USN-5127-1 — webkit2gtk vulnerabilities

Summary

A large number of security issues were discovered in the WebKitGTK Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	webkit2gtk	2.34.1-0ubuntu0.20.04.1

Vulnerabilities 3

Unscored —

CVE-2021-30846

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8,…

Apple iOS and iPadOS watchOS tvOS iOS Browsers Debian Ubuntu Alpine

Oct 19, 2021
Unscored —

CVE-2021-30851

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watch…

Apple iOS and iPadOS watchOS tvOS iOS Browsers Debian Ubuntu Alpine

Aug 24, 2021
Unscored —

CVE-2021-42762

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxe…

qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine

Oct 20, 2021

References

report
https://ubuntu.com/security/CVE-2021-30846
report
https://ubuntu.com/security/CVE-2021-30851
report
https://ubuntu.com/security/CVE-2021-42762

webkit2gtk vulnerabilities

Summary

Fixed packages 1

Vulnerabilities 3

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8,…

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watch…

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxe…

References