SUSE-SU-2023:3753-1: Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Expand lang sub-package in spec file unconditionally to handle previous name change from WebKit2GTK-lang to WebKitGTK-lang. This change affected the automatic generated Requires tag on WebKit2GTK-%{apiver}, then getting out of sync of what's being required and what's being provided. Now, any sub-package that was providing WebKit2GTK-%{apiver} will provide WebKitGTK-%{apiver} instead (bsc#1214835, bsc#1214640, bsc#1214093).
Require libwaylandclient0 >= 1.20. 15.4 originally had 1.19.0, but webkitgtk uses a function added in 1.20.0, so we need to ensure that the wayland update is pulled in (bsc#1215072).
Update to version 2.40.5 (bsc#1213905 bsc#1213379 bsc#1213581 bsc#1215230): CVE-2023-38594, CVE-2023-38595, CVE-2023-38597, CVE-2023-38599, CVE-2023-38600, CVE-2023-38611, CVE-2023-40397, CVE-2023-37450, CVE-2023-28198, CVE-2023-32370
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 6_0-1-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libwebkitgtkto a version that resolves this vulnerability.Fixed in 6_0-4-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtk4-debugsourceto a version that resolves this vulnerability.Fixed in 2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libwebkitgtkto a version that resolves this vulnerability.Fixed in 6_0-4-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 6_0-1-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkitgtkto a version that resolves this vulnerability.Fixed in 6_0-injected-bundles-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/WebKitGTKto a version that resolves this vulnerability.Fixed in 4.1-lang-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/WebKitGTKto a version that resolves this vulnerability.Fixed in 6.0-lang-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/WebKitGTKto a version that resolves this vulnerability.Fixed in 4.0-lang-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtk3-develto a version that resolves this vulnerability.Fixed in 2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkitgtkto a version that resolves this vulnerability.Fixed in 6_0-injected-bundles-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-0-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtk3-soup2-minibrowserto a version that resolves this vulnerability.Fixed in 2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-WebKit-6_0-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-JavaScriptCore-4_0-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-0-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtk3-minibrowserto a version that resolves this vulnerability.Fixed in 2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_0-18-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-WebKit2WebExtension-4_1-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit-jscto a version that resolves this vulnerability.Fixed in 4.1-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtk3-soup2-minibrowser-debuginfoto a version that resolves this vulnerability.Fixed in 2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtk4-develto a version that resolves this vulnerability.Fixed in 2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_1-0-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit-jscto a version that resolves this vulnerability.Fixed in 6.0-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-JavaScriptCore-6_0-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_1-0-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_0-18-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtk3-minibrowser-debuginfoto a version that resolves this vulnerability.Fixed in 2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-WebKit2WebExtension-4_0-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit-jscto a version that resolves this vulnerability.Fixed in 4.1-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtk4-minibrowserto a version that resolves this vulnerability.Fixed in 2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtk3-soup2-debugsourceto a version that resolves this vulnerability.Fixed in 2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit-jscto a version that resolves this vulnerability.Fixed in 4-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-injected-bundles-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-JavaScriptCore-4_1-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-37-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-37-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtk3-soup2-develto a version that resolves this vulnerability.Fixed in 2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit-jscto a version that resolves this vulnerability.Fixed in 4-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-injected-bundles-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtk3-debugsourceto a version that resolves this vulnerability.Fixed in 2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtk4-minibrowser-debuginfoto a version that resolves this vulnerability.Fixed in 2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-injected-bundles-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-injected-bundles-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/webkit-jscto a version that resolves this vulnerability.Fixed in 6.0-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-WebKit2-4_1-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-WebKitWebProcessExtension-6_0-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-WebKit2-4_0-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-0-32bit-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_0-18-32bit-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_1-0-32bit-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_1-0-32bit-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-0-32bit-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_0-18-32bit-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-37-32bit-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-37-32bit-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-37-64bit-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-37-64bit-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_1-0-64bit-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_0-18-64bit-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-0-64bit-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_0-18-64bit-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_1-0-64bit-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-0-64bit-debuginfo-2.40.5-150400.4.51.1 - Upgrade
Upgrade
webkit2gtk3to a version that resolves this vulnerability.Fixed in 2.40.5 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-2023-3753=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2023-3753=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP4-2023-3753=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2023-3753=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Desktop-Applications-15-SP4-2023-3753=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2023-3753=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-3753=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-3753=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2023-3753=1
Event History
Child vulnerabilities
Contains the following vulnerabilities.