| Summary: | webkit2 security issues fixed upstream (WSA-2023-0001) | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | David Walser <luigiwalser> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | normal | ||
| Priority: | Normal | CC: | andrewsfarm, davidwhodgins, nicolas.salguero, sysadmin-bugs |
| Version: | 8 | Keywords: | advisory, validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | MGA8-64-OK | ||
| Source RPM: | webkit2-2.38.3-1.mga8.src.rpm | CVE: | |
| Status comment: | |||
|
Description
David Walser
2023-02-03 01:45:02 CET
David Walser
2023-02-03 01:45:17 CET
Whiteboard:
(none) =>
MGA8TOO Suggested advisory: ======================== The updated packages fix security vulnerabilities and other issues. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23517 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23518 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42826 https://webkitgtk.org/security/WSA-2023-0001.html https://webkitgtk.org/2023/02/02/webkitgtk2.38.4-released.html ======================== Updated packages in core/updates_testing: ======================== lib(64)javascriptcoregtk4.0_18-2.38.4-1.mga8 lib(64)javascriptcore-gir4.0-2.38.4-1.mga8 lib(64)webkit2gtk-gir4.0-2.38.4-1.mga8 lib(64)webkit2gtk4.0_37-2.38.4-1.mga8 lib(64)webkit2-devel-2.38.4-1.mga8 webkit2-jsc-2.38.4-1.mga8 webkit2-2.38.4-1.mga8 from SRPM: webkit2-2.38.4-1.mga8.src.rpm Status comment:
Fixed upstream in 2.38.4 =>
(none) No installation issues on Foolishness, my Dell Inspiron 5100, running mga8-32 Xfce. I installed zenity, and called up a number of dialog boxes - calendar, file selection, color selection, and info, and all worked as expected. Bug 30332 is still in effect, but that's not a new regression, and it only seems to affect certain hardware, so it won't stop this update. (It does seem to have been fixed in Cauldron. Bug 30865.) CC:
(none) =>
andrewsfarm MGA8-64 Plasma system. No installation issues. Opened some dialog boxes with zenity, looked at a pdf file with Atril, played four-in-a-row and five-or-more, opened and used MCC. Everything worked as expected. Giving this an OK, and validating. Whiteboard:
(none) =>
MGA8-64-OK
Dave Hodgins
2023-02-14 21:26:17 CET
CC:
(none) =>
davidwhodgins An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2023-0047.html Status:
ASSIGNED =>
RESOLVED |