Описание
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Updated to version 2.36.8 (bsc#1203530):
- CVE-2022-32886: Fixed a buffer overflow issue that could potentially lead to code execution.
- CVE-2022-32912: Fixed an out-of-bounds read that could potentially lead to code execution.
Список пакетов
SUSE Linux Enterprise Module for Basesystem 15 SP4
libjavascriptcoregtk-4_0-18-2.36.8-150400.4.15.1
libwebkit2gtk-4_0-37-2.36.8-150400.4.15.1
typelib-1_0-JavaScriptCore-4_0-2.36.8-150400.4.15.1
typelib-1_0-WebKit2-4_0-2.36.8-150400.4.15.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.8-150400.4.15.1
webkit2gtk-4_0-injected-bundles-2.36.8-150400.4.15.1
webkit2gtk3-soup2-devel-2.36.8-150400.4.15.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP4
libjavascriptcoregtk-4_1-0-2.36.8-150400.4.15.1
libwebkit2gtk-4_1-0-2.36.8-150400.4.15.1
typelib-1_0-JavaScriptCore-4_1-2.36.8-150400.4.15.1
typelib-1_0-WebKit2-4_1-2.36.8-150400.4.15.1
typelib-1_0-WebKit2WebExtension-4_1-2.36.8-150400.4.15.1
webkit2gtk-4_1-injected-bundles-2.36.8-150400.4.15.1
webkit2gtk3-devel-2.36.8-150400.4.15.1
SUSE Linux Enterprise Module for Development Tools 15 SP4
libjavascriptcoregtk-5_0-0-2.36.8-150400.4.15.1
libwebkit2gtk-5_0-0-2.36.8-150400.4.15.1
typelib-1_0-JavaScriptCore-5_0-2.36.8-150400.4.15.1
typelib-1_0-WebKit2-5_0-2.36.8-150400.4.15.1
webkit2gtk-5_0-injected-bundles-2.36.8-150400.4.15.1
openSUSE Leap 15.4
WebKit2GTK-4.0-lang-2.36.8-150400.4.15.1
WebKit2GTK-4.1-lang-2.36.8-150400.4.15.1
WebKit2GTK-5.0-lang-2.36.8-150400.4.15.1
libjavascriptcoregtk-4_0-18-2.36.8-150400.4.15.1
libjavascriptcoregtk-4_0-18-32bit-2.36.8-150400.4.15.1
libjavascriptcoregtk-4_1-0-2.36.8-150400.4.15.1
libjavascriptcoregtk-4_1-0-32bit-2.36.8-150400.4.15.1
libjavascriptcoregtk-5_0-0-2.36.8-150400.4.15.1
libwebkit2gtk-4_0-37-2.36.8-150400.4.15.1
libwebkit2gtk-4_0-37-32bit-2.36.8-150400.4.15.1
libwebkit2gtk-4_1-0-2.36.8-150400.4.15.1
libwebkit2gtk-4_1-0-32bit-2.36.8-150400.4.15.1
libwebkit2gtk-5_0-0-2.36.8-150400.4.15.1
typelib-1_0-JavaScriptCore-4_0-2.36.8-150400.4.15.1
typelib-1_0-JavaScriptCore-4_1-2.36.8-150400.4.15.1
typelib-1_0-JavaScriptCore-5_0-2.36.8-150400.4.15.1
typelib-1_0-WebKit2-4_0-2.36.8-150400.4.15.1
typelib-1_0-WebKit2-4_1-2.36.8-150400.4.15.1
typelib-1_0-WebKit2-5_0-2.36.8-150400.4.15.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.8-150400.4.15.1
typelib-1_0-WebKit2WebExtension-4_1-2.36.8-150400.4.15.1
typelib-1_0-WebKit2WebExtension-5_0-2.36.8-150400.4.15.1
webkit-jsc-4-2.36.8-150400.4.15.1
webkit-jsc-4.1-2.36.8-150400.4.15.1
webkit-jsc-5.0-2.36.8-150400.4.15.1
webkit2gtk-4_0-injected-bundles-2.36.8-150400.4.15.1
webkit2gtk-4_1-injected-bundles-2.36.8-150400.4.15.1
webkit2gtk-5_0-injected-bundles-2.36.8-150400.4.15.1
webkit2gtk3-devel-2.36.8-150400.4.15.1
webkit2gtk3-minibrowser-2.36.8-150400.4.15.1
webkit2gtk3-soup2-devel-2.36.8-150400.4.15.1
webkit2gtk3-soup2-minibrowser-2.36.8-150400.4.15.1
webkit2gtk4-devel-2.36.8-150400.4.15.1
webkit2gtk4-minibrowser-2.36.8-150400.4.15.1
Ссылки
- Link for SUSE-SU-2022:3488-1
- E-Mail link for SUSE-SU-2022:3488-1
- SUSE Security Ratings
- SUSE Bug 1203530
- SUSE CVE CVE-2022-32886 page
- SUSE CVE CVE-2022-32912 page
Описание
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP4:libjavascriptcoregtk-4_0-18-2.36.8-150400.4.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP4:libwebkit2gtk-4_0-37-2.36.8-150400.4.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-JavaScriptCore-4_0-2.36.8-150400.4.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-WebKit2-4_0-2.36.8-150400.4.15.1
Ссылки
- CVE-2022-32886
- SUSE Bug 1203530
- SUSE Bug 1204100
Описание
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.
Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP4:libjavascriptcoregtk-4_0-18-2.36.8-150400.4.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP4:libwebkit2gtk-4_0-37-2.36.8-150400.4.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-JavaScriptCore-4_0-2.36.8-150400.4.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-WebKit2-4_0-2.36.8-150400.4.15.1
Ссылки
- CVE-2022-32912
- SUSE Bug 1203530