Summary
A large number of security issues were discovered in the WebKitGTK Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | webkit2gtk | 2.30.3-0ubuntu0.18.04.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | webkit2gtk | 2.30.3-0ubuntu0.20.04.1 |
Vulnerabilities 5
-
Unscored —
The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER a…
-
Unscored —
A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing mali…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing ma…
-
Unscored —
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0…
-
Unscored —
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processin…