SUSE-SU-2019:0146-1
Security update for webkit2gtk3
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for webkit2gtk3 to version 2.22.5 fixes the following issues: Security issues fixed: - CVE-2018-4438: Fixed a logic issue which lead to memory corruption (bsc#1119554) - CVE-2018-4437, CVE-2018-4441, CVE-2018-4442, CVE-2018-4443, CVE-2018-4464: Fixed multiple memory corruption issues with improved memory handling (bsc#1119553, bsc#1119555, bsc#1119556, bsc#1119557, bsc#1119558)
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.2 | libjavascriptcoregtk-4_0-18, libwebkit2gtk-4_0-37, libwebkit2gtk3-lang y 5 más | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.3 | libjavascriptcoregtk-4_0-18, libwebkit2gtk-4_0-37, libwebkit2gtk3-lang y 5 más | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.4 | libjavascriptcoregtk-4_0-18, libwebkit2gtk-4_0-37, libwebkit2gtk3-lang y 5 más | 2.22.5-2.32.2 |
Mostrar las 24 entradas de 3 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| SUSE Linux Enterprise 12.2 | libjavascriptcoregtk-4_0-18 | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.2 | libwebkit2gtk-4_0-37 | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.2 | libwebkit2gtk3-lang | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.2 | typelib-1_0-JavaScriptCore-4_0 | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.2 | typelib-1_0-WebKit2-4_0 | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.2 | typelib-1_0-WebKit2WebExtension-4_0 | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.2 | webkit2gtk-4_0-injected-bundles | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.2 | webkit2gtk3-devel | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.3 | libjavascriptcoregtk-4_0-18 | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.3 | libwebkit2gtk-4_0-37 | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.3 | libwebkit2gtk3-lang | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.3 | typelib-1_0-JavaScriptCore-4_0 | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.3 | typelib-1_0-WebKit2-4_0 | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.3 | typelib-1_0-WebKit2WebExtension-4_0 | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.3 | webkit2gtk-4_0-injected-bundles | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.3 | webkit2gtk3-devel | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.4 | libjavascriptcoregtk-4_0-18 | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.4 | libwebkit2gtk-4_0-37 | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.4 | libwebkit2gtk3-lang | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.4 | typelib-1_0-JavaScriptCore-4_0 | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.4 | typelib-1_0-WebKit2-4_0 | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.4 | typelib-1_0-WebKit2WebExtension-4_0 | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.4 | webkit2gtk-4_0-injected-bundles | 2.22.5-2.32.2 |
| SUSE Linux Enterprise 12.4 | webkit2gtk3-devel | 2.22.5-2.32.2 |
Referencias
- https://bugzilla.suse.com/1119553
- https://bugzilla.suse.com/1119554
- https://bugzilla.suse.com/1119555
- https://bugzilla.suse.com/1119556
- https://bugzilla.suse.com/1119557
- https://bugzilla.suse.com/1119558
- https://lists.suse.com/pipermail/sle-security-updates/2019-January/005058.html
- https://www.suse.com/security/cve/CVE-2018-4437/
Las 15 referencias
- https://www.suse.com/security/cve/CVE-2018-4438/
- https://www.suse.com/security/cve/CVE-2018-4441/
- https://www.suse.com/security/cve/CVE-2018-4442/
- https://www.suse.com/security/cve/CVE-2018-4443/
- https://www.suse.com/security/cve/CVE-2018-4464/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2019/suse-su-20190146-1/