webkitgtk-2.18.3

[bdubbs@…]

New point version.

[Douglas R. Reno]

Going to go ahead and take this one

[Douglas R. Reno]

Update to 2.18.3

NOTES FROM 2.18.2

What’s new in the WebKitGTK+ 2.18.2 release?
Fix rendering of arabic text.
Fix a crash in the web process when decoding GIF images.
Fix rendering of wind in Windy.com.
Fix several crashes and rendering issues.

NOTES FROM 2.18.3

What’s new in the WebKitGTK+ 2.18.3 release?
Improve calculation of font metrics to prevent scrollbars from being shown unnecessarily in some cases.
Fix handling of null capabilities in WebDriver implementation.
Security fixes: CVE-2017-13798, CVE-2017-13788, CVE-2017-13803.

SECURITY STUFF

CVE-2017-13788
Versions affected: WebKitGTK+ before 2.18.3.
Credit to xisigr of Tencent’s Xuanwu Lab (tencent.com).
Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling.

CVE-2017-13798
Versions affected: WebKitGTK+ before 2.18.3.
Credit to Ivan Fratric of Google Project Zero.
Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling.

CVE-2017-13803
Versions affected: WebKitGTK+ before 2.18.3.
Credit to chenqin (陈钦) of Ant-financial Light-Year Security.
Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling.

[Douglas R. Reno]

Fixed at r19475