-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-23cc337543 2023-06-03 02:14:07.401305 -------------------------------------------------------------------------------- Name : webkitgtk Product : Fedora 37 Version : 2.40.2 Release : 1.fc37 URL : https://www.webkitgtk.org/ Summary : GTK web content engine library Description : WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. -------------------------------------------------------------------------------- Update Information: * Fix scrollbar jumping to top when drag released outside window in GTK 4. * Fix video rendering when GL is disabled. * Fix flickering on looped videos when starting again. * Fix CPU usage on autoplaying videos. * Choose amount of painting threads depending on available CPU cores on GTK 4. * Fix several crashes and rendering issues. * Fix CVE-2023-28204 and CVE-2023-32373. -------------------------------------------------------------------------------- ChangeLog: * Tue May 30 2023 Michael Catanzaro <mcatanzaro@xxxxxxxxxx> - 2.40.2-1 - Update to 2.40.2 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2209229 - CVE-2023-28204 webkitgtk: an out-of-bounds read when processing malicious content [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2209229 [ 2 ] Bug #2209755 - [CISA Major Incident] CVE-2023-32373 webkitgtk: a use-after-free when processing maliciously crafted web content [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2209755 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-23cc337543' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- package-announce@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-announce-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue