Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 22.04 LTS USN-5561-1 Urgent: epiphany-browser Vulnerabilities Found

ubuntu
Calendar Grey August 10, 2022
Dist Ubuntu Esm H88
Recent vulnerabilities addressed in GNOME Web via Ubuntu Security Notice USN-5561-1. Users should update epiphany-browser to enhance security.
Several security issues were fixed in GNOME Web.

Summary

Several security issues were fixed in GNOME Web.

Software Description:

- epiphany-browser: Intuitive GNOME web browser

Details:

It was discovered that GNOME Web incorrectly filtered certain strings. A

remote attacker could use this issue to perform cross-site scripting (XSS)

attacks. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-45085,

CVE-2021-45086, CVE-2021-45087)

It was discovered that GNOME Web incorrectly handled certain long page

titles. A remote attacker could use this issue to cause GNOME Web to crash,

resulting in a denial of service, or possibly execute arbitrary code.

(CVE-2022-29536)

Topics%20covered

Topics Covered

security advisory denial of service critical cross-site scripting ubuntu epiphany-browser

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
  epiphany-browser                42.1-1ubuntu1

Ubuntu 20.04 LTS:
  epiphany-browser                3.36.4-0ubuntu2

After a standard system update you need to restart GNOME Web to make all
the necessary changes.

References

CVE-2021-45085, CVE-2021-45086, CVE-2021-45087, CVE-2022-29536

Severity
critical
Lowest
Low
Medium
High
Critical

August 10, 2022

Topics%20covered

Topics Covered

security advisory denial of service critical cross-site scripting ubuntu epiphany-browser

Package Information

https://launchpad.net/ubuntu/+source/epiphany-browser/42.1-1ubuntu1
https://launchpad.net/ubuntu/+source/epiphany-browser/3.36.4-0ubuntu2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.