Lucene search

K
mageiaGentoo FoundationMGASA-2023-0177
HistoryMay 21, 2023 - 11:42 a.m.

Updated webkit2 packages fix security vulnerability

2023-05-2111:42:44
Gentoo Foundation
advisories.mageia.org
18

0.007 Low

EPSS

Percentile

80.0%

HTML document may be able to render iframes with sensitive user information (CVE-2022-0108) maliciously crafted web content may lead to arbitrary code execution. (CVE-2022-32885) use-after-free vulnerability exists in WebCore::RenderLayer. This issue allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. (CVE-2023-25358) maliciously crafted web content may bypass Same Origin Policy (CVE-2023-27932) Website may be able to track sensitive user information. Description: The issue was addressed by removing origin information. (CVE-2023-27954) maliciously crafted web content may lead to arbitrary code execution (CVE-2023-28205)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchwebkit2< 2.38.6-1webkit2-2.38.6-1.mga8