Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

Mageia: 2019-0324 Moderate: WebKit2 Code Execution Threats

mageia
Calendar Grey November 14, 2019
Dist Mageia Esm H88
New webkit2 updates bolster safety for Mageia users as of November 14, 2019, tackling identified weaknesses.
Updated webkit2 packages fix security vulnerabilities: Processing maliciously crafted web content may lead to universal cross site scripting (CVE-2019-8625, CVE-2019-8674, CVE-201...

Summary

Updated webkit2 packages fix security vulnerabilities:
Processing maliciously crafted web content may lead to universal cross site scripting (CVE-2019-8625, CVE-2019-8674, CVE-2019-8719, CVE-2019-8813)
Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2019-8707, CVE-2019-8710, CVE-2019-8720, CVE-2019-8726, CVE-2019-8733, CVE-2019-8735, CVE-2019-8743, CVE-2019-8763, CVE-2019-8764, CVE-2019-8765, CVE-2019-8766, CVE-2019-8782, CVE-2019-8783, CVE-2019-8808, CVE-2019-8811, CVE-2019-8812, CVE-2019-8814, CVE-2019-8815, CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8821, CVE-2019-8822, CVE-2019-8823)
A user may be unable to delete browsing history items (CVE-2019-8768)
Visiting a maliciously crafted website may reveal browsing history (CVE-2019-8769)
Maliciously crafted web content may violate iframe sandboxing policy (CVE-2019-8771)

References

- https://bugs.mageia.org/show_bug.cgi?id=25657

- https://webkitgtk.org/2019/09/09/webkitgtk2.26.0-released.html

- https://webkitgtk.org/2019/09/23/webkitgtk2.26.1-released.html

- https://webkitgtk.org/2019/11/06/webkitgtk2.26.2-released.html

- https://webkitgtk.org/security/WSA-2019-0005.html

- https://webkitgtk.org/security/WSA-2019-0006.html

- https://www.openwall.com/lists/oss-security/2019/10/29/2

- https://www.cve.org/CVERecord?id=CVE-2019-8625

- https://www.cve.org/CVERecord?id=CVE-2019-8674

- https://www.cve.org/CVERecord?id=CVE-2019-8707

- https://www.cve.org/CVERecord?id=CVE-2019-8710

- https://www.cve.org/CVERecord?id=CVE-2019-8719

- https://www.cve.org/CVERecord?id=CVE-2019-8720

- https://www.cve.org/CVERecord?id=CVE-2019-8726

- https://www.cve.org/CVERecord?id=CVE-2019-8733

- https://www.cve.org/CVERecord?id=CVE-2019-8735

- https://www.cve.org/CVERecord?id=CVE-2019-8743

- https://www.cve.org/CVERecord?id=CVE-2019-8763

- https://www.cve.org/CVERecord?id=CVE-2019-8764

- https://www.cve.org/CVERecord?id=CVE-2019-8765

- https://www.cve.org/CVERecord?id=CVE-2019-8766

- https://www.cve.org/CVERecord?id=CVE-2019-8768

- https://www.cve.org/CVERecord?id=CVE-2019-8769

- https://www.cve.org/CVERecord?id=CVE-2019-8771

- https://www.cve.org/CVERecord?id=CVE-2019-8782

- https://www.cve.org/CVERecord?id=CVE-2019-8783

- https://www.cve.org/CVERecord?id=CVE-2019-8808

- https://www.cve.org/CVERecord?id=CVE-2019-8811

- https://www.cve.org/CVERecord?id=CVE-2019-8812

- https://www.cve.org/CVERecord?id=CVE-2019-8813

- https://www.cve.org/CVERecord?id=CVE-2019-8814

- https://www.cve.org/CVERecord?id=CVE-2019-8815

- https://www.cve.org/CVERecord?id=CVE-2019-8816

- https://www.cve.org/CVERecord?id=CVE-2019-8819

- https://www.cve.org/CVERecord?id=CVE-2019-8820

- https://www.cve.org/CVERecord?id=CVE-2019-8821

- https://www.cve.org/CVERecord?id=CVE-2019-8822

- https://www.cve.org/CVERecord?id=CVE-2019-8823

Topics%20covered

Topics Covered

security advisory code execution cross site scripting DoS mageia webkit2 CVE report

Resolution

SRPMS

- 7/core/webkit2-2.26.2-1.mga7

Publication date: 14 Nov 2019
URL: https://advisories.mageia.org/MGASA-2019-0324.html
Type: security
CVE: CVE-2019-8625, CVE-2019-8674, CVE-2019-8707, CVE-2019-8710, CVE-2019-8719, CVE-2019-8720, CVE-2019-8726, CVE-2019-8733, CVE-2019-8735, CVE-2019-8743, CVE-2019-8763, CVE-2019-8764, CVE-2019-8765, CVE-2019-8766, CVE-2019-8768, CVE-2019-8769, CVE-2019-8771, CVE-2019-8782, CVE-2019-8783, CVE-2019-8808, CVE-2019-8811, CVE-2019-8812, CVE-2019-8813, CVE-2019-8814, CVE-2019-8815, CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8821, CVE-2019-8822, CVE-2019-8823

Topics%20covered

Topics Covered

security advisory code execution cross site scripting DoS mageia webkit2 CVE report

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here