Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Fedora 37: 2023-1536766e9f Critical: Webkitgtk Code Execution Threat

fedora
Calendar Grey October 14, 2023
Dist Fedora Esm H88
Essential security patches in webkitgtk for Fedora 37 address potential code execution risks and boost system efficiency.
* New renderer based on DMA-BUF shared buffers

Summary

WebKitGTK is the port of the WebKit web rendering engine to the

GTK platform.

Update Information:

* New renderer based on DMA-BUF shared buffers. * Add new permission request to handle DOM paste access requests. * Add API to configure experimental features at runtime. * Add API to set the percentage of volume space that can be used for data storage. * GBM is no longer required for WebGL implementation. * Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-41993

Topics%20covered

Topics Covered

security advisory software update Fedora code execution security fix critical threat webkitgtk

Change Log

* Wed Sep 27 2023 Michael Catanzaro - 2.42.1-1 - Update to 2.40.1 and fix GL dependencies * Fri Sep 15 2023 Michael Catanzaro - 2.42.0-1 - Upgrade to 2.42.0

References


[ 1 ] Bug #2240526 - CVE-2023-41993 webkitgtk: processing malicious web content may lead to arbitrary code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2240526 [ 2 ] Bug #2241401 - CVE-2023-39928 webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2241401 [ 3 ] Bug #2241404 - CVE-2023-35074 webkitgtk: processing web content may lead to arbitrary code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2241404 [ 4 ] Bug #2241413 - CVE-2023-41074 webkitgtk: processing web content may lead to arbitrary code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2241413

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-1536766e9f' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: webkitgtk
Product: Fedora 37
Version: 2.42.1
Release: 1.fc37
URL: https://www.webkitgtk.org/
Summary: GTK web content engine library

Topics%20covered

Topics Covered

security advisory software update Fedora code execution security fix critical threat webkitgtk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.