-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2020-e8a7566e80 2020-12-04 00:30:05.645607 --------------------------------------------------------------------------------
Name : webkit2gtk3 Product : Fedora 32 Version : 2.30.3 Release : 1.fc32 URL : https://www.webkitgtk.org/ Summary : GTK Web content engine library Description : WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
This package contains WebKit2 based WebKitGTK for GTK 3.
-------------------------------------------------------------------------------- Update Information:
Update to WebKitGTK 2.30.3: * Fix backdrop filters with rounded borders. * Fix scrolling iframes when async scrolling is enabled. * Allow applications to handle drag and drop on the web view again. * Update Outlook user agent quirk. * Fix several crashes and rendering issues. * Security fixes: CVE-2020-9983, CVE-2020-13584 -------------------------------------------------------------------------------- ChangeLog:
* Tue Nov 24 2020 Michael Catanzaro mcatanzaro@redhat.com - 2.30.3-1 - Update to 2.30.3 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1899961 - webkit2gtk3-2.30.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1899961 [ 2 ] Bug #1901213 - CVE-2020-13584 webkit2gtk3: webkitgtk: use-after-free may lead to arbitrary code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1901213 [ 3 ] Bug #1901222 - CVE-2020-9983 webkit2gtk3: webkitgtk: out-of-bounds write may lead to code execution [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1901222 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-e8a7566e80' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
package-announce@lists.fedoraproject.org