Detections
Analytics

openSUSE Security Update : webkitgtk (openSUSE-2016-412)

medium Nessus Plugin ID 90259

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

This update for webkitgtk fixes the following issues :

 - webkitgtk was updated to version 2.4.10 (boo#971460) :

 + Fix rendering of form controls and scrollbars with GTK+ >= 3.19.

 + Fix crashes on PPC64.

 + Fix the build on powerpc 32 bits.

 + Add ARM64 build support.

 + Security fixes: CVE-2015-1120, CVE-2015-1076, CVE-2015-1071, CVE-2015-1081, CVE-2015-1122, CVE-2015-1155, CVE-2014-1748, CVE-2015-3752, CVE-2015-5809, CVE-2015-5928, CVE-2015-3749, CVE-2015-3659, CVE-2015-3748, CVE-2015-3743, CVE-2015-3731, CVE-2015-3745, CVE-2015-5822, CVE-2015-3658, CVE-2015-3741, CVE-2015-3727, CVE-2015-5801, CVE-2015-5788, CVE-2015-3747, CVE-2015-5794, CVE-2015-1127, CVE-2015-1153, CVE-2015-1083.

 + Updated translations.

Solution

Update the affected webkitgtk packages.

See Also

https://bugzilla.opensuse.org/show_bug.cgi?id=971460

Plugin Details

Severity: Medium

ID: 90259

File Name: openSUSE-2016-412.nasl

Version: 1.4

Type: local

Agent: unix

Published: 4/1/2016

Updated: 1/19/2021

Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:libwebkitgtk-1_0-0-debuginfo, p-cpe:/a:novell:opensuse:libwebkitgtk-3_0-0-debuginfo-32bit, p-cpe:/a:novell:opensuse:libwebkitgtk-1_0-0-debuginfo-32bit, p-cpe:/a:novell:opensuse:libwebkitgtk-3_0-0-debuginfo, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-1_0-0, p-cpe:/a:novell:opensuse:typelib-1_0-javascriptcore-3_0, p-cpe:/a:novell:opensuse:libwebkitgtk-3_0-0, p-cpe:/a:novell:opensuse:libwebkitgtk-1_0-0, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-1_0-0-32bit, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-3_0-0, p-cpe:/a:novell:opensuse:typelib-1_0-webkit-3_0, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-3_0-0-debuginfo-32bit, cpe:/o:novell:opensuse:42.1, p-cpe:/a:novell:opensuse:libwebkitgtk-1_0-0-32bit, p-cpe:/a:novell:opensuse:webkit-jsc-3-debuginfo, p-cpe:/a:novell:opensuse:typelib-1_0-webkit-1_0, p-cpe:/a:novell:opensuse:typelib-1_0-javascriptcore-1_0, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-3_0-0-32bit, p-cpe:/a:novell:opensuse:libwebkitgtk-devel, cpe:/o:novell:opensuse:13.2, p-cpe:/a:novell:opensuse:webkit-jsc-1, p-cpe:/a:novell:opensuse:webkit-jsc-1-debuginfo, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-1_0-0-debuginfo, p-cpe:/a:novell:opensuse:webkit-jsc-3, p-cpe:/a:novell:opensuse:libwebkitgtk-3_0-0-32bit, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-3_0-0-debuginfo, p-cpe:/a:novell:opensuse:libwebkitgtk3-lang, p-cpe:/a:novell:opensuse:libwebkitgtk3-devel, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-1_0-0-debuginfo-32bit, p-cpe:/a:novell:opensuse:libwebkitgtk2-lang

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 3/30/2016

Reference Information

CVE: CVE-2014-1748, CVE-2015-1071, CVE-2015-1076, CVE-2015-1081, CVE-2015-1083, CVE-2015-1120, CVE-2015-1122, CVE-2015-1127, CVE-2015-1153, CVE-2015-1155, CVE-2015-3658, CVE-2015-3659, CVE-2015-3727, CVE-2015-3731, CVE-2015-3741, CVE-2015-3743, CVE-2015-3745, CVE-2015-3747, CVE-2015-3748, CVE-2015-3749, CVE-2015-3752, CVE-2015-5788, CVE-2015-5794, CVE-2015-5801, CVE-2015-5809, CVE-2015-5822, CVE-2015-5928