Description
WebKit in Apple iOS before 9.2, Safari before 9.0.2, and tvOS before 9.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2015-7048, CVE-2015-7095, CVE-2015-7097, CVE-2015-7098, CVE-2015-7099, CVE-2015-7100, CVE-2015-7101, CVE-2015-7102, and CVE-2015-7103.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | webkit2gtk | 2.10.5-1 | — |
| Debian 13 | webkit2gtk | 2.10.5-1 | — |
| Debian 12 | webkit2gtk | 2.10.5-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | webkitgtk +2 | No fix yet | — |
References
- https://support.apple.com/HT205635
- 78720 vdb-entry
- https://support.apple.com/kb/HT205636
- openSUSE-SU-2016:0761 vendor-advisory
- APPLE-SA-2015-12-08-5 vendor-advisory
- GLSA-201706-15 vendor-advisory
- APPLE-SA-2015-12-08-1 vendor-advisory
- https://support.apple.com/HT205639
- https://support.apple.com/HT205640
- 1034341 vdb-entry
- APPLE-SA-2015-12-08-2 vendor-advisory