SUSE-SU-2024:3751-1
Security update for webkit2gtk3
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for webkit2gtk3 fixes the following issues: Update to version 2.46.0 (bsc#1231039). - CVE-2024-40866 - CVE-2024-44187 Already fixed in version 2.44.3: - CVE-2024-4558 - CVE-2024-27838 - CVE-2024-27851 Already fixed in version 2.44.2: - CVE-2024-27834 - CVE-2024-27808 - CVE-2024-27820 - CVE-2024-27833 Already fixed in version 2.44.1: - CVE-2024-23222 - CVE-2024-23206 - CVE-2024-23213 - CVE-2024-23271
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 12.5 | libjavascriptcoregtk-4_0-18, libwebkit2gtk-4_0-37, libwebkit2gtk3-lang and 4 more | 2.46.0-4.15.1 |
Show all 7 entries from 1 source
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 12.5 | libjavascriptcoregtk-4_0-18 | 2.46.0-4.15.1 |
| SUSE Linux Enterprise 12.5 | libwebkit2gtk-4_0-37 | 2.46.0-4.15.1 |
| SUSE Linux Enterprise 12.5 | libwebkit2gtk3-lang | 2.46.0-4.15.1 |
| SUSE Linux Enterprise 12.5 | typelib-1_0-JavaScriptCore-4_0 | 2.46.0-4.15.1 |
| SUSE Linux Enterprise 12.5 | typelib-1_0-WebKit2-4_0 | 2.46.0-4.15.1 |
| SUSE Linux Enterprise 12.5 | typelib-1_0-WebKit2WebExtension-4_0 | 2.46.0-4.15.1 |
| SUSE Linux Enterprise 12.5 | webkit2gtk-4_0-injected-bundles | 2.46.0-4.15.1 |
References
- https://bugzilla.suse.com/1231039
- https://lists.suse.com/pipermail/sle-security-updates/2024-October/019676.html
- https://www.suse.com/security/cve/CVE-2024-23213/
- https://www.suse.com/security/cve/CVE-2024-23271/
- https://www.suse.com/security/cve/CVE-2024-27808/
- https://www.suse.com/security/cve/CVE-2024-27820/
- https://www.suse.com/security/cve/CVE-2024-27833/
- https://www.suse.com/security/cve/CVE-2024-27834/
All 15 references
- https://www.suse.com/security/cve/CVE-2024-27838/
- https://www.suse.com/security/cve/CVE-2024-27851/
- https://www.suse.com/security/cve/CVE-2024-40866/
- https://www.suse.com/security/cve/CVE-2024-44187/
- https://www.suse.com/security/cve/CVE-2024-4558/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2024/suse-su-20243751-1/