Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:2523-1

Опубликовано: 22 июл. 2022
Источник: suse-cvrf

Описание

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Update to version 2.36.4 (bsc#1201221):

  • CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information.
  • CVE-2022-22677: The video in a webRTC call may be interrupted if the audio capture gets interrupted.
  • CVE-2022-26710: Processing maliciously crafted web content may lead to arbitrary code execution.

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP4
libjavascriptcoregtk-4_0-18-2.36.4-150400.4.6.2
libwebkit2gtk-4_0-37-2.36.4-150400.4.6.2
typelib-1_0-JavaScriptCore-4_0-2.36.4-150400.4.6.2
typelib-1_0-WebKit2-4_0-2.36.4-150400.4.6.2
typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150400.4.6.2
webkit2gtk-4_0-injected-bundles-2.36.4-150400.4.6.2
webkit2gtk3-soup2-devel-2.36.4-150400.4.6.2
SUSE Linux Enterprise Module for Desktop Applications 15 SP4
libjavascriptcoregtk-4_1-0-2.36.4-150400.4.6.2
libwebkit2gtk-4_1-0-2.36.4-150400.4.6.2
typelib-1_0-JavaScriptCore-4_1-2.36.4-150400.4.6.2
typelib-1_0-WebKit2-4_1-2.36.4-150400.4.6.2
typelib-1_0-WebKit2WebExtension-4_1-2.36.4-150400.4.6.2
webkit2gtk-4_1-injected-bundles-2.36.4-150400.4.6.2
webkit2gtk3-devel-2.36.4-150400.4.6.2
SUSE Linux Enterprise Module for Development Tools 15 SP4
libjavascriptcoregtk-5_0-0-2.36.4-150400.4.6.2
libwebkit2gtk-5_0-0-2.36.4-150400.4.6.2
typelib-1_0-JavaScriptCore-5_0-2.36.4-150400.4.6.2
typelib-1_0-WebKit2-5_0-2.36.4-150400.4.6.2
webkit2gtk-5_0-injected-bundles-2.36.4-150400.4.6.2
openSUSE Leap 15.4
WebKit2GTK-4.0-lang-2.36.4-150400.4.6.2
WebKit2GTK-4.1-lang-2.36.4-150400.4.6.2
WebKit2GTK-5.0-lang-2.36.4-150400.4.6.2
libjavascriptcoregtk-4_0-18-2.36.4-150400.4.6.2
libjavascriptcoregtk-4_0-18-32bit-2.36.4-150400.4.6.2
libjavascriptcoregtk-4_1-0-2.36.4-150400.4.6.2
libjavascriptcoregtk-4_1-0-32bit-2.36.4-150400.4.6.2
libjavascriptcoregtk-5_0-0-2.36.4-150400.4.6.2
libwebkit2gtk-4_0-37-2.36.4-150400.4.6.2
libwebkit2gtk-4_0-37-32bit-2.36.4-150400.4.6.2
libwebkit2gtk-4_1-0-2.36.4-150400.4.6.2
libwebkit2gtk-4_1-0-32bit-2.36.4-150400.4.6.2
libwebkit2gtk-5_0-0-2.36.4-150400.4.6.2
typelib-1_0-JavaScriptCore-4_0-2.36.4-150400.4.6.2
typelib-1_0-JavaScriptCore-4_1-2.36.4-150400.4.6.2
typelib-1_0-JavaScriptCore-5_0-2.36.4-150400.4.6.2
typelib-1_0-WebKit2-4_0-2.36.4-150400.4.6.2
typelib-1_0-WebKit2-4_1-2.36.4-150400.4.6.2
typelib-1_0-WebKit2-5_0-2.36.4-150400.4.6.2
typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150400.4.6.2
typelib-1_0-WebKit2WebExtension-4_1-2.36.4-150400.4.6.2
typelib-1_0-WebKit2WebExtension-5_0-2.36.4-150400.4.6.2
webkit-jsc-4-2.36.4-150400.4.6.2
webkit-jsc-4.1-2.36.4-150400.4.6.2
webkit-jsc-5.0-2.36.4-150400.4.6.2
webkit2gtk-4_0-injected-bundles-2.36.4-150400.4.6.2
webkit2gtk-4_1-injected-bundles-2.36.4-150400.4.6.2
webkit2gtk-5_0-injected-bundles-2.36.4-150400.4.6.2
webkit2gtk3-devel-2.36.4-150400.4.6.2
webkit2gtk3-minibrowser-2.36.4-150400.4.6.2
webkit2gtk3-soup2-devel-2.36.4-150400.4.6.2
webkit2gtk3-soup2-minibrowser-2.36.4-150400.4.6.2
webkit2gtk4-devel-2.36.4-150400.4.6.2
webkit2gtk4-minibrowser-2.36.4-150400.4.6.2

Ссылки

Описание

A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive user information.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP4:libjavascriptcoregtk-4_0-18-2.36.4-150400.4.6.2
SUSE Linux Enterprise Module for Basesystem 15 SP4:libwebkit2gtk-4_0-37-2.36.4-150400.4.6.2
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-JavaScriptCore-4_0-2.36.4-150400.4.6.2
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-WebKit2-4_0-2.36.4-150400.4.6.2
Ссылки

Описание

A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP4:libjavascriptcoregtk-4_0-18-2.36.4-150400.4.6.2
SUSE Linux Enterprise Module for Basesystem 15 SP4:libwebkit2gtk-4_0-37-2.36.4-150400.4.6.2
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-JavaScriptCore-4_0-2.36.4-150400.4.6.2
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-WebKit2-4_0-2.36.4-150400.4.6.2
Ссылки

Описание

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP4:libjavascriptcoregtk-4_0-18-2.36.4-150400.4.6.2
SUSE Linux Enterprise Module for Basesystem 15 SP4:libwebkit2gtk-4_0-37-2.36.4-150400.4.6.2
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-JavaScriptCore-4_0-2.36.4-150400.4.6.2
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-WebKit2-4_0-2.36.4-150400.4.6.2
Ссылки
Уязвимость SUSE-SU-2022:2523-1