Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Red Hat Enterprise Linux 6: RHSA-2011:0177-01 WebkitGTK Moderate Memory Threat

red hat
Calendar Grey January 25, 2011
Dist Redhat Esm H88
Recent updates for webkitgtk have been issued to address several security flaws in Red Hat Enterprise Linux, rated with moderate severity.
Updated webkitgtk packages that fix several security issues are now available for Red Hat Enterprise Linux 6

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at

Summary

WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform.
Multiple memory corruption flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-1782, CVE-2010-1783, CVE-2010-1784, CVE-2010-1785, CVE-2010-1787, CVE-2010-1788, CVE-2010-1790, CVE-2010-1792, CVE-2010-1807, CVE-2010-1814, CVE-2010-3114, CVE-2010-3116, CVE-2010-3119, CVE-2010-3255, CVE-2010-3812, CVE-2010-4198)
Multiple use-after-free flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application. (CVE-2010-1780, CVE-2010-1786, CVE-2010-1793, CVE-2010-1812, CVE-2010-1815, CVE-2010-3113, CVE-2010-3257, CVE-2010-4197, CVE-2010-4204)
Two array index errors, leading to out-of-bounds memory reads, were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash. (CVE-2010-4206, CVE-2010-4577)
A flaw in WebKit could allow malicious web content to trick a user into thinking they are visiting the site reported by the location bar, when the page is actually content controlled by an attacker. (CVE-2010-3115)
It was found that WebKit did not correctly restrict read access to images created from the "canvas" element. Malicious web content could allow a remote attacker to bypass the same-origin policy and potentially access sensitive image data. (CVE-2010-3259)
A flaw was found in the way WebKit handled DNS prefetching. Even when it was disabled, web content containing certain "link" elements could cause WebKitGTK+ to perform DNS prefetching. (CVE-2010-3813)
Users of WebKitGTK+ should upgrade to these updated packages, which contain WebKitGTK+ version 1.2.6, and resolve these issues. All running applications that use WebKitGTK+ must be restarted for this update to take effect.

Topics%20covered

Topics Covered

security advisory Red Hat moderate threat memory issue webkitgtk

References

https://access.redhat.com/security/cve/CVE-2010-1780 https://access.redhat.com/security/cve/CVE-2010-1782 https://access.redhat.com/security/cve/CVE-2010-1783 https://access.redhat.com/security/cve/CVE-2010-1784 https://access.redhat.com/security/cve/CVE-2010-1785 https://access.redhat.com/security/cve/CVE-2010-1786 https://access.redhat.com/security/cve/CVE-2010-1787 https://access.redhat.com/security/cve/CVE-2010-1788 https://access.redhat.com/security/cve/CVE-2010-1790 https://access.redhat.com/security/cve/CVE-2010-1792 https://access.redhat.com/security/cve/CVE-2010-1793 https://access.redhat.com/security/cve/CVE-2010-1807 https://access.redhat.com/security/cve/CVE-2010-1812 https://access.redhat.com/security/cve/CVE-2010-1814 https://access.redhat.com/security/cve/CVE-2010-1815 https://access.redhat.com/security/cve/CVE-2010-3113 https://access.redhat.com/security/cve/CVE-2010-3114 https://access.redhat.com/security/cve/CVE-2010-3115 https://access.redhat.com/security/cve/CVE-2010-3116 https://access.redhat.com/security/cve/CVE-2010-3119 https://access.redhat.com/security/cve/CVE-2010-3255 https://access.redhat.com/security/cve/CVE-2010-3257 https://access.redhat.com/security/cve/CVE-2010-3259 https://access.redhat.com/security/cve/CVE-2010-3812 Read the Full Advisory

Package List

Red Hat Enterprise Linux Desktop (v. 6):
Source:
i386: webkitgtk-1.2.6-2.el6_0.i686.rpm webkitgtk-debuginfo-1.2.6-2.el6_0.i686.rpm
x86_64: webkitgtk-1.2.6-2.el6_0.x86_64.rpm webkitgtk-debuginfo-1.2.6-2.el6_0.x86_64.rpm
Red Hat Enterprise Linux Desktop Optional (v. 6):
Source:
i386: webkitgtk-debuginfo-1.2.6-2.el6_0.i686.rpm webkitgtk-devel-1.2.6-2.el6_0.i686.rpm webkitgtk-doc-1.2.6-2.el6_0.i686.rpm
x86_64: webkitgtk-1.2.6-2.el6_0.i686.rpm webkitgtk-debuginfo-1.2.6-2.el6_0.i686.rpm webkitgtk-debuginfo-1.2.6-2.el6_0.x86_64.rpm webkitgtk-devel-1.2.6-2.el6_0.i686.rpm webkitgtk-devel-1.2.6-2.el6_0.x86_64.rpm webkitgtk-doc-1.2.6-2.el6_0.x86_64.rpm
Red Hat Enterprise Linux HPC Node Optional (v. 6):
Source:
x86_64: webkitgtk-1.2.6-2.el6_0.i686.rpm webkitgtk-1.2.6-2.el6_0.x86_64.rpm webkitgtk-debuginfo-1.2.6-2.el6_0.i686.rpm webkitgtk-debuginfo-1.2.6-2.el6_0.x86_64.rpm webkitgtk-devel-1.2.6-2.el6_0.i686.rpm webkitgtk-devel-1.2.6-2.el6_0.x86_64.rpm webkitgtk-doc-1.2.6-2.el6_0.x86_64.rpm
Red Hat Enterprise Linux Server (v. 6):
Source:
i386: webkitgtk-1.2.6-2.el6_0.i686.rpm webkitgtk-debuginfo-1.2.6-2.el6_0.i686.rpm
ppc64: webkitgtk-1.2.6-2.el6_0.ppc.rpm webkitgtk-1.2.6-2.el6_0.ppc64.rpm webkitgtk-debuginfo-1.2.6-2.el6_0.ppc.rpm webkitgtk-debuginfo-1.2.6-2.el6_0.ppc64.rpm
s390x:

Read the Full Advisory


Advisory ID: RHSA-2011:0177-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2011:0177.html
Issue date: 2011-01-25

Topic

Updated webkitgtk packages that fix several security issues are nowavailable for Red Hat Enterprise Linux 6.The Red Hat Security Response Team has rated this update as having moderatesecurity impact. Common Vulnerability Scoring System (CVSS) base scores,which give detailed severity ratings, are available for each vulnerabilityfrom the CVE links in the References section.

Topics%20covered

Topics Covered

security advisory Red Hat moderate threat memory issue webkitgtk

Relevant Releases Architectures

Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64

Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64

Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64

Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64

Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64

Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64

Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64

Bugs Fixed

627366 - CVE-2010-1780 CVE-2010-1782 CVE-2010-1783 CVE-2010-1784 CVE-2010-1785 CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790 CVE-2010-1792 CVE-2010-1793 WebKit: multiple vulnerabilities in WebKitGTK

627703 - CVE-2010-1807 webkit: input validation error when parsing certain NaN values

628032 - CVE-2010-3113 webkit: memory corruption when handling SVG documents

628035 - CVE-2010-3114 webkit: bad cast with text editing

628071 - CVE-2010-3115 webkit: address bar spoofing with history bug

628076 - CVE-2010-3119 webkit: DoS due to improper Ruby support

631939 - CVE-2010-1812 webkit: use-after-free flaw in handling of selections

631946 - CVE-2010-1814 webkit: memory corruption flaw when handling form menus

631948 - CVE-2010-1815 webkit: use-after-free flaw when handling scrollbars640353 - CVE-2010-3116 webkit: memory corruption with MIME types

640357 - CVE-2010-3257 webkit: stale pointer issue with focusing

640360 - CVE-2010-3259 webkit: cross-origin image theft

645914 - CVE-2010-3255 webkit: DoS via improper handling of counter nodes

656115 - CVE-2010-4197 WebKit: Use-after-free vulnerabiity related to text editing causes memory corruption

656118 - CVE-2010-4198 WebKit: Memory corruption due to improper handling of large text area

656126 - CVE-2010-4204 WebKit: Use-after-free vulnerability related frame object

656129 - CVE-2010-4206 WebKit: Array index error during processing of an SVG document

Read the Full Advisory

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here