Описание
Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Updated to version 2.36.8 (bsc#1203530):
- CVE-2022-32886: Fixed a buffer overflow issue that could potentially lead to code execution.
- CVE-2022-32912: Fixed an out-of-bounds read that could potentially lead to code execution.
Список пакетов
SUSE Linux Enterprise Server 12 SP2-BCL
libjavascriptcoregtk-4_0-18-2.36.8-2.113.1
libwebkit2gtk-4_0-37-2.36.8-2.113.1
libwebkit2gtk3-lang-2.36.8-2.113.1
typelib-1_0-JavaScriptCore-4_0-2.36.8-2.113.1
typelib-1_0-WebKit2-4_0-2.36.8-2.113.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.8-2.113.1
webkit2gtk-4_0-injected-bundles-2.36.8-2.113.1
webkit2gtk3-devel-2.36.8-2.113.1
SUSE Linux Enterprise Server 12 SP3-BCL
libjavascriptcoregtk-4_0-18-2.36.8-2.113.1
libwebkit2gtk-4_0-37-2.36.8-2.113.1
typelib-1_0-JavaScriptCore-4_0-2.36.8-2.113.1
typelib-1_0-WebKit2-4_0-2.36.8-2.113.1
webkit2gtk-4_0-injected-bundles-2.36.8-2.113.1
SUSE Linux Enterprise Server 12 SP4-LTSS
libjavascriptcoregtk-4_0-18-2.36.8-2.113.1
libwebkit2gtk-4_0-37-2.36.8-2.113.1
libwebkit2gtk3-lang-2.36.8-2.113.1
typelib-1_0-JavaScriptCore-4_0-2.36.8-2.113.1
typelib-1_0-WebKit2-4_0-2.36.8-2.113.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.8-2.113.1
webkit2gtk-4_0-injected-bundles-2.36.8-2.113.1
SUSE Linux Enterprise Server 12 SP5
libjavascriptcoregtk-4_0-18-2.36.8-2.113.1
libwebkit2gtk-4_0-37-2.36.8-2.113.1
libwebkit2gtk3-lang-2.36.8-2.113.1
typelib-1_0-JavaScriptCore-4_0-2.36.8-2.113.1
typelib-1_0-WebKit2-4_0-2.36.8-2.113.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.8-2.113.1
webkit2gtk-4_0-injected-bundles-2.36.8-2.113.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libjavascriptcoregtk-4_0-18-2.36.8-2.113.1
libwebkit2gtk-4_0-37-2.36.8-2.113.1
libwebkit2gtk3-lang-2.36.8-2.113.1
typelib-1_0-JavaScriptCore-4_0-2.36.8-2.113.1
typelib-1_0-WebKit2-4_0-2.36.8-2.113.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.8-2.113.1
webkit2gtk-4_0-injected-bundles-2.36.8-2.113.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libjavascriptcoregtk-4_0-18-2.36.8-2.113.1
libwebkit2gtk-4_0-37-2.36.8-2.113.1
libwebkit2gtk3-lang-2.36.8-2.113.1
typelib-1_0-JavaScriptCore-4_0-2.36.8-2.113.1
typelib-1_0-WebKit2-4_0-2.36.8-2.113.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.8-2.113.1
webkit2gtk-4_0-injected-bundles-2.36.8-2.113.1
SUSE Linux Enterprise Software Development Kit 12 SP5
typelib-1_0-WebKit2WebExtension-4_0-2.36.8-2.113.1
webkit2gtk3-devel-2.36.8-2.113.1
SUSE OpenStack Cloud 9
libjavascriptcoregtk-4_0-18-2.36.8-2.113.1
libwebkit2gtk-4_0-37-2.36.8-2.113.1
libwebkit2gtk3-lang-2.36.8-2.113.1
typelib-1_0-JavaScriptCore-4_0-2.36.8-2.113.1
typelib-1_0-WebKit2-4_0-2.36.8-2.113.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.8-2.113.1
webkit2gtk-4_0-injected-bundles-2.36.8-2.113.1
SUSE OpenStack Cloud Crowbar 9
libjavascriptcoregtk-4_0-18-2.36.8-2.113.1
libwebkit2gtk-4_0-37-2.36.8-2.113.1
libwebkit2gtk3-lang-2.36.8-2.113.1
typelib-1_0-JavaScriptCore-4_0-2.36.8-2.113.1
typelib-1_0-WebKit2-4_0-2.36.8-2.113.1
typelib-1_0-WebKit2WebExtension-4_0-2.36.8-2.113.1
webkit2gtk-4_0-injected-bundles-2.36.8-2.113.1
Ссылки
- Link for SUSE-SU-2022:3492-1
- E-Mail link for SUSE-SU-2022:3492-1
- SUSE Security Ratings
- SUSE Bug 1203530
- SUSE CVE CVE-2022-32886 page
- SUSE CVE CVE-2022-32912 page
Описание
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:libjavascriptcoregtk-4_0-18-2.36.8-2.113.1
SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk-4_0-37-2.36.8-2.113.1
SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk3-lang-2.36.8-2.113.1
SUSE Linux Enterprise Server 12 SP2-BCL:typelib-1_0-JavaScriptCore-4_0-2.36.8-2.113.1
Ссылки
- CVE-2022-32886
- SUSE Bug 1203530
- SUSE Bug 1204100
Описание
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:libjavascriptcoregtk-4_0-18-2.36.8-2.113.1
SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk-4_0-37-2.36.8-2.113.1
SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk3-lang-2.36.8-2.113.1
SUSE Linux Enterprise Server 12 SP2-BCL:typelib-1_0-JavaScriptCore-4_0-2.36.8-2.113.1
Ссылки
- CVE-2022-32912
- SUSE Bug 1203530