Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:4827-1

Опубликовано: 14 дек. 2023
Источник: suse-cvrf

Описание

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Update to version 2.42.3 (bsc#1217844):

  • Fix flickering while playing videos with DMA-BUF sink.
  • Fix color picker being triggered in the inspector when typing 'tan'.
  • Do not special case the 'sans' font family name.
  • Fix build failure with libxml2 version 2.12.0 due to an API change.
  • Fix several crashes and rendering issues.
  • Security fixes: CVE-2023-42916, CVE-2023-42917.

Список пакетов

SUSE Linux Enterprise Server 12 SP5
libjavascriptcoregtk-4_0-18-2.42.3-2.161.1
libwebkit2gtk-4_0-37-2.42.3-2.161.1
libwebkit2gtk3-lang-2.42.3-2.161.1
typelib-1_0-JavaScriptCore-4_0-2.42.3-2.161.1
typelib-1_0-WebKit2-4_0-2.42.3-2.161.1
typelib-1_0-WebKit2WebExtension-4_0-2.42.3-2.161.1
webkit2gtk-4_0-injected-bundles-2.42.3-2.161.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libjavascriptcoregtk-4_0-18-2.42.3-2.161.1
libwebkit2gtk-4_0-37-2.42.3-2.161.1
libwebkit2gtk3-lang-2.42.3-2.161.1
typelib-1_0-JavaScriptCore-4_0-2.42.3-2.161.1
typelib-1_0-WebKit2-4_0-2.42.3-2.161.1
typelib-1_0-WebKit2WebExtension-4_0-2.42.3-2.161.1
webkit2gtk-4_0-injected-bundles-2.42.3-2.161.1
SUSE Linux Enterprise Software Development Kit 12 SP5
typelib-1_0-WebKit2WebExtension-4_0-2.42.3-2.161.1
webkit2gtk3-devel-2.42.3-2.161.1
SUSE Linux Enterprise Workstation Extension 12 SP5
libjavascriptcoregtk-4_0-18-32bit-2.42.3-2.161.1

Описание

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.


Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:libjavascriptcoregtk-4_0-18-2.42.3-2.161.1
SUSE Linux Enterprise Server 12 SP5:libwebkit2gtk-4_0-37-2.42.3-2.161.1
SUSE Linux Enterprise Server 12 SP5:libwebkit2gtk3-lang-2.42.3-2.161.1
SUSE Linux Enterprise Server 12 SP5:typelib-1_0-JavaScriptCore-4_0-2.42.3-2.161.1

Ссылки

Описание

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1.


Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:libjavascriptcoregtk-4_0-18-2.42.3-2.161.1
SUSE Linux Enterprise Server 12 SP5:libwebkit2gtk-4_0-37-2.42.3-2.161.1
SUSE Linux Enterprise Server 12 SP5:libwebkit2gtk3-lang-2.42.3-2.161.1
SUSE Linux Enterprise Server 12 SP5:typelib-1_0-JavaScriptCore-4_0-2.42.3-2.161.1

Ссылки