webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade webkit2gtk | Jul 30, 2024 | Jun 1, 2018 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Aug 23, 2018 | Jun 1, 2018 |
| Oracle Solaris | — | Upgrade x11/library/libx11 to version 1.6.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade library/desktop/webkitgtk4 to version 2.20.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade library/audio/taglib to version 1.11.1-11.4.3.0.1.1.0 on Solaris 11.4Upgrade communication/im/pidgin to version 2.12.0-11.4.3.0.1.1.0 on Solaris 11.4 | Nov 19, 2018 | Jun 1, 2018 |
| Suse | — | Upgrade webkit-jsc-4Upgrade libwebkit2gtk-4_0-37Upgrade libwebkit2gtk3-langUpgrade webkit2gtk3-develUpgrade typelib-1_0-javascriptcore-4_0Upgrade typelib-1_0-webkit2webextension-4_0Upgrade webkit2gtk-4_0-injected-bundlesUpgrade webkit2gtk3-plugin-process-gtk2Upgrade libwebkit2gtk-4_0-37-32bitUpgrade typelib-1_0-webkit2-4_0Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade libjavascriptcoregtk-4_0-18 | Aug 10, 2018 | Jun 1, 2018 |
| Ubuntu | — | Upgrade webkit2gtk | Nov 19, 2024 | Jun 1, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub