File _patchinfo of Package patchinfo.36758
<patchinfo incident="36758">
<issue tracker="bnc" id="1234851">VUL-0: CVE-2024-54479,CVE-2024-54502,CVE-2024-54505,CVE-2024-54508,CVE-2024-54534: webkitgtk, webkit2gtk3: WebKitGTK and WPE WebKit Security Advisory WSA-
2024-0008</issue>
<issue tracker="cve" id="2024-44309"/>
<issue tracker="cve" id="2024-54534"/>
<issue tracker="cve" id="2024-54508"/>
<issue tracker="cve" id="2024-40866"/>
<issue tracker="cve" id="2024-44308"/>
<issue tracker="cve" id="2024-54505"/>
<issue tracker="cve" id="2024-54502"/>
<issue tracker="cve" id="2024-44187"/>
<issue tracker="cve" id="2024-44185"/>
<issue tracker="cve" id="2024-54479"/>
<packager>mgorse</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for webkit2gtk3</summary>
<description>This update for webkit2gtk3 fixes the following issues:
Update to version 2.46.5 (bsc#1234851):
Security fixes:
- CVE-2024-54479: Processing maliciously crafted web content may lead to an unexpected process crash
- CVE-2024-54502: Processing maliciously crafted web content may lead to an unexpected process crash
- CVE-2024-54505: Processing maliciously crafted web content may lead to memory corruption
- CVE-2024-54508: Processing maliciously crafted web content may lead to an unexpected process crash
- CVE-2024-54534: Processing maliciously crafted web content may lead to memory corruption
Other fixes:
- Fix the build with GBM and release logs disabled.
- Fix several crashes and rendering issues.
- Improve memory consumption and performance of Canvas getImageData.
- Fix preserve-3D intersection rendering.
- Fix video dimensions since GStreamer 1.24.9.
- Fix the HTTP-based remote Web Inspector not loading in Chromium.
- Fix content filters not working on about:blank iframes.
- Fix several crashes and rendering issues.
</description>
</patchinfo>