Fedora Linux 8695 Published by

A webkitgtk security update has been released for Fedora 37.



SECURITY: Fedora 37 Update: webkitgtk-2.38.4-1.fc37


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-5210df1dd1
2023-02-09 09:11:04.274294
--------------------------------------------------------------------------------

Name : webkitgtk
Product : Fedora 37
Version : 2.38.4
Release : 1.fc37
URL :   https://www.webkitgtk.org/
Summary : GTK web content engine library
Description :
WebKitGTK is the port of the WebKit web rendering engine to the
GTK platform.

--------------------------------------------------------------------------------
Update Information:

* Improve GStreamer multimedia playback across the board with improved codec
selection logic, better handling of latency, and improving frame discard to
avoid audio/video desynchronization, among other fixes. * Disable HLS media
playback by default, which makes web sites use MSE instead. If needed
WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can be set in the environment to enable it back.
* Disable threaded rendering in GTK4 builds by default, as it was causing
crashes. * Fix MediaSession API not showing artwork images. * Fix MediaSession
MPRIS usage when running inside a Flatpak sandbox. * Fix input element controls
to correctly scale when applying a zoom factor different than the default. *
Fix leakage of Web processes in certain situations. * Fix several crashes and
rendering issues. * Security fixes: CVE-2023-23517, CVE-2023-23518,
CVE-2022-42826, and many additional security issues
--------------------------------------------------------------------------------
ChangeLog:

* Thu Feb 2 2023 Michael Catanzaro - 2.38.4-1
- Update to 2.38.4
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-5210df1dd1' at the command
line. For more information, refer to the dnf documentation available at
  http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
  https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________