webkit2gtk3-2.38.5-1.el8.4.ML.1

エラータID: AXSA:2023-6191:14

Release date: 
Friday, June 30, 2023 - 07:04
Subject: 
webkit2gtk3-2.38.5-1.el8.4.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: a use-after-free when processing maliciously crafted web content (CVE-2023-32373)
* webkitgtk: an out-of-bounds read when processing malicious content (CVE-2023-28204)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-28204
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
CVE-2023-32373
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Solution: 

Update packages.

CVEs: 
CVE-2023-28204
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, Safari 16.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.
CVE-2023-32373
A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura 13.4, Safari 16.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Additional Info: 

N/A

Download: 

SRPMS
  1. webkit2gtk3-2.38.5-1.el8.4.ML.1.src.rpm
    MD5: 970cd2eb7c86fd4501990cfb6ead1eaf
    SHA-256: ef78ba0324918c4eb37373313ae933981cfdba228368362480b03ec1741e6bf6
    Size: 31.53 MB

Asianux Server 8 for x86_64
  1. webkit2gtk3-2.38.5-1.el8.4.ML.1.i686.rpm
    MD5: 6bbbe3315b266ba2167585c009b64ae9
    SHA-256: 6a1163d8161b173bb473b06cef323e22cb2a4a4346721bde9a5b9d32785dc291
    Size: 23.37 MB
  2. webkit2gtk3-2.38.5-1.el8.4.ML.1.x86_64.rpm
    MD5: ab98b1a0fe0179a64df6a7f536f06446
    SHA-256: 79db867e7024d06e6b6338b9c06fea87e2269633abfac20fb60264141c8a63ed
    Size: 21.46 MB
  3. webkit2gtk3-devel-2.38.5-1.el8.4.ML.1.i686.rpm
    MD5: c1c32a98fea4ee40c68ab8884fbfd708
    SHA-256: 4979321bf7578948727203a9f6048aa757ea0dd9a5526f6ab8c1b6b11b9c1220
    Size: 296.29 kB
  4. webkit2gtk3-devel-2.38.5-1.el8.4.ML.1.x86_64.rpm
    MD5: d9427cbd2ebcf2df71d789bc22eadceb
    SHA-256: 61c3f5158cfd60b0ef327717a8e6ca048ddf058f4c404ecc7c4845b616c465de
    Size: 291.98 kB
  5. webkit2gtk3-jsc-2.38.5-1.el8.4.ML.1.i686.rpm
    MD5: 16869172ab2d4f32d93ad30f3dd71ede
    SHA-256: 70f8f16066fe53bfeb5643edaa554abec9c46b944f7e33d09301342f936ee167
    Size: 3.83 MB
  6. webkit2gtk3-jsc-2.38.5-1.el8.4.ML.1.x86_64.rpm
    MD5: 8bd5603904dc82e51d2ef8267bb5a75b
    SHA-256: ec6bca10881d4dde40ccfd83f490819abeef017ec137db79eb89c87555e50521
    Size: 7.06 MB
  7. webkit2gtk3-jsc-devel-2.38.5-1.el8.4.ML.1.i686.rpm
    MD5: 492be981aedd781588739ca7c6318f7f
    SHA-256: 8f5c472d8283eab9c96011a791835d92263426d616de67bb842ee995805fedc2
    Size: 165.68 kB
  8. webkit2gtk3-jsc-devel-2.38.5-1.el8.4.ML.1.x86_64.rpm
    MD5: 84b658da61ec686b0ec498c34ef96a52
    SHA-256: c8ec71d875a7598c5695aeb599093c2e3e800ec62424d68bb0bd3855b806d424
    Size: 156.65 kB