[webkit-gtk] WebKitGTK 2.28.3 released!

[Dennis New]

Why are there so many "arbitrary code execution" bugs that constantly
keep popping up?

https://www.webkitgtk.org/security/WSA-2020-0006.html

Are they as bad as the terse CVE descriptions say they are?


On Thu, 09 Jul 2020 10:25:11 +0200, Carlos Garcia Campos wrote:
> WebKitGTK 2.28.3 is available for download at:
> 
> https://webkitgtk.org/releases/webkitgtk-2.28.3.tar.xz (20.4MB)
>    md5sum: a03a4dcd2819baca14fdec5af68b4356
>    sha1sum: af1d845d373e67fd666105e798a44e2cadaef83c
>    sha256sum:
> f0898ac072c220e13a4aee819408421a6cb56a6eb89170ceafe52468b0903522
> 
> This is a bug fix release in the stable 2.28 series.
> 
> What's new in the WebKitGTK 2.28.3 release?
> ===========================================
> 
>   - Enable kinetic scrolling with async scrolling.
>   - Fix web process hangs on large GitHub pages.
>   - Bubblewrap sandbox should not attempt to bind empty paths.
>   - Fix threading issues in the media player.
>   - Fix several crashes and rendering issues.
> 
> What is WebKitGTK?
> ==================
> 
> WebKitGTK is the GNOME platform port of the WebKit rendering engine.
> Offering WebKit's full functionality through a set of GObject-based
> APIs, it is suitable for projects requiring any kind of web
> integration, from hybrid HTML/CSS applications to full-fledged web
> browsers.
> 
> More information
> ================
> 
> If you want to know more about the project or get in touch with us
> you may:
> 
> - Visit our website at https://www.webkitgtk.org, or the upstream
>   site at https://www.webkit.org. People interested in contributing
>   should read: https://www.webkit.org/coding/contributing.html.
> 
> - Browse the bug list at https://bugs.webkit.org, WebKitGTK bugs are
>   typically prefixed by "[GTK]." A bug report with a minimal,
>   reproducible test case is often just as valuable as a patch.
> 
> - Join the #webkit and #webkitgtk IRC channels at irc.freenode.net.
> 
> - Subscribe to the WebKitGTK mailing list,
>   https://lists.webkit.org/mailman/listinfo/webkit-gtk, or the
>   WebKit development mailing list,
>   https://lists.webkit.org/mailman/listinfo/webkit-dev
> 
> Thanks
> ======
> 
> Thanks to all the contributors who made possible this release, they
> are far too many to list!
> 
> The WebKitGTK team,
> July 09, 2020
> -- 
> Carlos Garcia Campos
> http://pgp.rediris.es:11371/pks/lookup?op=get&search=0xF3D322D0EC4582C3