[Deepin Integration]~[v25-Release] fix: backport security fixes for multiple CVEs in webkit2gtk by Zeno-sole@deepin-community/webkit2gtk by deepin-community-ci-bot[bot]

[deepin-bot]

Package information | 软件包信息

包名	版本
webkit2gtk	2.50.4-1~deb12u1deepin2

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-3800/testing/ ./

Changelog | 更新信息

webkit2gtk (2.50.4-1~deb12u1deepin2) unstable; urgency=medium

• Security update (CVE-2026-20652):
  • Fix integer underflow in AudioResamplerKernel::getSourceSpan().
    • Add debian/patches/CVE-2026-20652.patch.
• Security fixes already present in upstream 2.50.4:
  • CVE-2023-43010: Use-after-free in RenderTree.
  • CVE-2025-31223: Memory corruption via improved checks.
  • CVE-2025-31277: Memory corruption in JSC RegExp match results.
  • CVE-2025-43433: Memory corruption via improved memory handling.

[deepin-bot]

Integration Test Info

Test suggestion | 测试建议

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

[deepin-bot]

IntegrationProjector Notify the author
@zeno: Integrated issue updated

[deepin-bot]

IntegrationProjector Bot
Deepin Testing Integration Project Manager Info
Link to deepin-community/Repository-Integration#3800