WebKitGTK and WPE WebKit Security Advisory WSA-2020-0008

--nTnB5fEIVhoswNY4SdbRW2C7bGFLTIf5G
Content-Type: multipart/mixed; boundary="hZFbFYgswIXSRRaBcOis2uOKkQgOoxa4C"

--hZFbFYgswIXSRRaBcOis2uOKkQgOoxa4C
Content-Type: text/plain; charset=utf-8
Content-Language: en-GB
Content-Transfer-Encoding: quoted-printable

------------------------------------------------------------------------
WebKitGTK and WPE WebKit Security Advisory                 WSA-2020-0008
------------------------------------------------------------------------

Date reported           : November 23, 2020
Advisory ID             : WSA-2020-0008
WebKitGTK Advisory URL  : https://webkitgtk.org/security/WSA-2020-0008.ht=
ml
WPE WebKit Advisory URL : https://wpewebkit.org/security/WSA-2020-0008.ht=
ml
CVE identifiers         : CVE-2020-13584, CVE-2020-9948, CVE-2020-9951,
                          CVE-2020-9952, CVE-2020-9983.

Several vulnerabilities were discovered in WebKitGTK and WPE WebKit.

CVE-2020-13584
    Versions affected: WebKitGTK before 2.30.3 and WPE WebKit before 2.30=
=2E3.
    Credit to Cisco.
    Impact: Processing maliciously crafted web content may lead to
    arbitrary code execution. Description: An use after free issue was
    addressed with improved memory management.

CVE-2020-9948
    Versions affected: WebKitGTK before 2.30.0 and WPE WebKit before 2.30=
=2E0.
    Credit to Brendan Draper (@6r3nd4n) working with Trend Micro Zero
    Day Initiative.
    Impact: Processing maliciously crafted web content may lead to
    arbitrary code execution. Description: A type confusion issue was
    addressed with improved memory handling.

CVE-2020-9951
    Versions affected: WebKitGTK before 2.30.0 and WPE WebKit before 2.30=
=2E0.
    Credit to Marcin 'Icewall' Noga of Cisco Talos.
    Impact: Processing maliciously crafted web content may lead to
    arbitrary code execution. Description: An use after free issue was
    addressed with improved memory management.

CVE-2020-9952
    Versions affected: WebKitGTK before 2.28.3 and WPE WebKit before 2.28=
=2E3.
    Credit to Ryan Pickren (ryanpickren.com).
    Impact: Processing maliciously crafted web content may lead to a
    cross site scripting attack. Description: An input validation issue
    was addressed with improved input validation.

CVE-2020-9983
    Versions affected: WebKitGTK before 2.30.3 and WPE WebKit before 2.30=
=2E3.
    Credit to zhunki.
    Impact: Processing maliciously crafted web content may lead to code
    execution. Description: An out-of-bounds write issue was addressed
    with improved bounds checking.


We recommend updating to the latest stable versions of WebKitGTK and WPE
WebKit. It is the best way to ensure that you are running safe versions
of WebKit. Please check our websites for information about the latest
stable releases.

Further information about WebKitGTK and WPE WebKit security advisories
can be found at: https://webkitgtk.org/security.html or
https://wpewebkit.org/security/.

The WebKitGTK and WPE WebKit team,
November 23, 2020


--hZFbFYgswIXSRRaBcOis2uOKkQgOoxa4C--

--nTnB5fEIVhoswNY4SdbRW2C7bGFLTIf5G
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: You can fetch my GnuPG key from http://key.neutrino.es
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=S+Dr
-----END PGP SIGNATURE-----

--nTnB5fEIVhoswNY4SdbRW2C7bGFLTIf5G--