1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
Candidate: CVE-2017-2530
PublicDate: 2017-05-22
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2530
https://support.apple.com/HT207798
https://support.apple.com/HT207801
https://support.apple.com/HT207803
https://support.apple.com/HT207804
https://webkitgtk.org/security/WSA-2017-0004.html
Description:
An issue was discovered in certain Apple products. iOS before 10.3.2 is
affected. Safari before 10.1.1 is affected. iCloud before 6.2.1 on Windows
is affected. tvOS before 10.2.1 is affected. The issue involves the
"WebKit" component. It allows remote attackers to execute arbitrary code or
cause a denial of service (memory corruption and application crash) via a
crafted web site.
Ubuntu-Description:
Notes:
jdstrand> webkit receives limited support. For details, see
https://wiki.ubuntu.com/SecurityTeam/FAQ#webkit
jdstrand> webkit in Ubuntu uses the JavaScriptCore (JSC) engine, not V8
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
Patches_webkitgtk:
upstream_webkitgtk: needs-triage
precise/esm_webkitgtk: DNE
trusty_webkitgtk: needs-triage
vivid/ubuntu-core_webkitgtk: DNE
vivid/stable-phone-overlay_webkitgtk: DNE
xenial_webkitgtk: needs-triage
yakkety_webkitgtk: ignored (reached end-of-life)
zesty_webkitgtk: needs-triage
devel_webkitgtk: needs-triage
Patches_webkit2gtk:
upstream_webkit2gtk: released (2.16.1)
precise_webkit2gtk: DNE
precise/esm_webkit2gtk: DNE
trusty_webkit2gtk: DNE
vivid/ubuntu-core_webkit2gtk: DNE
vivid/stable-phone-overlay_webkit2gtk: DNE
xenial_webkit2gtk: not-affected (2.16.1-0ubuntu0.16.04.2)
yakkety_webkit2gtk: not-affected (2.16.1-0ubuntu0.16.10.2)
zesty_webkit2gtk: not-affected (2.16.1-1ubuntu0.17.04.1)
devel_webkit2gtk: not-affected (2.16.2-1)
Patches_qtwebkit-source:
upstream_qtwebkit-source: needs-triage
precise/esm_qtwebkit-source: DNE
trusty_qtwebkit-source: needs-triage
vivid/ubuntu-core_qtwebkit-source: DNE
vivid/stable-phone-overlay_qtwebkit-source: DNE
xenial_qtwebkit-source: needs-triage
yakkety_qtwebkit-source: ignored (reached end-of-life)
zesty_qtwebkit-source: needs-triage
devel_qtwebkit-source: needs-triage
Patches_qtwebkit-opensource-src: needs-triage
upstream_qtwebkit-opensource-src: needs-triage
precise/esm_qtwebkit-opensource-src: DNE
trusty_qtwebkit-opensource-src: needs-triage
vivid/ubuntu-core_qtwebkit-opensource-src: DNE
vivid/stable-phone-overlay_qtwebkit-opensource-src: DNE
xenial_qtwebkit-opensource-src: needs-triage
yakkety_qtwebkit-opensource-src: ignored (reached end-of-life)
zesty_qtwebkit-opensource-src: needs-triage
devel_qtwebkit-opensource-src: needs-triage
|