Debian: DSA-5341-1 Critical: Wpewebkit Code Exec Threats
debian
February 6, 2023
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2022-42826
Topics Covered
Summary
The following vulnerabilities have been discovered in the WebKitGTK
web engine:
CVE-2022-42826
Francisco Alonso discovered that processing maliciously crafted
web content may lead to arbitrary code execution.
CVE-2023-23517
YeongHyeon Choi, Hyeon Park, SeOk JEON, YoungSung Ahn, JunSeo Bae
and Dohyun Lee discovered that processing maliciously crafted web
content may lead to arbitrary code execution.
CVE-2023-23518
YeongHyeon Choi, Hyeon Park, SeOk JEON, YoungSung Ahn, JunSeo Bae
and Dohyun Lee discovered that processing maliciously crafted web
content may lead to arbitrary code execution.
For the stable distribution (bullseye), these problems have been fixed in
version 2.38.4-1~deb11u1.
We recommend that you upgrade your wpewebkit packages.
For the detailed security status of wpewebkit please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/wpewebkit
Further information about Debian Security Advisories, how to apply
these u...
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Package: wpewebkit
CVE ID: CVE-2022-42826 CVE-2023-23517 CVE-2023-23518
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!