webkit2gtk3-2.38.5-1.el8.3.ML.1

エラータID: AXSA:2023-6171:13

Release date: 
Thursday, June 29, 2023 - 05:54
Subject: 
webkit2gtk3-2.38.5-1.el8.3.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* WebKitGTK: Regression of CVE-2023-28205 fixes in the MIRACLE LINUX (CVE-2023-2203)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-2203
A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with network access to pass specially crafted web content files, causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205 security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.

Solution: 

Update packages.

CVEs: 
CVE-2023-2203
A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability. This flaw allows attackers with network access to pass specially crafted web content files, causing a denial of service or arbitrary code execution. This CVE exists because of a CVE-2023-28205 security regression for the WebKitGTK package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.


Additional Info: 

N/A

Download: 

SRPMS
  1. webkit2gtk3-2.38.5-1.el8.3.ML.1.src.rpm
    MD5: e500c04494d0f5d2e5ed4ace1c10ac13
    SHA-256: 44a479ac432c5464f666aed0f3cef765d662311225f849ba66eb078fb37e5669
    Size: 31.52 MB

Asianux Server 8 for x86_64
  1. webkit2gtk3-2.38.5-1.el8.3.ML.1.i686.rpm
    MD5: 1bb57f399fe831ccf16571aec932e9b0
    SHA-256: 36ac16324b18035a6650b4a707753c4b89569cf5935d5c6545bd92991783ca1b
    Size: 23.37 MB
  2. webkit2gtk3-2.38.5-1.el8.3.ML.1.x86_64.rpm
    MD5: fd92cfa2102c4d533f273307babe54b8
    SHA-256: c1bbfa74faff3806b8a6644294d71bd1ed21e92df06602c7c5b9dde13768768f
    Size: 21.45 MB
  3. webkit2gtk3-devel-2.38.5-1.el8.3.ML.1.i686.rpm
    MD5: 8e49ed764d360cfe16014c32e9bab58e
    SHA-256: d9a2c78033f5b6056116631a8cb6dc13b51b3811518a2a30b3fea0feedc5c280
    Size: 296.12 kB
  4. webkit2gtk3-devel-2.38.5-1.el8.3.ML.1.x86_64.rpm
    MD5: ea890973e5cb872037306e85e0369580
    SHA-256: a20ecf68bfbb1291e61adc24e0a72a26cee52371a766be8261e5d9d50e582b2a
    Size: 291.83 kB
  5. webkit2gtk3-jsc-2.38.5-1.el8.3.ML.1.i686.rpm
    MD5: 336856c506d8a9a3593d1d56c553f5f6
    SHA-256: 06b4ff719e19e45b032dcfa210a900ac1089574dc693748fbdc840e84582dc94
    Size: 3.83 MB
  6. webkit2gtk3-jsc-2.38.5-1.el8.3.ML.1.x86_64.rpm
    MD5: 6beadb3043003cd2a6328928b2910d58
    SHA-256: 47fcb48eb3001c8d674663c1a08db18b76e10c7cbec38342f6048ba0d14b3f59
    Size: 7.06 MB
  7. webkit2gtk3-jsc-devel-2.38.5-1.el8.3.ML.1.i686.rpm
    MD5: 0a2776182bd9526da6962adb46d69581
    SHA-256: 95c4cdebb01ca5b492e81bd8dbafa575ae5c9f49c6af73d3c7ae009da999bd88
    Size: 165.51 kB
  8. webkit2gtk3-jsc-devel-2.38.5-1.el8.3.ML.1.x86_64.rpm
    MD5: 6390d1320cbc3552e2e8317eff0029e3
    SHA-256: 193a3c2351ad308e5316ab96b2059e576bafb997ec9337b6f035c6cfe38893d7
    Size: 156.48 kB