Summary
[2.54.2-3]
- Update bundled ANGLE to 751417514a52 and Skia to ca84ce0a6f16, both from
Chromium's M157 milestone.
- Move exception handling in JSGlobalObject to fix crashes with our downstream
icu-67.patch
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | webkit2gtk3 | 0:2.54.2-3.el8_10 |
| Oracle Linux · 8 | webkit2gtk3-devel | 0:2.54.2-3.el8_10 |
| Oracle Linux · 8 | webkit2gtk3-jsc | 0:2.54.2-3.el8_10 |
| Oracle Linux · 8 | webkit2gtk3-jsc-devel | 0:2.54.2-3.el8_10 |
Vulnerabilities 10
-
Critical 9.6
Buffer overflow in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code out…
-
Critical 9.6
Use after free in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code out…
-
Critical 9.6
Buffer overflow in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code ou…
-
High 8.3
Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the re…
-
High 8.3
Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitr…
-
High 7.4
Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the…
-
High 7.4
Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the…
-
High 7.4
Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory …
-
High 7.4
Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised th…
-
Medium 6.5
Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin…