File _patchinfo of Package patchinfo.21618

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.21618

<patchinfo incident="21618">
  <issue tracker="cve" id="2021-30846"/>
  <issue tracker="cve" id="2021-30851"/>
  <issue tracker="cve" id="2021-42762"/>
  <issue tracker="bnc" id="1191937">VUL-0: CVE-2021-42762: webkit2gtk3: BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined</issue>
  <issue tracker="bnc" id="1192063">VUL-0: webkit2gtk3: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006</issue>
  <packager>mgorse</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for webkit2gtk3</summary>
  <description>This update for webkit2gtk3 fixes the following issues:

- CVE-2021-30846: Fixed memory corruption issue that could lead to arbitrary code execution when processing maliciously crafted web content (bsc#1192063).
- CVE-2021-30851: Fixed memory corruption vulnerability that could lead to arbitrary code execution when processing maliciously crafted web content (bsc#1192063).   
- CVE-2021-42762: Updated seccomp rules with latest changes from flatpak (bsc#1191937).
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.21618

Places