[ GLSA 201803-11 ] WebKitGTK+

[GLSA]

Gentoo Linux Security Advisory

Title: WebKitGTK+: Multiple Vulnerabilities (GLSA 201803-11)
Severity: normal
Exploitable: remote
Date: 2018-03-22
Bug(s): #645686
ID: 201803-11

Synopsis

Multiple vulnerabilities have been found in WebKitGTK+, the worst
of which may lead to arbitrary code execution.


Background

WebKitGTK+ is a full-featured port of the WebKit rendering engine,
suitable for projects requiring any kind of web integration, from hybrid
HTML/CSS applications to full-fledged web browsers.


Affected Packages

Package: net-libs/webkit-gtk
Vulnerable: < 2.18.6
Unaffected: >= 2.18.6
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in WebKitGTK+. Please
review the referenced CVE identifiers for details.


Impact

An attacker could execute arbitrary commands via maliciously crafted web
content.


Workaround

There is no known workaround at this time.

Resolution

All WebKitGTK+ users should upgrade to the latest version: