==========================================================================
Ubuntu Security Notice USN-3992-1
May 22, 2019

webkit2gtk vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 19.04
– Ubuntu 18.10
– Ubuntu 18.04 LTS

Summary:

Several security issues were fixed in WebKitGTK+.

Software Description:
– webkit2gtk: Web content engine library for GTK+

Details:

A large number of security issues were discovered in the WebKitGTK+ Web and
JavaScript engines. If a user were tricked into viewing a malicious
website, a remote attacker could exploit a variety of issues related to web
browser security, including cross-site scripting attacks, denial of service
attacks, and arbitrary code execution.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
libjavascriptcoregtk-4.0-18 2.24.2-0ubuntu0.19.04.1
libwebkit2gtk-4.0-37 2.24.2-0ubuntu0.19.04.1

Ubuntu 18.10:
libjavascriptcoregtk-4.0-18 2.24.2-0ubuntu0.18.10.1
libwebkit2gtk-4.0-37 2.24.2-0ubuntu0.18.10.1

Ubuntu 18.04 LTS:
libjavascriptcoregtk-4.0-18 2.24.2-0ubuntu0.18.04.1
libwebkit2gtk-4.0-37 2.24.2-0ubuntu0.18.04.1

This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart any
applications that use WebKitGTK+, such as Epiphany, to make all the
necessary changes.

References:
https://usn.ubuntu.com/usn/usn-3992-1
CVE-2019-8595, CVE-2019-8607, CVE-2019-8615

Package Information:
https://launchpad.net/ubuntu/+source/webkit2gtk/2.24.2-0ubuntu0.19.04.1
https://launchpad.net/ubuntu/+source/webkit2gtk/2.24.2-0ubuntu0.18.10.1
https://launchpad.net/ubuntu/+source/webkit2gtk/2.24.2-0ubuntu0.18.04.1

—–BEGIN PGP SIGNATURE—–
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=XbcT
—–END PGP SIGNATURE—–
—