SUSE-SU-2022:2524-1

Опубликовано: 22 июл. 2022

Источник: suse-cvrf

Описание

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Update to version 2.36.4 (bsc#1201221):

CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information.
CVE-2022-22677: The video in a webRTC call may be interrupted if the audio capture gets interrupted.
CVE-2022-26710: Processing maliciously crafted web content may lead to arbitrary code execution.

Список пакетов

SUSE Enterprise Storage 6

libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1

libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1

libwebkit2gtk3-lang-2.36.4-150000.3.106.1

typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150000.3.106.1

webkit2gtk-4_0-injected-bundles-2.36.4-150000.3.106.1

webkit2gtk3-devel-2.36.4-150000.3.106.1

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1

libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1

libwebkit2gtk3-lang-2.36.4-150000.3.106.1

typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150000.3.106.1

webkit2gtk-4_0-injected-bundles-2.36.4-150000.3.106.1

webkit2gtk3-devel-2.36.4-150000.3.106.1

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1

libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1

libwebkit2gtk3-lang-2.36.4-150000.3.106.1

typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150000.3.106.1

webkit2gtk-4_0-injected-bundles-2.36.4-150000.3.106.1

webkit2gtk3-devel-2.36.4-150000.3.106.1

SUSE Linux Enterprise High Performance Computing 15-ESPOS

libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1

libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1

libwebkit2gtk3-lang-2.36.4-150000.3.106.1

typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150000.3.106.1

webkit2gtk-4_0-injected-bundles-2.36.4-150000.3.106.1

webkit2gtk3-devel-2.36.4-150000.3.106.1

SUSE Linux Enterprise High Performance Computing 15-LTSS

libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1

libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1

libwebkit2gtk3-lang-2.36.4-150000.3.106.1

typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150000.3.106.1

webkit2gtk-4_0-injected-bundles-2.36.4-150000.3.106.1

webkit2gtk3-devel-2.36.4-150000.3.106.1

SUSE Linux Enterprise Server 15 SP1-BCL

libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1

libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1

libwebkit2gtk3-lang-2.36.4-150000.3.106.1

typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150000.3.106.1

webkit2gtk-4_0-injected-bundles-2.36.4-150000.3.106.1

webkit2gtk3-devel-2.36.4-150000.3.106.1

SUSE Linux Enterprise Server 15 SP1-LTSS

libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1

libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1

libwebkit2gtk3-lang-2.36.4-150000.3.106.1

typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150000.3.106.1

webkit2gtk-4_0-injected-bundles-2.36.4-150000.3.106.1

webkit2gtk3-devel-2.36.4-150000.3.106.1

SUSE Linux Enterprise Server 15-LTSS

libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1

libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1

libwebkit2gtk3-lang-2.36.4-150000.3.106.1

typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150000.3.106.1

webkit2gtk-4_0-injected-bundles-2.36.4-150000.3.106.1

webkit2gtk3-devel-2.36.4-150000.3.106.1

SUSE Linux Enterprise Server for SAP Applications 15

libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1

libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1

libwebkit2gtk3-lang-2.36.4-150000.3.106.1

typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150000.3.106.1

webkit2gtk-4_0-injected-bundles-2.36.4-150000.3.106.1

webkit2gtk3-devel-2.36.4-150000.3.106.1

SUSE Linux Enterprise Server for SAP Applications 15 SP1

libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1

libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1

libwebkit2gtk3-lang-2.36.4-150000.3.106.1

typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2-4_0-2.36.4-150000.3.106.1

typelib-1_0-WebKit2WebExtension-4_0-2.36.4-150000.3.106.1

webkit2gtk-4_0-injected-bundles-2.36.4-150000.3.106.1

webkit2gtk3-devel-2.36.4-150000.3.106.1

Ссылки

https://www.suse.com/support/update/announcement/2022/suse-su-20222524-1/
Link for SUSE-SU-2022:2524-1
https://lists.suse.com/pipermail/sle-security-updates/2022-July/011629.html
E-Mail link for SUSE-SU-2022:2524-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1201221
SUSE Bug 1201221
https://www.suse.com/security/cve/CVE-2022-22662/
SUSE CVE CVE-2022-22662 page
https://www.suse.com/security/cve/CVE-2022-22677/
SUSE CVE CVE-2022-22677 page
https://www.suse.com/security/cve/CVE-2022-26710/
SUSE CVE CVE-2022-26710 page

Описание

A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive user information.

Затронутые продукты

SUSE Enterprise Storage 6:libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1

SUSE Enterprise Storage 6:libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1

SUSE Enterprise Storage 6:libwebkit2gtk3-lang-2.36.4-150000.3.106.1

SUSE Enterprise Storage 6:typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-22662.html
CVE-2022-22662
https://bugzilla.suse.com/1201221
SUSE Bug 1201221

Описание

A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call.

Затронутые продукты

SUSE Enterprise Storage 6:libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1

SUSE Enterprise Storage 6:libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1

SUSE Enterprise Storage 6:libwebkit2gtk3-lang-2.36.4-150000.3.106.1

SUSE Enterprise Storage 6:typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-22677.html
CVE-2022-22677
https://bugzilla.suse.com/1201221
SUSE Bug 1201221

Описание

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, macOS Monterey 12.4, tvOS 15.5, watchOS 8.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты

SUSE Enterprise Storage 6:libjavascriptcoregtk-4_0-18-2.36.4-150000.3.106.1

SUSE Enterprise Storage 6:libwebkit2gtk-4_0-37-2.36.4-150000.3.106.1

SUSE Enterprise Storage 6:libwebkit2gtk3-lang-2.36.4-150000.3.106.1

SUSE Enterprise Storage 6:typelib-1_0-JavaScriptCore-4_0-2.36.4-150000.3.106.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-26710.html
CVE-2022-26710
https://bugzilla.suse.com/1201221
SUSE Bug 1201221
https://bugzilla.suse.com/1201792
SUSE Bug 1201792

SUSE-SU-2022:2524-1

Описание

Список пакетов

SUSE Enterprise Storage 6

SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS

SUSE Linux Enterprise High Performance Computing 15-ESPOS

SUSE Linux Enterprise High Performance Computing 15-LTSS

SUSE Linux Enterprise Server 15 SP1-BCL

SUSE Linux Enterprise Server 15 SP1-LTSS

SUSE Linux Enterprise Server 15-LTSS

SUSE Linux Enterprise Server for SAP Applications 15

SUSE Linux Enterprise Server for SAP Applications 15 SP1

Ссылки

Уязвимость: CVE-2022-22662

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2022-22677

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2022-26710

Описание

Затронутые продукты

Ссылки