Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:2522-1

Опубликовано: 22 июл. 2022
Источник: suse-cvrf

Описание

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Update to version 2.36.4 (bsc#1201221):

  • CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information.
  • CVE-2022-22677: The video in a webRTC call may be interrupted if the audio capture gets interrupted.
  • CVE-2022-26710: Processing maliciously crafted web content may lead to arbitrary code execution.

Список пакетов

SUSE Linux Enterprise Server 12 SP2-BCL
libjavascriptcoregtk-4_0-18-2.36.4-2.102.1
libwebkit2gtk-4_0-37-2.36.4-2.102.1
libwebkit2gtk3-lang-2.36.4-2.102.1
typelib-1_0-JavaScriptCore-4_0-2.36.4-2.102.1
typelib-1_0-WebKit2-4_0-2.36.4-2.102.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.4-2.102.1
webkit2gtk-4_0-injected-bundles-2.36.4-2.102.1
webkit2gtk3-devel-2.36.4-2.102.1
SUSE Linux Enterprise Server 12 SP3-BCL
libjavascriptcoregtk-4_0-18-2.36.4-2.102.1
libwebkit2gtk-4_0-37-2.36.4-2.102.1
typelib-1_0-JavaScriptCore-4_0-2.36.4-2.102.1
typelib-1_0-WebKit2-4_0-2.36.4-2.102.1
webkit2gtk-4_0-injected-bundles-2.36.4-2.102.1
SUSE Linux Enterprise Server 12 SP4-LTSS
libjavascriptcoregtk-4_0-18-2.36.4-2.102.1
libwebkit2gtk-4_0-37-2.36.4-2.102.1
libwebkit2gtk3-lang-2.36.4-2.102.1
typelib-1_0-JavaScriptCore-4_0-2.36.4-2.102.1
typelib-1_0-WebKit2-4_0-2.36.4-2.102.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.4-2.102.1
webkit2gtk-4_0-injected-bundles-2.36.4-2.102.1
SUSE Linux Enterprise Server 12 SP5
libjavascriptcoregtk-4_0-18-2.36.4-2.102.1
libwebkit2gtk-4_0-37-2.36.4-2.102.1
libwebkit2gtk3-lang-2.36.4-2.102.1
typelib-1_0-JavaScriptCore-4_0-2.36.4-2.102.1
typelib-1_0-WebKit2-4_0-2.36.4-2.102.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.4-2.102.1
webkit2gtk-4_0-injected-bundles-2.36.4-2.102.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libjavascriptcoregtk-4_0-18-2.36.4-2.102.1
libwebkit2gtk-4_0-37-2.36.4-2.102.1
libwebkit2gtk3-lang-2.36.4-2.102.1
typelib-1_0-JavaScriptCore-4_0-2.36.4-2.102.1
typelib-1_0-WebKit2-4_0-2.36.4-2.102.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.4-2.102.1
webkit2gtk-4_0-injected-bundles-2.36.4-2.102.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libjavascriptcoregtk-4_0-18-2.36.4-2.102.1
libwebkit2gtk-4_0-37-2.36.4-2.102.1
libwebkit2gtk3-lang-2.36.4-2.102.1
typelib-1_0-JavaScriptCore-4_0-2.36.4-2.102.1
typelib-1_0-WebKit2-4_0-2.36.4-2.102.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.4-2.102.1
webkit2gtk-4_0-injected-bundles-2.36.4-2.102.1
SUSE Linux Enterprise Software Development Kit 12 SP5
typelib-1_0-WebKit2WebExtension-4_0-2.36.4-2.102.1
webkit2gtk3-devel-2.36.4-2.102.1
SUSE OpenStack Cloud 9
libjavascriptcoregtk-4_0-18-2.36.4-2.102.1
libwebkit2gtk-4_0-37-2.36.4-2.102.1
libwebkit2gtk3-lang-2.36.4-2.102.1
typelib-1_0-JavaScriptCore-4_0-2.36.4-2.102.1
typelib-1_0-WebKit2-4_0-2.36.4-2.102.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.4-2.102.1
webkit2gtk-4_0-injected-bundles-2.36.4-2.102.1
SUSE OpenStack Cloud Crowbar 9
libjavascriptcoregtk-4_0-18-2.36.4-2.102.1
libwebkit2gtk-4_0-37-2.36.4-2.102.1
libwebkit2gtk3-lang-2.36.4-2.102.1
typelib-1_0-JavaScriptCore-4_0-2.36.4-2.102.1
typelib-1_0-WebKit2-4_0-2.36.4-2.102.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.4-2.102.1
webkit2gtk-4_0-injected-bundles-2.36.4-2.102.1

Ссылки

Описание

A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive user information.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:libjavascriptcoregtk-4_0-18-2.36.4-2.102.1
SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk-4_0-37-2.36.4-2.102.1
SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk3-lang-2.36.4-2.102.1
SUSE Linux Enterprise Server 12 SP2-BCL:typelib-1_0-JavaScriptCore-4_0-2.36.4-2.102.1
Ссылки

Описание

A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:libjavascriptcoregtk-4_0-18-2.36.4-2.102.1
SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk-4_0-37-2.36.4-2.102.1
SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk3-lang-2.36.4-2.102.1
SUSE Linux Enterprise Server 12 SP2-BCL:typelib-1_0-JavaScriptCore-4_0-2.36.4-2.102.1
Ссылки

Описание

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:libjavascriptcoregtk-4_0-18-2.36.4-2.102.1
SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk-4_0-37-2.36.4-2.102.1
SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk3-lang-2.36.4-2.102.1
SUSE Linux Enterprise Server 12 SP2-BCL:typelib-1_0-JavaScriptCore-4_0-2.36.4-2.102.1
Ссылки
Уязвимость SUSE-SU-2022:2522-1