Summary
A large number of security issues were discovered in the WebKitGTK Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | webkit2gtk | 2.28.3-0ubuntu0.18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | webkit2gtk | 2.28.3-0ubuntu0.20.04.1 |
Vulnerabilities 8
-
High 8.8CVE-2020-9802 Public exploit
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…
-
Unscored —
The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER a…
-
Unscored —
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS…
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…
-
Unscored —
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5…
-
Unscored —
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5…
-
Unscored —
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5…
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, w…
References
-
report
https://ubuntu.com/security/CVE-2020-9802
-
report
https://ubuntu.com/security/CVE-2020-9803
-
report
https://ubuntu.com/security/CVE-2020-9805
-
report
https://ubuntu.com/security/CVE-2020-9806
-
report
https://ubuntu.com/security/CVE-2020-9807
-
report
https://ubuntu.com/security/CVE-2020-9843
-
report
https://ubuntu.com/security/CVE-2020-9850
-
report
https://ubuntu.com/security/CVE-2020-13753