USN-7079-1 — webkit2gtk vulnerabilities

Summary

Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
arbitrary code execution.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 22.04 LTS 22.04:LTS	webkit2gtk	2.46.1-0ubuntu0.22.04.3
Ubuntu · 24.04 LTS 24.04:LTS	webkit2gtk	2.46.1-0ubuntu0.24.04.1

Vulnerabilities 2

Medium 6.5

CVE-2024-40866

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious webs…

Apple macOS Safari qtwebkit-source macOS Browsers Debian Ubuntu

Sep 16, 2024
Medium 6.5

CVE-2024-44187

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. Thi…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Sep 16, 2024

References

report
https://ubuntu.com/security/CVE-2024-40866
report
https://ubuntu.com/security/CVE-2024-44187

webkit2gtk vulnerabilities

Summary

Fixed packages 2

Vulnerabilities 2

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious webs…

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. Thi…

References