tocsin

Debian/webkit2gtk: high 7.5

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which allows remote attackers to access the local filesystem via unspecified vectors.

Action: Upgrade webkit2gtk to 2.12.4-1 or later.

Affected

introducedfixedlast affected
02.12.4-1-

Fixed versions

2.12.4-1

Sources

published · modified · JSON