Search the atlas

SUSE-SU-2023:3300-1 Not scored

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.40.5 (bsc#1213905): - CVE-2023-38133: Fixed information disclosure. - CVE-2023-38572: Fixed Same-Origin-Policy bypass. - CVE-2023-38592: Fixed arbitrary code execution. - CVE-2023-38594: Fixed arbitrary code execution. - CVE-2023-38595: Fixed arbitrary code execution. - CVE-2023-38597: Fixed arbitrary code execution. - CVE-2023-38599: Fixed sensitive user information tracking. - CVE-2023-38600: Fixed arbitrary code execution. - CVE-2023-38611: Fixed arbitrary code execution. - CVE-2022-48503: Fixed arbitrary code execution. - CVE-2023-32439: Fixed arbitrary code execution. - CVE-2023-32435: Fixed arbitrary code execution. Add security patches (bsc#1211846): - CVE-2023-28204: Fixed processing of web content that may disclose sensitive information (bsc#1211659). - CVE-2023-32373: Fixed processing of maliciously crafted web content that may lead to arbitrary code execution (bsc#1211658).

Exploit probability Not scored

Published August 14, 2023

Required by Not available

Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS webkit2gtk3

SUSE:Linux Enterprise Server 15 SP1-LTSS webkit2gtk3

SUSE:Linux Enterprise Server for SAP Applications 15 SP1 webkit2gtk3

03 / CONNECTIONS

Connected vulnerabilities

related CVE-2022-48503

related CVE-2023-28204

related CVE-2023-32373

related CVE-2023-32435

related CVE-2023-32439

related CVE-2023-38133

related CVE-2023-38572

related CVE-2023-38592

related CVE-2023-38594

related CVE-2023-38595

related CVE-2023-38597

related CVE-2023-38599

related CVE-2023-38600

related CVE-2023-38611

upstream CVE-2022-48503

upstream CVE-2023-28204

upstream CVE-2023-32373

upstream CVE-2023-32435

upstream CVE-2023-32439

upstream CVE-2023-38133

upstream CVE-2023-38572

upstream CVE-2023-38592

upstream CVE-2023-38594

upstream CVE-2023-38595

upstream CVE-2023-38597

upstream CVE-2023-38599

upstream CVE-2023-38600

upstream CVE-2023-38611

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2023:3300-1

This update for webkit2gtk3 fixes the following issues: Update to version 2.40.5 (bsc#1213905): - CVE-2023-38133: Fixed information disclosure. - CVE-2023-38572: Fixed Same-Origin-Policy bypass. - CVE-2023-38592: Fixed arbitrary code execution. - CVE-2023-38594: Fixed arbitrary code execution. - CVE-2023-38595: Fixed arbitrary code execution. - CVE-2023-38597: Fixed arbitrary code execution. - CVE-2023-38599: Fixed sensitive user information tracking. - CVE-2023-38600: Fixed arbitrary code execution. - CVE-2023-38611: Fixed arbitrary code execution. - CVE-2022-48503: Fixed arbitrary code execution. - CVE-2023-32439: Fixed arbitrary code execution. - CVE-2023-32435: Fixed arbitrary code execution. Add security patches (bsc#1211846): - CVE-2023-28204: Fixed processing of web content that may disclose sensitive information (bsc#1211659). - CVE-2023-32373: Fixed processing of maliciously crafted web content that may lead to arbitrary code execution (bsc#1211658).

View original source

05 / REFERENCES

Further evidence