Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 512
Alerts This Week
Warning Icon 1 512

Fedora 40: 2024-03a1955920 Moderate: webkitgtk crash issues

fedora
Calendar Grey January 4, 2025
Scroller Fedora
Critical enhancements to webkitgtk in Fedora 40 address instability and display problems with significant corrections.
Update to 2.46.5: Fix several crashes and rendering issues

Summary

WebKitGTK is the port of the WebKit web rendering engine to the

GTK platform.

Update Information:

Update to 2.46.5: Fix several crashes and rendering issues. CVE-2024-54479, CVE-2024-54502, CVE-2024-54508, CVE-2024-54505

Change Log

* Wed Dec 18 2024 Michael Catanzaro - 2.46.5-1 - Update to 2.46.5

References


[ 1 ] Bug #2333926 - CVE-2024-54479 webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2333926 [ 2 ] Bug #2334049 - CVE-2024-54508 webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2334049 [ 3 ] Bug #2334053 - CVE-2024-54505 webkitgtk: Processing maliciously crafted web content may lead to memory corruption [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2334053 [ 4 ] Bug #2334055 - CVE-2024-54502 webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2334055

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-03a1955920' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: webkitgtk
Product: Fedora 40
Version: 2.46.5
Release: 1.fc40
Summary: GTK web content engine library

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.