Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:4868-1

Опубликовано: 22 окт. 2026
Источник: suse-cvrf

Описание

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues:

Security issues fixed:

  • CVE-2026-64718: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (bsc#1277001).
  • CVE-2026-65335: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (bsc#1277015).
  • CVE-2026-78376: use-after-free of JSCValue function parameters (bsc#1276418).
  • CVE-2026-83596: webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (bsc#1277755).

Non security issue fixed:

  • libjavascriptcoregtk-4_0-18: JSGlobalContextCreate() aborts on aarch64 64 KB-page kernel (bsc#1285528).
  • Build with -DUSE_64KB_PAGE_BLOCK=ON on aarch64 (bsc#1285528).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
WebKitGTK-4.0-lang-2.54.1-150400.4.157.5
WebKitGTK-4.1-lang-2.54.1-150400.4.157.4
WebKitGTK-6.0-lang-2.54.1-150400.4.157.4
libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5
libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4
libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4
libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5
libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4
libwebkitgtk-6_0-4-2.54.1-150400.4.157.4
typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5
typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4
webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5
webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4
webkit2gtk3-devel-2.54.1-150400.4.157.4
webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5
webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
WebKitGTK-4.0-lang-2.54.1-150400.4.157.5
WebKitGTK-4.1-lang-2.54.1-150400.4.157.4
WebKitGTK-6.0-lang-2.54.1-150400.4.157.4
libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5
libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4
libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4
libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5
libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4
libwebkitgtk-6_0-4-2.54.1-150400.4.157.4
typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5
typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4
webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5
webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4
webkit2gtk3-devel-2.54.1-150400.4.157.4
webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5
webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
WebKitGTK-4.0-lang-2.54.1-150400.4.157.5
WebKitGTK-4.1-lang-2.54.1-150400.4.157.4
WebKitGTK-6.0-lang-2.54.1-150400.4.157.4
libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5
libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4
libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4
libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5
libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4
libwebkitgtk-6_0-4-2.54.1-150400.4.157.4
typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5
typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4
webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5
webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4
webkit2gtk3-devel-2.54.1-150400.4.157.4
webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5
webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
WebKitGTK-4.0-lang-2.54.1-150400.4.157.5
WebKitGTK-4.1-lang-2.54.1-150400.4.157.4
WebKitGTK-6.0-lang-2.54.1-150400.4.157.4
libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5
libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4
libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4
libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5
libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4
libwebkitgtk-6_0-4-2.54.1-150400.4.157.4
typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5
typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4
webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5
webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4
webkit2gtk3-devel-2.54.1-150400.4.157.4
webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5
webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4
SUSE Linux Enterprise Server 15 SP4-LTSS
WebKitGTK-4.0-lang-2.54.1-150400.4.157.5
WebKitGTK-4.1-lang-2.54.1-150400.4.157.4
WebKitGTK-6.0-lang-2.54.1-150400.4.157.4
libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5
libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4
libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4
libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5
libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4
libwebkitgtk-6_0-4-2.54.1-150400.4.157.4
typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5
typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4
webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5
webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4
webkit2gtk3-devel-2.54.1-150400.4.157.4
webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5
webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4
SUSE Linux Enterprise Server 15 SP5-LTSS
WebKitGTK-4.0-lang-2.54.1-150400.4.157.5
WebKitGTK-4.1-lang-2.54.1-150400.4.157.4
WebKitGTK-6.0-lang-2.54.1-150400.4.157.4
libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5
libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4
libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4
libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5
libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4
libwebkitgtk-6_0-4-2.54.1-150400.4.157.4
typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5
typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4
webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5
webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4
webkit2gtk3-devel-2.54.1-150400.4.157.4
webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5
webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4
SUSE Linux Enterprise Server for SAP Applications 15 SP4
WebKitGTK-4.0-lang-2.54.1-150400.4.157.5
WebKitGTK-4.1-lang-2.54.1-150400.4.157.4
WebKitGTK-6.0-lang-2.54.1-150400.4.157.4
libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5
libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4
libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4
libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5
libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4
libwebkitgtk-6_0-4-2.54.1-150400.4.157.4
typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5
typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4
webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5
webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4
webkit2gtk3-devel-2.54.1-150400.4.157.4
webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5
webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4
SUSE Linux Enterprise Server for SAP Applications 15 SP5
WebKitGTK-4.0-lang-2.54.1-150400.4.157.5
WebKitGTK-4.1-lang-2.54.1-150400.4.157.4
WebKitGTK-6.0-lang-2.54.1-150400.4.157.4
libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5
libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4
libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4
libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5
libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4
libwebkitgtk-6_0-4-2.54.1-150400.4.157.4
typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5
typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4
typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5
typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4
webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5
webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4
webkit2gtk3-devel-2.54.1-150400.4.157.4
webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5
webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4

Ссылки

Описание

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process crash.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.54.1-150400.4.157.5
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5
Ссылки

Описание

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, Safari 27, iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, visionOS 27, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.54.1-150400.4.157.5
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5
Ссылки

Описание

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.54.1-150400.4.157.5
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5
Ссылки

Описание

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.54.1-150400.4.157.5
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5
Ссылки

Описание

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.54.1-150400.4.157.5
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5
Ссылки

Описание

Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.54.1-150400.4.157.5
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5
Ссылки

Описание

Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.0-lang-2.54.1-150400.4.157.5
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-4.1-lang-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:WebKitGTK-6.0-lang-2.54.1-150400.4.157.4
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5
Ссылки
Уязвимость SUSE-SU-2026:4868-1