rpm package

opensuse/gtk3&distro=openSUSE Tumbleweed

pkg:rpm/opensuse/gtk3&distro=openSUSE%20Tumbleweed

Vulnerabilities (171)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2018-4190		—	< 2.32.4-1.1	2.32.4-1.1	Jun 8, 2018	An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It all
CVE-2018-11646		—	< 2.32.4-1.1	2.32.4-1.1	Jun 1, 2018	webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash.
CVE-2018-4162		—	< 2.32.4-1.1	2.32.4-1.1	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves
CVE-2018-4133		—	< 2.32.4-1.1	2.32.4-1.1	Apr 3, 2018	An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVE-2018-4127		—	< 2.32.4-1.1	2.32.4-1.1	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allow
CVE-2018-4120		—	< 2.32.4-1.1	2.32.4-1.1	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allow
CVE-2018-4117		—	< 2.32.4-1.1	2.32.4-1.1	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the "WebKit"
CVE-2018-4101		—	< 2.32.4-1.1	2.32.4-1.1	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allow
CVE-2018-4088		—	< 2.32.4-1.1	2.32.4-1.1	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS bef
CVE-2017-7161		—	< 2.32.4-1.1	2.32.4-1.1	Apr 3, 2018	An issue was discovered in certain Apple products. Safari before 11.0.2 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code via special characters that trigger command injection.
CVE-2017-13884		—	< 2.32.4-1.1	2.32.4-1.1	Apr 3, 2018	An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involve
CVE-2017-5753		—	< 2.32.4-1.1	2.32.4-1.1	Jan 4, 2018	Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVE-2017-7157	Hig	8.8	< 2.32.4-1.1	2.32.4-1.1	Dec 27, 2017	An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It all
CVE-2017-7156	Hig	8.8	< 2.32.4-1.1	2.32.4-1.1	Dec 27, 2017	An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It all
CVE-2017-13866	Hig	8.8	< 2.32.4-1.1	2.32.4-1.1	Dec 25, 2017	An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It all
CVE-2017-13803	Hig	8.8	< 2.32.4-1.1	2.32.4-1.1	Nov 13, 2017	An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It all
CVE-2017-13798	Hig	8.8	< 2.32.4-1.1	2.32.4-1.1	Nov 13, 2017	An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It all
CVE-2017-1000121	Cri	9.8	< 2.32.4-1.1	2.32.4-1.1	Nov 1, 2017	The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process. This vulnerability does not affect Apple
CVE-2017-7117	Hig	8.8	< 2.32.4-1.1	2.32.4-1.1	Oct 23, 2017	An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote
CVE-2017-7104	Hig	8.8	< 2.32.4-1.1	2.32.4-1.1	Oct 23, 2017	An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote

CVE-2018-4190Jun 8, 2018
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It all
CVE-2018-11646Jun 1, 2018
affected < 2.32.4-1.1fixed 2.32.4-1.1
webkitFaviconDatabaseSetIconForPageURL and webkitFaviconDatabaseSetIconURLForPageURL in UIProcess/API/glib/WebKitFaviconDatabase.cpp in WebKit, as used in WebKitGTK+ through 2.21.3, mishandle an unset pageURL, leading to an application crash.
CVE-2018-4162Apr 3, 2018
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves
CVE-2018-4133Apr 3, 2018
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. Safari before 11.1 is affected. The issue involves the "WebKit" component. A Safari cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVE-2018-4127Apr 3, 2018
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allow
CVE-2018-4120Apr 3, 2018
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allow
CVE-2018-4117Apr 3, 2018
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the "WebKit"
CVE-2018-4101Apr 3, 2018
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. The issue involves the "WebKit" component. It allow
CVE-2018-4088Apr 3, 2018
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. Safari before 11.0.3 is affected. iCloud before 7.3 on Windows is affected. iTunes before 12.7.3 on Windows is affected. tvOS before 11.2.5 is affected. watchOS bef
CVE-2017-7161Apr 3, 2018
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. Safari before 11.0.2 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code via special characters that trigger command injection.
CVE-2017-13884Apr 3, 2018
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involve
CVE-2017-5753Jan 4, 2018
affected < 2.32.4-1.1fixed 2.32.4-1.1
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVE-2017-7157HigDec 27, 2017
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It all
CVE-2017-7156HigDec 27, 2017
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It all
CVE-2017-13866HigDec 25, 2017
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It all
CVE-2017-13803HigNov 13, 2017
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It all
CVE-2017-13798HigNov 13, 2017
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It all
CVE-2017-1000121CriNov 1, 2017
affected < 2.32.4-1.1fixed 2.32.4-1.1
The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromised secondary process to trigger an integer overflow and subsequent buffer overflow in the UI process. This vulnerability does not affect Apple
CVE-2017-7117HigOct 23, 2017
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote
CVE-2017-7104HigOct 23, 2017
affected < 2.32.4-1.1fixed 2.32.4-1.1
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote

Page 5 of 9