[Webkit-unassigned] [Bug 244249] heap-use-after-free in WebCore::RenderLayer::setNextSibling()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=244249

Carlos Alberto Lopez Perez <clopez at igalia.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Group|Security-Sensitive          |
                 CC|                            |clopez at igalia.com
          Component|Security                    |WebCore Misc.
         Resolution|INVALID                     |FIXED
           Assignee|webkit-security-unassigned@ |webkit-unassigned at lists.web
                   |lists.webkit.org            |kit.org
            Product|Security                    |WebKit

--- Comment #3 from Carlos Alberto Lopez Perez <clopez at igalia.com> ---
This issue has been fixed on WebKitGTK 2.36.8 or later.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230202/20abbd0c/attachment-0001.htm>