p PatchFirst

SUSE-SU-2022:4285-1

SUSE-SU-2022:4285-1 · Security update for webkit2gtk3

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Security fixes: - CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205121). - CVE-2022-32923: Fixed possible information leak via maliciously crafted web content (bsc#1205122). - CVE-2022-42799: Fixed user interface spoofing when visiting a malicious website (bsc#1205123). - CVE-2022-42823: Fixed possible arbitrary code execution via maliciously crafted web content (bsc#1205120). - CVE-2022-42824: Fixed possible sensitive user information leak via maliciously crafted web content (bsc#1205124). Update to version 2.38.2: - Fix scrolling issues in some sites having fixed background. - Fix prolonged buffering during progressive live playback. - Fix the build with accessibility disabled. - Fix several crashes and rendering issues. Update to version 2.38.1: - Make xdg-dbus-proxy work if host session bus address is an abstract socket. - Use a single xdg-dbus-proxy process when sandbox is enabled. - Fix high resolution video playback due to unimplemented changeType operation. - Ensure GSubprocess uses posix_spawn() again and inherit file descriptors. - Fix player stucking in buffering (paused) state for progressive streaming. - Do not try to preconnect on link click when link preconnect setting is disabled. - Fix close status code returned when the client closes a WebSocket in some cases. - Fix media player duration calculation. - Fix several crashes and rendering issues. Update to version 2.38.0: - New media controls UI style. - Add new API to set WebView's Content-Security-Policy for web extensions support. - Make it possible to use the remote inspector from other browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var. - MediaSession is enabled by default, allowing remote media control using MPRIS. - Add support for PDF documents using PDF.js.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • webkit2gtk3 SUSE:Linux Enterprise Module for Basesystem 15 SP3

    Affected ranges
    • ECOSYSTEM: < 2.38.2-150200.54.2

    Update to 2.38.2-150200.54.2

  • webkit2gtk3 SUSE:Linux Enterprise Module for Desktop Applications 15 SP3

    Affected ranges
    • ECOSYSTEM: < 2.38.2-150200.54.2

    Update to 2.38.2-150200.54.2

  • webkit2gtk3 SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS

    Affected ranges
    • ECOSYSTEM: < 2.38.2-150200.54.2

    Update to 2.38.2-150200.54.2

  • webkit2gtk3 SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS

    Affected ranges
    • ECOSYSTEM: < 2.38.2-150200.54.2

    Update to 2.38.2-150200.54.2

  • webkit2gtk3 SUSE:Linux Enterprise Server 15 SP2-BCL

    Affected ranges
    • ECOSYSTEM: < 2.38.2-150200.54.2

    Update to 2.38.2-150200.54.2

  • webkit2gtk3 SUSE:Linux Enterprise Server 15 SP2-LTSS

    Affected ranges
    • ECOSYSTEM: < 2.38.2-150200.54.2

    Update to 2.38.2-150200.54.2

  • webkit2gtk3 SUSE:Linux Enterprise Server for SAP Applications 15 SP2

    Affected ranges
    • ECOSYSTEM: < 2.38.2-150200.54.2

    Update to 2.38.2-150200.54.2

  • webkit2gtk3 SUSE:Manager Proxy 4.1

    Affected ranges
    • ECOSYSTEM: < 2.38.2-150200.54.2

    Update to 2.38.2-150200.54.2

  • webkit2gtk3 SUSE:Manager Retail Branch Server 4.1

    Affected ranges
    • ECOSYSTEM: < 2.38.2-150200.54.2

    Update to 2.38.2-150200.54.2

  • webkit2gtk3 SUSE:Manager Server 4.1

    Affected ranges
    • ECOSYSTEM: < 2.38.2-150200.54.2

    Update to 2.38.2-150200.54.2

  • webkit2gtk3 SUSE:Enterprise Storage 7

    Affected ranges
    • ECOSYSTEM: < 2.38.2-150200.54.2

    Update to 2.38.2-150200.54.2

  • webkit2gtk3 openSUSE:Leap 15.3

    Affected ranges
    • ECOSYSTEM: < 2.38.2-150200.54.2

    Update to 2.38.2-150200.54.2

  • webkit2gtk3 openSUSE:Leap 15.4

    Affected ranges
    • ECOSYSTEM: < 2.38.2-150200.54.2

    Update to 2.38.2-150200.54.2

Original sources

Check your server →