SUSE-SU-2024:0004-1

Опубликовано: 02 янв. 2024

Источник: suse-cvrf

Описание

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

CVE-2023-42890: Fixed processing malicious web content may lead to arbitrary code execution (bsc#1218033).
CVE-2023-42883: Fixed processing a malicious image may lead to a denial-of-service (bsc#1218032).
CVE-2023-41074: Fixed use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (bsc#1215870).
CVE-2023-40451, CVE-2023-41074: Update to version 2.42.4 (bsc#1218032, bsc#1215868).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

WebKitGTK-4.1-lang-2.42.4-150400.4.70.3

WebKitGTK-6.0-lang-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_1-0-2.42.4-150400.4.70.3

libjavascriptcoregtk-6_0-1-2.42.4-150400.4.70.3

libwebkit2gtk-4_0-37-2.42.4-150400.4.70.3

libwebkit2gtk-4_1-0-2.42.4-150400.4.70.3

libwebkitgtk-6_0-4-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_0-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_1-2.42.4-150400.4.70.3

webkit2gtk-4_0-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk-4_1-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk3-devel-2.42.4-150400.4.70.3

webkit2gtk3-soup2-devel-2.42.4-150400.4.70.3

webkitgtk-6_0-injected-bundles-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

WebKitGTK-4.1-lang-2.42.4-150400.4.70.3

WebKitGTK-6.0-lang-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_1-0-2.42.4-150400.4.70.3

libjavascriptcoregtk-6_0-1-2.42.4-150400.4.70.3

libwebkit2gtk-4_0-37-2.42.4-150400.4.70.3

libwebkit2gtk-4_1-0-2.42.4-150400.4.70.3

libwebkitgtk-6_0-4-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_0-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_1-2.42.4-150400.4.70.3

webkit2gtk-4_0-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk-4_1-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk3-devel-2.42.4-150400.4.70.3

webkit2gtk3-soup2-devel-2.42.4-150400.4.70.3

webkitgtk-6_0-injected-bundles-2.42.4-150400.4.70.3

SUSE Linux Enterprise Module for Basesystem 15 SP4

WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

libwebkit2gtk-4_0-37-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_0-2.42.4-150400.4.70.3

webkit2gtk-4_0-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk3-soup2-devel-2.42.4-150400.4.70.3

SUSE Linux Enterprise Module for Basesystem 15 SP5

WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

libwebkit2gtk-4_0-37-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_0-2.42.4-150400.4.70.3

webkit2gtk-4_0-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk3-soup2-devel-2.42.4-150400.4.70.3

SUSE Linux Enterprise Module for Desktop Applications 15 SP4

WebKitGTK-4.1-lang-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_1-0-2.42.4-150400.4.70.3

libwebkit2gtk-4_1-0-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_1-2.42.4-150400.4.70.3

webkit2gtk-4_1-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk3-devel-2.42.4-150400.4.70.3

SUSE Linux Enterprise Module for Desktop Applications 15 SP5

WebKitGTK-4.1-lang-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_1-0-2.42.4-150400.4.70.3

libwebkit2gtk-4_1-0-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_1-2.42.4-150400.4.70.3

webkit2gtk-4_1-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk3-devel-2.42.4-150400.4.70.3

SUSE Linux Enterprise Module for Development Tools 15 SP5

WebKitGTK-6.0-lang-2.42.4-150400.4.70.3

libjavascriptcoregtk-6_0-1-2.42.4-150400.4.70.3

libwebkitgtk-6_0-4-2.42.4-150400.4.70.3

webkitgtk-6_0-injected-bundles-2.42.4-150400.4.70.3

SUSE Linux Enterprise Real Time 15 SP4

WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

WebKitGTK-4.1-lang-2.42.4-150400.4.70.3

WebKitGTK-6.0-lang-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_1-0-2.42.4-150400.4.70.3

libjavascriptcoregtk-6_0-1-2.42.4-150400.4.70.3

libwebkit2gtk-4_0-37-2.42.4-150400.4.70.3

libwebkit2gtk-4_1-0-2.42.4-150400.4.70.3

libwebkitgtk-6_0-4-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_0-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_1-2.42.4-150400.4.70.3

webkit2gtk-4_0-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk-4_1-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk3-devel-2.42.4-150400.4.70.3

webkit2gtk3-soup2-devel-2.42.4-150400.4.70.3

webkitgtk-6_0-injected-bundles-2.42.4-150400.4.70.3

SUSE Linux Enterprise Server 15 SP4-LTSS

WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

WebKitGTK-4.1-lang-2.42.4-150400.4.70.3

WebKitGTK-6.0-lang-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_1-0-2.42.4-150400.4.70.3

libjavascriptcoregtk-6_0-1-2.42.4-150400.4.70.3

libwebkit2gtk-4_0-37-2.42.4-150400.4.70.3

libwebkit2gtk-4_1-0-2.42.4-150400.4.70.3

libwebkitgtk-6_0-4-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_0-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_1-2.42.4-150400.4.70.3

webkit2gtk-4_0-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk-4_1-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk3-devel-2.42.4-150400.4.70.3

webkit2gtk3-soup2-devel-2.42.4-150400.4.70.3

webkitgtk-6_0-injected-bundles-2.42.4-150400.4.70.3

SUSE Linux Enterprise Server for SAP Applications 15 SP4

WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

WebKitGTK-4.1-lang-2.42.4-150400.4.70.3

WebKitGTK-6.0-lang-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_1-0-2.42.4-150400.4.70.3

libjavascriptcoregtk-6_0-1-2.42.4-150400.4.70.3

libwebkit2gtk-4_0-37-2.42.4-150400.4.70.3

libwebkit2gtk-4_1-0-2.42.4-150400.4.70.3

libwebkitgtk-6_0-4-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_0-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_1-2.42.4-150400.4.70.3

webkit2gtk-4_0-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk-4_1-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk3-devel-2.42.4-150400.4.70.3

webkit2gtk3-soup2-devel-2.42.4-150400.4.70.3

webkitgtk-6_0-injected-bundles-2.42.4-150400.4.70.3

SUSE Manager Proxy 4.3

WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

libwebkit2gtk-4_0-37-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_0-2.42.4-150400.4.70.3

webkit2gtk-4_0-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk3-soup2-devel-2.42.4-150400.4.70.3

SUSE Manager Server 4.3

WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

libwebkit2gtk-4_0-37-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_0-2.42.4-150400.4.70.3

webkit2gtk-4_0-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk3-soup2-devel-2.42.4-150400.4.70.3

openSUSE Leap 15.4

WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

WebKitGTK-4.1-lang-2.42.4-150400.4.70.3

WebKitGTK-6.0-lang-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_0-18-32bit-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_1-0-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_1-0-32bit-2.42.4-150400.4.70.3

libjavascriptcoregtk-6_0-1-2.42.4-150400.4.70.3

libwebkit2gtk-4_0-37-2.42.4-150400.4.70.3

libwebkit2gtk-4_0-37-32bit-2.42.4-150400.4.70.3

libwebkit2gtk-4_1-0-2.42.4-150400.4.70.3

libwebkit2gtk-4_1-0-32bit-2.42.4-150400.4.70.3

libwebkitgtk-6_0-4-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_0-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_1-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-6_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit-6_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKitWebProcessExtension-6_0-2.42.4-150400.4.70.3

webkit-jsc-4-2.42.4-150400.4.70.3

webkit-jsc-4.1-2.42.4-150400.4.70.3

webkit-jsc-6.0-2.42.4-150400.4.70.3

webkit2gtk-4_0-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk-4_1-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk3-devel-2.42.4-150400.4.70.3

webkit2gtk3-minibrowser-2.42.4-150400.4.70.3

webkit2gtk3-soup2-devel-2.42.4-150400.4.70.3

webkit2gtk3-soup2-minibrowser-2.42.4-150400.4.70.3

webkit2gtk4-devel-2.42.4-150400.4.70.3

webkit2gtk4-minibrowser-2.42.4-150400.4.70.3

webkitgtk-6_0-injected-bundles-2.42.4-150400.4.70.3

openSUSE Leap 15.5

WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

WebKitGTK-4.1-lang-2.42.4-150400.4.70.3

WebKitGTK-6.0-lang-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_0-18-32bit-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_1-0-2.42.4-150400.4.70.3

libjavascriptcoregtk-4_1-0-32bit-2.42.4-150400.4.70.3

libjavascriptcoregtk-6_0-1-2.42.4-150400.4.70.3

libwebkit2gtk-4_0-37-2.42.4-150400.4.70.3

libwebkit2gtk-4_0-37-32bit-2.42.4-150400.4.70.3

libwebkit2gtk-4_1-0-2.42.4-150400.4.70.3

libwebkit2gtk-4_1-0-32bit-2.42.4-150400.4.70.3

libwebkitgtk-6_0-4-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_0-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-4_1-2.42.4-150400.4.70.3

typelib-1_0-JavaScriptCore-6_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit-6_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_0-2.42.4-150400.4.70.3

typelib-1_0-WebKit2WebExtension-4_1-2.42.4-150400.4.70.3

typelib-1_0-WebKitWebProcessExtension-6_0-2.42.4-150400.4.70.3

webkit-jsc-4-2.42.4-150400.4.70.3

webkit-jsc-4.1-2.42.4-150400.4.70.3

webkit-jsc-6.0-2.42.4-150400.4.70.3

webkit2gtk-4_0-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk-4_1-injected-bundles-2.42.4-150400.4.70.3

webkit2gtk3-devel-2.42.4-150400.4.70.3

webkit2gtk3-minibrowser-2.42.4-150400.4.70.3

webkit2gtk3-soup2-devel-2.42.4-150400.4.70.3

webkit2gtk3-soup2-minibrowser-2.42.4-150400.4.70.3

webkit2gtk4-devel-2.42.4-150400.4.70.3

webkit2gtk4-minibrowser-2.42.4-150400.4.70.3

webkitgtk-6_0-injected-bundles-2.42.4-150400.4.70.3

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20240004-1/
Link for SUSE-SU-2024:0004-1
https://lists.suse.com/pipermail/sle-security-updates/2024-January/017581.html
E-Mail link for SUSE-SU-2024:0004-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1215868
SUSE Bug 1215868
https://bugzilla.suse.com/1215869
SUSE Bug 1215869
https://bugzilla.suse.com/1215870
SUSE Bug 1215870
https://bugzilla.suse.com/1218032
SUSE Bug 1218032
https://bugzilla.suse.com/1218033
SUSE Bug 1218033
https://www.suse.com/security/cve/CVE-2023-32359/
SUSE CVE CVE-2023-32359 page
https://www.suse.com/security/cve/CVE-2023-39928/
SUSE CVE CVE-2023-39928 page
https://www.suse.com/security/cve/CVE-2023-40451/
SUSE CVE CVE-2023-40451 page
https://www.suse.com/security/cve/CVE-2023-41074/
SUSE CVE CVE-2023-41074 page
https://www.suse.com/security/cve/CVE-2023-42883/
SUSE CVE CVE-2023-42883 page
https://www.suse.com/security/cve/CVE-2023-42890/
SUSE CVE CVE-2023-42890 page

Описание

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2. A user's password may be read aloud by VoiceOver.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

Ссылки

https://www.suse.com/security/cve/CVE-2023-32359.html
CVE-2023-32359
https://bugzilla.suse.com/1217210
SUSE Bug 1217210
https://bugzilla.suse.com/1217568
SUSE Bug 1217568

Описание

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page can abuse this vulnerability to cause memory corruption and potentially arbitrary code execution. A user would need to to visit a malicious webpage to trigger this vulnerability.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

Ссылки

https://www.suse.com/security/cve/CVE-2023-39928.html
CVE-2023-39928
https://bugzilla.suse.com/1215868
SUSE Bug 1215868
https://bugzilla.suse.com/1217568
SUSE Bug 1217568

Описание

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with JavaScript execution may be able to execute arbitrary code.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

Ссылки

https://www.suse.com/security/cve/CVE-2023-40451.html
CVE-2023-40451
https://bugzilla.suse.com/1215869
SUSE Bug 1215869
https://bugzilla.suse.com/1217568
SUSE Bug 1217568

Описание

The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

Ссылки

https://www.suse.com/security/cve/CVE-2023-41074.html
CVE-2023-41074
https://bugzilla.suse.com/1215870
SUSE Bug 1215870
https://bugzilla.suse.com/1217568
SUSE Bug 1217568

Описание

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3. Processing an image may lead to a denial-of-service.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

Ссылки

https://www.suse.com/security/cve/CVE-2023-42883.html
CVE-2023-42883
https://bugzilla.suse.com/1218032
SUSE Bug 1218032

Описание

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, watchOS 10.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2. Processing web content may lead to arbitrary code execution.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.42.4-150400.4.70.3

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.42.4-150400.4.70.3

Ссылки

https://www.suse.com/security/cve/CVE-2023-42890.html
CVE-2023-42890
https://bugzilla.suse.com/1218033
SUSE Bug 1218033
https://bugzilla.suse.com/1218407
SUSE Bug 1218407

SUSE-SU-2024:0004-1

Описание

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Module for Basesystem 15 SP4

SUSE Linux Enterprise Module for Basesystem 15 SP5

SUSE Linux Enterprise Module for Desktop Applications 15 SP4

SUSE Linux Enterprise Module for Desktop Applications 15 SP5

SUSE Linux Enterprise Module for Development Tools 15 SP5

SUSE Linux Enterprise Real Time 15 SP4

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Manager Proxy 4.3

SUSE Manager Server 4.3

openSUSE Leap 15.4

openSUSE Leap 15.5

Ссылки

Уязвимость: CVE-2023-32359

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-39928

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-40451

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-41074

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-42883

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2023-42890

Описание

Затронутые продукты

Ссылки