MGASA-2021-0583

Source
https://advisories.mageia.org/MGASA-2021-0583.html
Import Source
https://advisories.mageia.org/MGASA-2021-0583.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2021-0583
Related
Published
2021-12-23T21:01:45Z
Modified
2021-12-23T20:23:04Z
Summary
Updated webkit2 packages fix security vulnerability
Details

Processing maliciously crafted web content may lead to unexpectedly unenforced Content Security Policy. (CVE-2021-30887)

Processing maliciously crafted web content may lead to universal cross site scripting. (CVE-2021-30890)

References
Credits

Affected packages

Mageia:8 / webkit2

Package

Name
webkit2
Purl
pkg:rpm/mageia/webkit2?distro=mageia-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.34.3-1.mga8

Ecosystem specific

{
    "section": "core"
}