WebkitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been found in WebKitGTK+, the worst of which could result in the arbitrary execution of code. webkit-gtk 2020-12-23 2020-12-23 755947 remote 2.30.3 2.30.3

WebKitGTK+ is a full-featured port of the WebKit rendering engine, suitable for projects requiring any kind of web integration, from hybrid HTML/CSS applications to full-fledged web browsers.

Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE identifiers referenced below for details.

An attacker, by enticing a user to visit maliciously crafted web content, may be able to execute arbitrary code or cause memory corruption.

There is no known workaround at this time.

All WebkitGTK+ users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/webkit-gtk-2.30.3"
CVE-2020-13543 CVE-2020-13584 CVE-2020-9948 CVE-2020-9951 CVE-2020-9952 CVE-2020-9983 WSA-2020-0008 WSA-2020-0009 whissi whissi