Skip to content
OpenAdvisories
High ALAS2-2023-1960 1 CVE

Important: webkitgtk4 security update (Amazon Linux 2)

Published Feb 17, 2023 · Updated Feb 22, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-42823: A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may lead to arbitrary code execution.

Fixed packages 6

ReleasePackageFixed in
Amazon Linux · 2 webkitgtk4 0:2.28.2-3.amzn2.0.2
Amazon Linux · 2 webkitgtk4-debuginfo 0:2.28.2-3.amzn2.0.2
Amazon Linux · 2 webkitgtk4-devel 0:2.28.2-3.amzn2.0.2
Amazon Linux · 2 webkitgtk4-doc 0:2.28.2-3.amzn2.0.2
Amazon Linux · 2 webkitgtk4-jsc 0:2.28.2-3.amzn2.0.2
Amazon Linux · 2 webkitgtk4-jsc-devel 0:2.28.2-3.amzn2.0.2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-42823.html