WebKitGTK+ 2.20.3 has an off-by-one error, with a resultant out-of-bounds write, in the get_simple_globs functions in ThirdParty/xdgmime/src/xdgmimecache.c and ThirdParty/xdgmime/src/xdgmimeglob.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade webkit2gtk | Oct 3, 2018 | Jul 19, 2018 |
| Debian | — | Upgrade webkit2gtk | Jul 30, 2024 | Jul 19, 2018 |
| Oracle Solaris | — | Upgrade library/audio/taglib to version 1.11.1-11.4.3.0.1.1.0 on Solaris 11.4Upgrade library/desktop/webkitgtk4 to version 2.20.5-11.4.3.0.1.1.0 on Solaris 11.4Upgrade communication/im/pidgin to version 2.12.0-11.4.3.0.1.1.0 on Solaris 11.4Upgrade x11/library/libx11 to version 1.6.5-11.4.3.0.1.1.0 on Solaris 11.4 | Nov 19, 2018 | Jul 19, 2018 |
| Suse | — | Upgrade webkit2gtk3-develUpgrade webkit2gtk3-plugin-process-gtk2Upgrade webkit-jsc-4Upgrade typelib-1_0-webkit2webextension-4_0Upgrade libwebkit2gtk3-langUpgrade typelib-1_0-webkit2-4_0Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade webkit2gtk-4_0-injected-bundlesUpgrade typelib-1_0-javascriptcore-4_0Upgrade libwebkit2gtk-4_0-37-32bitUpgrade libjavascriptcoregtk-4_0-18Upgrade libwebkit2gtk-4_0-37 | Sep 22, 2018 | Jul 19, 2018 |
| Ubuntu | — | Upgrade libjavascriptcoregtk-4.0-18Upgrade libwebkit2gtk-4.0-37 | Aug 23, 2018 | Jul 19, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub