webkit2gtk3-2.30.4-3.el8

エラータID: AXSA:2021-2522:01

Release date: 
Tuesday, November 2, 2021 - 15:15
Subject: 
webkit2gtk3-2.30.4-3.el8
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-30858)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* WebProcess::initializeWebProcess crashing on aarch64

CVE-2021-30858
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Solution: 

Update packages.

CVEs: 
CVE-2021-30858
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Additional Info: 

N/A

Download: 

SRPMS
  1. webkit2gtk3-2.30.4-3.el8.src.rpm
    MD5: fa9e3f2c6706363da3f807075a280afc
    SHA-256: 16ed8a41b5c2e483f02b59839e460ea9c1bac5f72af931263b1736df54ef58b2
    Size: 21.30 MB

Asianux Server 8 for x86_64
  1. webkit2gtk3-2.30.4-3.el8.x86_64.rpm
    MD5: b3c04aece13d56440bc349e378176fc3
    SHA-256: 21a5b0504726e89283df04400e815c07f548c6a4903bdcfbacf3a2ee27c0db7f
    Size: 16.32 MB
  2. webkit2gtk3-devel-2.30.4-3.el8.x86_64.rpm
    MD5: 33bdfd82f83458c3fd678517055a409d
    SHA-256: 616e3740439d7a6843b6995d4bc7afcbc0d5e633416ecb93c716a33ac5d7333f
    Size: 272.57 kB
  3. webkit2gtk3-jsc-2.30.4-3.el8.x86_64.rpm
    MD5: ad672f7dedabc0fcafd08eac1a3ad70a
    SHA-256: f66b526952218754dcc3b1c8a5e9b447fd007c993daacf298f8ee6fb274e2172
    Size: 6.01 MB
  4. webkit2gtk3-jsc-devel-2.30.4-3.el8.x86_64.rpm
    MD5: 4140e8fead37ff4e1a70ea75807bc69d
    SHA-256: 98fd6907f9b8375d706f7ea913f7ffdce0cd88d49c8fbcaa481a1124a66cc4f2
    Size: 133.04 kB
  5. webkit2gtk3-2.30.4-3.el8.i686.rpm
    MD5: 582f6cd495f7cd91baef45ed2431f3c4
    SHA-256: 143a30586fcdb2bd74938a1f0b20d366ba102a6e2940bbbaa35e71b5d864f04a
    Size: 17.86 MB
  6. webkit2gtk3-devel-2.30.4-3.el8.i686.rpm
    MD5: cae7605a2cdf39c775fd29234cd1d105
    SHA-256: 78df4ca04f91613d7e04dcb8544f66d75849535554fe07c6056bcdce0740f1b3
    Size: 276.64 kB
  7. webkit2gtk3-jsc-2.30.4-3.el8.i686.rpm
    MD5: 59c03bd9955442558f45991582f18caa
    SHA-256: c68b352b9de38bbcf783ba90475d1da75fe44da22f78fcb98afa12d985ebc0f0
    Size: 3.38 MB
  8. webkit2gtk3-jsc-devel-2.30.4-3.el8.i686.rpm
    MD5: 26be7758c1731eb07a5bfc2f01b4cdfa
    SHA-256: 6cf4101def09807616176fadd1747a956cc7b1c2329bcb0861457eb3596d5881
    Size: 137.75 kB