A use-after-free flaw was found in the way SVG clipping was implemented in Webkit. Reference: https://bugs.webkit.org/show_bug.cgi?id=80669 http://code.google.com/p/chromium/issues/detail?id=117471 Patch: http://trac.webkit.org/changeset/110563 Statement: This issue affects the version of webkitgtk as shipped with Red Hat Enterprise Linux 6.
Created webkitgtk tracking bugs for this issue Affects: fedora-all [bug 807891]