USN-5867-1 — webkit2gtk vulnerabilities

Summary

Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	webkit2gtk	2.38.4-0ubuntu0.20.04.2
Ubuntu · 22.04 LTS 22.04:LTS	webkit2gtk	2.38.4-0ubuntu0.22.04.1

Vulnerabilities 3

High 8.8

CVE-2023-23517

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Feb 27, 2023
High 8.8

CVE-2023-23518

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Feb 27, 2023
Unscored —

CVE-2022-42826

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1…

Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu

Feb 27, 2023

References

report
https://ubuntu.com/security/CVE-2022-42826
report
https://ubuntu.com/security/CVE-2023-23517
report
https://ubuntu.com/security/CVE-2023-23518

webkit2gtk vulnerabilities

Summary

Fixed packages 2

Vulnerabilities 3

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1…

References