UbuntuUpdates.org

Package "webkit2gtk"

Name: webkit2gtk

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • JavaScript engine library from WebKitGTK+ - GObject introspection data
  • Web content engine library for GTK+ - GObject introspection data
  • JavaScript engine library from WebKitGTK+
  • JavaScript engine library from WebKitGTK+ - development files
Latest version: 2.30.5-0ubuntu0.18.04.1
Release: bionic (18.04)
Level: updates
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "webkit2gtk" in Bionic

Repository Area Version
base main 2.20.1-1
base universe 2.20.1-1
security main 2.30.5-0ubuntu0.18.04.1
security universe 2.30.5-0ubuntu0.18.04.1
updates universe 2.30.5-0ubuntu0.18.04.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.28.1-0ubuntu0.18.04.1 2020-04-20 14:06:32 UTC

  webkit2gtk (2.28.1-0ubuntu0.18.04.1) bionic-security; urgency=medium

  * Updated to 2.28.1 to fix security issue.
    - CVE-2020-11793
  * debian/patches/upstream_archs_fix.patch: removed, no longer needed.

 -- Marc Deslauriers <email address hidden> Thu, 16 Apr 2020 11:29:02 -0400
Source diff to previous version
CVE-2020-11793 A use-after-free issue exists in WebKitGTK before 2.28.1 and WPE WebKit before 2.28.1 via crafted web content that allows remote attackers to execute

Version: 2.28.0-0ubuntu0.18.04.3 2020-03-30 15:06:35 UTC

  webkit2gtk (2.28.0-0ubuntu0.18.04.3) bionic-security; urgency=medium

  * Updated to 2.28.0 to fix security issue.
    - debian/patches/*, debian/*.symbols: updated for 2.28.0.
    - CVE-2020-10018
  * debian/patches/upstream_archs_fix.patch:
    - workaround a regression on ppc64el, the fix is a temporary hackish
      solution until upstreams comes with a proper one.
  * debian/patches/work-around-gcc-7-ice.patch:
    - workaround FTBFS caused by ICE in gcc-7 update in bionic.
  * debian/rules:
    - disable debug packages on ppc64el to fix build issues.

 -- Marc Deslauriers <email address hidden> Thu, 26 Mar 2020 11:46:35 -0400
Source diff to previous version
CVE-2020-10018 WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-fre

Version: 2.26.4-0ubuntu0.18.04.1 2020-02-18 15:07:11 UTC

  webkit2gtk (2.26.4-0ubuntu0.18.04.1) bionic-security; urgency=medium

  * Updated to 2.26.4 to fix security issues.
    - CVE-2020-3862, CVE-2020-3864, CVE-2020-3865, CVE-2020-3867,
      CVE-2020-3868

 -- Marc Deslauriers <email address hidden> Fri, 14 Feb 2020 14:25:54 -0500
Source diff to previous version

Version: 2.26.3-0ubuntu0.18.04.1 2020-01-29 21:07:22 UTC

  webkit2gtk (2.26.3-0ubuntu0.18.04.1) bionic-security; urgency=medium

  * Updated to 2.26.3 to fix security issues.
    - CVE-2019-8835, CVE-2019-8844, CVE-2019-8846

 -- Marc Deslauriers <email address hidden> Tue, 28 Jan 2020 12:57:43 -0500
Source diff to previous version

Version: 2.26.2-0ubuntu0.18.04.1 2019-11-12 21:06:23 UTC

  webkit2gtk (2.26.2-0ubuntu0.18.04.1) bionic-security; urgency=medium

  * Updated to 2.26.2 to fix security issues.
    - CVE-2019-8812, CVE-2019-8814

 -- Marc Deslauriers <email address hidden> Fri, 08 Nov 2019 12:16:03 -0500
CVE-2019-8812 RESERVED
CVE-2019-8814 RESERVED


About   -   Send Feedback to @ubuntu_updates