Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:3091-1

Опубликовано: 03 сент. 2024
Источник: suse-cvrf

Описание

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698):

  • Fix web process cache suspend/resume when sandbox is enabled.
  • Fix accelerated images dissapearing after scrolling.
  • Fix video flickering with DMA-BUF sink.
  • Fix pointer lock on X11.
  • Fix movement delta on mouse events in GTK3.
  • Undeprecate console message API and make it available in 2022 API.
  • Fix several crashes and rendering issues.
  • Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780, CVE-2024-40782, CVE-2024-40785, CVE-2024-40789, CVE-2024-40794, CVE-2024-4558.

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
WebKitGTK-4.1-lang-2.44.3-150400.4.88.1
WebKitGTK-6.0-lang-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_1-0-2.44.3-150400.4.88.1
libjavascriptcoregtk-6_0-1-2.44.3-150400.4.88.1
libwebkit2gtk-4_0-37-2.44.3-150400.4.88.1
libwebkit2gtk-4_1-0-2.44.3-150400.4.88.1
libwebkitgtk-6_0-4-2.44.3-150400.4.88.1
typelib-1_0-JavaScriptCore-4_0-2.44.3-150400.4.88.1
typelib-1_0-JavaScriptCore-4_1-2.44.3-150400.4.88.1
typelib-1_0-WebKit2-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2-4_1-2.44.3-150400.4.88.1
typelib-1_0-WebKit2WebExtension-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2WebExtension-4_1-2.44.3-150400.4.88.1
webkit2gtk-4_0-injected-bundles-2.44.3-150400.4.88.1
webkit2gtk-4_1-injected-bundles-2.44.3-150400.4.88.1
webkit2gtk3-devel-2.44.3-150400.4.88.1
webkit2gtk3-soup2-devel-2.44.3-150400.4.88.1
webkitgtk-6_0-injected-bundles-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
WebKitGTK-4.1-lang-2.44.3-150400.4.88.1
WebKitGTK-6.0-lang-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_1-0-2.44.3-150400.4.88.1
libjavascriptcoregtk-6_0-1-2.44.3-150400.4.88.1
libwebkit2gtk-4_0-37-2.44.3-150400.4.88.1
libwebkit2gtk-4_1-0-2.44.3-150400.4.88.1
libwebkitgtk-6_0-4-2.44.3-150400.4.88.1
typelib-1_0-JavaScriptCore-4_0-2.44.3-150400.4.88.1
typelib-1_0-JavaScriptCore-4_1-2.44.3-150400.4.88.1
typelib-1_0-WebKit2-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2-4_1-2.44.3-150400.4.88.1
typelib-1_0-WebKit2WebExtension-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2WebExtension-4_1-2.44.3-150400.4.88.1
webkit2gtk-4_0-injected-bundles-2.44.3-150400.4.88.1
webkit2gtk-4_1-injected-bundles-2.44.3-150400.4.88.1
webkit2gtk3-devel-2.44.3-150400.4.88.1
webkit2gtk3-soup2-devel-2.44.3-150400.4.88.1
webkitgtk-6_0-injected-bundles-2.44.3-150400.4.88.1
SUSE Linux Enterprise Module for Basesystem 15 SP5
WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
libwebkit2gtk-4_0-37-2.44.3-150400.4.88.1
typelib-1_0-JavaScriptCore-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2WebExtension-4_0-2.44.3-150400.4.88.1
webkit2gtk-4_0-injected-bundles-2.44.3-150400.4.88.1
webkit2gtk3-soup2-devel-2.44.3-150400.4.88.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP5
WebKitGTK-4.1-lang-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_1-0-2.44.3-150400.4.88.1
libwebkit2gtk-4_1-0-2.44.3-150400.4.88.1
typelib-1_0-JavaScriptCore-4_1-2.44.3-150400.4.88.1
typelib-1_0-WebKit2-4_1-2.44.3-150400.4.88.1
typelib-1_0-WebKit2WebExtension-4_1-2.44.3-150400.4.88.1
webkit2gtk-4_1-injected-bundles-2.44.3-150400.4.88.1
webkit2gtk3-devel-2.44.3-150400.4.88.1
SUSE Linux Enterprise Module for Development Tools 15 SP5
WebKitGTK-6.0-lang-2.44.3-150400.4.88.1
libjavascriptcoregtk-6_0-1-2.44.3-150400.4.88.1
libwebkitgtk-6_0-4-2.44.3-150400.4.88.1
webkitgtk-6_0-injected-bundles-2.44.3-150400.4.88.1
SUSE Linux Enterprise Server 15 SP4-LTSS
WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
WebKitGTK-4.1-lang-2.44.3-150400.4.88.1
WebKitGTK-6.0-lang-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_1-0-2.44.3-150400.4.88.1
libjavascriptcoregtk-6_0-1-2.44.3-150400.4.88.1
libwebkit2gtk-4_0-37-2.44.3-150400.4.88.1
libwebkit2gtk-4_1-0-2.44.3-150400.4.88.1
libwebkitgtk-6_0-4-2.44.3-150400.4.88.1
typelib-1_0-JavaScriptCore-4_0-2.44.3-150400.4.88.1
typelib-1_0-JavaScriptCore-4_1-2.44.3-150400.4.88.1
typelib-1_0-WebKit2-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2-4_1-2.44.3-150400.4.88.1
typelib-1_0-WebKit2WebExtension-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2WebExtension-4_1-2.44.3-150400.4.88.1
webkit2gtk-4_0-injected-bundles-2.44.3-150400.4.88.1
webkit2gtk-4_1-injected-bundles-2.44.3-150400.4.88.1
webkit2gtk3-devel-2.44.3-150400.4.88.1
webkit2gtk3-soup2-devel-2.44.3-150400.4.88.1
webkitgtk-6_0-injected-bundles-2.44.3-150400.4.88.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
WebKitGTK-4.1-lang-2.44.3-150400.4.88.1
WebKitGTK-6.0-lang-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_1-0-2.44.3-150400.4.88.1
libjavascriptcoregtk-6_0-1-2.44.3-150400.4.88.1
libwebkit2gtk-4_0-37-2.44.3-150400.4.88.1
libwebkit2gtk-4_1-0-2.44.3-150400.4.88.1
libwebkitgtk-6_0-4-2.44.3-150400.4.88.1
typelib-1_0-JavaScriptCore-4_0-2.44.3-150400.4.88.1
typelib-1_0-JavaScriptCore-4_1-2.44.3-150400.4.88.1
typelib-1_0-WebKit2-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2-4_1-2.44.3-150400.4.88.1
typelib-1_0-WebKit2WebExtension-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2WebExtension-4_1-2.44.3-150400.4.88.1
webkit2gtk-4_0-injected-bundles-2.44.3-150400.4.88.1
webkit2gtk-4_1-injected-bundles-2.44.3-150400.4.88.1
webkit2gtk3-devel-2.44.3-150400.4.88.1
webkit2gtk3-soup2-devel-2.44.3-150400.4.88.1
webkitgtk-6_0-injected-bundles-2.44.3-150400.4.88.1
SUSE Manager Proxy 4.3
WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
libwebkit2gtk-4_0-37-2.44.3-150400.4.88.1
typelib-1_0-JavaScriptCore-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2WebExtension-4_0-2.44.3-150400.4.88.1
webkit2gtk-4_0-injected-bundles-2.44.3-150400.4.88.1
webkit2gtk3-soup2-devel-2.44.3-150400.4.88.1
SUSE Manager Server 4.3
WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
libwebkit2gtk-4_0-37-2.44.3-150400.4.88.1
typelib-1_0-JavaScriptCore-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2WebExtension-4_0-2.44.3-150400.4.88.1
webkit2gtk-4_0-injected-bundles-2.44.3-150400.4.88.1
webkit2gtk3-soup2-devel-2.44.3-150400.4.88.1
openSUSE Leap 15.5
WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
WebKitGTK-4.1-lang-2.44.3-150400.4.88.1
WebKitGTK-6.0-lang-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_0-18-32bit-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_1-0-2.44.3-150400.4.88.1
libjavascriptcoregtk-4_1-0-32bit-2.44.3-150400.4.88.1
libjavascriptcoregtk-6_0-1-2.44.3-150400.4.88.1
libwebkit2gtk-4_0-37-2.44.3-150400.4.88.1
libwebkit2gtk-4_0-37-32bit-2.44.3-150400.4.88.1
libwebkit2gtk-4_1-0-2.44.3-150400.4.88.1
libwebkit2gtk-4_1-0-32bit-2.44.3-150400.4.88.1
libwebkitgtk-6_0-4-2.44.3-150400.4.88.1
typelib-1_0-JavaScriptCore-4_0-2.44.3-150400.4.88.1
typelib-1_0-JavaScriptCore-4_1-2.44.3-150400.4.88.1
typelib-1_0-JavaScriptCore-6_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit-6_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2-4_1-2.44.3-150400.4.88.1
typelib-1_0-WebKit2WebExtension-4_0-2.44.3-150400.4.88.1
typelib-1_0-WebKit2WebExtension-4_1-2.44.3-150400.4.88.1
typelib-1_0-WebKitWebProcessExtension-6_0-2.44.3-150400.4.88.1
webkit-jsc-4-2.44.3-150400.4.88.1
webkit-jsc-4.1-2.44.3-150400.4.88.1
webkit-jsc-6.0-2.44.3-150400.4.88.1
webkit2gtk-4_0-injected-bundles-2.44.3-150400.4.88.1
webkit2gtk-4_1-injected-bundles-2.44.3-150400.4.88.1
webkit2gtk3-devel-2.44.3-150400.4.88.1
webkit2gtk3-minibrowser-2.44.3-150400.4.88.1
webkit2gtk3-soup2-devel-2.44.3-150400.4.88.1
webkit2gtk3-soup2-minibrowser-2.44.3-150400.4.88.1
webkit2gtk4-devel-2.44.3-150400.4.88.1
webkit2gtk4-minibrowser-2.44.3-150400.4.88.1
webkitgtk-6_0-injected-bundles-2.44.3-150400.4.88.1

Ссылки

Описание

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
Ссылки

Описание

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
Ссылки

Описание

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
Ссылки

Описание

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
Ссылки

Описание

This issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to a cross site scripting attack.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
Ссылки

Описание

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
Ссылки

Описание

This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, Safari 17.6. Private Browsing tabs may be accessed without authentication.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
Ссылки

Описание

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.44.3-150400.4.88.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.44.3-150400.4.88.1
Ссылки
Уязвимость SUSE-SU-2024:3091-1