Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:2591-1

Опубликовано: 30 нояб. 2019
Источник: suse-cvrf

Описание

Security update for webkit2gtk3

This update for webkit2gtk3 to version 2.26.2 fixes the following issues:

Webkit2gtk3 was updated to version 2.26.2 (WSA-2019-0005 and WSA-2019-0006, bsc#1155321 bsc#1156318)

Security issues addressed:

  • CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead to universal cross site scripting.
  • CVE-2019-8674: Fixed a logic issue where by processing maliciously crafted web content may lead to universal cross site scripting.
  • CVE-2019-8707: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8719: Fixed a logic issue where by processing maliciously crafted web content may lead to universal cross site scripting.
  • CVE-2019-8720: Fixed multiple memory corruption issues where by processing maliciously crafted web
    content may lead to arbitrary code execution.
  • CVE-2019-8726: Fixed multiple memory corruption issues where by processing maliciously crafted web
    content may lead to arbitrary code execution.
  • CVE-2019-8733: Fixed multiple memory corruption issues where by processing maliciously crafted web
    content may lead to arbitrary code execution.
  • CVE-2019-8735: Fixed multiple memory corruption issues where by processing maliciously crafted web
    content may lead to arbitrary code execution.
  • CVE-2019-8763: Fixed multiple memory corruption issues where by processing maliciously crafted web
    content may lead to arbitrary code execution.
  • CVE-2019-8768: Fixed an issue where a user may be unable to delete browsing history items.
  • CVE-2019-8769: Fixed an issue where a maliciously crafted website may reveal browsing history.
  • CVE-2019-8771: Fixed an issue where a maliciously crafted web content may violate iframe sandboxing policy.
  • CVE-2019-8710: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8743: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8764: Fixed a logic issue where by processing maliciously crafted web content may lead to universal cross site scripting.
  • CVE-2019-8765: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8766: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8782: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8783: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8808: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8811: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8812: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8813: Fixed a logic issue where by processing maliciously crafted web content may lead to universal cross site scripting.
  • CVE-2019-8814: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8815: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8816: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8819: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8820: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8821: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8822: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.
  • CVE-2019-8823: Fixed multiple memory corruption issues where by processing maliciously crafted web content may lead to arbitrary code execution.

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.1
libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
libwebkit2gtk3-lang-2.26.2-lp151.2.9.1
typelib-1_0-JavaScriptCore-4_0-2.26.2-lp151.2.9.1
typelib-1_0-WebKit2-4_0-2.26.2-lp151.2.9.1
typelib-1_0-WebKit2WebExtension-4_0-2.26.2-lp151.2.9.1
webkit-jsc-4-2.26.2-lp151.2.9.1
webkit2gtk-4_0-injected-bundles-2.26.2-lp151.2.9.1
webkit2gtk3-devel-2.26.2-lp151.2.9.1
webkit2gtk3-minibrowser-2.26.2-lp151.2.9.1

Ссылки

Описание

A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to universal cross site scripting.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

A logic issue was addressed with improved state management. This issue is fixed in iOS 13, Safari 13. Processing maliciously crafted web content may lead to universal cross site scripting.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

A logic issue existed in the handling of document loads. This issue was addressed with improved state management. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to universal cross site scripting.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

A logic issue was addressed with improved state management. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to universal cross site scripting.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.1 and iPadOS 13.1, tvOS 13, Safari 13.0.1, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

A logic issue was addressed with improved state management. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to universal cross site scripting.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Catalina 10.15. A user may be unable to delete browsing history items.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Visiting a maliciously crafted website may reveal browsing history.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web content may violate iframe sandboxing policy.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to universal cross site scripting.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки

Описание

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Затронутые продукты
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libjavascriptcoregtk-4_0-18-32bit-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-2.26.2-lp151.2.9.1
openSUSE Leap 15.1:libwebkit2gtk-4_0-37-32bit-2.26.2-lp151.2.9.1
Ссылки
Уязвимость openSUSE-SU-2019:2591-1