SUSE-SU-2023:3556-1

Опубликовано: 08 сент. 2023

Источник: suse-cvrf

Описание

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Provide/obsolete WebKit2GTK-%{_apiver}-lang (bsc#1214093)
Have the lang package provide libwebkit2gtk3-lang (bsc#1214093)
Adjustments of update version 2.40.5 (bsc#1213905 bsc#1213379 bsc#1213581):
- Added missing CVE references: CVE-2023-32393, CVE-2023-37450

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP4

libjavascriptcoregtk-4_0-18-2.40.5-150400.4.48.1

libwebkit2gtk-4_0-37-2.40.5-150400.4.48.1

typelib-1_0-JavaScriptCore-4_0-2.40.5-150400.4.48.1

typelib-1_0-WebKit2-4_0-2.40.5-150400.4.48.1

typelib-1_0-WebKit2WebExtension-4_0-2.40.5-150400.4.48.1

webkit2gtk-4_0-injected-bundles-2.40.5-150400.4.48.1

webkit2gtk3-soup2-devel-2.40.5-150400.4.48.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

libjavascriptcoregtk-4_0-18-2.40.5-150400.4.48.1

libwebkit2gtk-4_0-37-2.40.5-150400.4.48.1

typelib-1_0-JavaScriptCore-4_0-2.40.5-150400.4.48.1

typelib-1_0-WebKit2-4_0-2.40.5-150400.4.48.1

typelib-1_0-WebKit2WebExtension-4_0-2.40.5-150400.4.48.1

webkit2gtk-4_0-injected-bundles-2.40.5-150400.4.48.1

webkit2gtk3-soup2-devel-2.40.5-150400.4.48.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP4

libjavascriptcoregtk-4_1-0-2.40.5-150400.4.48.1

libwebkit2gtk-4_1-0-2.40.5-150400.4.48.1

typelib-1_0-JavaScriptCore-4_1-2.40.5-150400.4.48.1

typelib-1_0-WebKit2-4_1-2.40.5-150400.4.48.1

typelib-1_0-WebKit2WebExtension-4_1-2.40.5-150400.4.48.1

webkit2gtk-4_1-injected-bundles-2.40.5-150400.4.48.1

webkit2gtk3-devel-2.40.5-150400.4.48.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP5

libjavascriptcoregtk-4_1-0-2.40.5-150400.4.48.1

libwebkit2gtk-4_1-0-2.40.5-150400.4.48.1

typelib-1_0-JavaScriptCore-4_1-2.40.5-150400.4.48.1

typelib-1_0-WebKit2-4_1-2.40.5-150400.4.48.1

typelib-1_0-WebKit2WebExtension-4_1-2.40.5-150400.4.48.1

webkit2gtk-4_1-injected-bundles-2.40.5-150400.4.48.1

webkit2gtk3-devel-2.40.5-150400.4.48.1

SUSE Linux Enterprise Module for Development Tools 15 SP4

libjavascriptcoregtk-6_0-1-2.40.5-150400.4.48.1

libwebkitgtk-6_0-4-2.40.5-150400.4.48.1

webkitgtk-6_0-injected-bundles-2.40.5-150400.4.48.1

SUSE Linux Enterprise Module for Development Tools 15 SP5

libjavascriptcoregtk-6_0-1-2.40.5-150400.4.48.1

libwebkitgtk-6_0-4-2.40.5-150400.4.48.1

webkitgtk-6_0-injected-bundles-2.40.5-150400.4.48.1

openSUSE Leap 15.4

WebKitGTK-4.0-lang-2.40.5-150400.4.48.1

WebKitGTK-4.1-lang-2.40.5-150400.4.48.1

WebKitGTK-6.0-lang-2.40.5-150400.4.48.1

libjavascriptcoregtk-4_0-18-2.40.5-150400.4.48.1

libjavascriptcoregtk-4_0-18-32bit-2.40.5-150400.4.48.1

libjavascriptcoregtk-4_0-18-64bit-2.40.5-150400.4.48.1

libjavascriptcoregtk-4_1-0-2.40.5-150400.4.48.1

libjavascriptcoregtk-4_1-0-32bit-2.40.5-150400.4.48.1

libjavascriptcoregtk-4_1-0-64bit-2.40.5-150400.4.48.1

libjavascriptcoregtk-6_0-1-2.40.5-150400.4.48.1

libwebkit2gtk-4_0-37-2.40.5-150400.4.48.1

libwebkit2gtk-4_0-37-32bit-2.40.5-150400.4.48.1

libwebkit2gtk-4_0-37-64bit-2.40.5-150400.4.48.1

libwebkit2gtk-4_1-0-2.40.5-150400.4.48.1

libwebkit2gtk-4_1-0-32bit-2.40.5-150400.4.48.1

libwebkit2gtk-4_1-0-64bit-2.40.5-150400.4.48.1

libwebkitgtk-6_0-4-2.40.5-150400.4.48.1

typelib-1_0-JavaScriptCore-4_0-2.40.5-150400.4.48.1

typelib-1_0-JavaScriptCore-4_1-2.40.5-150400.4.48.1

typelib-1_0-JavaScriptCore-6_0-2.40.5-150400.4.48.1

typelib-1_0-WebKit-6_0-2.40.5-150400.4.48.1

typelib-1_0-WebKit2-4_0-2.40.5-150400.4.48.1

typelib-1_0-WebKit2-4_1-2.40.5-150400.4.48.1

typelib-1_0-WebKit2WebExtension-4_0-2.40.5-150400.4.48.1

typelib-1_0-WebKit2WebExtension-4_1-2.40.5-150400.4.48.1

typelib-1_0-WebKitWebProcessExtension-6_0-2.40.5-150400.4.48.1

webkit-jsc-4-2.40.5-150400.4.48.1

webkit-jsc-4.1-2.40.5-150400.4.48.1

webkit-jsc-6.0-2.40.5-150400.4.48.1

webkit2gtk-4_0-injected-bundles-2.40.5-150400.4.48.1

webkit2gtk-4_1-injected-bundles-2.40.5-150400.4.48.1

webkit2gtk3-devel-2.40.5-150400.4.48.1

webkit2gtk3-minibrowser-2.40.5-150400.4.48.1

webkit2gtk3-soup2-devel-2.40.5-150400.4.48.1

webkit2gtk3-soup2-minibrowser-2.40.5-150400.4.48.1

webkit2gtk4-devel-2.40.5-150400.4.48.1

webkit2gtk4-minibrowser-2.40.5-150400.4.48.1

webkitgtk-6_0-injected-bundles-2.40.5-150400.4.48.1

openSUSE Leap 15.5

WebKitGTK-4.0-lang-2.40.5-150400.4.48.1

WebKitGTK-4.1-lang-2.40.5-150400.4.48.1

WebKitGTK-6.0-lang-2.40.5-150400.4.48.1

libjavascriptcoregtk-4_0-18-2.40.5-150400.4.48.1

libjavascriptcoregtk-4_0-18-32bit-2.40.5-150400.4.48.1

libjavascriptcoregtk-4_0-18-64bit-2.40.5-150400.4.48.1

libjavascriptcoregtk-4_1-0-2.40.5-150400.4.48.1

libjavascriptcoregtk-4_1-0-32bit-2.40.5-150400.4.48.1

libjavascriptcoregtk-4_1-0-64bit-2.40.5-150400.4.48.1

libjavascriptcoregtk-6_0-1-2.40.5-150400.4.48.1

libwebkit2gtk-4_0-37-2.40.5-150400.4.48.1

libwebkit2gtk-4_0-37-32bit-2.40.5-150400.4.48.1

libwebkit2gtk-4_0-37-64bit-2.40.5-150400.4.48.1

libwebkit2gtk-4_1-0-2.40.5-150400.4.48.1

libwebkit2gtk-4_1-0-32bit-2.40.5-150400.4.48.1

libwebkit2gtk-4_1-0-64bit-2.40.5-150400.4.48.1

libwebkitgtk-6_0-4-2.40.5-150400.4.48.1

typelib-1_0-JavaScriptCore-4_0-2.40.5-150400.4.48.1

typelib-1_0-JavaScriptCore-4_1-2.40.5-150400.4.48.1

typelib-1_0-JavaScriptCore-6_0-2.40.5-150400.4.48.1

typelib-1_0-WebKit-6_0-2.40.5-150400.4.48.1

typelib-1_0-WebKit2-4_0-2.40.5-150400.4.48.1

typelib-1_0-WebKit2-4_1-2.40.5-150400.4.48.1

typelib-1_0-WebKit2WebExtension-4_0-2.40.5-150400.4.48.1

typelib-1_0-WebKit2WebExtension-4_1-2.40.5-150400.4.48.1

typelib-1_0-WebKitWebProcessExtension-6_0-2.40.5-150400.4.48.1

webkit-jsc-4-2.40.5-150400.4.48.1

webkit-jsc-4.1-2.40.5-150400.4.48.1

webkit-jsc-6.0-2.40.5-150400.4.48.1

webkit2gtk-4_0-injected-bundles-2.40.5-150400.4.48.1

webkit2gtk-4_1-injected-bundles-2.40.5-150400.4.48.1

webkit2gtk3-devel-2.40.5-150400.4.48.1

webkit2gtk3-minibrowser-2.40.5-150400.4.48.1

webkit2gtk3-soup2-devel-2.40.5-150400.4.48.1

webkit2gtk3-soup2-minibrowser-2.40.5-150400.4.48.1

webkit2gtk4-devel-2.40.5-150400.4.48.1

webkit2gtk4-minibrowser-2.40.5-150400.4.48.1

webkitgtk-6_0-injected-bundles-2.40.5-150400.4.48.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20233556-1/
Link for SUSE-SU-2023:3556-1
https://lists.suse.com/pipermail/sle-updates/2023-September/031381.html
E-Mail link for SUSE-SU-2023:3556-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1213379
SUSE Bug 1213379
https://bugzilla.suse.com/1213581
SUSE Bug 1213581
https://bugzilla.suse.com/1213905
SUSE Bug 1213905
https://bugzilla.suse.com/1214093
SUSE Bug 1214093
https://www.suse.com/security/cve/CVE-2023-32393/
SUSE CVE CVE-2023-32393 page
https://www.suse.com/security/cve/CVE-2023-37450/
SUSE CVE CVE-2023-37450 page

Описание

The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Processing web content may lead to arbitrary code execution.

Затронутые продукты

SUSE Linux Enterprise Module for Basesystem 15 SP4:libjavascriptcoregtk-4_0-18-2.40.5-150400.4.48.1

SUSE Linux Enterprise Module for Basesystem 15 SP4:libwebkit2gtk-4_0-37-2.40.5-150400.4.48.1

SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-JavaScriptCore-4_0-2.40.5-150400.4.48.1

SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-WebKit2-4_0-2.40.5-150400.4.48.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-32393.html
CVE-2023-32393
https://bugzilla.suse.com/1213581
SUSE Bug 1213581

Описание

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Затронутые продукты

SUSE Linux Enterprise Module for Basesystem 15 SP4:libjavascriptcoregtk-4_0-18-2.40.5-150400.4.48.1

SUSE Linux Enterprise Module for Basesystem 15 SP4:libwebkit2gtk-4_0-37-2.40.5-150400.4.48.1

SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-JavaScriptCore-4_0-2.40.5-150400.4.48.1

SUSE Linux Enterprise Module for Basesystem 15 SP4:typelib-1_0-WebKit2-4_0-2.40.5-150400.4.48.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-37450.html
CVE-2023-37450
https://bugzilla.suse.com/1213379
SUSE Bug 1213379

SUSE-SU-2023:3556-1

Описание

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP4

SUSE Linux Enterprise Module for Basesystem 15 SP5

SUSE Linux Enterprise Module for Desktop Applications 15 SP4

SUSE Linux Enterprise Module for Desktop Applications 15 SP5

SUSE Linux Enterprise Module for Development Tools 15 SP4

SUSE Linux Enterprise Module for Development Tools 15 SP5

openSUSE Leap 15.4

openSUSE Leap 15.5

Ссылки

Уязвимость: CVE-2023-32393

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-37450

Описание

Затронутые продукты

Ссылки