SUSE-SU-2024:0004-1: Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: CVE-2023-42890: Fixed processing malicious web content may lead to arbitrary code execution (bsc#1218033). CVE-2023-42883: Fixed processing a malicious image may lead to a denial-of-service (bsc#1218032). CVE-2023-41074: Fixed use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (bsc#1215870). CVE-2023-40451, CVE-2023-41074: Update to version 2.42.4 (bsc#1218032, bsc#1215868).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/WebKitGTKto a version that resolves this vulnerability.Fixed in 4.0-lang-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtk3-soup2-debugsourceto a version that resolves this vulnerability.Fixed in 2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-WebKit2WebExtension-4_0-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtk3-soup2-develto a version that resolves this vulnerability.Fixed in 2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-37-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-WebKit2-4_0-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-injected-bundles-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-injected-bundles-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_0-18-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-JavaScriptCore-4_0-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-37-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_0-18-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/WebKitGTKto a version that resolves this vulnerability.Fixed in 4.1-lang-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-WebKit2-4_1-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-injected-bundles-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-JavaScriptCore-4_1-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-WebKit2WebExtension-4_1-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_1-0-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_1-0-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-0-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-injected-bundles-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-0-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtk3-debugsourceto a version that resolves this vulnerability.Fixed in 2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtk3-develto a version that resolves this vulnerability.Fixed in 2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/WebKitGTKto a version that resolves this vulnerability.Fixed in 6.0-lang-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libwebkitgtkto a version that resolves this vulnerability.Fixed in 6_0-4-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 6_0-1-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 6_0-1-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtk4-debugsourceto a version that resolves this vulnerability.Fixed in 2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkitgtkto a version that resolves this vulnerability.Fixed in 6_0-injected-bundles-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libwebkitgtkto a version that resolves this vulnerability.Fixed in 6_0-4-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtk4-minibrowserto a version that resolves this vulnerability.Fixed in 2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtk4-minibrowser-debuginfoto a version that resolves this vulnerability.Fixed in 2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit-jscto a version that resolves this vulnerability.Fixed in 4-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtk3-soup2-minibrowser-debuginfoto a version that resolves this vulnerability.Fixed in 2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit-jscto a version that resolves this vulnerability.Fixed in 6.0-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit-jscto a version that resolves this vulnerability.Fixed in 4-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtk4-develto a version that resolves this vulnerability.Fixed in 2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit-jscto a version that resolves this vulnerability.Fixed in 6.0-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit-jscto a version that resolves this vulnerability.Fixed in 4.1-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit-jscto a version that resolves this vulnerability.Fixed in 4.1-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-WebKit-6_0-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-JavaScriptCore-6_0-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkitgtkto a version that resolves this vulnerability.Fixed in 6_0-injected-bundles-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtk3-soup2-minibrowserto a version that resolves this vulnerability.Fixed in 2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtk3-minibrowser-debuginfoto a version that resolves this vulnerability.Fixed in 2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/webkit2gtk3-minibrowserto a version that resolves this vulnerability.Fixed in 2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/typelibto a version that resolves this vulnerability.Fixed in 1_0-WebKitWebProcessExtension-6_0-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_0-18-32bit-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-37-32bit-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_0-18-32bit-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_1-0-32bit-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-0-32bit-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-37-32bit-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_1-0-32bit-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-0-32bit-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-0-64bit-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libjavascriptcoregtkto a version that resolves this vulnerability.Fixed in 4_1-0-64bit-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-37-64bit-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_0-37-64bit-debuginfo-2.42.4-150400.4.70.3 - Upgrade
Upgrade
suse/libwebkit2gtkto a version that resolves this vulnerability.Fixed in 4_1-0-64bit-debuginfo-2 - Upgrade
Upgrade
webkit2gtk3to a version that resolves this vulnerability.Fixed in 2.42.4
Event History
Child vulnerabilities
Contains the following vulnerabilities.