It was discovered that wkhtmltopdf was not properly enforcing the same-origin policy when processing certain HTML files. If a user or automated system using wkhtmltopdf were tricked into processing a specially crafted HTML file, an attacker could possibly use this issue to expose sensitive information.
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_version": "0.12.2.4-1ubuntu0.1~esm1", "binary_name": "wkhtmltopdf" }, { "binary_version": "0.12.2.4-1ubuntu0.1~esm1", "binary_name": "wkhtmltopdf-dbg" }, { "binary_version": "0.12.2.4-1ubuntu0.1~esm1", "binary_name": "wkhtmltopdf-dbgsym" } ] }