Oval Definition:oval:org.opensuse.security:def:955
Revision Date:2022-03-04Version:1
Title:Security update for webkit2gtk3 (Important)
Description:

This update for webkit2gtk3 fixes the following issues:

Update to version 2.34.6 (bsc#1196133):

- CVE-2022-22620: Processing maliciously crafted web content may have lead to arbitrary code execution.

Update to version 2.34.5 (bsc#1195735):

- CVE-2022-22589: A validation issue was addressed with improved input sanitization. - CVE-2022-22590: A use after free issue was addressed with improved memory management. - CVE-2022-22592: A logic issue was addressed with improved state management.

Update to version 2.34.4 (bsc#1195064):

- CVE-2021-30934: A buffer overflow issue was addressed with improved memory handling. - CVE-2021-30936: A use after free issue was addressed with improved memory management. - CVE-2021-30951: A use after free issue was addressed with improved memory management. - CVE-2021-30952: An integer overflow was addressed with improved input validation. - CVE-2021-30953: An out-of-bounds read was addressed with improved bounds checking. - CVE-2021-30954: A type confusion issue was addressed with improved memory handling. - CVE-2021-30984: A race condition was addressed with improved state handling. - CVE-2022-22594: A cross-origin issue in the IndexDB API was addressed with improved input validation.

The following CVEs were addressed in a previous update:

- CVE-2021-45481: Incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create. - CVE-2021-45482: A use-after-free in WebCore::ContainerNode::firstChild. - CVE-2021-45483: A use-after-free in WebCore::Frame::page.
Family:unixClass:patch
Status:Reference(s):1195064
1195735
1196133
CVE-2012-4510
CVE-2015-3223
CVE-2015-3223
CVE-2015-5330
CVE-2015-5330
CVE-2018-1140
CVE-2018-1140
CVE-2019-3824
CVE-2019-3824
CVE-2020-14342
CVE-2021-20208
CVE-2021-30934
CVE-2021-30936
CVE-2021-30951
CVE-2021-30952
CVE-2021-30953
CVE-2021-30954
CVE-2021-30984
CVE-2021-45481
CVE-2021-45482
CVE-2021-45483
CVE-2022-22589
CVE-2022-22590
CVE-2022-22592
CVE-2022-22620
SUSE-SU-2022:0705-1
Platform(s):openSUSE 13.2
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 15 SP3
SUSE Linux Enterprise High Availability 15
SUSE Linux Enterprise High Performance Computing 15 SP3
SUSE Linux Enterprise Module for additional PackageHub packages 15
SUSE Linux Enterprise Module for Basesystem 15 SP3
SUSE Linux Enterprise Module for Desktop Applications 15
SUSE Linux Enterprise Module for Legacy Software 15
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
SUSE Linux Enterprise Module for Public Cloud 15
SUSE Linux Enterprise Module for Python2 packages 15 SP1
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server for SAP Applications 15 SP3
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Storage 7.1
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Workstation Extension 15
SUSE Manager Proxy 4.2
SUSE Manager Retail Branch Server 4.2
SUSE Manager Server 4.2
SUSE Package Hub for SUSE Linux Enterprise 15
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • emacs-24.3-14 is installed
  • OR emacs-info-24.3-14 is installed
  • OR emacs-x11-24.3-14 is installed
  • OR etags-24.3-14 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • accountsservice-0.6.35-3 is installed
  • OR accountsservice-lang-0.6.35-3 is installed
  • OR libaccountsservice0-0.6.35-3 is installed
  • OR typelib-1_0-AccountsService-1_0-0.6.35-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND libgadu3-1.11.4-1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 15 SP3 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed
  • OR SUSE Linux Enterprise Server 15 SP3 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed
  • OR SUSE Linux Enterprise Storage 7.1 is installed
  • OR SUSE Manager Proxy 4.2 is installed
  • OR SUSE Manager Retail Branch Server 4.2 is installed
  • OR SUSE Manager Server 4.2 is installed
  • AND Package Information
  • libjavascriptcoregtk-4_0-18-2.34.6-29.1 is installed
  • OR libwebkit2gtk-4_0-37-2.34.6-29.1 is installed
  • OR libwebkit2gtk3-lang-2.34.6-29.1 is installed
  • OR webkit2gtk-4_0-injected-bundles-2.34.6-29.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP3 is installed
  • AND Package Information
  • cifs-utils-6.9-5.12.1 is installed
  • OR cifs-utils-devel-6.9-5.12.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 15 is installed
  • AND Package Information
  • ctdb-4.7.8+git.86.94b6d10f7dd-4.15 is installed
  • OR samba-4.7.8+git.86.94b6d10f7dd-4.15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed
  • AND Package Information
  • LibVNCServer-0.9.10-4.6 is installed
  • OR libvncserver0-0.9.10-4.6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Desktop Applications 15 is installed
  • AND Package Information
  • cups-pk-helper-0.2.6-1 is installed
  • OR cups-pk-helper-lang-0.2.6-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 15 is installed
  • AND Package Information
  • java-1_8_0-ibm-1.8.0_sr5.20-3.6 is installed
  • OR java-1_8_0-ibm-alsa-1.8.0_sr5.20-3.6 is installed
  • OR java-1_8_0-ibm-devel-1.8.0_sr5.20-3.6 is installed
  • OR java-1_8_0-ibm-plugin-1.8.0_sr5.20-3.6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-23-default-3-7 is installed
  • OR kernel-livepatch-SLE15_Update_0-3-7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
  • AND Package Information
  • webkit-jsc-4-2.26.2-3.34 is installed
  • OR webkit2gtk3-2.26.2-3.34 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 15 is installed
  • AND Package Information
  • kernel-azure-4.12.14-5.16 is installed
  • OR kernel-azure-base-4.12.14-5.16 is installed
  • OR kernel-azure-devel-4.12.14-5.16 is installed
  • OR kernel-devel-azure-4.12.14-5.16 is installed
  • OR kernel-source-azure-4.12.14-5.16 is installed
  • OR kernel-syms-azure-4.12.14-5.16 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed
  • AND Package Information
  • python-ldb-1.4.6-1 is installed
  • OR python-ldb-devel-1.4.6-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • AND apache2-mod_apparmor-2.12-5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 is installed
  • AND Package Information
  • apache2-mod_php7-7.2.5-4.3 is installed
  • OR php7-7.2.5-4.3 is installed
  • OR php7-bcmath-7.2.5-4.3 is installed
  • OR php7-bz2-7.2.5-4.3 is installed
  • OR php7-calendar-7.2.5-4.3 is installed
  • OR php7-ctype-7.2.5-4.3 is installed
  • OR php7-curl-7.2.5-4.3 is installed
  • OR php7-dba-7.2.5-4.3 is installed
  • OR php7-devel-7.2.5-4.3 is installed
  • OR php7-dom-7.2.5-4.3 is installed
  • OR php7-enchant-7.2.5-4.3 is installed
  • OR php7-exif-7.2.5-4.3 is installed
  • OR php7-fastcgi-7.2.5-4.3 is installed
  • OR php7-fileinfo-7.2.5-4.3 is installed
  • OR php7-fpm-7.2.5-4.3 is installed
  • OR php7-ftp-7.2.5-4.3 is installed
  • OR php7-gd-7.2.5-4.3 is installed
  • OR php7-gettext-7.2.5-4.3 is installed
  • OR php7-gmp-7.2.5-4.3 is installed
  • OR php7-iconv-7.2.5-4.3 is installed
  • OR php7-intl-7.2.5-4.3 is installed
  • OR php7-json-7.2.5-4.3 is installed
  • OR php7-ldap-7.2.5-4.3 is installed
  • OR php7-mbstring-7.2.5-4.3 is installed
  • OR php7-mysql-7.2.5-4.3 is installed
  • OR php7-odbc-7.2.5-4.3 is installed
  • OR php7-opcache-7.2.5-4.3 is installed
  • OR php7-openssl-7.2.5-4.3 is installed
  • OR php7-pcntl-7.2.5-4.3 is installed
  • OR php7-pdo-7.2.5-4.3 is installed
  • OR php7-pear-7.2.5-4.3 is installed
  • OR php7-pear-Archive_Tar-7.2.5-4.3 is installed
  • OR php7-pgsql-7.2.5-4.3 is installed
  • OR php7-phar-7.2.5-4.3 is installed
  • OR php7-posix-7.2.5-4.3 is installed
  • OR php7-shmop-7.2.5-4.3 is installed
  • OR php7-snmp-7.2.5-4.3 is installed
  • OR php7-soap-7.2.5-4.3 is installed
  • OR php7-sockets-7.2.5-4.3 is installed
  • OR php7-sqlite-7.2.5-4.3 is installed
  • OR php7-sysvmsg-7.2.5-4.3 is installed
  • OR php7-sysvsem-7.2.5-4.3 is installed
  • OR php7-sysvshm-7.2.5-4.3 is installed
  • OR php7-tokenizer-7.2.5-4.3 is installed
  • OR php7-wddx-7.2.5-4.3 is installed
  • OR php7-xmlreader-7.2.5-4.3 is installed
  • OR php7-xmlrpc-7.2.5-4.3 is installed
  • OR php7-xmlwriter-7.2.5-4.3 is installed
  • OR php7-xsl-7.2.5-4.3 is installed
  • OR php7-zip-7.2.5-4.3 is installed
  • OR php7-zlib-7.2.5-4.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND libraptor2-0-2.0.10-3.67 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • libldap-2_4-2-2.4.41-18.25.1 is installed
  • OR libldap-2_4-2-32bit-2.4.41-18.25.1 is installed
  • OR openldap2-2.4.41-18.25.1 is installed
  • OR openldap2-back-meta-2.4.41-18.25.1 is installed
  • OR openldap2-client-2.4.41-18.25.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 is installed
  • AND Package Information
  • kernel-default-4.12.14-25.19 is installed
  • OR kernel-default-extra-4.12.14-25.19 is installed
    • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 15 is installed
  • AND Package Information
  • bitcoin-0.16.3-bp150.3.3 is installed
  • OR bitcoin-qt5-0.16.3-bp150.3.3 is installed
  • OR bitcoin-test-0.16.3-bp150.3.3 is installed
  • OR bitcoin-utils-0.16.3-bp150.3.3 is installed
  • OR bitcoind-0.16.3-bp150.3.3 is installed
  • OR libbitcoinconsensus-devel-0.16.3-bp150.3.3 is installed
  • OR libbitcoinconsensus0-0.16.3-bp150.3.3 is installed
    • BACK