Following vulnerability was discovered on the 2.4 stable series of WebKitGTK+: CVE-2013-2875 core/rendering/svg/SVGInlineTextBox.cpp in the SVG implementation in Blink, as used in Google Chrome before 28.0.1500.71, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. External References: http://webkitgtk.org/security/WSA-2015-0001.html
Created webkitgtk4 tracking bugs for this issue: Affects: fedora-all [bug 1186276]
Created webkitgtk3 tracking bugs for this issue: Affects: fedora-all [bug 1181092]
Statement: Red Hat Product Security has rated this issue as having Moderate security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.