webkit2gtk3-2.36.7-1.el9.3

エラータID: AXSA:2023-5308:07

Release date: 
Thursday, April 20, 2023 - 19:31
Subject: 
webkit2gtk3-2.36.7-1.el9.3
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* WebKitGTK: use-after-free leads to arbitrary code execution (CVE-2023-28205)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-28205
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.7.5 and iPadOS 15.7.5, Safari 16.4.1, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Solution: 

Update packages.

CVEs: 
CVE-2023-28205
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.7.5 and iPadOS 15.7.5, Safari 16.4.1, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Additional Info: 

N/A

Download: 

SRPMS
  1. webkit2gtk3-2.36.7-1.el9.3.src.rpm
    MD5: 039563c1cdf9df78432ff0f911e31332
    SHA-256: bc5e022cefb9c1da49a560069b13cbac0803e6d499a8ccd72fd529a3b9704314
    Size: 25.40 MB

Asianux Server 9 for x86_64
  1. webkit2gtk3-2.36.7-1.el9.3.i686.rpm
    MD5: 99fdcfd3ef22e234309d151fa0b75900
    SHA-256: b85b597c6f47fbab3fe406c72eff5d00f6bcaf6399b286a34814e566c04a50b3
    Size: 15.94 MB
  2. webkit2gtk3-2.36.7-1.el9.3.x86_64.rpm
    MD5: 900d5948228de4a5d9641e37d4161a8a
    SHA-256: f2d085499b9b76877e9abd4175844e648841cdd962aea955e49c3a6aefa1ff57
    Size: 15.23 MB
  3. webkit2gtk3-devel-2.36.7-1.el9.3.i686.rpm
    MD5: 1f3ddf825b12d4c6f874885c61d3edaa
    SHA-256: 35c6571656a2804729d666f55c887500596454cb5a9e93628f800d455847ac2c
    Size: 311.41 kB
  4. webkit2gtk3-devel-2.36.7-1.el9.3.x86_64.rpm
    MD5: 02d040f5710f37bbf0acf75315b97cfa
    SHA-256: 9f6e819aa70e5ce49da45f05a9741b11d68883977582c47149e4724ab39512d3
    Size: 305.54 kB
  5. webkit2gtk3-jsc-2.36.7-1.el9.3.i686.rpm
    MD5: e93028296aa1daceae1e414480205011
    SHA-256: 42b76b24af948700ab9151c1bdd8c4aaa200868ce6a9e1b977a8ab16d293760f
    Size: 3.19 MB
  6. webkit2gtk3-jsc-2.36.7-1.el9.3.x86_64.rpm
    MD5: 29132dc7522aa16d1ea6d5687150307d
    SHA-256: df8fcaf2938c68b593922223219dceb33cd84c2ba36bbe38f417699e8c9f5bb5
    Size: 6.25 MB
  7. webkit2gtk3-jsc-devel-2.36.7-1.el9.3.i686.rpm
    MD5: e8c9c6fff8a173a34b2644a4c8b04c44
    SHA-256: dbd793d72a07fd3f3aef236f67531cd6d3d21fc648226d28a42d486b6539a39b
    Size: 152.22 kB
  8. webkit2gtk3-jsc-devel-2.36.7-1.el9.3.x86_64.rpm
    MD5: 6d4f3eb90643e7dee7896a127391ad3f
    SHA-256: 333bbd90e2dec2fb00ebf97f0b65915c6534d7eb72452672e99333464106989d
    Size: 150.13 kB