File _patchinfo of Package patchinfo.27282

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.27282

<patchinfo incident="27282">
  <issue tracker="bnc" id="1206474">VUL-0: CVE-2022-42856: webkitgtk,webkit2gtk3,webkitgtk3: webkitgtk: processing maliciously crafted web content may lead to an arbitrary code execution</issue>
  <issue tracker="cve" id="2022-42856"/>
  <issue tracker="bnc" id="1206750">VUL-0: webkit2gtk3: WebKitGTK and WPE WebKit Security Advisory WSA-2022-0011 </issue>
  <issue tracker="cve" id="2022-42852"/>
  <issue tracker="cve" id="2022-42863"/>
  <issue tracker="cve" id="2022-42867"/>
  <issue tracker="cve" id="2022-46691"/>
  <issue tracker="cve" id="2022-46692"/>
  <issue tracker="cve" id="2022-46698"/>
  <issue tracker="cve" id="2022-46699"/>
  <issue tracker="cve" id="2022-46700"/>
  <packager>mgorse</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for webkit2gtk3</summary>
  <description>This update for webkit2gtk3 fixes the following issues:

Update to version 2.38.3:

- CVE-2022-42856: Fixed a potential arbitrary code execution when processing maliciously crafted web content (bsc#1206474).
- CVE-2022-42852: Fixed disclosure of process memory by improved memory handling.
- CVE-2022-42867: Fixed a use after free issue was addressed with improved memory management.
- CVE-2022-46692: Fixed bypass of Same Origin Policy through improved state management.
- CVE-2022-46698: Fixed disclosure of sensitive user information with improved checks.
- CVE-2022-46699: Fixed an arbitrary code execution caused by memory corruption.
- CVE-2022-46700: Fixed an arbitrary code execution caused by memory corruption.
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.27282

Places