Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:4634-1

Опубликовано: 29 дек. 2022
Источник: suse-cvrf

Описание

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Update to version 2.38.3:

  • CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously crafted web content (bsc#1206474).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP4
libjavascriptcoregtk-4_0-18-2.38.3-150400.4.25.1
libwebkit2gtk-4_0-37-2.38.3-150400.4.25.1
typelib-1_0-JavaScriptCore-4_0-2.38.3-150400.4.25.1
typelib-1_0-WebKit2-4_0-2.38.3-150400.4.25.1
typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150400.4.25.1
webkit2gtk-4_0-injected-bundles-2.38.3-150400.4.25.1
webkit2gtk3-soup2-devel-2.38.3-150400.4.25.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP4
libjavascriptcoregtk-4_1-0-2.38.3-150400.4.25.1
libwebkit2gtk-4_1-0-2.38.3-150400.4.25.1
typelib-1_0-JavaScriptCore-4_1-2.38.3-150400.4.25.1
typelib-1_0-WebKit2-4_1-2.38.3-150400.4.25.1
typelib-1_0-WebKit2WebExtension-4_1-2.38.3-150400.4.25.1
webkit2gtk-4_1-injected-bundles-2.38.3-150400.4.25.1
webkit2gtk3-devel-2.38.3-150400.4.25.1
SUSE Linux Enterprise Module for Development Tools 15 SP4
libjavascriptcoregtk-5_0-0-2.38.3-150400.4.25.1
libwebkit2gtk-5_0-0-2.38.3-150400.4.25.1
typelib-1_0-JavaScriptCore-5_0-2.38.3-150400.4.25.1
typelib-1_0-WebKit2-5_0-2.38.3-150400.4.25.1
webkit2gtk-5_0-injected-bundles-2.38.3-150400.4.25.1
openSUSE Leap 15.4
WebKit2GTK-4.0-lang-2.38.3-150400.4.25.1
WebKit2GTK-4.1-lang-2.38.3-150400.4.25.1
WebKit2GTK-5.0-lang-2.38.3-150400.4.25.1
libjavascriptcoregtk-4_0-18-2.38.3-150400.4.25.1
libjavascriptcoregtk-4_0-18-32bit-2.38.3-150400.4.25.1
libjavascriptcoregtk-4_1-0-2.38.3-150400.4.25.1
libjavascriptcoregtk-4_1-0-32bit-2.38.3-150400.4.25.1
libjavascriptcoregtk-5_0-0-2.38.3-150400.4.25.1
libwebkit2gtk-4_0-37-2.38.3-150400.4.25.1
libwebkit2gtk-4_0-37-32bit-2.38.3-150400.4.25.1
libwebkit2gtk-4_1-0-2.38.3-150400.4.25.1
libwebkit2gtk-4_1-0-32bit-2.38.3-150400.4.25.1
libwebkit2gtk-5_0-0-2.38.3-150400.4.25.1
typelib-1_0-JavaScriptCore-4_0-2.38.3-150400.4.25.1
typelib-1_0-JavaScriptCore-4_1-2.38.3-150400.4.25.1
typelib-1_0-JavaScriptCore-5_0-2.38.3-150400.4.25.1
typelib-1_0-WebKit2-4_0-2.38.3-150400.4.25.1
typelib-1_0-WebKit2-4_1-2.38.3-150400.4.25.1
typelib-1_0-WebKit2-5_0-2.38.3-150400.4.25.1
typelib-1_0-WebKit2WebExtension-4_0-2.38.3-150400.4.25.1
typelib-1_0-WebKit2WebExtension-4_1-2.38.3-150400.4.25.1
typelib-1_0-WebKit2WebExtension-5_0-2.38.3-150400.4.25.1
webkit-jsc-4-2.38.3-150400.4.25.1
webkit-jsc-4.1-2.38.3-150400.4.25.1
webkit-jsc-5.0-2.38.3-150400.4.25.1
webkit2gtk-4_0-injected-bundles-2.38.3-150400.4.25.1
webkit2gtk-4_1-injected-bundles-2.38.3-150400.4.25.1
webkit2gtk-5_0-injected-bundles-2.38.3-150400.4.25.1
webkit2gtk3-devel-2.38.3-150400.4.25.1
webkit2gtk3-minibrowser-2.38.3-150400.4.25.1
webkit2gtk3-soup2-devel-2.38.3-150400.4.25.1
webkit2gtk3-soup2-minibrowser-2.38.3-150400.4.25.1
webkit2gtk4-devel-2.38.3-150400.4.25.1
webkit2gtk4-minibrowser-2.38.3-150400.4.25.1

Ссылки

Описание

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1..

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP4:libjavascriptcoregtk-4_0-18-2.38.3-150400.4.25.1
SUSE Linux Enterprise Module for Basesystem 15 SP4:libwebkit2gtk-4_0-37-2.38.3-150400.4.25.1
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-JavaScriptCore-4_0-2.38.3-150400.4.25.1
SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-WebKit2-4_0-2.38.3-150400.4.25.1
Ссылки