NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4b2ba364b0
kumquat-buildroot/package/webkitgtk/webkitgtk.hash

5 lines
273 B
Plaintext
Raw Normal View History

webkitgtk: security bump to version 2.12.4 Fixes: CVE-2016-4590 - mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. CVE-2016-4591 - mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors. CVE-2016-4622 - allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4623, and CVE-2016-4624. CVE-2016-4624 - allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4623. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-08-28 15:11:39 +02:00
# From http://www.webkitgtk.org/releases/webkitgtk-2.12.4.tar.xz.sha1
sha1 ebfe6015d81129b6a13a9596d065c54e9c1b93f6 webkitgtk-2.12.4.tar.xz
webkitgtk: new package Add the latest 2.12.x upstream stable branch. Both 2.4.x and 2.12.x can live side-by-side, however only the latest stable branch/releases are security-maintained, so add it unslotted. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-04-29 15:46:08 +02:00
# Calculated based on the hash above
webkitgtk: security bump to version 2.12.4 Fixes: CVE-2016-4590 - mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. CVE-2016-4591 - mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors. CVE-2016-4622 - allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4623, and CVE-2016-4624. CVE-2016-4624 - allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4623. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2016-08-28 15:11:39 +02:00
sha256 424d3177599abbc1eb1a1ad7928dd280a62006e992f2fada2e059375a9609a77 webkitgtk-2.12.4.tar.xz
Reference in New Issue Copy Permalink