ALT-PU-2017-1154

Высокий

ALT-PU-2017-1154: package libwebkitgtk4 update to version 2.14.4-alt1

Источник

errata.altlinux.org

Дата публикации

11.02.2017

Дата обновления

11.02.2017

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades libwebkitgtk4 to version 2.14.4-alt1.

Устраненные уязвимости12

CVE-2017-2350

Средний 6.5

Дата публикации: 20.02.2017

CWE-200

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.

CVSS 3.0

Средний 6.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None

CVSS 2.0

Средний 4.3

AV:N/AC:M/Au:N/C:P/I:N/A:N

Access vector: Network
Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Ссылки

CVE-2017-2350 https://nvd.nist.gov/vuln/detail/CVE-2017-2350

Ссылки1

ALT-PU-2017-1154 https://errata.altlinux.org/ALT-PU-2017-1154

Связанные уязвимости

openSUSE-SU-2017:2991-1

suse-cvrf

почти 9 лет назад

Security update for webkit2gtk3

SUSE-SU-2017:2933-1

suse-cvrf

около 9 лет назад

Security update for webkit2gtk3

openSUSE-SU-2018:0326-1

suse-cvrf

почти 9 лет назад

Security update for webkit2gtk3

SUSE-SU-2018:0219-1

suse-cvrf

почти 9 лет назад

Security update for webkit2gtk3

CVE-2017-2350

CVSS3: 6.5

ubuntu

больше 9 лет назад