Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE Linux Enterprise: 2022:3136-1 Important Code Execution Fix

suse
Calendar Grey September 7, 2022
Dist Suse Esm H88
This patch for webkit2gtk3 addresses vulnerabilities and offers guidance for installation on impacted SUSE platforms.
An update that solves one vulnerability and has one errata is now available

Summary

This update for webkit2gtk3 fixes the following issues: - Updated to version 2.36.7 (bsc#1202807): - CVE-2022-32893: Fixed an issue that would be triggered when processing malicious web content and that could lead to arbitrary code execution. - Fixed several crashes and rendering issues. - Updated to version 2.36.6: - Fixed handling of touchpad scrolling on GTK4 builds - Fixed WebKitGTK not allowing to be used from non-main threads (bsc#1202169). - Fixed several crashes and rendering issues Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2022-3136=1

Topics%20covered

Topics Covered

security advisory code execution SUSE important update Linux Enterprise webkit2gtk3

References

#1202169 #1202807

Cross- CVE-2022-32893

CVSS scores:

CVE-2022-32893 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVE-2022-32893 (SUSE): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products:

SUSE Linux Enterprise Server 12-SP2-BCL

SUSE Linux Enterprise Server 12-SP3-BCL

SUSE Linux Enterprise Server 12-SP4-LTSS

SUSE Linux Enterprise Server 12-SP5

SUSE Linux Enterprise Server for SAP 12-SP4

SUSE Linux Enterprise Server for SAP Applications 12-SP5

SUSE Linux Enterprise Software Development Kit 12-SP5

SUSE OpenStack Cloud 9

SUSE OpenStack Cloud Crowbar 9

https://www.suse.com/security/cve/CVE-2022-32893.html

https://bugzilla.suse.com/1202169

https://bugzilla.suse.com/1202807

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:3136-1
Rating: important

Topics%20covered

Topics Covered

security advisory code execution SUSE important update Linux Enterprise webkit2gtk3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here