Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2021:4097

Опубликовано: 02 нояб. 2021
Источник: rocky
Оценка: Moderate

Описание

Moderate: webkit2gtk3 security and bug fix update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

  • webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2021-30858)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • WebProcess::initializeWebProcess crashing on aarch64 (BZ#2010825)

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
webkit2gtk3-jsci6863.el8_4webkit2gtk3-jsc-2.30.4-3.el8_4.i686.rpm
webkit2gtk3-jscx86_643.el8_4webkit2gtk3-jsc-2.30.4-3.el8_4.x86_64.rpm
webkit2gtk3-jsc-develi6863.el8_4webkit2gtk3-jsc-devel-2.30.4-3.el8_4.i686.rpm
webkit2gtk3-develi6863.el8_4webkit2gtk3-devel-2.30.4-3.el8_4.i686.rpm
webkit2gtk3i6863.el8_4webkit2gtk3-2.30.4-3.el8_4.i686.rpm
webkit2gtk3x86_643.el8_4webkit2gtk3-2.30.4-3.el8_4.x86_64.rpm
webkit2gtk3-jsc-develx86_643.el8_4webkit2gtk3-jsc-devel-2.30.4-3.el8_4.x86_64.rpm
webkit2gtk3-develx86_643.el8_4webkit2gtk3-devel-2.30.4-3.el8_4.x86_64.rpm

Показывать по

Связанные CVE

CVE-2021-30858

Ссылки на источники

Исправления

Связанные уязвимости

ubuntu логотип

CVE-2021-30858

CVSS3: 8.8
ubuntu
больше 4 лет назад

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

redhat логотип

CVE-2021-30858

CVSS3: 8.8
redhat
около 4 лет назад

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

nvd логотип

CVE-2021-30858

CVSS3: 8.8
nvd
больше 4 лет назад

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

debian логотип

CVE-2021-30858

CVSS3: 8.8
debian
больше 4 лет назад

A use after free issue was addressed with improved memory management. ...

oracle-oval логотип

ELSA-2022-0059

oracle-oval
почти 4 года назад

ELSA-2022-0059: webkitgtk4 security update (MODERATE)