File _patchinfo of Package patchinfo.31972
<patchinfo incident="31972">
<issue tracker="bnc" id="1215870">VUL-0: CVE-2023-41074: libQtWebKit4,libqt5-qtwebkit,webkit2gtk3,webkitgtk: WebKitGTK and WPE WebKit Security Advisory WSA-2023-0009</issue>
<issue tracker="bnc" id="1218032">VUL-0: CVE-2023-42883: webkitgtk: processing a malicious image may lead to a denial-of-service</issue>
<issue tracker="bnc" id="1215868">VUL-0: CVE-2023-39928: libQtWebKit4,libqt5-qtwebkit,webkit2gtk3,webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports</issue>
<issue tracker="bnc" id="1218033">VUL-0: CVE-2023-42890: webkitgtk: processing malicious web content may lead to arbitrary code execution</issue>
<issue tracker="cve" id="2023-41074"/>
<issue tracker="cve" id="2023-32359"/>
<issue tracker="cve" id="2023-42883"/>
<issue tracker="cve" id="2023-42890"/>
<issue tracker="cve" id="2023-39928"/>
<packager>mgorse</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for webkit2gtk3</summary>
<description>This update for webkit2gtk3 fixes the following issues:
- CVE-2023-42890: Fixed processing malicious web content may lead to arbitrary code execution (bsc#1218033).
- CVE-2023-42883: Fixed processing a malicious image may lead to a denial-of-service (bsc#1218032).
- CVE-2023-41074: Fixed use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (bsc#1215870).
- CVE-2023-40451, CVE-2023-41074: Update to version 2.42.4 (bsc#1215868).
</description>
</patchinfo>