USN-5306-1 — webkit2gtk vulnerabilities

Summary

A large number of security issues were discovered in the WebKitGTK Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	webkit2gtk	2.34.6-0ubuntu0.20.04.1

Vulnerabilities 3

Unscored —

CVE-2022-22589

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, wat…

Apple macOS iOS and iPadOS watchOS macOS iOS Debian Ubuntu Alpine

Mar 18, 2022
Unscored —

CVE-2022-22590

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, …

Apple macOS iOS and iPadOS watchOS macOS iOS Debian Ubuntu Alpine

Mar 18, 2022
Unscored —

CVE-2022-22592

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.…

Apple macOS iOS and iPadOS watchOS macOS iOS Debian Ubuntu Alpine

Mar 18, 2022

References

report
https://ubuntu.com/security/CVE-2022-22589
report
https://ubuntu.com/security/CVE-2022-22590
report
https://ubuntu.com/security/CVE-2022-22592

webkit2gtk vulnerabilities

Summary

Fixed packages 1

Vulnerabilities 3

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, wat…

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, …

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.…

References