WebKitGTK and WPE WebKit failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH, or Smooth Streaming), an error resulting in deanonymization. This issue was corrected by changing the way livestreams are downloaded. Reference: https://webkitgtk.org/security/WSA-2019-0002.html https://wpewebkit.org/security/WSA-2019-0002.html
Created mingw-webkitgtk tracking bugs for this issue: Affects: fedora-all [bug 1709313]
Created mingw-webkitgtk tracking bugs for this issue: Affects: epel-7 [bug 1709314] Created mingw-webkitgtk3 tracking bugs for this issue: Affects: epel-7 [bug 1709315]
Created webkit2gtk3 tracking bugs for this issue: Affects: fedora-all [bug 1717748]
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2020:4035 https://access.redhat.com/errata/RHSA-2020:4035
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2019-11070