[SECURITY] [DSA 5155-1] wpewebkit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5155-1 [email protected] https://www.debian.org/security/ Alberto Garcia June 01, 2022 https://www.debian.org/security/faq -...

CVE-2022-26719

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-26709

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4, Safari 15.5. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-22662

A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive user information...

WebKitGTK WebKit Synchronization Code Execution

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit arises due to synchronization errors when using a common resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code upon processing malicious web content...

WebKitGTK Use-After-Free

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code during the processing of malicious web content...

Apple iOS Webkit Memory Corruption Vulnerability

Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service DoS via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which re...

WebKit Safari Code Execution

The vulnerability of the Web page rendering module in the WebKit browser of Apple’s Safari browser relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

About the security content of iTunes 12.12.4 for Windows

About the security content of iTunes 12.12.4 for Windows This document describes the security content of iTunes 12.12.4 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

net.liftweb:lift-couchdb_2.8.1 (2.2-rc6), net.liftweb:lift-facebook_2.8.1 (2.2-rc6) +15 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.1 (2.2-rc6)

net.liftweb:lift-webkit2.8.1 MAVEN version 2.2-rc6 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.8.1 and may be impacted: - net.liftweb:lift-couchdb2.8.1 2.2-rc6 - net.liftweb:lift-facebook2.8.1 2.2-rc6 -...

net.liftweb:lift-couchdb_2.8.0 (2.3-rc1), net.liftweb:lift-facebook_2.8.0 (2.3-rc1) +15 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.0 (2.3-rc1)

net.liftweb:lift-webkit2.8.0 MAVEN version 2.3-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.8.0 and may be impacted: - net.liftweb:lift-couchdb2.8.0 2.3-rc1 - net.liftweb:lift-facebook2.8.0 2.3-rc1 -...

net.liftweb:lift-couchdb_2.8.0 (2.4-m3), net.liftweb:lift-facebook_2.8.0 (2.4-m3) +15 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.0 (2.4-m3)

net.liftweb:lift-webkit2.8.0 MAVEN version 2.4-m3 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.8.0 and may be impacted: - net.liftweb:lift-couchdb2.8.0 2.4-m3 - net.liftweb:lift-facebook2.8.0 2.4-m3 - net.liftweb:lift-jpa2.8...

net.liftweb:lift-couchdb_2.9.0 (2.4-m5), net.liftweb:lift-facebook_2.9.0 (2.4-m5) +15 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.9.0 (2.4-m5)

net.liftweb:lift-webkit2.9.0 MAVEN version 2.4-m5 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.9.0 and may be impacted: - net.liftweb:lift-couchdb2.9.0 2.4-m5 - net.liftweb:lift-facebook2.9.0 2.4-m5 - net.liftweb:lift-jpa2.9...

com.foursquare:rogue_2.8.0 (>=1.0.1, <=1.0.6), net.liftweb:lift-couchdb_2.8.0 (2.2) +16 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.0 (2.2)

net.liftweb:lift-webkit2.8.0 MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.8.0 and may be impacted: - com.foursquare:rogue2.8.0 =1.0.1, =1.0.6 - net.liftweb:lift-couchdb2.8.0 2.2 -...

net.liftweb:lift-couchdb (2.0-rc1), net.liftweb:lift-facebook (2.0-rc1) +13 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit (2.0-rc1)

net.liftweb:lift-webkit MAVEN version 2.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit and may be impacted: - net.liftweb:lift-couchdb 2.0-rc1 - net.liftweb:lift-facebook 2.0-rc1 - net.liftweb:lift-jpa 2.0-rc1 -...

com.sun.jersey.contribs:jersey-lift (>=1.1.1-ea, <=1.1.5-ea-v20091019), com.sun.jersey.contribs:jersey-lift-test (>=1.1.1-ea, <=1.1.5-ea-v20091019) +15 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit (2.0)

net.liftweb:lift-webkit MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit and may be impacted: - com.sun.jersey.contribs:jersey-lift =1.1.1-ea, =1.1.1-ea, =1.1.5-ea-v20091019 - net.liftweb:lift-couchdb 2.0 -...

net.liftweb:lift-couchdb_2.7.7 (2.1-m1), net.liftweb:lift-facebook_2.7.7 (2.1-m1) +13 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.7.7 (2.1-m1)

net.liftweb:lift-webkit2.7.7 MAVEN version 2.1-m1 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.7.7 and may be impacted: - net.liftweb:lift-couchdb2.7.7 2.1-m1 - net.liftweb:lift-facebook2.7.7 2.1-m1 - net.liftweb:lift-jpa2.7...

net.liftweb:lift-couchdb_2.7.7 (2.1), net.liftweb:lift-facebook_2.7.7 (2.1) +13 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.7.7 (2.1)

net.liftweb:lift-webkit2.7.7 MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.7.7 and may be impacted: - net.liftweb:lift-couchdb2.7.7 2.1 - net.liftweb:lift-facebook2.7.7 2.1 - net.liftweb:lift-jpa2.7.7 2.1 -...

net.liftweb:lift-couchdb_2.7.7 (2.2-rc1), net.liftweb:lift-facebook_2.7.7 (2.2-rc1) +14 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.7.7 (2.2-rc1)

net.liftweb:lift-webkit2.7.7 MAVEN version 2.2-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.7.7 and may be impacted: - net.liftweb:lift-couchdb2.7.7 2.2-rc1 - net.liftweb:lift-facebook2.7.7 2.2-rc1 -...

net.liftweb:lift-couchdb_2.7.7 (2.2-rc3), net.liftweb:lift-facebook_2.7.7 (2.2-rc3) +14 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.7.7 (2.2-rc3)

net.liftweb:lift-webkit2.7.7 MAVEN version 2.2-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.7.7 and may be impacted: - net.liftweb:lift-couchdb2.7.7 2.2-rc3 - net.liftweb:lift-facebook2.7.7 2.2-rc3 -...