CVE-2020-10018
webkitgtk: Use-after-free issue in accessibility/AXObjectCache.cpp
Severity by source
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Red Hat (medium), AlmaLinux (medium), Amazon (medium), Oracle (medium), Rocky Linux (medium), Ubuntu (medium).
Description
WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 (which are the versions right before 2.28.0) contains a memory corruption issue (use-after-free) that may lead to arbitrary code execution. This issue has been fixed in 2.28.0 with improved memory handling.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| alma 8 | LibRaw-devel, PackageKit, PackageKit-command-not-found and 31 more | 0.19.5-2.el8 and 16 more |
| alpine 3.11 | webkit2gtk | 2.28.0-r0 |
| alpine 3.12 | webkit2gtk | 2.28.0-r0 |
| alpine 3.13 | webkit2gtk | 2.28.0-r0 |
| alpine 3.14 | webkit2gtk | 2.28.0-r0 |
| alpine 3.15 | webkit2gtk | 2.28.0-r0 |
| alpine 3.16 | webkit2gtk | 2.28.0-r0 |
| alpine 3.17 | webkit2gtk | 2.28.0-r0 |
| alpine 3.18 | webkit2gtk | 2.28.0-r0 |
| alpine 3.19 | webkit2gtk | 2.28.0-r0 |
| alpine 3.20 | webkit2gtk | 2.28.0-r0 |
| amazon linux 2 | webkitgtk4, webkitgtk4-debuginfo, webkitgtk4-devel and 3 more | 2.28.2-2.amzn2.0.1 |
Show all 221 entries from 37 sources
| Source | Package | Fixed in |
|---|---|---|
| alma 8 | LibRaw-devel | 0.19.5-2.el8 |
| alma 8 | PackageKit | 1.1.12-6.el8 |
| alma 8 | PackageKit-command-not-found | 1.1.12-6.el8 |
| alma 8 | PackageKit-cron | 1.1.12-6.el8 |
| alma 8 | PackageKit-glib | 1.1.12-6.el8 |
| alma 8 | PackageKit-glib-devel | 1.1.12-6.el8 |
| alma 8 | PackageKit-gstreamer-plugin | 1.1.12-6.el8 |
| alma 8 | PackageKit-gtk3-module | 1.1.12-6.el8 |
| alma 8 | dleyna-renderer | 0.6.0-3.el8 |
| alma 8 | frei0r-devel | 1.6.1-7.el8 |
| alma 8 | frei0r-plugins | 1.6.1-7.el8 |
| alma 8 | frei0r-plugins-opencv | 1.6.1-7.el8 |
| alma 8 | gnome-remote-desktop | 0.1.8-3.el8 |
| alma 8 | gtk-doc | 1.28-2.el8 |
| alma 8 | libsoup-devel | 2.62.3-2.el8 |
| alma 8 | mutter-devel | 3.32.2-48.el8 |
| alma 8 | nautilus-devel | 3.28.1-14.el8 |
| alma 8 | pipewire | 0.3.6-1.el8 |
| alma 8 | pipewire-devel | 0.3.6-1.el8 |
| alma 8 | pipewire-doc | 0.3.6-1.el8 |
| alma 8 | pipewire-libs | 0.3.6-1.el8 |
| alma 8 | pipewire-utils | 0.3.6-1.el8 |
| alma 8 | pipewire0.2-devel | 0.2.7-6.el8 |
| alma 8 | pipewire0.2-libs | 0.2.7-6.el8 |
| alma 8 | potrace | 1.15-3.el8 |
| alma 8 | pygobject3-devel | 3.28.3-2.el8 |
| alma 8 | python3-gobject | 3.28.3-2.el8 |
| alma 8 | tracker | 2.1.5-2.el8 |
| alma 8 | tracker-devel | 2.1.5-2.el8 |
| alma 8 | vte-profile | 0.52.4-2.el8 |
| alma 8 | vte291 | 0.52.4-2.el8 |
| alma 8 | vte291-devel | 0.52.4-2.el8 |
| alma 8 | webrtc-audio-processing | 0.3-9.el8 |
| alma 8 | xdg-desktop-portal-gtk | 1.6.0-1.el8 |
| alpine 3.11 | webkit2gtk | 2.28.0-r0 |
| alpine 3.12 | webkit2gtk | 2.28.0-r0 |
| alpine 3.13 | webkit2gtk | 2.28.0-r0 |
| alpine 3.14 | webkit2gtk | 2.28.0-r0 |
| alpine 3.15 | webkit2gtk | 2.28.0-r0 |
| alpine 3.16 | webkit2gtk | 2.28.0-r0 |
| alpine 3.17 | webkit2gtk | 2.28.0-r0 |
| alpine 3.18 | webkit2gtk | 2.28.0-r0 |
| alpine 3.19 | webkit2gtk | 2.28.0-r0 |
| alpine 3.20 | webkit2gtk | 2.28.0-r0 |
| amazon linux 2 | webkitgtk4 | 2.28.2-2.amzn2.0.1 |
| amazon linux 2 | webkitgtk4-debuginfo | 2.28.2-2.amzn2.0.1 |
| amazon linux 2 | webkitgtk4-devel | 2.28.2-2.amzn2.0.1 |
| amazon linux 2 | webkitgtk4-doc | 2.28.2-2.amzn2.0.1 |
| amazon linux 2 | webkitgtk4-jsc | 2.28.2-2.amzn2.0.1 |
| amazon linux 2 | webkitgtk4-jsc-devel | 2.28.2-2.amzn2.0.1 |
| debian 10 | webkit2gtk | 2.26.4-1~deb10u2 |
| debian 11 | webkit2gtk | 2.28.0-2 |
| debian 11 | wpewebkit | 2.28.0-1 |
| debian 12 | webkit2gtk | 2.28.0-2 |
| debian 12 | wpewebkit | 2.28.0-1 |
| debian 13 | webkit2gtk | 2.28.0-2 |
| debian 13 | wpewebkit | 2.28.0-1 |
| debian 14 | webkit2gtk | 2.28.0-2 |
| debian 14 | wpewebkit | 2.28.0-1 |
| debian 8 | webkit2gtk | no fix listed |
| debian 9 | webkit2gtk | no fix listed |
| echo | webkit2gtk | 2.28.0-2 |
| echo | wpewebkit | 2.28.0-1 |
| Oracle Linux 7 | webkitgtk4 | 2.28.2-2.el7 |
| Oracle Linux 7 | webkitgtk4-devel | 2.28.2-2.el7 |
| Oracle Linux 7 | webkitgtk4-doc | 2.28.2-2.el7 |
| Oracle Linux 7 | webkitgtk4-jsc | 2.28.2-2.el7 |
| Oracle Linux 7 | webkitgtk4-jsc-devel | 2.28.2-2.el7 |
| Oracle Linux 8 | LibRaw | 0.19.5-2.el8 |
| Oracle Linux 8 | LibRaw-devel | 0.19.5-2.el8 |
| Oracle Linux 8 | PackageKit | 1.1.12-6.0.1.el8 |
| Oracle Linux 8 | PackageKit-command-not-found | 1.1.12-6.0.1.el8 |
| Oracle Linux 8 | PackageKit-cron | 1.1.12-6.0.1.el8 |
| Oracle Linux 8 | PackageKit-glib | 1.1.12-6.0.1.el8 |
| Oracle Linux 8 | PackageKit-glib-devel | 1.1.12-6.0.1.el8 |
| Oracle Linux 8 | PackageKit-gstreamer-plugin | 1.1.12-6.0.1.el8 |
| Oracle Linux 8 | PackageKit-gtk3-module | 1.1.12-6.0.1.el8 |
| Oracle Linux 8 | dleyna-renderer | 0.6.0-3.el8 |
| Oracle Linux 8 | frei0r-devel | 1.6.1-7.el8 |
| Oracle Linux 8 | frei0r-plugins | 1.6.1-7.el8 |
| Oracle Linux 8 | frei0r-plugins-opencv | 1.6.1-7.el8 |
| Oracle Linux 8 | gdm | 1:3.28.3-34.el8 |
| Oracle Linux 8 | gnome-classic-session | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-control-center | 3.28.2-22.el8 |
| Oracle Linux 8 | gnome-control-center-filesystem | 3.28.2-22.el8 |
| Oracle Linux 8 | gnome-photos | 3.28.1-3.el8 |
| Oracle Linux 8 | gnome-photos-tests | 3.28.1-3.el8 |
| Oracle Linux 8 | gnome-remote-desktop | 0.1.8-3.el8 |
| Oracle Linux 8 | gnome-session | 3.28.1-10.0.1.el8 |
| Oracle Linux 8 | gnome-session-wayland-session | 3.28.1-10.0.1.el8 |
| Oracle Linux 8 | gnome-session-xsession | 3.28.1-10.0.1.el8 |
| Oracle Linux 8 | gnome-settings-daemon | 3.32.0-11.el8 |
| Oracle Linux 8 | gnome-shell | 3.32.2-20.el8 |
| Oracle Linux 8 | gnome-shell-extension-apps-menu | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-auto-move-windows | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-common | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-dash-to-dock | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-desktop-icons | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-disable-screenshield | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-drive-menu | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-horizontal-workspaces | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-launch-new-instance | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-native-window-placement | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-no-hot-corner | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-panel-favorites | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-places-menu | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-screenshot-window-sizer | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-systemMonitor | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-top-icons | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-updates-dialog | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-user-theme | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-window-grouper | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-window-list | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-windowsNavigator | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-shell-extension-workspace-indicator | 3.32.1-11.el8 |
| Oracle Linux 8 | gnome-terminal | 3.28.3-2.el8 |
| Oracle Linux 8 | gnome-terminal-nautilus | 3.28.3-2.el8 |
| Oracle Linux 8 | gsettings-desktop-schemas | 3.32.0-5.el8 |
| Oracle Linux 8 | gsettings-desktop-schemas-devel | 3.32.0-5.el8 |
| Oracle Linux 8 | gtk-doc | 1.28-2.el8 |
| Oracle Linux 8 | gtk-update-icon-cache | 3.22.30-6.el8 |
| Oracle Linux 8 | gtk3 | 3.22.30-6.el8 |
| Oracle Linux 8 | gtk3-devel | 3.22.30-6.el8 |
| Oracle Linux 8 | gtk3-immodule-xim | 3.22.30-6.el8 |
| Oracle Linux 8 | gvfs | 1.36.2-10.el8 |
| Oracle Linux 8 | gvfs-afc | 1.36.2-10.el8 |
| Oracle Linux 8 | gvfs-afp | 1.36.2-10.el8 |
| Oracle Linux 8 | gvfs-archive | 1.36.2-10.el8 |
| Oracle Linux 8 | gvfs-client | 1.36.2-10.el8 |
| Oracle Linux 8 | gvfs-devel | 1.36.2-10.el8 |
| Oracle Linux 8 | gvfs-fuse | 1.36.2-10.el8 |
| Oracle Linux 8 | gvfs-goa | 1.36.2-10.el8 |
| Oracle Linux 8 | gvfs-gphoto2 | 1.36.2-10.el8 |
| Oracle Linux 8 | gvfs-mtp | 1.36.2-10.el8 |
| Oracle Linux 8 | gvfs-smb | 1.36.2-10.el8 |
| Oracle Linux 8 | libsoup | 2.62.3-2.el8 |
| Oracle Linux 8 | libsoup-devel | 2.62.3-2.el8 |
| Oracle Linux 8 | mutter | 3.32.2-48.el8 |
| Oracle Linux 8 | mutter-devel | 3.32.2-48.el8 |
| Oracle Linux 8 | nautilus | 3.28.1-14.el8 |
| Oracle Linux 8 | nautilus-devel | 3.28.1-14.el8 |
| Oracle Linux 8 | nautilus-extensions | 3.28.1-14.el8 |
| Oracle Linux 8 | pipewire | 0.3.6-1.el8 |
| Oracle Linux 8 | pipewire-devel | 0.3.6-1.el8 |
| Oracle Linux 8 | pipewire-doc | 0.3.6-1.el8 |
| Oracle Linux 8 | pipewire-libs | 0.3.6-1.el8 |
| Oracle Linux 8 | pipewire-utils | 0.3.6-1.el8 |
| Oracle Linux 8 | pipewire0.2-devel | 0.2.7-6.el8 |
| Oracle Linux 8 | pipewire0.2-libs | 0.2.7-6.el8 |
| Oracle Linux 8 | potrace | 1.15-3.el8 |
| Oracle Linux 8 | pygobject3-devel | 3.28.3-2.el8 |
| Oracle Linux 8 | python3-gobject | 3.28.3-2.el8 |
| Oracle Linux 8 | python3-gobject-base | 3.28.3-2.el8 |
| Oracle Linux 8 | tracker | 2.1.5-2.el8 |
| Oracle Linux 8 | tracker-devel | 2.1.5-2.el8 |
| Oracle Linux 8 | vte-profile | 0.52.4-2.el8 |
| Oracle Linux 8 | vte291 | 0.52.4-2.el8 |
| Oracle Linux 8 | vte291-devel | 0.52.4-2.el8 |
| Oracle Linux 8 | webkit2gtk3 | 2.28.4-1.el8 |
| Oracle Linux 8 | webkit2gtk3-devel | 2.28.4-1.el8 |
| Oracle Linux 8 | webkit2gtk3-jsc | 2.28.4-1.el8 |
| Oracle Linux 8 | webkit2gtk3-jsc-devel | 2.28.4-1.el8 |
| Oracle Linux 8 | webrtc-audio-processing | 0.3-9.el8 |
| Oracle Linux 8 | xdg-desktop-portal | 1.6.0-2.el8 |
| Oracle Linux 8 | xdg-desktop-portal-gtk | 1.6.0-1.el8 |
| Red Hat | libwebkit2gtk | no fix listed |
| Red Hat | webkitgtk | no fix listed |
| Red Hat | webkitgtk-devel | no fix listed |
| Red Hat | webkitgtk-doc | no fix listed |
| Red Hat | webkitgtk3 | no fix listed |
| Red Hat | webkitgtk3-devel | no fix listed |
| Red Hat | webkitgtk3-doc | no fix listed |
| rocky 8 | LibRaw | 0.19.5-2.el8 |
| rocky 8 | PackageKit | 1.1.12-6.el8.0.2 |
| rocky 8 | PackageKit-command-not-found | 1.1.12-6.el8.0.2 |
| rocky 8 | PackageKit-cron | 1.1.12-6.el8.0.2 |
| rocky 8 | PackageKit-glib | 1.1.12-6.el8.0.2 |
| rocky 8 | PackageKit-gstreamer-plugin | 1.1.12-6.el8.0.2 |
| rocky 8 | PackageKit-gtk3-module | 1.1.12-6.el8.0.2 |
| rocky 8 | dleyna-renderer | 0.6.0-3.el8 |
| rocky 8 | frei0r-plugins | 1.6.1-7.el8 |
| rocky 8 | frei0r-plugins-opencv | 1.6.1-7.el8 |
| rocky 8 | gnome-remote-desktop | 0.1.8-3.el8 |
| rocky 8 | gnome-session | 3.28.1-10.el8 |
| rocky 8 | gnome-session-wayland-session | 3.28.1-10.el8 |
| rocky 8 | gnome-session-xsession | 3.28.1-10.el8 |
| rocky 8 | gsettings-desktop-schemas | 3.32.0-5.el8 |
| rocky 8 | gtk-update-icon-cache | 3.22.30-6.el8 |
| rocky 8 | gtk3 | 3.22.30-6.el8 |
| rocky 8 | gtk3-devel | 3.22.30-6.el8 |
| rocky 8 | gtk3-immodule-xim | 3.22.30-6.el8 |
| rocky 8 | libsoup | 2.62.3-2.el8 |
| rocky 8 | libsoup-devel | 2.62.3-2.el8 |
| rocky 8 | pipewire | 0.3.6-1.el8 |
| rocky 8 | pipewire-devel | 0.3.6-1.el8 |
| rocky 8 | pipewire-doc | 0.3.6-1.el8 |
| rocky 8 | pipewire-libs | 0.3.6-1.el8 |
| rocky 8 | pipewire-utils | 0.3.6-1.el8 |
| rocky 8 | pipewire0.2-devel | 0.2.7-6.el8 |
| rocky 8 | pipewire0.2-libs | 0.2.7-6.el8 |
| rocky 8 | potrace | 1.15-3.el8 |
| rocky 8 | python3-gobject | 3.28.3-2.el8 |
| rocky 8 | python3-gobject-base | 3.28.3-2.el8 |
| rocky 8 | tracker | 2.1.5-2.el8 |
| rocky 8 | vte-profile | 0.52.4-2.el8 |
| rocky 8 | vte291 | 0.52.4-2.el8 |
| rocky 8 | webrtc-audio-processing | 0.3-9.el8 |
| rocky 8 | xdg-desktop-portal-gtk | 1.6.0-1.el8 |
| ubuntu 18.04 | webkit2gtk | 2.28.0-0ubuntu0.18.04.3 |
| ubuntu 18.04-ESM | webkit2gtk | 2.28.0-0ubuntu0.18.04.3 |
| ubuntu 19.10 | webkit2gtk | 2.28.0-0ubuntu0.19.10.2 |
| ubuntu 20.04 | webkit2gtk | 2.28.0-1ubuntu2 |
| ubuntu 20.04-ESM | webkit2gtk | 2.28.0-1ubuntu2 |
| ubuntu 20.10 | webkit2gtk | 2.28.0-1ubuntu2 |
| ubuntu 21.04 | webkit2gtk | 2.28.0-1ubuntu2 |
| ubuntu 21.10 | webkit2gtk | 2.28.0-1ubuntu2 |
| ubuntu 22.04 | webkit2gtk | 2.28.0-1ubuntu2 |
| ubuntu 22.10 | webkit2gtk | 2.28.0-1ubuntu2 |
| ubuntu 23.04 | webkit2gtk | 2.28.0-1ubuntu2 |
| ubuntu 23.10 | webkit2gtk | 2.28.0-1ubuntu2 |
| ubuntu 24.04 | webkit2gtk | 2.28.0-1ubuntu2 |
References
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00008.html
- https://access.redhat.com/security/cve/CVE-2020-10018
- https://bugs.webkit.org/show_bug.cgi?id=204342#c21
- https://bugzilla.redhat.com/show_bug.cgi?id=1207179
- https://bugzilla.redhat.com/show_bug.cgi?id=1566027
- https://bugzilla.redhat.com/show_bug.cgi?id=1569868
- https://bugzilla.redhat.com/show_bug.cgi?id=1652178
- https://bugzilla.redhat.com/show_bug.cgi?id=1656262
All 175 references
- https://bugzilla.redhat.com/show_bug.cgi?id=1668895
- https://bugzilla.redhat.com/show_bug.cgi?id=1692536
- https://bugzilla.redhat.com/show_bug.cgi?id=1706008
- https://bugzilla.redhat.com/show_bug.cgi?id=1706076
- https://bugzilla.redhat.com/show_bug.cgi?id=1715845
- https://bugzilla.redhat.com/show_bug.cgi?id=1719937
- https://bugzilla.redhat.com/show_bug.cgi?id=1758891
- https://bugzilla.redhat.com/show_bug.cgi?id=1775345
- https://bugzilla.redhat.com/show_bug.cgi?id=1778579
- https://bugzilla.redhat.com/show_bug.cgi?id=1779691
- https://bugzilla.redhat.com/show_bug.cgi?id=1794045
- https://bugzilla.redhat.com/show_bug.cgi?id=1804719
- https://bugzilla.redhat.com/show_bug.cgi?id=1805929
- https://bugzilla.redhat.com/show_bug.cgi?id=1811721
- https://bugzilla.redhat.com/show_bug.cgi?id=1814820
- https://bugzilla.redhat.com/show_bug.cgi?id=1816070
- https://bugzilla.redhat.com/show_bug.cgi?id=1816678
- https://bugzilla.redhat.com/show_bug.cgi?id=1816684
- https://bugzilla.redhat.com/show_bug.cgi?id=1816686
- https://bugzilla.redhat.com/show_bug.cgi?id=1817143
- https://bugzilla.redhat.com/show_bug.cgi?id=1820759
- https://bugzilla.redhat.com/show_bug.cgi?id=1820760
- https://bugzilla.redhat.com/show_bug.cgi?id=1824362
- https://bugzilla.redhat.com/show_bug.cgi?id=1827030
- https://bugzilla.redhat.com/show_bug.cgi?id=1829369
- https://bugzilla.redhat.com/show_bug.cgi?id=1832347
- https://bugzilla.redhat.com/show_bug.cgi?id=1833158
- https://bugzilla.redhat.com/show_bug.cgi?id=1837381
- https://bugzilla.redhat.com/show_bug.cgi?id=1837406
- https://bugzilla.redhat.com/show_bug.cgi?id=1837413
- https://bugzilla.redhat.com/show_bug.cgi?id=1837648
- https://bugzilla.redhat.com/show_bug.cgi?id=1840080
- https://bugzilla.redhat.com/show_bug.cgi?id=1840788
- https://bugzilla.redhat.com/show_bug.cgi?id=1843486
- https://bugzilla.redhat.com/show_bug.cgi?id=1844578
- https://bugzilla.redhat.com/show_bug.cgi?id=1846191
- https://bugzilla.redhat.com/show_bug.cgi?id=1847051
- https://bugzilla.redhat.com/show_bug.cgi?id=1847061
- https://bugzilla.redhat.com/show_bug.cgi?id=1847062
- https://bugzilla.redhat.com/show_bug.cgi?id=1847203
- https://bugzilla.redhat.com/show_bug.cgi?id=1853477
- https://bugzilla.redhat.com/show_bug.cgi?id=1854734
- https://bugzilla.redhat.com/show_bug.cgi?id=1866332
- https://bugzilla.redhat.com/show_bug.cgi?id=1868260
- https://bugzilla.redhat.com/show_bug.cgi?id=1872270
- https://bugzilla.redhat.com/show_bug.cgi?id=1873093
- https://bugzilla.redhat.com/show_bug.cgi?id=1873963
- https://bugzilla.redhat.com/show_bug.cgi?id=1876462
- https://bugzilla.redhat.com/show_bug.cgi?id=1876463
- https://bugzilla.redhat.com/show_bug.cgi?id=1876465
- https://bugzilla.redhat.com/show_bug.cgi?id=1876468
- https://bugzilla.redhat.com/show_bug.cgi?id=1876470
- https://bugzilla.redhat.com/show_bug.cgi?id=1876472
- https://bugzilla.redhat.com/show_bug.cgi?id=1876473
- https://bugzilla.redhat.com/show_bug.cgi?id=1876476
- https://bugzilla.redhat.com/show_bug.cgi?id=1876516
- https://bugzilla.redhat.com/show_bug.cgi?id=1876518
- https://bugzilla.redhat.com/show_bug.cgi?id=1876521
- https://bugzilla.redhat.com/show_bug.cgi?id=1876522
- https://bugzilla.redhat.com/show_bug.cgi?id=1876523
- https://bugzilla.redhat.com/show_bug.cgi?id=1876536
- https://bugzilla.redhat.com/show_bug.cgi?id=1876537
- https://bugzilla.redhat.com/show_bug.cgi?id=1876540
- https://bugzilla.redhat.com/show_bug.cgi?id=1876543
- https://bugzilla.redhat.com/show_bug.cgi?id=1876545
- https://bugzilla.redhat.com/show_bug.cgi?id=1876548
- https://bugzilla.redhat.com/show_bug.cgi?id=1876549
- https://bugzilla.redhat.com/show_bug.cgi?id=1876550
- https://bugzilla.redhat.com/show_bug.cgi?id=1876552
- https://bugzilla.redhat.com/show_bug.cgi?id=1876553
- https://bugzilla.redhat.com/show_bug.cgi?id=1876554
- https://bugzilla.redhat.com/show_bug.cgi?id=1876555
- https://bugzilla.redhat.com/show_bug.cgi?id=1876556
- https://bugzilla.redhat.com/show_bug.cgi?id=1876590
- https://bugzilla.redhat.com/show_bug.cgi?id=1876591
- https://bugzilla.redhat.com/show_bug.cgi?id=1876594
- https://bugzilla.redhat.com/show_bug.cgi?id=1876607
- https://bugzilla.redhat.com/show_bug.cgi?id=1876611
- https://bugzilla.redhat.com/show_bug.cgi?id=1876617
- https://bugzilla.redhat.com/show_bug.cgi?id=1876619
- https://bugzilla.redhat.com/show_bug.cgi?id=1877853
- https://bugzilla.redhat.com/show_bug.cgi?id=1879532
- https://bugzilla.redhat.com/show_bug.cgi?id=1879535
- https://bugzilla.redhat.com/show_bug.cgi?id=1879536
- https://bugzilla.redhat.com/show_bug.cgi?id=1879538
- https://bugzilla.redhat.com/show_bug.cgi?id=1879540
- https://bugzilla.redhat.com/show_bug.cgi?id=1879541
- https://bugzilla.redhat.com/show_bug.cgi?id=1879545
- https://bugzilla.redhat.com/show_bug.cgi?id=1879557
- https://bugzilla.redhat.com/show_bug.cgi?id=1879559
- https://bugzilla.redhat.com/show_bug.cgi?id=1879563
- https://bugzilla.redhat.com/show_bug.cgi?id=1879564
- https://bugzilla.redhat.com/show_bug.cgi?id=1879566
- https://bugzilla.redhat.com/show_bug.cgi?id=1879568
- https://bugzilla.redhat.com/show_bug.cgi?id=1880339
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8625
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8710
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8720
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8743
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8764
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8766
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8769
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8771
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8782
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8783
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8808
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8811
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8812
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8813
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8814
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8815
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8816
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8819
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8820
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8823
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8835
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8844
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8846
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10018
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11793
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14391
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15503
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3862
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3864
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3865
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3867
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3868
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3885
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3894
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3895
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3897
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3899
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3900
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3901
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3902
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9802
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9803
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9805
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9806
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9807
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9843
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9850
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9862
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9893
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9894
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9895
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9915
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9925
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9952
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30666
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30761
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30762
- https://errata.almalinux.org/8/ALSA-2020-4451.html
- https://errata.rockylinux.org/RLSA-2020:4451
- https://linux.oracle.com/cve/CVE-2020-10018.html
- https://linux.oracle.com/errata/ELSA-2020-4451.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DOR5LPL4UASVAR76EIHCL4O2KGDWGC6K/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GLERWAS2LL7SX2GHA2DDZ2PL3QC5OHIF/
- https://nvd.nist.gov/vuln/detail/CVE-2020-10018
- https://security.gentoo.org/glsa/202006-08
- https://trac.webkit.org/changeset/257292
- https://ubuntu.com/security/notices/USN-4310-1
- https://usn.ubuntu.com/4310-1/
- https://webkitgtk.org/security/WSA-2020-0003.html
- https://wpewebkit.org/security/WSA-2020-0003.html
- https://www.cve.org/CVERecord?id=CVE-2020-10018
- https://www.debian.org/security/2020/dsa-4641