ALSA-2023:7715 — Important: webkit2gtk3 security update

Summary

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: Arbitrary Remote Code Execution (CVE-2023-42917)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 4

Release	Package	Fixed in
AlmaLinux · 9	webkit2gtk3	2.40.5-1.el9_3.1
AlmaLinux · 9	webkit2gtk3-devel	2.40.5-1.el9_3.1
AlmaLinux · 9	webkit2gtk3-jsc	2.40.5-1.el9_3.1
AlmaLinux · 9	webkit2gtk3-jsc-devel	2.40.5-1.el9_3.1

Vulnerabilities 1

High 8.8

CVE-2023-42917 Exploited

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu Wolfi

Nov 30, 2023
KEV Dec 4, 2023

References

report
https://access.redhat.com/security/cve/CVE-2023-42917
report
https://bugzilla.redhat.com/2253058
advisory
https://errata.almalinux.org/9/ALSA-2023-7715.html

Important: webkit2gtk3 security update

Summary

Fixed packages 4

Vulnerabilities 1

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.…

References