{"id":"USN-3781-2","aliases":[],"status":"published","title":"webkit2gtk regression","description":"USN-3781-1 fixed vulnerabilities in WebKitGTK+. The updated package was\nmissing some header files, preventing certain applications from building.\nThis update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n A large number of security issues were discovered in the WebKitGTK+ Web and\n JavaScript engines. If a user were tricked into viewing a malicious\n website, a remote attacker could exploit a variety of issues related to web\n browser security, including cross-site scripting attacks, denial of service\n attacks, and arbitrary code execution.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2018-10-10T11:49:26Z","modified":"2026-04-22T09:50:04Z","fixes":[{"ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","fixed_in":["2.22.2-0ubuntu0.18.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.2-0ubuntu0.18.04.2"}]}],"versions":["2.18.0-2","2.18.0-2build1","2.18.2-1","2.18.3-1","2.18.4-1","2.18.6-1","2.19.91-1ubuntu1","2.19.92-1","2.20.0-1","2.20.0-2","2.20.0-2ubuntu1","2.20.1-1","2.20.2-0ubuntu0.18.04.1","2.20.3-0ubuntu0.18.04.1","2.20.5-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.1"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-3781-2","tags":["advisory"]},{"url":"https://launchpad.net/bugs/1795901","tags":["report"]}],"sources":{"osv":[{"id":"USN-3781-2","title":"webkit2gtk regression","description":"USN-3781-1 fixed vulnerabilities in WebKitGTK+. The updated package was\nmissing some header files, preventing certain applications from building.\nThis update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n A large number of security issues were discovered in the WebKitGTK+ Web and\n JavaScript engines. If a user were tricked into viewing a malicious\n website, a remote attacker could exploit a variety of issues related to web\n browser security, including cross-site scripting attacks, denial of service\n attacks, and arbitrary code execution.\n","status":"published","published":"2018-10-10T11:49:26Z","modified":"2026-04-22T09:50:04.067656Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}