USN-6490-1 — webkit2gtk vulnerabilities

Summary

Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.

Fixed packages 1

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	webkit2gtk	2.42.2-0ubuntu0.22.04.1

Vulnerabilities 2

High 8.8

CVE-2023-42852

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Oct 25, 2023
Unscored —

CVE-2023-41983

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Oct 25, 2023

References

report
https://ubuntu.com/security/CVE-2023-41983
report
https://ubuntu.com/security/CVE-2023-42852

webkit2gtk vulnerabilities

Summary

Fixed packages 1

Vulnerabilities 2

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16…

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.…

References