RHSA-2011:0177 — Red Hat Security Advisory: webkitgtk security update

Fixed packages 16

Release	Package	Fixed in
Red Hat · RHEL 6 enterprise_linux:6::client	webkitgtk	0:1.2.6-2.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client	webkitgtk-debuginfo	0:1.2.6-2.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client	webkitgtk-devel	0:1.2.6-2.el6_0
Red Hat · RHEL 6 enterprise_linux:6::client	webkitgtk-doc	0:1.2.6-2.el6_0
Red Hat · RHEL 6 enterprise_linux:6::computenode	webkitgtk	0:1.2.6-2.el6_0
Red Hat · RHEL 6 enterprise_linux:6::computenode	webkitgtk-debuginfo	0:1.2.6-2.el6_0
Red Hat · RHEL 6 enterprise_linux:6::computenode	webkitgtk-devel	0:1.2.6-2.el6_0
Red Hat · RHEL 6 enterprise_linux:6::computenode	webkitgtk-doc	0:1.2.6-2.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server	webkitgtk	0:1.2.6-2.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server	webkitgtk-debuginfo	0:1.2.6-2.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server	webkitgtk-devel	0:1.2.6-2.el6_0
Red Hat · RHEL 6 enterprise_linux:6::server	webkitgtk-doc	0:1.2.6-2.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation	webkitgtk	0:1.2.6-2.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation	webkitgtk-debuginfo	0:1.2.6-2.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation	webkitgtk-devel	0:1.2.6-2.el6_0
Red Hat · RHEL 6 enterprise_linux:6::workstation	webkitgtk-doc	0:1.2.6-2.el6_0

Vulnerabilities 30

High 7.5

CVE-2010-4577

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.55…

Dec 22, 2010
Unscored —

CVE-2010-1780

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and befo…

Jul 30, 2010
Unscored —

CVE-2010-1782

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and w…

Jul 30, 2010
Unscored —

CVE-2010-1783

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and w…

Jul 30, 2010
Unscored —

CVE-2010-1784

The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0.1 on…

Jul 30, 2010
Unscored —

CVE-2010-1785

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and w…

Jul 30, 2010
Unscored —

CVE-2010-1786

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and befo…

Jul 30, 2010
Unscored —

CVE-2010-1787

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and w…

Jul 30, 2010
Unscored —

CVE-2010-1788

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and w…

Jul 30, 2010
Unscored —

CVE-2010-1790

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and w…

Jul 30, 2010
Unscored —

CVE-2010-1792

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and w…

Jul 30, 2010
Unscored —

CVE-2010-1793

Multiple use-after-free vulnerabilities in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Window…

Jul 30, 2010
Unscored —

CVE-2010-1807 Public exploit EPSS 61%

WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not …

Sep 10, 2010
Unscored —

CVE-2010-1812

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6…

Sep 9, 2010
Unscored —

CVE-2010-1814

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to exe…

Sep 9, 2010
Unscored —

CVE-2010-1815

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6…

Sep 9, 2010
Unscored —

CVE-2010-3113

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remo…

Aug 24, 2010
Unscored —

CVE-2010-3114

The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node …

Aug 24, 2010
Unscored —

CVE-2010-3115

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which mi…

Aug 24, 2010
Unscored —

CVE-2010-3116

Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google …

Aug 24, 2010
Unscored —

CVE-2010-3119

Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows att…

Aug 24, 2010
Unscored —

CVE-2010-3255

Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote at…

Sep 7, 2010
Unscored —

CVE-2010-3257

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome befo…

Sep 7, 2010
Unscored —

CVE-2010-3259

WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk bef…

Sep 7, 2010
Unscored —

CVE-2010-3812

Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac O…

qtwebkit-source Ubuntu

Nov 20, 2010
Unscored —

CVE-2010-3813

The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari b…

qtwebkit-source Ubuntu

Nov 20, 2010
Unscored —

CVE-2010-4197

Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other p…

Nov 5, 2010
Unscored —

CVE-2010-4198

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handl…

Nov 5, 2010
Unscored —

CVE-2010-4204

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object…

Nov 5, 2010
Unscored —

CVE-2010-4206

Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in…

Nov 5, 2010

References

article
https://access.redhat.com/security/updates/classification/#moderate
report
https://bugzilla.redhat.com/show_bug.cgi?id=627366
report
https://bugzilla.redhat.com/show_bug.cgi?id=627703
report
https://bugzilla.redhat.com/show_bug.cgi?id=628032
report
https://bugzilla.redhat.com/show_bug.cgi?id=628035
report
https://bugzilla.redhat.com/show_bug.cgi?id=628071
report
https://bugzilla.redhat.com/show_bug.cgi?id=628076
report
https://bugzilla.redhat.com/show_bug.cgi?id=631939
report
https://bugzilla.redhat.com/show_bug.cgi?id=631946
report
https://bugzilla.redhat.com/show_bug.cgi?id=631948
report
https://bugzilla.redhat.com/show_bug.cgi?id=640353
report
https://bugzilla.redhat.com/show_bug.cgi?id=640357
report
https://bugzilla.redhat.com/show_bug.cgi?id=640360
report
https://bugzilla.redhat.com/show_bug.cgi?id=645914
report
https://bugzilla.redhat.com/show_bug.cgi?id=656115
report
https://bugzilla.redhat.com/show_bug.cgi?id=656118
report
https://bugzilla.redhat.com/show_bug.cgi?id=656126
report
https://bugzilla.redhat.com/show_bug.cgi?id=656129
report
https://bugzilla.redhat.com/show_bug.cgi?id=667022
report
https://bugzilla.redhat.com/show_bug.cgi?id=667024
report
https://bugzilla.redhat.com/show_bug.cgi?id=667025
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0177.json
report
https://access.redhat.com/security/cve/CVE-2010-1780
advisory
https://www.cve.org/CVERecord?id=CVE-2010-1780
advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-1780
report
https://access.redhat.com/security/cve/CVE-2010-1782
advisory
https://www.cve.org/CVERecord?id=CVE-2010-1782
advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-1782
report
https://access.redhat.com/security/cve/CVE-2010-1783
advisory
https://www.cve.org/CVERecord?id=CVE-2010-1783
advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-1783
report
https://access.redhat.com/security/cve/CVE-2010-1784
advisory
https://www.cve.org/CVERecord?id=CVE-2010-1784
advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-1784
report
https://access.redhat.com/security/cve/CVE-2010-1785
advisory
https://www.cve.org/CVERecord?id=CVE-2010-1785
advisory
https://nvd.nist.gov/vuln/detail/CVE-2010-1785
report
https://access.redhat.com/security/cve/CVE-2010-1786
advisory
https://www.cve.org/CVERecord?id=CVE-2010-1786

Red Hat Security Advisory: webkitgtk security update

Fixed packages 16

Vulnerabilities 30

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.55…

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and befo…

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and w…

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and w…

The counters functionality in the Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0.1 on…

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and w…

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and befo…

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and w…

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and w…

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and w…

WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and w…

Multiple use-after-free vulnerabilities in WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Window…

WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not …

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6…

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to exe…

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6…

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remo…

The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node …

Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which mi…

Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google …

Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows att…

Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote at…

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome befo…

WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk bef…

Integer overflow in the Text::wholeText method in dom/Text.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac O…

The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari b…

Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other p…

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handl…

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object…

Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in…

References