USN-3992-1 — webkit2gtk vulnerabilities

Summary

A large number of security issues were discovered in the WebKitGTK+ Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	webkit2gtk	2.24.2-0ubuntu0.18.04.1

Vulnerabilities 3

Unscored —

CVE-2019-8595

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8607

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14…

Apple macOS watchOS tvOS Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019
Unscored —

CVE-2019-8615

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

Apple macOS tvOS Safari Windows macOS iOS Browsers Debian Ubuntu

Dec 18, 2019

References

report
https://ubuntu.com/security/CVE-2019-8595
report
https://ubuntu.com/security/CVE-2019-8607
report
https://ubuntu.com/security/CVE-2019-8615

webkit2gtk vulnerabilities

Summary

Fixed packages 1

Vulnerabilities 3

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14…

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS …

References