Fedora 34 Security Advisory: WebKitGTK 2.34 Critical Code Execution

WebKitGTK is the port of the portable web rendering engine WebKit to the

GTK platform.

This package contains WebKit2 based WebKitGTK for GTK 3.

Update to WebKitGTK 2.34: * Add support for CSS Scroll Snap. * Add support

for date and datetime-local input elements. * Add support for display capture.

* Add support for ICC color management. * Add support color-schemes CSS

property. * Add multi-track support to MSE media backend. * Add new API to

handle web process unresponsiveness. * Add API to disable CORS on a web view

for particular domains. * Add new API to access/modify capture devices states.

* Add new API to configure the memory pressure handler. * Security fixes:

CVE-2021-30846, CVE-2021-30851, CVE-2021-42762

* Thu Oct 21 2021 Michael Catanzaro - 2.34.1-1

- Update to 2.34.1

[ 1 ] Bug #2017898 - CVE-2021-30846 webkitgtk: processing maliciously crafted web content may lead to arbitrary code execution

https://bugzilla.redhat.com/show_bug.cgi?id=2017898

su -c 'dnf upgrade --advisory FEDORA-2021-483d896d1d' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure