guix-patches
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[bug#64366] [PATCH]: Update webkitgtk to 2.40.3


From: André A . Gomes
Subject: [bug#64366] [PATCH]: Update webkitgtk to 2.40.3
Date: Fri, 30 Jun 2023 17:55:02 +0300
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux)

Hello Guix,

We should update webkitgtk ASAP since the vulnerability below has been
found.  Find the patch attached.  I didn't build it locally since my
machine isn't powerful enough.

CVE-2023-32439
    Versions affected: WebKitGTK and WPE WebKit before 2.40.3.
    Credit to an anonymous researcher.
    Impact: Processing maliciously crafted web content may lead to
    arbitrary code execution. Apple is aware of a report that this issue
    may have been actively exploited. Description: A type confusion
    issue was addressed with improved checks.

Thanks.


-- 
André A. Gomes
"You cannot even find the ruins..."

Attachment: 0001-gnu-webkitgtk-Update-to-2.40.3.patch
Description: Text Data


reply via email to

[Prev in Thread] Current Thread [Next in Thread]