[SECURITY] [DLA 3124-1] webkit2gtk security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3124-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Emilio Pozuelo Monfort
September 28, 2022 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : webkit2gtk
Version : 2.38.0-1~deb10u1
CVE ID : CVE-2022-32886
The following vulnerabilities have been discovered in the WebKitGTK
web engine:
CVE-2022-32886
P1umer, afang5472 and xmzyshypnc discovered that processing
maliciously crafted web content may lead to arbitrary code
execution
For Debian 10 buster, this problem has been fixed in version
2.38.0-1~deb10u1.
We recommend that you upgrade your webkit2gtk packages.
For the detailed security status of webkit2gtk please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/webkit2gtk
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=/GVv
-----END PGP SIGNATURE-----
Reply to: