. This issue is f ...)
 	- webkit2gtk 2.44.0-1
 	[buster] - webkit2gtk <end-of-life> (EOL in buster LTS)
-	- wpewebkit <unfixed>
+	- wpewebkit 2.44.1-1
 	[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security support in Bookworm)
 	[bullseye] - wpewebkit <ignored> (wpewebkit >= 2.40 can no longer be sensibly backported)
 	NOTE: https://webkitgtk.org/security/WSA-2024-0002.html
@@ -6697,7 +6697,7 @@ CVE-2023-42954 (A privilege escalation issue existed in FileMaker Server, potent
 CVE-2023-42950 (A use after free issue was addressed with improved memory management.  ...)
 	- webkit2gtk 2.44.0-1
 	[buster] - webkit2gtk <end-of-life> (EOL in buster LTS)
-	- wpewebkit <unfixed>
+	- wpewebkit 2.44.1-1
 	[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security support in Bookworm)
 	[bullseye] - wpewebkit <ignored> (wpewebkit >= 2.40 can no longer be sensibly backported)
 	NOTE: https://webkitgtk.org/security/WSA-2024-0002.html
@@ -10178,7 +10178,7 @@ CVE-2024-23285 (This issue was addressed with improved handling of symlinks. Thi
 CVE-2024-23284 (A logic issue was addressed with improved state management. This issue ...)
 	- webkit2gtk 2.44.0-1
 	[buster] - webkit2gtk <end-of-life> (EOL in buster LTS)
-	- wpewebkit <unfixed>
+	- wpewebkit 2.44.1-1
 	[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security support in Bookworm)
 	[bullseye] - wpewebkit <ignored> (wpewebkit >= 2.40 can no longer be sensibly backported)
 	NOTE: https://webkitgtk.org/security/WSA-2024-0002.html
@@ -10189,7 +10189,7 @@ CVE-2024-23281 (This issue was addressed with improved state management. This is
 CVE-2024-23280 (An injection issue was addressed with improved validation. This issue  ...)
 	- webkit2gtk 2.44.0-1
 	[buster] - webkit2gtk <end-of-life> (EOL in buster LTS)
-	- wpewebkit <unfixed>
+	- wpewebkit 2.44.1-1
 	[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security support in Bookworm)
 	[bullseye] - wpewebkit <ignored> (wpewebkit >= 2.40 can no longer be sensibly backported)
 	NOTE: https://webkitgtk.org/security/WSA-2024-0002.html
@@ -10226,7 +10226,7 @@ CVE-2024-23264 (A validation issue was addressed with improved input sanitizatio
 CVE-2024-23263 (A logic issue was addressed with improved validation. This issue is fi ...)
 	- webkit2gtk 2.44.0-1
 	[buster] - webkit2gtk <end-of-life> (EOL in buster LTS)
-	- wpewebkit <unfixed>
+	- wpewebkit 2.44.1-1
 	[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security support in Bookworm)
 	[bullseye] - wpewebkit <ignored> (wpewebkit >= 2.40 can no longer be sensibly backported)
 	NOTE: https://webkitgtk.org/security/WSA-2024-0002.html
@@ -10245,7 +10245,7 @@ CVE-2024-23255 (An authentication issue was addressed with improved state manage
 CVE-2024-23254 (The issue was addressed with improved UI handling. This issue is fixed ...)
 	- webkit2gtk 2.44.0-1
 	[buster] - webkit2gtk <end-of-life> (EOL in buster LTS)
-	- wpewebkit <unfixed>
+	- wpewebkit 2.44.1-1
 	[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security support in Bookworm)
 	[bullseye] - wpewebkit <ignored> (wpewebkit >= 2.40 can no longer be sensibly backported)
 	NOTE: https://webkitgtk.org/security/WSA-2024-0002.html
@@ -14884,7 +14884,7 @@ CVE-2023-42848 (The issue was addressed with improved bounds checks. This issue
 CVE-2023-42843 (An inconsistent user interface issue was addressed with improved state ...)
 	- webkit2gtk 2.44.0-1
 	[buster] - webkit2gtk <end-of-life> (EOL in buster LTS)
-	- wpewebkit <unfixed>
+	- wpewebkit 2.44.1-1
 	[bookworm] - wpewebkit <ignored> (wpewebkit not covered by security support in Bookworm)
 	[bullseye] - wpewebkit <ignored> (wpewebkit >= 2.40 can no longer be sensibly backported)
 	NOTE: https://webkitgtk.org/security/WSA-2024-0002.html



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c0e3e59c020065868649e86bd7e58f1386352f42

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c0e3e59c020065868649e86bd7e58f1386352f42
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240411/42636844/attachment.htm>