Headline
Red Hat Security Advisory 2023-1918-01
Red Hat Security Advisory 2023-1918-01 - WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Issues addressed include code execution and use-after-free vulnerabilities.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
=====================================================================
Red Hat Security Advisory
Synopsis: Important: webkit2gtk3 security update
Advisory ID: RHSA-2023:1918-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2023:1918
Issue date: 2023-04-20
CVE Names: CVE-2023-28205
=====================================================================
- Summary:
An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
- Relevant releases/architectures:
Red Hat Enterprise Linux AppStream (v. 9) - aarch64, ppc64le, s390x, x86_64
- Description:
WebKitGTK is the port of the portable web rendering engine WebKit to the
GTK platform.
Security Fix(es):
- WebKitGTK: use-after-free leads to arbitrary code execution
(CVE-2023-28205)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
- Solution:
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
- Bugs fixed (https://bugzilla.redhat.com/):
2185724 - CVE-2023-28205 WebKitGTK: use-after-free leads to arbitrary code execution
- Package List:
Red Hat Enterprise Linux AppStream (v. 9):
Source:
webkit2gtk3-2.36.7-1.el9_1.3.src.rpm
aarch64:
webkit2gtk3-2.36.7-1.el9_1.3.aarch64.rpm
webkit2gtk3-debuginfo-2.36.7-1.el9_1.3.aarch64.rpm
webkit2gtk3-debugsource-2.36.7-1.el9_1.3.aarch64.rpm
webkit2gtk3-devel-2.36.7-1.el9_1.3.aarch64.rpm
webkit2gtk3-devel-debuginfo-2.36.7-1.el9_1.3.aarch64.rpm
webkit2gtk3-jsc-2.36.7-1.el9_1.3.aarch64.rpm
webkit2gtk3-jsc-debuginfo-2.36.7-1.el9_1.3.aarch64.rpm
webkit2gtk3-jsc-devel-2.36.7-1.el9_1.3.aarch64.rpm
webkit2gtk3-jsc-devel-debuginfo-2.36.7-1.el9_1.3.aarch64.rpm
ppc64le:
webkit2gtk3-2.36.7-1.el9_1.3.ppc64le.rpm
webkit2gtk3-debuginfo-2.36.7-1.el9_1.3.ppc64le.rpm
webkit2gtk3-debugsource-2.36.7-1.el9_1.3.ppc64le.rpm
webkit2gtk3-devel-2.36.7-1.el9_1.3.ppc64le.rpm
webkit2gtk3-devel-debuginfo-2.36.7-1.el9_1.3.ppc64le.rpm
webkit2gtk3-jsc-2.36.7-1.el9_1.3.ppc64le.rpm
webkit2gtk3-jsc-debuginfo-2.36.7-1.el9_1.3.ppc64le.rpm
webkit2gtk3-jsc-devel-2.36.7-1.el9_1.3.ppc64le.rpm
webkit2gtk3-jsc-devel-debuginfo-2.36.7-1.el9_1.3.ppc64le.rpm
s390x:
webkit2gtk3-2.36.7-1.el9_1.3.s390x.rpm
webkit2gtk3-debuginfo-2.36.7-1.el9_1.3.s390x.rpm
webkit2gtk3-debugsource-2.36.7-1.el9_1.3.s390x.rpm
webkit2gtk3-devel-2.36.7-1.el9_1.3.s390x.rpm
webkit2gtk3-devel-debuginfo-2.36.7-1.el9_1.3.s390x.rpm
webkit2gtk3-jsc-2.36.7-1.el9_1.3.s390x.rpm
webkit2gtk3-jsc-debuginfo-2.36.7-1.el9_1.3.s390x.rpm
webkit2gtk3-jsc-devel-2.36.7-1.el9_1.3.s390x.rpm
webkit2gtk3-jsc-devel-debuginfo-2.36.7-1.el9_1.3.s390x.rpm
x86_64:
webkit2gtk3-2.36.7-1.el9_1.3.i686.rpm
webkit2gtk3-2.36.7-1.el9_1.3.x86_64.rpm
webkit2gtk3-debuginfo-2.36.7-1.el9_1.3.i686.rpm
webkit2gtk3-debuginfo-2.36.7-1.el9_1.3.x86_64.rpm
webkit2gtk3-debugsource-2.36.7-1.el9_1.3.i686.rpm
webkit2gtk3-debugsource-2.36.7-1.el9_1.3.x86_64.rpm
webkit2gtk3-devel-2.36.7-1.el9_1.3.i686.rpm
webkit2gtk3-devel-2.36.7-1.el9_1.3.x86_64.rpm
webkit2gtk3-devel-debuginfo-2.36.7-1.el9_1.3.i686.rpm
webkit2gtk3-devel-debuginfo-2.36.7-1.el9_1.3.x86_64.rpm
webkit2gtk3-jsc-2.36.7-1.el9_1.3.i686.rpm
webkit2gtk3-jsc-2.36.7-1.el9_1.3.x86_64.rpm
webkit2gtk3-jsc-debuginfo-2.36.7-1.el9_1.3.i686.rpm
webkit2gtk3-jsc-debuginfo-2.36.7-1.el9_1.3.x86_64.rpm
webkit2gtk3-jsc-devel-2.36.7-1.el9_1.3.i686.rpm
webkit2gtk3-jsc-devel-2.36.7-1.el9_1.3.x86_64.rpm
webkit2gtk3-jsc-devel-debuginfo-2.36.7-1.el9_1.3.i686.rpm
webkit2gtk3-jsc-devel-debuginfo-2.36.7-1.el9_1.3.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/
- References:
https://access.redhat.com/security/cve/CVE-2023-28205
https://access.redhat.com/security/updates/classification/#important
- Contact:
The Red Hat security contact is [email protected]. More contact
details at https://access.redhat.com/security/team/contact/
Copyright 2023 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=SSir
-----END PGP SIGNATURE-----
–
RHSA-announce mailing list
[email protected]
https://listman.redhat.com/mailman/listinfo/rhsa-announce
Related news
A coalition of dozens of countries, including France, the U.K., and the U.S., along with tech companies such as Google, MDSec, Meta, and Microsoft, have signed a joint agreement to curb the abuse of commercial spyware to commit human rights abuses. The initiative, dubbed the Pall Mall Process, aims to tackle the proliferation and irresponsible use of commercial cyber intrusion tools by
Apple on Wednesday released a slew of updates for iOS, iPadOS, macOS, watchOS, and Safari browser to address a set of flaws it said were actively exploited in the wild. This includes a pair of zero-days that have been weaponized in a mobile surveillance campaign called Operation Triangulation that has been active since 2019. The exact threat actor behind the campaign is not known.
Red Hat Security Advisory 2023-2653-01 - WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Debian Linux Security Advisory 5396-1 - Vulnerabilities have been discovered in the WebKitGTK web engine. Luan Herrera discovered that an HTML document may be able to render iframes with sensitive user information. P1umer and Q1IQ discovered that processing maliciously crafted web content may lead to arbitrary code execution. An anonymous researcher discovered that processing maliciously crafted web content may bypass Same Origin Policy. Clement Lecigne and Donncha O Cearbhaill discovered that processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Red Hat Security Advisory 2023-1919-01 - WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Issues addressed include code execution and use-after-free vulnerabilities.
An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original. Related CVEs: * CVE-2023-28205: A flaw was found in the webkitgtk package. An improper input validation issue may lead to a use-after-free vulnerability. This vulnerability allows attackers with network access to pass specially crafted web content files, causing Denial of Service or Arbitrary Code Execution.
Microsoft zero-days, dark web forum takedowns and Pentagon leaks on Discord in this week's newsletter.
Apple Security Advisory 2023-04-10-1 - iOS 15.7.5 and iPadOS 15.7.5 addresses code execution, out of bounds write, and use-after-free vulnerabilities.
Apple Security Advisory 2023-04-07-3 - Safari 16.4.1 addresses code execution and use-after-free vulnerabilities.
Apple Security Advisory 2023-04-07-2 - macOS Ventura 13.3.1 addresses code execution, out of bounds write, and use-after-free vulnerabilities.
Categories: Apple Categories: Exploits and vulnerabilities Categories: News Tags: iOS 16.4.1 Tags: iPadOS 16.4.1 Tags: macOS 13.3.1 Tags: CVE-2023-28206 Tags: CVE-2023-28205 Tags: use-after-free Tags: out-of-bounds write Tags: IOSurfaceAccelerator Apple has released iOS 16.4.1, iPadOS 16.4.1, and macOS 13.3.1 for the iPhone, iPad, and Mac, respectively, and our advice is to install them as soon as possible. (Read more...) The post Apple releases emergency updates for two known-to-be-exploited vulnerabilities appeared first on Malwarebytes Labs.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.7.5 and iPadOS 15.7.5, Safari 16.4.1, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. This includes three high-severity flaws in the Veritas Backup Exec Agent software (CVE-2021-27876, CVE-2021-27877, and CVE-2021-27878) that could lead to the execution of privileged commands
Apple on Friday released security updates for iOS, iPadOS, macOS, and Safari web browser to address a pair of zero-day flaws that are being exploited in the wild. The two vulnerabilities are as follows - CVE-2023-28205 - A use after free issue in WebKit that could lead to arbitrary code execution when processing specially crafted web content. CVE-2023-28206 - An out-of-bounds write issue in