Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

SUSE: 2022:0690-1 Critical Update for Webkit2gtk3 Released

suse
Calendar Grey March 3, 2022
Scroller Suse
A significant patch for webkit2gtk3 addresses 16 concerns, emphasizing performance optimization and security enhancements. Check the specifics.
An update that fixes 14 vulnerabilities is now available

Summary

This update for webkit2gtk3 fixes the following issues: Update to version 2.34.5 (bsc#1195735): - CVE-2022-22589: A validation issue was addressed with improved input sanitization. - CVE-2022-22590: A use after free issue was addressed with improved memory management. - CVE-2022-22592: A logic issue was addressed with improved state management. Update to version 2.34.4 (bsc#1195064): - CVE-2021-30934: A buffer overflow issue was addressed with improved memory handling. - CVE-2021-30936: A use after free issue was addressed with improved memory management. - CVE-2021-30951: A use after free issue was addressed with improved memory management. - CVE-2021-30952: An integer overflow was addressed with improved input validation. - CVE-2021-30953: An out-of-bounds read was addressed with improved bounds

Topics%20covered

Topics Covered

security advisory update buffer overflow important memory management input sanitization webkit2gtk3

References

#1195064 #1195735

Cross- CVE-2021-30934 CVE-2021-30936 CVE-2021-30951

CVE-2021-30952 CVE-2021-30953 CVE-2021-30954

CVE-2021-30984 CVE-2021-45481 CVE-2021-45482

CVE-2021-45483 CVE-2022-22589 CVE-2022-22590

CVE-2022-22592 CVE-2022-22594

CVSS scores:

CVE-2021-30934 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2021-30934 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2021-30936 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2021-30936 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2021-30951 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2021-30951 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:0690-1
Rating: important

Topics%20covered

Topics Covered

security advisory update buffer overflow important memory management input sanitization webkit2gtk3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.