[3.6] webkit2gtk: Several vulnerabilities (CVE-2017-2350, CVE-2017-2354, CVE-2017-2355, CVE-2017-2356, CVE-2017-2362, CVE-2017-2363, CVE-2017-2364, CVE-2017-2365, CVE-2017-2366, CVE-2017-2369, CVE-2017-2371, CVE-2017-2373)

CVE-2017-2350

Versions affected: WebKitGTK+ before 2.14.4.
Impact: Processing maliciously crafted web content may exfiltrate data cross-origin.
Description: A prototype access issue was addressed through improved exception handling.

CVE-2017-2354

Versions affected: WebKitGTK+ before 2.14.4.
Impact: Processing maliciously crafted web content may lead to arbitrary code execution.
Description: Multiple memory corruption issues were addressed through improved memory handling.

CVE-2017-2355

Versions affected: WebKitGTK+ before 2.14.4.
Impact: Processing maliciously crafted web content may lead to arbitrary code execution.
Description: A memory initialization issue was addressed through improved memory handling.

CVE-2017-2356

Versions affected: WebKitGTK+ before 2.14.4.
Impact: Processing maliciously crafted web content may lead to arbitrary code execution.
Description: Multiple memory corruption issues were addressed through improved input validation.

CVE-2017-2362

Versions affected: WebKitGTK+ before 2.14.4.
Impact: Processing maliciously crafted web content may lead to arbitrary code execution.
Description: Multiple memory corruption issues were addressed through improved memory handling.

CVE-2017-2363

Versions affected: WebKitGTK+ before 2.14.4.
Impact: Processing maliciously crafted web content may exfiltrate data cross-origin.
Description: Multiple validation issues existed in the handling of page loading.
This issue was addressed through improved logic.

CVE-2017-2364

Versions affected: WebKitGTK+ before 2.14.4.
Impact: Processing maliciously crafted web content may exfiltrate data cross-origin.
Description: Multiple validation issues existed in the handling of page loading.
This issue was addressed through improved logic.

CVE-2017-2365

Versions affected: WebKitGTK+ before 2.14.4.
Impact: Processing maliciously crafted web content may exfiltrate data cross-origin.
Description: A validation issue existed in variable handling.
This issue was addressed through improved validation.

CVE-2017-2366

Versions affected: WebKitGTK+ before 2.14.4.
Impact: Processing maliciously crafted web content may lead to arbitrary code execution.
Description: Multiple memory corruption issues were addressed through improved input validation.

CVE-2017-2369

Versions affected: WebKitGTK+ before 2.14.4.
Impact: Processing maliciously crafted web content may lead to arbitrary code execution.
Description: Multiple memory corruption issues were addressed through improved input validation.

CVE-2017-2371

Versions affected: WebKitGTK+ before 2.14.4.
Impact: A malicious website can open popups.
Description: An issue existed in the handling of blocking popups.
This was addressed through improved input validation.

CVE-2017-2373

Versions affected: WebKitGTK+ before 2.14.4.
Impact: Processing maliciously crafted web content may lead to arbitrary code execution.
Description: Multiple memory corruption issues were addressed through improved memory handling.

Reference:

https://webkitgtk.org/security/WSA-2017-0002.html

(from redmine: issue id 6887, created on 2017-02-17, closed on 2017-02-23)

community/webkit2gtk: security upgrade to 2.14.5 - fixes #6887

CVE-2017-2350
CVE-2017-2354
CVE-2017-2355
CVE-2017-2356
CVE-2017-2362
CVE-2017-2363
CVE-2017-2364
CVE-2017-2365
CVE-2017-2366
CVE-2017-2369
CVE-2017-2371
CVE-2017-2373