Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-8663

Высокий

ALT-PU-2023-8663: package libwebkitgtk4 update to version 2.42.0-alt1

Источник
errata.altlinux.org
Дата публикации
21.09.2023
Дата обновления
21.09.2023
Устраненные уязвимости
2
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades libwebkitgtk4 to version 2.42.0-alt1.

Устраненные уязвимости2

Ссылки1

ALT-PU-2023-8663https://errata.altlinux.org/ALT-PU-2023-8663

Связанные уязвимости

ubuntu логотип

CVE-2023-39928

CVSS3: 8.8
ubuntu
около 3 лет назад

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability.

redhat логотип

CVE-2023-39928

CVSS3: 8.8
redhat
около 3 лет назад

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability.

nvd логотип

CVE-2023-39928

CVSS3: 8.8
nvd
около 3 лет назад

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability.

debian логотип

CVE-2023-39928

CVSS3: 8.8
debian
около 3 лет назад

A use-after-free vulnerability exists in the MediaRecorder API of Webk ...

github логотип

GHSA-7245-jcxv-7q52

CVSS3: 8.8
github
около 3 лет назад

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability.