USN-3781-2: WebKitGTK+ regression | Ubuntu security notices

Packages

webkit2gtk - Web content engine library for GTK+

Details

USN-3781-1 fixed vulnerabilities in WebKitGTK+. The updated package was
missing some header files, preventing certain applications from building.
This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

A large number of security issues were discovered in the WebKitGTK+ Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.

USN-3781-1 fixed vulnerabilities in WebKitGTK+. The updated package was
missing some header files, preventing certain applications from building.
This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

A large number of security issues were discovered in the WebKitGTK+ Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.

Update instructions

This update uses a new upstream release, which includes additional bug fixes. After a standard system update you need to restart any applications that use WebKitGTK+, such as Epiphany, to make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
18.04 bionic	libjavascriptcoregtk-4.0-18 – 2.22.2-0ubuntu0.18.04.2
18.04 bionic	libwebkit2gtk-4.0-37 – 2.22.2-0ubuntu0.18.04.2

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

https://launchpad.net/bugs/1795901