Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Mageia: 2020-0092 Moderate: Webkit2 Denial Of Service And More

mageia
Calendar Grey February 18, 2020
Dist Mageia Esm H88
Revised chromium-browser bundles tackle various vulnerabilities, improving device security against potential risks.
webkit2 packages have been updated to 2.26.4 and fixed the followin security vulnerabilities: A malicious website may be able to cause a denial of service (CVE-2020-3862)

Summary

webkit2 packages have been updated to 2.26.4 and fixed the followin security vulnerabilities:
A malicious website may be able to cause a denial of service (CVE-2020-3862).
A DOM object context may not have had a unique security origin (CVE-2020-3864).
A top-level DOM object context may have incorrectly been considered secure (CVE-2020-3865).
Processing maliciously crafted web content may lead to universal cross site scripting (CVE-2020-3867).
Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2020-3868).

References

- https://bugs.mageia.org/show_bug.cgi?id=26197

- https://webkitgtk.org/2020/02/14/webkitgtk2.26.4-released.html

- https://webkitgtk.org/security/WSA-2020-0002.html

- https://www.openwall.com/lists/oss-security/2020/02/14/6

- https://www.cve.org/CVERecord?id=CVE-2020-3862

- https://www.cve.org/CVERecord?id=CVE-2020-3864

- https://www.cve.org/CVERecord?id=CVE-2020-3865

- https://www.cve.org/CVERecord?id=CVE-2020-3867

- https://www.cve.org/CVERecord?id=CVE-2020-3868

Topics%20covered

Topics Covered

security advisory denial of service update code execution cross site scripting mageia webkit2

Resolution

SRPMS

- 7/core/webkit2-2.26.4-1.mga7

Publication date: 18 Feb 2020
URL: https://advisories.mageia.org/MGASA-2020-0092.html
Type: security
CVE: CVE-2020-3862, CVE-2020-3864, CVE-2020-3865, CVE-2020-3867, CVE-2020-3868

Topics%20covered

Topics Covered

security advisory denial of service update code execution cross site scripting mageia webkit2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here