Stay Secure with the Latest Linux Advisories

security advisoryfedoracritical

Fedora: 2017-bff1b87765 Critical: WebKitGTK+ Web Process Risks

This update addresses the following vulnerabilities: * [CVE-2017-2538](https://www.cve.org/CVERecord?id=CVE-2017-2538) Additional fixes: * Fix web process deadlock when seeking youtube videos. * Fix blob downloads. * Improve theme rendering performance when using GTK+ > = 3.20. * Fix positioning of popup menus in Wayland. * Fix JavaScriptCore crashes on big-. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-bff1b87765 2017-07-07 01:58:53.100758 --------------------------------------------------------------------------------Name : webkitgtk4 Product : Fedora 25 Version : 2.16.5 Release : 1.fc25 URL : https://www.webkitgtk.org/ Summary : GTK+ Web content engine library Description : WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3. --------------------------------------------------------------------------------Update Information: This update addresses the following vulnerabilities: * [CVE-2017-2538](https://www.cve.org/CVERecord?id=CVE-2017-2538) Additional fixes: * Fix web process deadlock when seeking youtube videos. * Fix blob downloads. * Improve theme rendering performance when using GTK+ > = 3.20. * Fix positioning of popup menus in Wayland. * Fix JavaScriptCore crashes on big-endian architectures * Fix a web process crash when page finishes loading in several web sites. * Fix the menu of select elements not showing in some cases under Wayland. * Fix several crashes and rendering issues. --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade webkitgtk4' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used bythe Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Essential updates have been released for WebKitGTK+ on Fedora to resolve various vulnerabilities and system hang-ups.. WebKitGTK+ Security Update, Fedora 25 Fixes, Linux Web Security. . Severity: Critical. LinuxSecurity.com Team

Jul 07, 2017 •Critical Fedora