Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Debian: DSA-4563-1 Moderate: Execution Vulnerability in Webkit2gtk

debian
Calendar Grey November 12, 2019
Debian Logo
Enhance webkit2gtk in order to address severe code execution vulnerabilities present in the DSA-4563-1 patch for Debian.
These vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2019-8812

Summary

These vulnerabilities have been discovered in the webkit2gtk web engine:

CVE-2019-8812

An anonymous researcher discovered that maliciously crafted web
content may lead to arbitrary code execution.

CVE-2019-8814

Cheolung Lee discovered that maliciously crafted web content may
lead to arbitrary code execution.

For the stable distribution (buster), these problems have been fixed in
version 2.26.2-1~deb10+1.

We recommend that you upgrade your webkit2gtk packages.

For the detailed security status of webkit2gtk please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/webkit2gtk

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Package: webkit2gtk
CVE ID: CVE-2019-8812 CVE-2019-8814

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here