SUSE-SU-2023:4339-1: Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: CVE-2023-41993: Fixed an issue where processing malicious web content could have lead to arbitrary code execution (bsc#1215661). CVE-2023-39928: Fixed a use-after-free that could be exploited to execute arbitrary code when visiting a malicious webpage (bsc#1215868). CVE-2023-41074: Fixed an issue where processing malicious web content could have lead to arbitrary code execution (bsc#1215870). Non-security fixes: Fixed missing package dependencies (bsc#1215072).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-JavaScriptCore-4_0-2.42.1-150200.87.4 - Upgrade
Upgrade
suse/webkit2gtk3-debugsourceto a version that resolves this vulnerability.Fixed in 2.42.1-150200.87.4 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-WebKit2-4_0-2.42.1-150200.87.4 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-WebKit2WebExtension-4_0-2.42.1-150200.87.4 - Upgrade
Upgrade
suse/webkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-injected-bundles-debuginfo-2.42.1-150200.87.4 - Upgrade
Upgrade
suse/webkit2gtk3-develto a version that resolves this vulnerability.Fixed in 2.42.1-150200.87.4 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_0-18-debuginfo-2.42.1-150200.87.4 - Upgrade
Upgrade
suse/webkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-injected-bundles-2.42.1-150200.87.4 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-37-2.42.1-150200.87.4 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-37-debuginfo-2.42.1-150200.87.4 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_0-18-2.42.1-150200.87.4 - Upgrade
Upgrade
suse/libwebkit2gtk3-langto a version that resolves this vulnerability.Fixed in 2.42.1-150200.87.4 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4339=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4339=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4339=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4339=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4339=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4339=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4339=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4339=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-4339=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4339=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7-2023-4339=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-Storage-7.1-2023-4339=1
Event History
Child vulnerabilities
Contains the following vulnerabilities.