On Sat, Sep 07, 2019 at 09:33:20PM +0200, Salvatore Bonaccorso wrote: > Thanks. Could you as well triage the recent CVEs which are fixed in > DSA-4515-1 for unstable? Which is the first unstable version having > the fix? They are indicated in the debian/changelog file: https://salsa.debian.org/webkit-team/webkit/blob/f6f01dcdb7a7b81bb56669d94e17672ef4513ab6/debian/changelog Berto