SUSE-SU-2023:2065-1
Security update for webkit2gtk3
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for webkit2gtk3 fixes the following issues: Update to version 2.38.6 (bsc#1210731): - CVE-2022-0108: Fixed information leak. - CVE-2022-32885: Fixed arbitrary code execution. - CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderLayer. - CVE-2023-27932: Fixed Same Origin Policy bypass. - CVE-2023-27954: Fixed sensitive user information tracking. - CVE-2023-28205: Fixed arbitrary code execution (bsc#1210295). Already fixed in version 2.38.5: - CVE-2022-32886, CVE-2022-32912, CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 15.4 | WebKit2GTK-4.0-lang, WebKit2GTK-4.1-lang, WebKit2GTK-5.0-lang ve 31 tane daha | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | libjavascriptcoregtk-4_0-18, libjavascriptcoregtk-4_1-0, libjavascriptcoregtk-5_0-0 ve 16 tane daha | 2.38.6-150400.4.39.1 |
2 kaynaktaki 53 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 15.4 | WebKit2GTK-4.0-lang | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | WebKit2GTK-4.1-lang | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | WebKit2GTK-5.0-lang | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | libjavascriptcoregtk-4_0-18 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | libjavascriptcoregtk-4_0-18-32bit | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | libjavascriptcoregtk-4_1-0 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | libjavascriptcoregtk-4_1-0-32bit | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | libjavascriptcoregtk-5_0-0 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | libwebkit2gtk-4_0-37 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | libwebkit2gtk-4_0-37-32bit | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | libwebkit2gtk-4_1-0 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | libwebkit2gtk-4_1-0-32bit | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | libwebkit2gtk-5_0-0 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | typelib-1_0-JavaScriptCore-4_0 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | typelib-1_0-JavaScriptCore-4_1 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | typelib-1_0-JavaScriptCore-5_0 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | typelib-1_0-WebKit2-4_0 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | typelib-1_0-WebKit2-4_1 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | typelib-1_0-WebKit2-5_0 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | typelib-1_0-WebKit2WebExtension-4_0 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | typelib-1_0-WebKit2WebExtension-4_1 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | typelib-1_0-WebKit2WebExtension-5_0 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | webkit-jsc-4 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | webkit-jsc-4.1 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | webkit-jsc-5.0 | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | webkit2gtk-4_0-injected-bundles | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | webkit2gtk-4_1-injected-bundles | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | webkit2gtk-5_0-injected-bundles | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | webkit2gtk3-devel | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | webkit2gtk3-minibrowser | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | webkit2gtk3-soup2-devel | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | webkit2gtk3-soup2-minibrowser | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | webkit2gtk4-devel | 2.38.6-150400.4.39.1 |
| openSUSE Leap 15.4 | webkit2gtk4-minibrowser | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | libjavascriptcoregtk-4_0-18 | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | libjavascriptcoregtk-4_1-0 | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | libjavascriptcoregtk-5_0-0 | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | libwebkit2gtk-4_0-37 | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | libwebkit2gtk-4_1-0 | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | libwebkit2gtk-5_0-0 | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | typelib-1_0-JavaScriptCore-4_0 | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | typelib-1_0-JavaScriptCore-4_1 | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | typelib-1_0-JavaScriptCore-5_0 | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | typelib-1_0-WebKit2-4_0 | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | typelib-1_0-WebKit2-4_1 | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | typelib-1_0-WebKit2-5_0 | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | typelib-1_0-WebKit2WebExtension-4_0 | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | typelib-1_0-WebKit2WebExtension-4_1 | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | webkit2gtk-4_0-injected-bundles | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | webkit2gtk-4_1-injected-bundles | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | webkit2gtk-5_0-injected-bundles | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | webkit2gtk3-devel | 2.38.6-150400.4.39.1 |
| SUSE Linux Enterprise 15.4 | webkit2gtk3-soup2-devel | 2.38.6-150400.4.39.1 |
Referanslar
- https://bugzilla.suse.com/1210295
- https://bugzilla.suse.com/1210731
- https://lists.suse.com/pipermail/sle-security-updates/2023-April/014671.html
- https://www.suse.com/security/cve/CVE-2022-0108/
- https://www.suse.com/security/cve/CVE-2022-32885/
- https://www.suse.com/security/cve/CVE-2022-32886/
- https://www.suse.com/security/cve/CVE-2022-32912/
- https://www.suse.com/security/cve/CVE-2023-25358/
17 referansın hepsi
- https://www.suse.com/security/cve/CVE-2023-25360/
- https://www.suse.com/security/cve/CVE-2023-25361/
- https://www.suse.com/security/cve/CVE-2023-25362/
- https://www.suse.com/security/cve/CVE-2023-25363/
- https://www.suse.com/security/cve/CVE-2023-27932/
- https://www.suse.com/security/cve/CVE-2023-27954/
- https://www.suse.com/security/cve/CVE-2023-28205/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2023/suse-su-20232065-1/