Fedora Linux 8648 Published by

A webkitgtk security update has been released for Fedora 38.



[SECURITY] Fedora 38 Update: webkitgtk-2.40.3-1.fc38


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-6f883415a6
2023-07-01 01:44:29.430868
--------------------------------------------------------------------------------

Name : webkitgtk
Product : Fedora 38
Version : 2.40.3
Release : 1.fc38
URL : https://www.webkitgtk.org/
Summary : GTK web content engine library
Description :
WebKitGTK is the port of the WebKit web rendering engine to the
GTK platform.

--------------------------------------------------------------------------------
Update Information:

Update to 2.40.3: * Make memory pressure monitor honor
memory.memsw.usage_in_bytes if exists. * Include key modifiers in wheel events.
* Apply cookie blocking policy to WebSocket handshakes. * Fix several crashes
and rendering issues. * Security fixes: CVE-2023-32439
--------------------------------------------------------------------------------
ChangeLog:

* Wed Jun 28 2023 Michael Catanzaro [mcatanzaro@redhat.com] - 2.40.3-1
- Update to 2.40.3
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2212303 - [abrt] epiphany-runtime: std::__glibcxx_assert_fail(char const*, int, char const*, char const*)(): epiphany killed by SIGABRT
https://bugzilla.redhat.com/show_bug.cgi?id=2212303
[ 2 ] Bug #2218641 - TRIAGE-CVE-2023-32439 webkitgtk: type confusion issue leading to arbitrary code execution [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2218641
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-6f883415a6' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------