Linux · Security advisory · December 25, 2024

DSA-5835-1: webkit2gtk security update

DSA-5835-1, released December 25, 2024, fixes 1 CVE in webkit2gtk (version 2.46.5-1~deb12u1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0159
75th percentile

Fixed package versions

ProductReleaseFixed in
webkit2gtkDebian 12.15 (bookworm)2.46.5-1~deb12u1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-54479 WebKit: Processing maliciously crafted web content may lead to an unexpected process crash 7.5 0.0159 None reported
Showing 1 to 1 of 1 1