Igalia / meta-webkit

Yocto / OpenEmbedded layer for WebKit based engines and browsers
MIT License
125 stars 69 forks source link

webkitgtk,wpewebkit: Bump up version to 2.32.4 #311

Closed psaavedra closed 2 years ago

psaavedra commented 2 years ago

Security Advisory:

CVE-2021-30858 Versions affected: WebKitGTK and WPE WebKit before 2.32.4. Credit to an anonymous researcher. Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Description: A use after free issue was addressed with improved memory management.