critical
SUSE-SU-2022:0183-1
Security update for webkit2gtk3
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for webkit2gtk3 fixes the following issues: - Update to version 2.34.3 (bsc#1194019). - CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content. - CVE-2021-30890: Fixed logic issue allowing universal cross site scripting when processing maliciously crafted web content.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15 | libjavascriptcoregtk-4_0-18, libwebkit2gtk-4_0-37, libwebkit2gtk3-lang and 5 more | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15.1 | libjavascriptcoregtk-4_0-18, libwebkit2gtk-4_0-37, libwebkit2gtk3-lang and 5 more | 2.34.3-3.92.1 |
Show all 16 entries from 2 sources
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 15 | libjavascriptcoregtk-4_0-18 | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15 | libwebkit2gtk-4_0-37 | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15 | libwebkit2gtk3-lang | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15 | typelib-1_0-JavaScriptCore-4_0 | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15 | typelib-1_0-WebKit2-4_0 | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15 | typelib-1_0-WebKit2WebExtension-4_0 | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15 | webkit2gtk-4_0-injected-bundles | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15 | webkit2gtk3-devel | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15.1 | libjavascriptcoregtk-4_0-18 | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15.1 | libwebkit2gtk-4_0-37 | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15.1 | libwebkit2gtk3-lang | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15.1 | typelib-1_0-JavaScriptCore-4_0 | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15.1 | typelib-1_0-WebKit2-4_0 | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15.1 | typelib-1_0-WebKit2WebExtension-4_0 | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15.1 | webkit2gtk-4_0-injected-bundles | 2.34.3-3.92.1 |
| SUSE Linux Enterprise 15.1 | webkit2gtk3-devel | 2.34.3-3.92.1 |
References
- https://bugzilla.suse.com/1194019
- https://lists.suse.com/pipermail/sle-security-updates/2022-January/010071.html
- https://www.suse.com/security/cve/CVE-2018-8518/
- https://www.suse.com/security/cve/CVE-2018-8523/
- https://www.suse.com/security/cve/CVE-2019-8766/
- https://www.suse.com/security/cve/CVE-2019-8768/
- https://www.suse.com/security/cve/CVE-2019-8782/
- https://www.suse.com/security/cve/CVE-2019-8808/
All 57 references
- https://www.suse.com/security/cve/CVE-2019-8815/
- https://www.suse.com/security/cve/CVE-2020-10018/
- https://www.suse.com/security/cve/CVE-2020-13753/
- https://www.suse.com/security/cve/CVE-2020-27918/
- https://www.suse.com/security/cve/CVE-2020-29623/
- https://www.suse.com/security/cve/CVE-2020-3885/
- https://www.suse.com/security/cve/CVE-2020-3894/
- https://www.suse.com/security/cve/CVE-2020-3895/
- https://www.suse.com/security/cve/CVE-2020-3897/
- https://www.suse.com/security/cve/CVE-2020-3900/
- https://www.suse.com/security/cve/CVE-2020-3901/
- https://www.suse.com/security/cve/CVE-2020-3902/
- https://www.suse.com/security/cve/CVE-2020-9802/
- https://www.suse.com/security/cve/CVE-2020-9803/
- https://www.suse.com/security/cve/CVE-2020-9805/
- https://www.suse.com/security/cve/CVE-2020-9947/
- https://www.suse.com/security/cve/CVE-2020-9948/
- https://www.suse.com/security/cve/CVE-2020-9951/
- https://www.suse.com/security/cve/CVE-2020-9952/
- https://www.suse.com/security/cve/CVE-2021-1765/
- https://www.suse.com/security/cve/CVE-2021-1788/
- https://www.suse.com/security/cve/CVE-2021-1817/
- https://www.suse.com/security/cve/CVE-2021-1820/
- https://www.suse.com/security/cve/CVE-2021-1825/
- https://www.suse.com/security/cve/CVE-2021-1826/
- https://www.suse.com/security/cve/CVE-2021-1844/
- https://www.suse.com/security/cve/CVE-2021-1871/
- https://www.suse.com/security/cve/CVE-2021-30661/
- https://www.suse.com/security/cve/CVE-2021-30666/
- https://www.suse.com/security/cve/CVE-2021-30682/
- https://www.suse.com/security/cve/CVE-2021-30761/
- https://www.suse.com/security/cve/CVE-2021-30762/
- https://www.suse.com/security/cve/CVE-2021-30809/
- https://www.suse.com/security/cve/CVE-2021-30818/
- https://www.suse.com/security/cve/CVE-2021-30823/
- https://www.suse.com/security/cve/CVE-2021-30836/
- https://www.suse.com/security/cve/CVE-2021-30846/
- https://www.suse.com/security/cve/CVE-2021-30848/
- https://www.suse.com/security/cve/CVE-2021-30849/
- https://www.suse.com/security/cve/CVE-2021-30851/
- https://www.suse.com/security/cve/CVE-2021-30858/
- https://www.suse.com/security/cve/CVE-2021-30884/
- https://www.suse.com/security/cve/CVE-2021-30887/
- https://www.suse.com/security/cve/CVE-2021-30888/
- https://www.suse.com/security/cve/CVE-2021-30889/
- https://www.suse.com/security/cve/CVE-2021-30890/
- https://www.suse.com/security/cve/CVE-2021-30897/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2022/suse-su-20220183-1/