webkitgtk-2.16.4

[bdubbs@…]

Wonderful.</sarcasm> Another point version.

[bdubbs@…]

Several vulnerabilities were discovered in WebKitGTK+.

CVE-2017-2538
    Versions affected: WebKitGTK+ before 2.16.4.
    Credit to Richard Zhu (fluorescence) working with Trend Micro's Zero
    Day Initiative.
    Impact: Processing maliciously crafted web content may lead to
    arbitrary code execution. Description: Multiple memory corruption
    issues were addressed with improved memory handling.

CVE-2017-2424
    Versions affected: WebKitGTK+ before 2.16.0.
    Credit to Paul Thomson (using the GLFuzz tool) of the Multicore
    Programming Group, Imperial College London.
    Impact: Processing maliciously crafted web content may result in the
    disclosure of process memory. Description: An information disclosure
    issue existed in the processing of OpenGL shaders. This issue was
    addressed through improved memory management.

[bdubbs@…]

WebKitGTK+ 2.16.4

• Fix web process deadlock when seeking youtube videos.
• Fix blob downloads.
• Improve theme rendering performance when using GTK+ >= 3.20.
• Fix positioning of popup menus in Wayland.
• Fix several crashes and rendering issues.
• Security fixes: CVE-2017-2538.

[bdubbs@…]

Fixed at revision 18851.