Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:2826-1

Опубликовано: 16 авг. 2022
Источник: suse-cvrf

Описание

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

  • Update to version 2.36.5 (bsc#1201980):

    • Add support for PAC proxy in the WebDriver implementation.
    • Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp documentation browser.
    • Fix WebKitWebView::context-menu when using GTK4.
    • Fix LTO builds with GCC.
    • Fix several crashes and rendering issues.

  • Security fixes:

    • CVE-2022-32792: Fixed processing maliciously crafted web content may lead to arbitrary code execution.
    • CVE-2022-32816: Fixed visiting a website that frames malicious content may lead to UI spoofing.

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP4
libjavascriptcoregtk-4_0-18-2.36.5-150400.4.9.1
libwebkit2gtk-4_0-37-2.36.5-150400.4.9.1
typelib-1_0-JavaScriptCore-4_0-2.36.5-150400.4.9.1
typelib-1_0-WebKit2-4_0-2.36.5-150400.4.9.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.5-150400.4.9.1
webkit2gtk-4_0-injected-bundles-2.36.5-150400.4.9.1
webkit2gtk3-soup2-devel-2.36.5-150400.4.9.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP4
libjavascriptcoregtk-4_1-0-2.36.5-150400.4.9.1
libwebkit2gtk-4_1-0-2.36.5-150400.4.9.1
typelib-1_0-JavaScriptCore-4_1-2.36.5-150400.4.9.1
typelib-1_0-WebKit2-4_1-2.36.5-150400.4.9.1
typelib-1_0-WebKit2WebExtension-4_1-2.36.5-150400.4.9.1
webkit2gtk-4_1-injected-bundles-2.36.5-150400.4.9.1
webkit2gtk3-devel-2.36.5-150400.4.9.1
SUSE Linux Enterprise Module for Development Tools 15 SP4
libjavascriptcoregtk-5_0-0-2.36.5-150400.4.9.1
libwebkit2gtk-5_0-0-2.36.5-150400.4.9.1
typelib-1_0-JavaScriptCore-5_0-2.36.5-150400.4.9.1
typelib-1_0-WebKit2-5_0-2.36.5-150400.4.9.1
webkit2gtk-5_0-injected-bundles-2.36.5-150400.4.9.1
openSUSE Leap 15.4
WebKit2GTK-4.0-lang-2.36.5-150400.4.9.1
WebKit2GTK-4.1-lang-2.36.5-150400.4.9.1
WebKit2GTK-5.0-lang-2.36.5-150400.4.9.1
libjavascriptcoregtk-4_0-18-2.36.5-150400.4.9.1
libjavascriptcoregtk-4_0-18-32bit-2.36.5-150400.4.9.1
libjavascriptcoregtk-4_1-0-2.36.5-150400.4.9.1
libjavascriptcoregtk-4_1-0-32bit-2.36.5-150400.4.9.1
libjavascriptcoregtk-5_0-0-2.36.5-150400.4.9.1
libwebkit2gtk-4_0-37-2.36.5-150400.4.9.1
libwebkit2gtk-4_0-37-32bit-2.36.5-150400.4.9.1
libwebkit2gtk-4_1-0-2.36.5-150400.4.9.1
libwebkit2gtk-4_1-0-32bit-2.36.5-150400.4.9.1
libwebkit2gtk-5_0-0-2.36.5-150400.4.9.1
typelib-1_0-JavaScriptCore-4_0-2.36.5-150400.4.9.1
typelib-1_0-JavaScriptCore-4_1-2.36.5-150400.4.9.1
typelib-1_0-JavaScriptCore-5_0-2.36.5-150400.4.9.1
typelib-1_0-WebKit2-4_0-2.36.5-150400.4.9.1
typelib-1_0-WebKit2-4_1-2.36.5-150400.4.9.1
typelib-1_0-WebKit2-5_0-2.36.5-150400.4.9.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.5-150400.4.9.1
typelib-1_0-WebKit2WebExtension-4_1-2.36.5-150400.4.9.1
typelib-1_0-WebKit2WebExtension-5_0-2.36.5-150400.4.9.1
webkit-jsc-4-2.36.5-150400.4.9.1
webkit-jsc-4.1-2.36.5-150400.4.9.1
webkit-jsc-5.0-2.36.5-150400.4.9.1
webkit2gtk-4_0-injected-bundles-2.36.5-150400.4.9.1
webkit2gtk-4_1-injected-bundles-2.36.5-150400.4.9.1
webkit2gtk-5_0-injected-bundles-2.36.5-150400.4.9.1
webkit2gtk3-devel-2.36.5-150400.4.9.1
webkit2gtk3-minibrowser-2.36.5-150400.4.9.1
webkit2gtk3-soup2-devel-2.36.5-150400.4.9.1
webkit2gtk3-soup2-minibrowser-2.36.5-150400.4.9.1
webkit2gtk4-devel-2.36.5-150400.4.9.1
webkit2gtk4-minibrowser-2.36.5-150400.4.9.1

Ссылки

Описание

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP4:libjavascriptcoregtk-4_0-18-2.36.5-150400.4.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP4:libwebkit2gtk-4_0-37-2.36.5-150400.4.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-JavaScriptCore-4_0-2.36.5-150400.4.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-WebKit2-4_0-2.36.5-150400.4.9.1
Ссылки

Описание

The issue was addressed with improved UI handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. Visiting a website that frames malicious content may lead to UI spoofing.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP4:libjavascriptcoregtk-4_0-18-2.36.5-150400.4.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP4:libwebkit2gtk-4_0-37-2.36.5-150400.4.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-JavaScriptCore-4_0-2.36.5-150400.4.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-WebKit2-4_0-2.36.5-150400.4.9.1
Ссылки