• [SECURITY] [DSA 5031-1] wpewebkit security update

    From Alberto Garcia@21:1/5 to All on Thu Dec 23 23:50:01 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA256

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-5031-1 security@debian.org https://www.debian.org/security/ Alberto Garcia December 23, 2021 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : wpewebkit
    CVE ID : CVE-2021-30887 CVE-2021-30890

    The following vulnerabilities have been discovered in the wpewebkit
    web engine:

    CVE-2021-30887

    Narendra Bhati discovered that processing maliciously crafted web
    content may lead to unexpectedly unenforced Content Security
    Policy.

    CVE-2021-30890

    An anonymous researcher discovered that processing maliciously
    crafted web content may lead to universal cross site scripting.

    For the stable distribution (bullseye), these problems have been fixed in version 2.34.3-1~deb11u1.

    We recommend that you upgrade your wpewebkit packages.

    For the detailed security status of wpewebkit please refer to
    its security tracker page at: https://security-tracker.debian.org/tracker/wpewebkit

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEYrwugQBKzlHMYFizAAyEYu0C2AIFAmHE+XgACgkQAAyEYu0C 2AIDJw/+NEHN4o4ntT/oZnxBJxHE36CQlflXlcw3b6sGD9uqqa62sWcd6hs6NJRO ob4jZLOB/2RapmxoAd+2skbEovzFK7L/zPfTbmTeOrQKJCfaHdQcx57SesXo3qGz VdxXfZxE5JjhuPRvXH8gRSEoyvL3MtiHMUCufzQ3mbZs+JLGe9KHssRkaXPDFmRl RZMZRZ0VgtAL7k1AStP1GzhsJlT8AjK/XeJQsZdrYFTHvIWcYddrRHKkkYqXPjdZ Doz0gbZz7KJ2pRZkIdpmc1695Wu2aOlFXcRe84MTth2TEcoedh7Bn2Y+9v9b9mKw xh3LfsH43sEXf+cHtSg+05YmL+DI993jvCgGR1Th5k2j8Yoe+Gx/cIQo5+iOGV43 PhHo59KWJBEBhpKUh5YEotF13X6c9UlBbHz0lMNo3an+tVAyodEPuAzvBhoWAzWu FT9oFJI08n6a91J7oxFDk2cXuppMO8U3zwx1O8uiQ/SEhMTpbKZa2iS6kcpzoLaY jp7gCU93YWIogWZmW6sgggScF7heaSyMWTCuu58+3BDZe9Qtsq2r4fnK8VTFSenv hNdAdLmZXN/LP3q4FjVoER9zHyplWEzFd9AzhT4c1iiNFQUhC+5L/QiFwifd86la o8NX6Rss0IpcjZ/KtaOu2IN+n5DDojvCjvlaTNy/o/eKDsN12aU=
    =3oI4
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)