WebKitGTK+: Multiple Vulnerabilities Multiple vulnerabilities have been found in WebKitGTK+, the worst of which may lead to remote code execution. webkit-gtk 2024-01-31 2024-01-31 915222 918667 920667 remote 2.42.2 2.42.2 2.42.2 2.42.2 2.42.2 2.42.2

WebKitGTK+ is a full-featured port of the WebKit rendering engine, suitable for projects requiring any kind of web integration, from hybrid HTML/CSS applications to full-fledged web browsers.

Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE identifiers referenced below for details.

Please review the referenced CVE identifiers for details.

There is no known workaround at this time.

All WebKitGTK+ users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/webkit-gtk-2.42.2"
CVE-2023-32359 CVE-2023-35074 CVE-2023-39434 CVE-2023-39928 CVE-2023-40451 CVE-2023-41074 CVE-2023-41983 CVE-2023-41993 CVE-2023-42852 CVE-2023-42890 WSA-2023-0009 graaff graaff