Уведомление безопасности SUSE-SU-2019:0059-1

Уровень опасности

Высокая (6.8)

Оценка CVSS

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

Производитель ПО

SUSE

Наименование ПО

libjavascriptcoregtk-4_0-18 (any) libjavascriptcoregtk-4_0-18-debuginfo (any) libwebkit2gtk3-lang (any) libwebkit2gtk-4_0-37 (any) libwebkit2gtk-4_0-37-debuginfo (any) typelib-1_0-JavaScriptCore-4_0 (any) typelib-1_0-WebKit2-4_0 (any) webkit2gtk3-debugsource (any) webkit2gtk-4_0-injected-bundles (any) webkit2gtk-4_0-injected-bundles-debuginfo (any)

Описание

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Software Development Kit 12-SP3, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE OpenStack Cloud 7, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Desktop 12-SP4, SUSE Linux Enterprise Desktop 12-SP3, SUSE Enterprise Storage 4, SUSE Linux Enterprise Server 12-SP3, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Workstation Extension 12-SP4, SUSE Linux Enterprise Workstation Extension 12-SP3

Как исправить

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 12-SP3:
aarch64, ppc64le, s390x, x86_64:
webkit2gtk3-devel - 2.22.4-2.29.3
typelib-1_0-WebKit2WebExtension-4_0 - 2.22.4-2.29.3
webkit2gtk3-debugsource - 2.22.4-2.29.3
SUSE Linux Enterprise Server 12-SP2-BCL:
x86_64:
typelib-1_0-JavaScriptCore-4_0 - 2.22.4-2.29.3
libwebkit2gtk-4_0-37-debuginfo - 2.22.4-2.29.3
typelib-1_0-WebKit2-4_0 - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18-debuginfo - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles - 2.22.4-2.29.3
libwebkit2gtk-4_0-37 - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles-debuginfo - 2.22.4-2.29.3
webkit2gtk3-debugsource - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18 - 2.22.4-2.29.3
SUSE OpenStack Cloud 7:
s390x, x86_64:
typelib-1_0-JavaScriptCore-4_0 - 2.22.4-2.29.3
libwebkit2gtk-4_0-37-debuginfo - 2.22.4-2.29.3
typelib-1_0-WebKit2-4_0 - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18-debuginfo - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles - 2.22.4-2.29.3
libwebkit2gtk-4_0-37 - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles-debuginfo - 2.22.4-2.29.3
webkit2gtk3-debugsource - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18 - 2.22.4-2.29.3
SUSE Linux Enterprise Server 12-SP2-LTSS:
ppc64le, s390x, x86_64:
typelib-1_0-JavaScriptCore-4_0 - 2.22.4-2.29.3
libwebkit2gtk-4_0-37-debuginfo - 2.22.4-2.29.3
typelib-1_0-WebKit2-4_0 - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18-debuginfo - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles - 2.22.4-2.29.3
libwebkit2gtk-4_0-37 - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles-debuginfo - 2.22.4-2.29.3
webkit2gtk3-debugsource - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18 - 2.22.4-2.29.3
SUSE Linux Enterprise Software Development Kit 12-SP4:
aarch64, ppc64le, s390x, x86_64:
webkit2gtk3-devel - 2.22.4-2.29.3
typelib-1_0-WebKit2WebExtension-4_0 - 2.22.4-2.29.3
webkit2gtk3-debugsource - 2.22.4-2.29.3
SUSE Linux Enterprise Desktop 12-SP4:
x86_64:
typelib-1_0-JavaScriptCore-4_0 - 2.22.4-2.29.3
libwebkit2gtk-4_0-37-debuginfo - 2.22.4-2.29.3
typelib-1_0-WebKit2-4_0 - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18-debuginfo - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles - 2.22.4-2.29.3
libwebkit2gtk-4_0-37 - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles-debuginfo - 2.22.4-2.29.3
webkit2gtk3-debugsource - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18 - 2.22.4-2.29.3
SUSE Linux Enterprise Desktop 12-SP4:
noarch:
libwebkit2gtk3-lang - 2.22.4-2.29.3
SUSE Linux Enterprise Desktop 12-SP3:
x86_64:
typelib-1_0-JavaScriptCore-4_0 - 2.22.4-2.29.3
libwebkit2gtk-4_0-37-debuginfo - 2.22.4-2.29.3
typelib-1_0-WebKit2-4_0 - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18-debuginfo - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles - 2.22.4-2.29.3
libwebkit2gtk-4_0-37 - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles-debuginfo - 2.22.4-2.29.3
webkit2gtk3-debugsource - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18 - 2.22.4-2.29.3
SUSE Linux Enterprise Desktop 12-SP3:
noarch:
libwebkit2gtk3-lang - 2.22.4-2.29.3
SUSE Enterprise Storage 4:
x86_64:
typelib-1_0-JavaScriptCore-4_0 - 2.22.4-2.29.3
libwebkit2gtk-4_0-37-debuginfo - 2.22.4-2.29.3
typelib-1_0-WebKit2-4_0 - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18-debuginfo - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles - 2.22.4-2.29.3
libwebkit2gtk-4_0-37 - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles-debuginfo - 2.22.4-2.29.3
webkit2gtk3-debugsource - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18 - 2.22.4-2.29.3
SUSE Linux Enterprise Server 12-SP3:
aarch64, ppc64le, s390x, x86_64:
typelib-1_0-JavaScriptCore-4_0 - 2.22.4-2.29.3
libwebkit2gtk-4_0-37-debuginfo - 2.22.4-2.29.3
typelib-1_0-WebKit2-4_0 - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18-debuginfo - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles - 2.22.4-2.29.3
libwebkit2gtk-4_0-37 - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles-debuginfo - 2.22.4-2.29.3
webkit2gtk3-debugsource - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18 - 2.22.4-2.29.3
SUSE Linux Enterprise Server for SAP 12-SP2:
ppc64le, x86_64:
typelib-1_0-JavaScriptCore-4_0 - 2.22.4-2.29.3
libwebkit2gtk-4_0-37-debuginfo - 2.22.4-2.29.3
typelib-1_0-WebKit2-4_0 - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18-debuginfo - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles - 2.22.4-2.29.3
libwebkit2gtk-4_0-37 - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles-debuginfo - 2.22.4-2.29.3
webkit2gtk3-debugsource - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18 - 2.22.4-2.29.3
SUSE Linux Enterprise Server 12-SP4:
aarch64, ppc64le, s390x, x86_64:
typelib-1_0-JavaScriptCore-4_0 - 2.22.4-2.29.3
libwebkit2gtk-4_0-37-debuginfo - 2.22.4-2.29.3
typelib-1_0-WebKit2-4_0 - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18-debuginfo - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles - 2.22.4-2.29.3
libwebkit2gtk-4_0-37 - 2.22.4-2.29.3
webkit2gtk-4_0-injected-bundles-debuginfo - 2.22.4-2.29.3
webkit2gtk3-debugsource - 2.22.4-2.29.3
libjavascriptcoregtk-4_0-18 - 2.22.4-2.29.3
SUSE Linux Enterprise Workstation Extension 12-SP4:
noarch:
libwebkit2gtk3-lang - 2.22.4-2.29.3
SUSE Linux Enterprise Workstation Extension 12-SP3:
noarch:
libwebkit2gtk3-lang - 2.22.4-2.29.3

Ссылки

http://lists.suse.com/pipermail/sle-security-updates/2019-January/005029.html
https://bugzilla.suse.com/1110279
https://bugzilla.suse.com/1116998

Источник: CVE
Наименование: CVE-2018-4358
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4358

Источник: CVE
Наименование: CVE-2018-4359
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4359

Источник: CVE
Наименование: CVE-2018-4309
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4309

Источник: CVE
Наименование: CVE-2018-4314
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4314

Источник: CVE
Наименование: CVE-2018-4210
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4210

Источник: CVE
Наименование: CVE-2018-4316
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4316

Источник: CVE
Наименование: CVE-2018-4317
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4317

Источник: CVE
Наименование: CVE-2018-4376
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4376

Источник: CVE
Наименование: CVE-2018-4312
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4312

Источник: CVE
Наименование: CVE-2018-4375
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4375

Источник: CVE
Наименование: CVE-2018-4273
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4273

Источник: CVE
Наименование: CVE-2018-4272
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4272

Источник: CVE
Наименование: CVE-2018-4378
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4378

Источник: CVE
Наименование: CVE-2018-4270
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4270

Источник: CVE
Наименование: CVE-2018-4318
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4318

Источник: CVE
Наименование: CVE-2018-4319
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4319

Источник: CVE
Наименование: CVE-2018-4372
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4372

Источник: CVE
Наименование: CVE-2018-4328
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4328

Источник: CVE
Наименование: CVE-2018-4284
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4284

Источник: CVE
Наименование: CVE-2018-4382
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4382

Источник: CVE
Наименование: CVE-2018-4386
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4386

Источник: CVE
Наименование: CVE-2018-4345
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4345

Источник: CVE
Наименование: CVE-2018-4264
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4264

Источник: CVE
Наименование: CVE-2018-4265
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4265

Источник: CVE
Наименование: CVE-2018-4266
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4266

Источник: CVE
Наименование: CVE-2018-4267
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4267

Источник: CVE
Наименование: CVE-2018-4261
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4261

Источник: CVE
Наименование: CVE-2018-4262
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4262

Источник: CVE
Наименование: CVE-2018-4263
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4263

Источник: CVE
Наименование: CVE-2018-4208
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4208

Источник: CVE
Наименование: CVE-2018-4209
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4209

Источник: CVE
Наименование: CVE-2018-4306
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4306

Источник: CVE
Наименование: CVE-2018-4323
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4323

Источник: CVE
Наименование: CVE-2018-4361
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4361

Источник: CVE
Наименование: CVE-2018-4191
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4191

Источник: CVE
Наименование: CVE-2018-4213
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4213

Источник: CVE
Наименование: CVE-2018-4197
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4197

Источник: CVE
Наименование: CVE-2018-4373
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4373

Источник: CVE
Наименование: CVE-2018-4416
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4416

Источник: CVE
Наименование: CVE-2018-4299
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4299

Источник: CVE
Наименование: CVE-2018-4278
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4278

Источник: CVE
Наименование: CVE-2018-4315
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4315

Источник: CVE
Наименование: CVE-2018-4212
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4212

Источник: CVE
Наименование: CVE-2018-4392
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4392

Источник: CVE
Наименование: CVE-2018-4207
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4207

Назад к списку уязвимостей

Уведомление безопасности SUSE-SU-2019:0059-1

Карточка уязвимости

Характеристики уязвимости