UbuntuUpdates.org

Bugs fixes in "epiphany-browser"

Origin Bug number Title Date fixed
Launchpad 1984266 Update epiphany-browser to 42.4 2022-08-31
CVE CVE-2022-29536 In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) 2022-08-20
Launchpad 1984266 Update epiphany-browser to 42.4 2022-08-20
CVE CVE-2021-45087 XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by a a page 2022-08-10
CVE CVE-2021-45086 XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name value in PDF 2022-08-10
CVE CVE-2021-45085 XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user vis 2022-08-10
CVE CVE-2022-29536 In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) 2022-08-10
Launchpad 1955362 epiphany December 2021 XSS issues 2022-08-10
Launchpad 1969851 CVE-2022-29536 epiphany 2022-08-10
CVE CVE-2022-29536 In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) 2022-08-10
Launchpad 1969851 CVE-2022-29536 epiphany 2022-08-10
CVE CVE-2021-45087 XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by a a page 2022-08-10
CVE CVE-2021-45086 XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name value in PDF 2022-08-10
CVE CVE-2021-45085 XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user vis 2022-08-10
CVE CVE-2022-29536 In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) 2022-08-10
Launchpad 1955362 epiphany December 2021 XSS issues 2022-08-10
Launchpad 1969851 CVE-2022-29536 epiphany 2022-08-10
CVE CVE-2022-29536 In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) 2022-08-10
Launchpad 1969851 CVE-2022-29536 epiphany 2022-08-10
Launchpad 1968747 Cherry-pick fixes from the gnome-42 branch 2022-04-13



About   -   Send Feedback to @ubuntu_updates