Vulnerable: version 2.36.8nb33 is affected by 20 known vulnerabilities. See below.
www/webkit-gtk 2.36.8nb33 NetBSD
GTK port of the WebKit browser engine (deprecated API 4.0)
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- Last update
- Commit
7b5a3977f9- License
- 2-clause-bsd AND gnu-lgpl-v2
- Categories
- www
- Package size
- 20362.4 KiB, 87565.5 KiB installed
Description
WebKit is an open source web browser engine. WebKit is also the name of the Mac OS X system framework version of the engine that's used by Safari, Dashboard, Mail, and many other OS X applications. WebKit's HTML and JavaScript code began as a branch of the KHTML and KJS libraries from KDE.
This is the old unsupported GTK3 port of the engine with libsoup2, API version 4.0.
Install
Binary package:
pkgin install webkit-gtk
From pkgsrc:
cd /usr/pkgsrc/www/webkit-gtk && make install clean
Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 2.36.8nb33 |
| NetBSD 10.1 aarch64 | 2.36.8nb29 |
| SmartOS / illumos x86_64 | 2.36.8nb35 |
| macOS 15 arm64 | - |
Dependencies
Run dependencies 23
- databases/sqlite3
- devel/glib2
- devel/pango
- devel/wayland
- fonts/harfbuzz-icu
- fonts/woff2
- graphics/cairo
- graphics/freetype2
- graphics/lcms2
- graphics/libjpeg-turbo
- graphics/libwebp
- graphics/png
- multimedia/gst-plugins1-base
- multimedia/gst-plugins1-good
- multimedia/gstreamer1
- net/libsoup
- security/libsecret
- security/libtasn1
- sysutils/libnotify
- textproc/enchant2
- textproc/icu
- textproc/libxslt
- x11/gtk3
Required by 24
- devel/devhelp
- mail/evolution
- wip/bijiben
- wip/elementary-code
- wip/epiphany
- wip/evolution
- wip/gnome-boxes
- wip/gnome-builder
- wip/gnucash-devel
- wip/luakit-git
- wip/prusaslicer
- wip/surf-git
- wip/uzbl-git
- wip/vimb-git
- wip/wyeb-git
- wip/wyebadblock-git
- wip/xiphos
- www/badwolf
- www/deforaos-surfer
- www/liferea
- www/luakit
- www/midori
- www/surf
- www/vimb
Known vulnerabilities 20
- webkit-gtk: ui-spoofing (CVE-2022-46705)
- webkit-gtk: ui-spoofing (CVE-2022-46725)
- webkit-gtk: remote-code-execution (CVE-2022-48503)
- webkit-gtk: input-validation (CVE-2023-2203)
- webkit-gtk: remote-code-execution (CVE-2023-23529)
- webkit-gtk: remote-code-execution (CVE-2023-28198)
- webkit-gtk: information-disclosure (CVE-2023-28204)
- webkit-gtk: information-disclosure (CVE-2023-32359)
- webkit-gtk: content-security-policy-escape (CVE-2023-32370)
- webkit-gtk: remote-code-execution (CVE-2023-32373)
- webkit-gtk: remote-code-execution (CVE-2023-32393)
- webkit-gtk: remote-code-execution (CVE-2023-32435)
- webkit-gtk: remote-code-execution (CVE-2023-32439)
- webkit-gtk: ui-spoofing (CVE-2023-32919)
- webkit-gtk: information-disclosure (CVE-2023-32933)
- webkit-gtk: remote-code-execution (CVE-2023-35074)
- webkit-gtk: remote-code-execution (CVE-2023-37450)
- webkit-gtk: information-disclosure (CVE-2023-38133)
- webkit-gtk: same-origin-bypass (CVE-2023-38572)
- webkit-gtk: remote-code-execution (CVE-2023-38592)
Commit history 9
The latest 5 of 9 in the history this site was built from.