Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-11713 →
DEBIAN-CVE-2018-11713
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 o...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by crafted web sites via a WebSocket connection.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
webkit2gtk
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-2"}]}]
Debian:13
webkit2gtk
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-2"}]}]
Debian:14
webkit2gtk
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-2"}]}]
Références
- advisory security-tracker.debian.org