检测

openSUSE 安全更新：webkitgtk (openSUSE-2016-412)

medium Nessus 插件 ID 90259

语言：

简介

远程 openSUSE 主机缺少安全更新。

描述

此 webkitgtk 更新修复了以下问题：

- webkitgtk 已更新到 2.4.10 版 (boo#971460)：

+ 修复 GTK+ >= 3.19 的表单控件和滚动条渲染方式。

+ 修复 PPC64 的崩溃。

+ 修复 powerpc 32 位的版本。

+ 添加 ARM64 版本支持。

+ 安全补丁：CVE-2015-1120、CVE-2015-1076、CVE-2015-1071、CVE-2015-1081、CVE-2015-1122、CVE-2015-1155、CVE-2014-1748、CVE-2015-3752、CVE-2015-5809、CVE-2015-5928、CVE-2015-3749、CVE-2015-3659、CVE-2015-3748、CVE-2015-3743、CVE-2015-3731、CVE-2015-3745、CVE-2015-5822、CVE-2015-3658、CVE-2015-3741、CVE-2015-3727、CVE-2015-5801、CVE-2015-5788、CVE-2015-3747、CVE-2015-5794、CVE-2015-1127、CVE-2015-1153、CVE-2015-1083。

+ 更新翻译。

解决方案

更新受影响的 webkitgtk 程序包。

另见

https://bugzilla.opensuse.org/show_bug.cgi?id=971460

插件详情

严重性: Medium

ID: 90259

文件名: openSUSE-2016-412.nasl

版本: 1.4

类型: local

代理: unix

发布时间: 2016/4/1

最近更新时间: 2021/1/19

支持的传感器: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus

风险信息

VPR

风险因素: Medium

分数: 5.9

CVSS v2

风险因素: Medium

基本分数: 6.8

矢量: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

漏洞信息

CPE: p-cpe:/a:novell:opensuse:libwebkitgtk2-lang, p-cpe:/a:novell:opensuse:libwebkitgtk3-devel, p-cpe:/a:novell:opensuse:libwebkitgtk3-lang, p-cpe:/a:novell:opensuse:typelib-1_0-javascriptcore-1_0, p-cpe:/a:novell:opensuse:typelib-1_0-javascriptcore-3_0, p-cpe:/a:novell:opensuse:typelib-1_0-webkit-1_0, p-cpe:/a:novell:opensuse:typelib-1_0-webkit-3_0, p-cpe:/a:novell:opensuse:webkit-jsc-1, p-cpe:/a:novell:opensuse:webkit-jsc-1-debuginfo, p-cpe:/a:novell:opensuse:webkit-jsc-3, p-cpe:/a:novell:opensuse:webkit-jsc-3-debuginfo, cpe:/o:novell:opensuse:13.2, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-1_0-0, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-1_0-0-32bit, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-1_0-0-debuginfo, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-1_0-0-debuginfo-32bit, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-3_0-0, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-3_0-0-32bit, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-3_0-0-debuginfo, p-cpe:/a:novell:opensuse:libjavascriptcoregtk-3_0-0-debuginfo-32bit, p-cpe:/a:novell:opensuse:libwebkitgtk-1_0-0, p-cpe:/a:novell:opensuse:libwebkitgtk-1_0-0-32bit, p-cpe:/a:novell:opensuse:libwebkitgtk-1_0-0-debuginfo, p-cpe:/a:novell:opensuse:libwebkitgtk-1_0-0-debuginfo-32bit, p-cpe:/a:novell:opensuse:libwebkitgtk-3_0-0, p-cpe:/a:novell:opensuse:libwebkitgtk-3_0-0-32bit, p-cpe:/a:novell:opensuse:libwebkitgtk-3_0-0-debuginfo, p-cpe:/a:novell:opensuse:libwebkitgtk-3_0-0-debuginfo-32bit, p-cpe:/a:novell:opensuse:libwebkitgtk-devel, cpe:/o:novell:opensuse:42.1

必需的 KB 项: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

补丁发布日期: 2016/3/30

参考资料信息

CVE: CVE-2014-1748, CVE-2015-1071, CVE-2015-1076, CVE-2015-1081, CVE-2015-1083, CVE-2015-1120, CVE-2015-1122, CVE-2015-1127, CVE-2015-1153, CVE-2015-1155, CVE-2015-3658, CVE-2015-3659, CVE-2015-3727, CVE-2015-3731, CVE-2015-3741, CVE-2015-3743, CVE-2015-3745, CVE-2015-3747, CVE-2015-3748, CVE-2015-3749, CVE-2015-3752, CVE-2015-5788, CVE-2015-5794, CVE-2015-5801, CVE-2015-5809, CVE-2015-5822, CVE-2015-5928