Summary
A large number of security issues were discovered in the WebKitGTK Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | webkit2gtk | 2.28.4-0ubuntu0.18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | webkit2gtk | 2.28.4-0ubuntu0.20.04.1 |
Vulnerabilities 6
-
Unscored —
A command injection issue existed in Web Inspector. This issue was addressed with improved escaping. This issue is fixe…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, …
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tv…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, …
-
Unscored —
An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. This is…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.…