Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:2915-1

Опубликовано: 26 авг. 2022
Источник: suse-cvrf

Описание

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

  • Update to version 2.36.5 (bsc#1201980):

    • Add support for PAC proxy in the WebDriver implementation.
    • Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp documentation browser.
    • Fix WebKitWebView::context-menu when using GTK4.
    • Fix LTO builds with GCC.
    • Fix several crashes and rendering issues.

  • Security fixes:

    • CVE-2022-32792: Fixed processing maliciously crafted web content may lead to arbitrary code execution.
    • CVE-2022-32816: Fixed visiting a website that frames malicious content may lead to UI spoofing.

Список пакетов

SUSE Linux Enterprise Server 12 SP2-BCL
libjavascriptcoregtk-4_0-18-2.36.5-2.107.2
libwebkit2gtk-4_0-37-2.36.5-2.107.2
libwebkit2gtk3-lang-2.36.5-2.107.2
typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2
typelib-1_0-WebKit2-4_0-2.36.5-2.107.2
typelib-1_0-WebKit2WebExtension-4_0-2.36.5-2.107.2
webkit2gtk-4_0-injected-bundles-2.36.5-2.107.2
webkit2gtk3-devel-2.36.5-2.107.2
SUSE Linux Enterprise Server 12 SP3-BCL
libjavascriptcoregtk-4_0-18-2.36.5-2.107.2
libwebkit2gtk-4_0-37-2.36.5-2.107.2
typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2
typelib-1_0-WebKit2-4_0-2.36.5-2.107.2
webkit2gtk-4_0-injected-bundles-2.36.5-2.107.2
SUSE Linux Enterprise Server 12 SP4-LTSS
libjavascriptcoregtk-4_0-18-2.36.5-2.107.2
libwebkit2gtk-4_0-37-2.36.5-2.107.2
libwebkit2gtk3-lang-2.36.5-2.107.2
typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2
typelib-1_0-WebKit2-4_0-2.36.5-2.107.2
typelib-1_0-WebKit2WebExtension-4_0-2.36.5-2.107.2
webkit2gtk-4_0-injected-bundles-2.36.5-2.107.2
SUSE Linux Enterprise Server 12 SP5
libjavascriptcoregtk-4_0-18-2.36.5-2.107.2
libwebkit2gtk-4_0-37-2.36.5-2.107.2
libwebkit2gtk3-lang-2.36.5-2.107.2
typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2
typelib-1_0-WebKit2-4_0-2.36.5-2.107.2
typelib-1_0-WebKit2WebExtension-4_0-2.36.5-2.107.2
webkit2gtk-4_0-injected-bundles-2.36.5-2.107.2
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libjavascriptcoregtk-4_0-18-2.36.5-2.107.2
libwebkit2gtk-4_0-37-2.36.5-2.107.2
libwebkit2gtk3-lang-2.36.5-2.107.2
typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2
typelib-1_0-WebKit2-4_0-2.36.5-2.107.2
typelib-1_0-WebKit2WebExtension-4_0-2.36.5-2.107.2
webkit2gtk-4_0-injected-bundles-2.36.5-2.107.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libjavascriptcoregtk-4_0-18-2.36.5-2.107.2
libwebkit2gtk-4_0-37-2.36.5-2.107.2
libwebkit2gtk3-lang-2.36.5-2.107.2
typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2
typelib-1_0-WebKit2-4_0-2.36.5-2.107.2
typelib-1_0-WebKit2WebExtension-4_0-2.36.5-2.107.2
webkit2gtk-4_0-injected-bundles-2.36.5-2.107.2
SUSE Linux Enterprise Software Development Kit 12 SP5
typelib-1_0-WebKit2WebExtension-4_0-2.36.5-2.107.2
webkit2gtk3-devel-2.36.5-2.107.2
SUSE OpenStack Cloud 9
libjavascriptcoregtk-4_0-18-2.36.5-2.107.2
libwebkit2gtk-4_0-37-2.36.5-2.107.2
libwebkit2gtk3-lang-2.36.5-2.107.2
typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2
typelib-1_0-WebKit2-4_0-2.36.5-2.107.2
typelib-1_0-WebKit2WebExtension-4_0-2.36.5-2.107.2
webkit2gtk-4_0-injected-bundles-2.36.5-2.107.2
SUSE OpenStack Cloud Crowbar 9
libjavascriptcoregtk-4_0-18-2.36.5-2.107.2
libwebkit2gtk-4_0-37-2.36.5-2.107.2
libwebkit2gtk3-lang-2.36.5-2.107.2
typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2
typelib-1_0-WebKit2-4_0-2.36.5-2.107.2
typelib-1_0-WebKit2WebExtension-4_0-2.36.5-2.107.2
webkit2gtk-4_0-injected-bundles-2.36.5-2.107.2

Ссылки

Описание

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:libjavascriptcoregtk-4_0-18-2.36.5-2.107.2
SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk-4_0-37-2.36.5-2.107.2
SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk3-lang-2.36.5-2.107.2
SUSE Linux Enterprise Server 12 SP2-BCL:typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2
Ссылки

Описание

The issue was addressed with improved UI handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. Visiting a website that frames malicious content may lead to UI spoofing.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:libjavascriptcoregtk-4_0-18-2.36.5-2.107.2
SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk-4_0-37-2.36.5-2.107.2
SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk3-lang-2.36.5-2.107.2
SUSE Linux Enterprise Server 12 SP2-BCL:typelib-1_0-JavaScriptCore-4_0-2.36.5-2.107.2
Ссылки