Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 839984 (CVE-2022-30293, CVE-2022-30294) - <net-libs/webkit-gtk-2.36.1: multiple vulnerabilities
Summary: <net-libs/webkit-gtk-2.36.1: multiple vulnerabilities
Status: RESOLVED FIXED
Alias: CVE-2022-30293, CVE-2022-30294
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal major (vote)
Assignee: Gentoo Security
URL: https://webkitgtk.org/security/WSA-20...
Whiteboard: A2 [glsa+]
Keywords:
: 843152 (view as bug list)
Depends on: 842435
Blocks:
  Show dependency tree
 
Reported: 2022-04-21 22:37 UTC by John Helmert III
Modified: 2022-08-31 23:59 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-04-21 22:37:11 UTC 
"  - Fix several crashes and rendering issues."
Comment 1 Larry the Git Cow gentoo-dev 2022-04-21 23:02:50 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ae77c5534260700f61de1d44ecd059d1b3cdbf5f

commit ae77c5534260700f61de1d44ecd059d1b3cdbf5f
Author:     Matt Turner <mattst88@gentoo.org>
AuthorDate: 2022-04-21 23:01:54 +0000
Commit:     Matt Turner <mattst88@gentoo.org>
CommitDate: 2022-04-21 23:02:44 +0000

    net-libs/webkit-gtk: Version bump to 2.36.1
    
    Bug: https://bugs.gentoo.org/839984
    Signed-off-by: Matt Turner <mattst88@gentoo.org>

 net-libs/webkit-gtk/Manifest                 |   1 +
 net-libs/webkit-gtk/webkit-gtk-2.36.1.ebuild | 250 +++++++++++++++++++++++++++
 2 files changed, 251 insertions(+)
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-04-21 23:07:51 UTC 
Thanks! Please stable when ready.
Comment 3 Larry the Git Cow gentoo-dev 2022-05-13 12:27:52 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=8412706635b0aad1ab6affda4f37fdcc0d139d10

commit 8412706635b0aad1ab6affda4f37fdcc0d139d10
Author:     Matt Turner <mattst88@gentoo.org>
AuthorDate: 2022-05-13 12:24:29 +0000
Commit:     Matt Turner <mattst88@gentoo.org>
CommitDate: 2022-05-13 12:25:47 +0000

    net-libs/webkit-gtk: Drop old versions
    
    Bug: https://bugs.gentoo.org/837305
    Bug: https://bugs.gentoo.org/839984
    Signed-off-by: Matt Turner <mattst88@gentoo.org>

 net-libs/webkit-gtk/Manifest                       |   2 -
 net-libs/webkit-gtk/files/2.34.3-jumbo-fix.patch   |  70 ------
 .../webkit-gtk/files/2.34.3-non-jumbo-fix.patch    |  31 ---
 net-libs/webkit-gtk/webkit-gtk-2.34.6.ebuild       | 272 ---------------------
 net-libs/webkit-gtk/webkit-gtk-2.36.0-r1.ebuild    | 250 -------------------
 5 files changed, 625 deletions(-)
Comment 4 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2022-06-01 15:38:29 UTC 
*** Bug 843152 has been marked as a duplicate of this bug. ***
Comment 5 Larry the Git Cow gentoo-dev 2022-08-31 23:57:22 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=1d278bb93fbf8fdb34ef9c125c5f4536e11c15d7

commit 1d278bb93fbf8fdb34ef9c125c5f4536e11c15d7
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2022-08-31 23:54:04 +0000
Commit:     John Helmert III <ajak@gentoo.org>
CommitDate: 2022-08-31 23:56:59 +0000

    [ GLSA 202208-39 ] WebKitGTK+: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/832990
    Bug: https://bugs.gentoo.org/833568
    Bug: https://bugs.gentoo.org/837305
    Bug: https://bugs.gentoo.org/839984
    Bug: https://bugs.gentoo.org/845252
    Bug: https://bugs.gentoo.org/856445
    Bug: https://bugs.gentoo.org/861740
    Bug: https://bugs.gentoo.org/864427
    Bug: https://bugs.gentoo.org/866494
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: John Helmert III <ajak@gentoo.org>

 glsa-202208-39.xml | 74 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 74 insertions(+)