Mageia alert MGASA-2024-0148 (webkit2)

From:
             
 
Mageia Updates <buildsystem-daemon@mageia.org>
To:
             
 
updates-announce@ml.mageia.org
Subject:
             
 
[updates-announce] MGASA-2024-0148: Updated webkit2 packages fix security vulnerabilities
Date:
             
 
Fri, 26 Apr 2024 08:47:45 +0200
Message-ID:
             
 
<20240426064745.4C509A000C@duvel.mageia.org>
Archive-link:
             
 
Article
MGASA-2024-0148 - Updated webkit2 packages fix security vulnerabilities

Publication date: 26 Apr 2024
URL: https://advisories.mageia.org/MGASA-2024-0148.html
Type: security
Affected Mageia releases: 9
CVE: CVE-2023-37450,
     CVE-2023-38133,
     CVE-2023-38572,
     CVE-2023-38592,
     CVE-2023-38594,
     CVE-2023-38595,
     CVE-2023-38597,
     CVE-2023-38599,
     CVE-2023-38600,
     CVE-2023-38611,
     CVE-2023-40397,
     CVE-2023-39928,
     CVE-2023-39434,
     CVE-2023-40451,
     CVE-2023-41074,
     CVE-2023-41993,
     CVE-2023-42916,
     CVE-2023-42917,
     CVE-2023-42883,
     CVE-2023-42890,
     CVE-2024-23222,
     CVE-2024-23206,
     CVE-2024-23213,
     CVE-2023-40414,
     CVE-2014-1745,
     CVE-2024-23252,
     CVE-2024-23254,
     CVE-2024-23263,
     CVE-2024-23280,
     CVE-2024-23284,
     CVE-2023-42950,
     CVE-2023-42956,
     CVE-2023-42843

Description:
Due to issues in our build system this package is very outdated, now
that the issues are fixed we are publishing the current upstream
version.
Lot of CVEs are fixed and a lot of changes were made by upstream, see
the links.

References:
- https://bugs.mageia.org/show_bug.cgi?id=32202
- https://webkitgtk.org/2024/04/09/webkitgtk2.44.1-released...
- https://webkitgtk.org/2024/03/16/webkitgtk2.44.0-released...
- https://webkitgtk.org/2024/02/02/webkitgtk2.43.4-released...
- https://webkitgtk.org/2024/02/05/webkitgtk2.42.5-released...
- https://webkitgtk.org/2024/02/02/webkitgtk2.43.4-released...
- https://webkitgtk.org/2023/12/21/webkitgtk2.43.3-released...
- https://webkitgtk.org/2023/12/15/webkitgtk2.42.4-released...
- https://webkitgtk.org/2023/12/05/webkitgtk2.42.3-released...
- https://webkitgtk.org/2023/11/17/webkitgtk2.43.1-released...
- https://webkitgtk.org/2023/11/10/webkitgtk2.42.2-released...
- https://webkitgtk.org/2023/09/15/webkitgtk2.42.0-released...
- https://webkitgtk.org/2023/09/08/webkitgtk2.41.92-release...
- https://webkitgtk.org/2023/08/19/webkitgtk2.41.91-release...
- https://webkitgtk.org/2023/08/10/webkitgtk2.41.90-release...
- https://webkitgtk.org/2023/08/01/webkitgtk2.40.5-released...
- https://webkitgtk.org/2023/07/21/webkitgtk2.40.4-released...
- https://webkitgtk.org/2023/07/04/webkitgtk2.41.6-released...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1745
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4...
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4...

SRPMS:
- 9/core/webkit2-2.44.1-1.mga9