ArchLinux: 201812-10: webkit2gtk: arbitrary code execution
Summary
Multiple memory corruption issues have been found in WebKitGTK+ before 2.22.5, where processing maliciously crafted web content may lead to arbitrary code execution.
Resolution
Upgrade to 2.22.5-1.
# pacman -Syu "webkit2gtk>=2.22.5-1"
The problem has been fixed upstream in version 2.22.5.
References
https://webkitgtk.org/security/WSA-2018-0009.html https://webkitgtk.org/security/WSA-2018-0009.html#CVE-2018-4437 https://security.archlinux.org/CVE-2018-4437
Workaround
None.