Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Mageia 8 MGASA-2022-0075 Moderate: Webkit2 Code Execution Issue

mageia
Calendar Grey February 18, 2022
Dist Mageia Esm H88
Enhanced webkit2 components address several problems, notably a critical security flaw allowing for arbitrary code execution identified on 18 Feb 2022.
Fix accessibility not working when the Bubblewrap sandbox is enabled

Summary

Fix accessibility not working when the Bubblewrap sandbox is enabled. Fix rendering of scrollbars when overlay scrollbars are disabled. Fix the build when the X11 support is disabled. Fix the build in a number of situations where the main OpenGL library is not called libGL or libgl, as is the case on systems that use libglvnd. Fix several crashes and rendering issues.
Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been A use after free issue was addressed with improved memory management. (CVE-2022-22620)

References

- https://bugs.mageia.org/show_bug.cgi?id=30064

- https://webkitgtk.org/security/WSA-2022-0003.html

- https://webkitgtk.org/2022/02/17/webkitgtk2.34.6-released.html

- https://www.cve.org/CVERecord?id=CVE-2022-22620

Resolution

SRPMS

- 8/core/webkit2-2.34.6-1.mga8

Publication date: 18 Feb 2022
URL: https://advisories.mageia.org/MGASA-2022-0075.html
Type: security
CVE: CVE-2022-22620

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here