it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Moritz Muehlenhoff <jmm AT debian.org>
- To: debian-security-announce AT lists.debian.org
- Subject: [IT-SecNots] [SECURITY] [DSA 4923-1] webkit2gtk security update
- Date: Sun, 30 May 2021 15:49:51 +0000
- Authentication-results: mail02.piratenpartei.de; dkim=none; spf=none (mail02.piratenpartei.de: domain of "bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org" has no SPF policy when checking 82.195.75.100) smtp.mailfrom="bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org"; dmarc=none
- List-archive: https://lists.debian.org/msgid-search/20210530154951.GA6849 AT seger.debian.org
- List-id: <debian-security-announce.lists.debian.org>
- List-url: <http://lists.debian.org/debian-security-announce/>
- Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Content-Type:MIME-Version:Message-ID:Subject:To:From: Date:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=t3w/QNLtqtFYjbBo9N+b5Sftp5bRgi8RQrZYDDkmK1c=; b=tj jmn364//Uq6ezChJRyGFd8ke/0N5rhkah2VojvNXhc1qSxk90racRHxZgIIKur2ERlB7/FigiTZcs 8knrU+zXX4k5pggJ8p67yB41GzAuR2kFkaV1GLHM6HLTeZIoFRwhbCqZYhosTBOJo9l3eLtB+tk1W rsJcL3ewQNaJr+5xIRq40kbamlmCISfuq2oQMKje6yvgvFtEhEGmso487pVyBF01KKOa8DOwRrGyg FX+aX/9kFDlk9QZdSVs8PJ2LrTtcyiqTO5bKf5fVT40Y+7UFXnyV2oc3spVUI3EEEaC5jFzlOJMRq 5E30QHTizZqtyUH4v3HO1EjbQCbEcxFA==;
- Old-return-path: <jmm AT seger.debian.org>
- Priority: urgent
- Resent-date: Sun, 30 May 2021 15:50:08 +0000 (UTC)
- Resent-from: debian-security-announce AT lists.debian.org
- Resent-message-id: <0iCqZGuqz0J.A.ve.vQ7sgB@bendel>
- Resent-sender: debian-security-announce-request AT lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-4923-1 security AT debian.org
https://www.debian.org/security/ Alberto Garcia
May 30, 2021 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : webkit2gtk
CVE ID : CVE-2021-1788 CVE-2021-1844 CVE-2021-1871
The following vulnerabilities have been discovered in the webkit2gtk
web engine:
CVE-2021-1788
Francisco Alonso discovered that processing maliciously crafted
web content may lead to arbitrary code execution.
CVE-2021-1844
Clement Lecigne and Alison Huffman discovered that processing
maliciously crafted web content may lead to arbitrary code
execution.
CVE-2021-1871
An anonymous researcher discovered that a remote attacker may be
able to cause arbitrary code execution.
For the stable distribution (buster), these problems have been fixed in
version 2.32.1-1~deb10u1.
We recommend that you upgrade your webkit2gtk packages.
For the detailed security status of webkit2gtk please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/webkit2gtk
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----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=mTUC
-----END PGP SIGNATURE-----
- [IT-SecNots] [SECURITY] [DSA 4923-1] webkit2gtk security update, Moritz Muehlenhoff, 30.05.2021
Archiv bereitgestellt durch MHonArc 2.6.24.