Update to WebKitGTK 2.50.1: Improve text rendering performance. Fix audio playback broken on instagram. Fix rendering of layers with fractional transforms. Fix several crashes and rendering issues.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-4ffeeb504f 2025-11-13 01:07:00.209314+00:00 -------------------------------------------------------------------------------- Name : webkitgtk Product : Fedora 42 Version : 2.50.1 Release : 1.fc42 URL : https://www.webkitgtk.org/ Summary : GTK web content engine library Description : WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. -------------------------------------------------------------------------------- Update Information: Update to WebKitGTK 2.50.1: Improve text rendering performance. Fix audio playback broken on instagram. Fix rendering of layers with fractional transforms. Fix several crashes and rendering issues. Fix CVE-2025-43343 -------------------------------------------------------------------------------- ChangeLog: * Mon Oct 13 2025 Michael Catanzaro - 2.50.1-1 - Update to 2.50.1 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-4ffeeb504f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
* Always use a light theme for rendering form controls. * Fix several crashes and rendering issues. * Security fixes: CVE-2020-3862, CVE-2020-3864, CVE-2020-3865, CVE-2020-3867, CVE-2020-3868. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-4d11d35a1f 2020-02-23 01:09:04.861399 --------------------------------------------------------------------------------Name : webkit2gtk3 Product : Fedora 30 Version : 2.26.4 Release : 1.fc30 URL : https://www.webkitgtk.org/ Summary : GTK Web content engine library Description : WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3. --------------------------------------------------------------------------------Update Information: * Always use a light theme for rendering form controls. * Fix several crashes and rendering issues. * Security fixes: CVE-2020-3862, CVE-2020-3864, CVE-2020-3865, CVE-2020-3867, CVE-2020-3868 --------------------------------------------------------------------------------ChangeLog: * Fri Feb 14 2020 Michael Catanzaro - 2.26.4-1 - Update to 2.26.4 - Add GPG verification of tarball * Thu Jan 23 2020 Eike Rathke - 2.26.3-1 - Update to 2.26.3 * Fri Nov 8 2019 Eike Rathke - 2.26.2-1 - Update to 2.26.2 * Mon Oct 28 2019 Michael Catanzaro - 2.26.1-3 - Disable broken WPE renderer * Wed Oct 23 2019 Eike Rathke - 2.26.1-2 - Rebase to 2.26.1 * Wed Aug 28 2019 Tomas Popela - 2.24.4-1 - Update to 2.24.4 * Tue Jul 2 2019 Tomas Popela - 2.24.3-1 - Update to 2.24.3 * Fri May 17 2019 Eike Rathke - 2.24.2-1 - Update to 2.24.2 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-4d11d35a1f' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
USN-1463-1 introduced regressions in Firefox.. =========================================================================Ubuntu Security Notice USN-1463-3 June 20, 2012 firefox regressions ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS - Ubuntu 11.10 - Ubuntu 11.04 - Ubuntu 10.04 LTS Summary: USN-1463-1 introduced regressions in Firefox. Software Description: - firefox: Mozilla Open Source web browser Details: USN-1463-1 fixed vulnerabilities in Firefox. The new package caused a regression in the rendering of Hebrew text and the ability of the Hotmail inbox to auto-update. This update fixes the problem. Original advisory details: Jesse Ruderman, Igor Bukanov, Bill McCloskey, Christian Holler, Andrew McCreight, Olli Pettay, Boris Zbarsky, and Brian Bondy discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. (CVE-2012-1937, CVE-2012-1938) It was discovered that Mozilla's WebGL implementation exposed a bug in certain NVIDIA graphics drivers. The impact of this issue has not been disclosed at this time. (CVE-2011-3101) Adam Barth discovered that certain inline event handlers were not being blocked properly by the Content Security Policy's (CSP) inline-script blocking feature. Web applications relying on this feature of CSP to protect against cross-site scripting (XSS) were not fully protected. With cross-site scripting vulnerabilities, if a user were tricked into viewing a specially crafted page, a remote attacker could exploit this to modify the contents, or steal confidential data, within the same domain. (CVE-2012-1944) Paul Stone discovered that a viewed HTML page hosted on a Windows orSamba share could load Windows shortcut files (.lnk) in the same share. These shortcut files could then link to arbitrary locations on the local file system of the individual loading the HTML page. An attacker could potentially use this vulnerability to show the contents of these linked files or directories in an iframe, resulting in information disclosure. (CVE-2012-1945) Arthur Gerkis discovered a use-after-free vulnerability while replacing/inserting a node in a document. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. (CVE-2012-1946) Kaspar Brand discovered a vulnerability in how the Network Security Services (NSS) ASN.1 decoder handles zero length items. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit this to cause a denial of service via application crash. (CVE-2012-0441) Abhishek Arya discovered two buffer overflow and one use-after-free vulnerabilities. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. (CVE-2012-1940, CVE-2012-1941, CVE-2012-1947) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: firefox 13.0.1+build1-0ubuntu0.12.04.1 Ubuntu 11.10: firefox 13.0.1+build1-0ubuntu0.11.10.1 Ubuntu 11.04: firefox 13.0.1+build1-0ubuntu0.11.04.1 Ubuntu 10.04 LTS: firefox 13.0.1+build1-0ubuntu0.10.04.1 After a standard system update you need to restart Firefox to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1463-3 https://ubuntu.com/security/notices/USN-1463-1 https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1013425 Package Information: https://launchpad.net/ubuntu/+source/firefox/13.0.1+build1-0ubuntu0.12.04.1 https://launchpad.net/ubuntu/+source/firefox/13.0.1+build1-0ubuntu0.11.10.1 https://launchpad.net/ubuntu/+source/firefox/13.0.1+build1-0ubuntu0.11.04.1 https://launchpad.net/ubuntu/+source/firefox/13.0.1+build1-0ubuntu0.10.04.1 . We provide updates and details to address Firefox regressions in Ubuntu from security advisory USN-1463-3, including patches and risk mitigation steps. Firefox Update, Software Bug Fix, Web Browser Security, Ubuntu Security. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.