Debian: CVE-2023-25362: webkit2gtk, wpewebkit -- security update

Debian: CVE-2023-25362: webkit2gtk, wpewebkit -- security update

Severity

9

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

03/02/2023

Created

03/08/2023

Added

03/07/2023

Modified

01/28/2025

Description

A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

Solution(s)

• debian-upgrade-webkit2gtk
• debian-upgrade-wpewebkit

References

• https://attackerkb.com/topics/cve-2023-25362
• CVE - 2023-25362
• DLA-3124-1
• DSA-5240-1
• DSA-5241-1