CVE-2024-4558
Publication date 7 May 2024
Last updated 9 September 2024
Ubuntu priority
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Status
Package | Ubuntu Release | Status |
---|---|---|
chromium-browser | 24.04 LTS noble |
Not affected
|
22.04 LTS jammy |
Not affected
|
|
20.04 LTS focal |
Not affected
|
|
qtwebkit-opensource-src | 24.04 LTS noble | Ignored |
22.04 LTS jammy | Ignored | |
20.04 LTS focal | Ignored | |
18.04 LTS bionic | Ignored | |
16.04 LTS xenial | Ignored | |
qtwebkit-source | 24.04 LTS noble | Not in release |
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored | |
16.04 LTS xenial | Ignored | |
webkit2gtk | 24.04 LTS noble |
Fixed 2.44.3-0ubuntu0.24.04.1
|
22.04 LTS jammy |
Fixed 2.44.3-0ubuntu0.22.04.1
|
|
20.04 LTS focal | Ignored | |
18.04 LTS bionic | Ignored | |
16.04 LTS xenial | Ignored | |
webkitgtk | 24.04 LTS noble | Not in release |
22.04 LTS jammy | Not in release | |
20.04 LTS focal | Not in release | |
18.04 LTS bionic | Ignored | |
16.04 LTS xenial | Ignored | |
wpewebkit | 24.04 LTS noble | Not in release |
22.04 LTS jammy | Ignored | |
20.04 LTS focal | Ignored |
Notes
alexmurray
The Debian chromium source package is called chromium-browser in Ubuntu
mdeslaur
starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap
References
Related Ubuntu Security Notices (USN)
- USN-6996-1
- WebKitGTK vulnerabilities
- 9 September 2024