[SECURITY] Fedora 30 Update: glib2-2.60.1-2.fc30

GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system...

[SECURITY] Fedora 30 Update: at-spi2-core-2.32.1-2.fc30

at-spi allows assistive technologies to access GTK-based applications. Essentially it exposes the internals of applications for automation, so tools such as screen readers, magnifiers, or even scripting interfaces can query and interact with GUI controls. This version of at-spi is a major break...

USN-3948-1: WebKitGTK+ vulnerabilities

A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

[SECURITY] Fedora 29 Update: webkit2gtk3-2.24.1-1.fc29

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

[SECURITY] Fedora 30 Update: webkit2gtk3-2.24.1-1.fc30

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. This package contains WebKit2 based WebKitGTK for GTK 3...

EulerOS Virtualization 2.5.3 : spice-gtk (EulerOS-SA-2019-1170)

According to the version of the spice-gtk packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Missing check in demarshal.py:writevalidatearrayitem allows for buffer overflow and denial of service CVE-2018-10873 Note that...

EulerOS Virtualization 2.5.4 : spice-gtk (EulerOS-SA-2019-1200)

According to the version of the spice-gtk packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Missing check in demarshal.py:writevalidatearrayitem allows for buffer overflow and denial of service CVE-2018-10873 Note that...

[SECURITY] Fedora 28 Update: remmina-1.3.3-1.fc28

Remmina is a remote desktop client written in GTK+, aiming to be useful for system administrators and travelers, who need to work with lots of remote computers in front of either large monitors or tiny net-books. Remmina supports multiple network protocols in an integrated and consistent user...

Fedora Update for remmina FEDORA-2019-b2d986c3e9

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : spice-gtk (openSUSE-2019-693)

This update for spice-gtk fixes the following issues : Security issues fixed : - CVE-2018-10873: Fix potential heap corruption when demarshalling bsc1104448 - CVE-2018-10893: Avoid buffer overflow on image lz checks bsc1101295 Other bugs fixed : - Add setuid bit to spice-client-glib-usb-acl-helpe...

GLSA-201903-12 : WebkitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201903-12 WebkitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the referenced CVE identifiers for details. Impact : An attacker could execute arbitrary code or conduct...

WebkitGTK+: Multiple vulnerabilities

Background WebKitGTK+ is a full-featured port of the WebKit rendering engine, suitable for projects requiring any kind of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. Description Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the...

openSUSE Security Update : webkit2gtk3 (openSUSE-2019-309)

This update for webkit2gtk3 to version 2.22.6 fixes the following issues : Security issues fixed : - CVE-2019-6212: Fixed multiple memory corruption vulnerabilities which could allow arbitrary code execution during the processing of special crafted web-content. - CVE-2019-6215: Fixed a type...

Security update for webkit2gtk3 (moderate)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2019:0308-1 Rating: moderate References: 1119553 1119554 1119555 1119556 1119557 1119558 1124937 Cross-References: CVE-2018-4437 CVE-2018-4438 CVE-2018-4441 CVE-2018-4442 CVE-2018-4443 CVE-2018-4464 CVE-2019-62...

[SECURITY] Fedora 29 Update: remmina-1.3.3-1.fc29

Remmina is a remote desktop client written in GTK+, aiming to be useful for system administrators and travelers, who need to work with lots of remote computers in front of either large monitors or tiny net-books. Remmina supports multiple network protocols in an integrated and consistent user...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:0511-1)

This update for webkit2gtk3 to version 2.22.6 fixes the following issues : Security issues fixed : CVE-2019-6212: Fixed multiple memory corruption vulnerabilities which could allow arbitrary code execution during the processing of special crafted web-content. CVE-2019-6215: Fixed a type confusion...

WebKitGTK UIProcess Subsystem Denial of Service Vulnerability

WebKitGTK is KDE, Apple Apple, Google Google and other companies to develop a set of open source Web browser engine . WebKitGTK + is a full-featured port of the WebKit engine , including all the features of WebKit . A denial of service vulnerability exists in the UIProcess subsystem used in...

FreeBSD : webkit-gtk -- Multiple vulnerabilities (e3aacd6d-3d01-434c-9330-bc9efd40350f)

The Webkitgtk project reports : CVE-2019-6212 - Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling. CVE-2019-6215 - Processing maliciously crafted web content may lead to arbitrary code...

CVE-2019-8375

The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script dialog size from exceeding the web view size, which allows remote attackers to cause a denial of service Buffer Overflow or possibly have unspecifi...

Updated spice-gtk packages fix security vulnerability

A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the client or execute arbitrary code with permissions of the user running the client. spice-gtk versions through 0.34 are...