-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 11 May 2023 13:12:55 +0200 Source: webkit2gtk Architecture: source Version: 2.38.6-0+deb10u1 Distribution: buster-security Urgency: medium Maintainer: Debian WebKit Maintainers <pkg-webkit-maintainers@lists.alioth.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Changes: webkit2gtk (2.38.6-0+deb10u1) buster-security; urgency=medium . * New upstream stable update. * CVE-2022-0108: information disclosure via iframes. * CVE-2022-32885: memory corruption leading to arbitrary code execution. * CVE-2023-27932: Same Origin Policy bypass. * CVE-2023-27954: information disclosure. * CVE-2023-28205: arbitrary code execution. * debian/patches/fix-jscast-undeclared-error.patch: - Fix a build issue in JavaScriptCore. Checksums-Sha1: 7191a4ab0832d4a96d545cafaa4daaecd5e59031 3765 webkit2gtk_2.38.6-0+deb10u1.dsc 4dfb3d96f621fc633ff347e083e429893551fb26 32541320 webkit2gtk_2.38.6.orig.tar.xz 005b09d56893618970f19ba22aa363ac9aec1a68 80304 webkit2gtk_2.38.6-0+deb10u1.debian.tar.xz daec1de6a37c5dac5d3b695aa03e98eafd87faf6 7083 webkit2gtk_2.38.6-0+deb10u1_source.buildinfo Checksums-Sha256: 92f2934f7fb3d15882cf4e63764936e7e36bb6c330cd946987c145c76723c577 3765 webkit2gtk_2.38.6-0+deb10u1.dsc 1c614c9589389db1a79ea9ba4293bbe8ac3ab0a2234cac700935fae0724ad48b 32541320 webkit2gtk_2.38.6.orig.tar.xz 2d141586d11abb7f39ec40aeae6334386e05ab10bf071dabd3a0a353f07ea9d9 80304 webkit2gtk_2.38.6-0+deb10u1.debian.tar.xz e63c81bdedfc7c52f67019b59c9097981d7e72b0a8b246ae02b59c77cb8b0ab5 7083 webkit2gtk_2.38.6-0+deb10u1_source.buildinfo Files: 0f6d2a706aeea2803ad013f1dfe091f5 3765 web optional webkit2gtk_2.38.6-0+deb10u1.dsc a50290fdc80842b1ae8be1e1147b5679 32541320 web optional webkit2gtk_2.38.6.orig.tar.xz 6d445e9360b13100856befa21cae3897 80304 web optional webkit2gtk_2.38.6-0+deb10u1.debian.tar.xz de8f707bd0ec7b88fc5efde9e73198f9 7083 web optional webkit2gtk_2.38.6-0+deb10u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmRczg8ACgkQnUbEiOQ2 gwKV8A//am7N3hi4fwz+8V7fL8D4Am0Qw8hFiz267qXFDvl6HQuDkRYodJmOGafz Sfmh0H083jt8bFcqrk0WSIocRE0WyrImuLCiGc0szzt8KvbsP8eTrZuS4SoxP6P8 N/HtCTJiKGv9SgNiIATbknFaaF69qt/+p1yZ/AQmqG0PBUDjbsoqxjI8KjFKRoH3 gAlYyArDXjSu/sU51efo/E9m/vvcTwMjaK1SnV6Ro0pipU5+4WmVCCMY40IC7iS5 5/NWMULusJ6mZfdz7odKaS73Txy1zaNHCo6ZFT8l/6rwZfGWWd7kjJcaS5hJhrh8 SEUXO3yc96haV2CPrWCOYbKz6VAefusgimnj6H2XeQYLVzuhK6P4equvYtpNn8+0 opdMsXzFTGOa2BLjY6W5jNtkugU25LMS0SlL9csuBZYQrvQFRJ8H8j1FbGT6eK2+ SWmGLSasmDyN5JcYeAzkp89YsKT3GdEqUba7Ck8//kp9FLT14/wXy3AmxVPMKnDZ dXRRYRzay37gdUDXPEHJuZ4TVdUQlGBjR39+MGiG+7LDhQbG0BPEPgPUNrbAIX5q Z2HibltOb2mK+hKmJgXRbIhbkXt/8WmUf0cqbY8IBFdVamuip6MuX6X4+6SgvtVE KWC4hQK4uMp+HCdss9m0MmmBuRc90kr6BnL7t3z298g4cg4RL3w= =yWtm -----END PGP SIGNATURE-----
