Debian: DSA-5115-1 Critical WebKitGTK Arbitrary Code Execution
debian
April 8, 2022
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-22624
Topics Covered
Summary
The following vulnerabilities have been discovered in the WebKitGTK
web engine:
CVE-2022-22624
Kirin discovered that processing maliciously crafted web content
may lead to arbitrary code execution.
CVE-2022-22628
Kirin discovered that Processing maliciously crafted web content
may lead to arbitrary code execution.
CVE-2022-22629
Jeonghoon Shin discovered that processing maliciously crafted web
content may lead to arbitrary code execution.
For the oldstable distribution (buster), these problems have been fixed
in version 2.36.0-3~deb10u1.
For the stable distribution (bullseye), these problems have been fixed in
version 2.36.0-3~deb11u1.
We recommend that you upgrade your webkit2gtk packages.
For the detailed security status of webkit2gtk please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/webkit2gtk
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
...
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Package: webkit2gtk
CVE ID: CVE-2022-22624 CVE-2022-22628 CVE-2022-22629
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!