USN-4939-1 — webkit2gtk vulnerabilities

Summary

A large number of security issues were discovered in the WebKitGTK Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	webkit2gtk	2.32.0-0ubuntu0.18.04.1
Ubuntu · 20.04 LTS 20.04:LTS	webkit2gtk	2.32.0-0ubuntu0.20.04.1

Vulnerabilities 3

Critical 9.8

CVE-2021-1871 Exploited

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021…

Apple macOS iOS and iPadOS qtwebkit-source macOS iOS Debian Ubuntu Alpine

Apr 2, 2021
KEV Nov 3, 2021
Unscored —

CVE-2021-1788

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Securi…

Apple macOS iOS and iPadOS qtwebkit-source macOS iOS Debian Ubuntu Alpine

Apr 2, 2021
Unscored —

CVE-2021-1844

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, …

Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu Alpine

Apr 2, 2021

References

report
https://ubuntu.com/security/CVE-2021-1788
report
https://ubuntu.com/security/CVE-2021-1844
report
https://ubuntu.com/security/CVE-2021-1871

webkit2gtk vulnerabilities

Summary

Fixed packages 2

Vulnerabilities 3

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021…

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Securi…

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, …

References