USN-5522-1 — webkit2gtk vulnerabilities

Summary

Several security issues were discovered in WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a
remote attacker could exploit a variety of issues related to web browser
security, including cross-site scripting attacks, denial of service attacks,
and arbitrary code execution.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	webkit2gtk	2.36.4-0ubuntu0.20.04.1
Ubuntu · 22.04 LTS 22.04:LTS	webkit2gtk	2.36.4-0ubuntu0.22.04.1

Vulnerabilities 2

High 8.8

CVE-2022-26710

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, …

Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu

Nov 1, 2022
Medium 4.3

CVE-2022-22677

A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in ma…

Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu Alpine

Nov 1, 2022

References

report
https://ubuntu.com/security/CVE-2022-22677
report
https://ubuntu.com/security/CVE-2022-26710

webkit2gtk vulnerabilities

Summary

Fixed packages 2

Vulnerabilities 2

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, …

A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in ma…

References