SUSE-SU-2023:4339-1: Security update for webkit2gtk3

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 7 webkit2gtk3

SUSE:Enterprise Storage 7.1 webkit2gtk3

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS webkit2gtk3

SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS webkit2gtk3

SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS webkit2gtk3

SUSE:Linux Enterprise Server 15 SP2-LTSS webkit2gtk3

SUSE:Linux Enterprise Server 15 SP3-LTSS webkit2gtk3

SUSE:Linux Enterprise Server for SAP Applications 15 SP2 webkit2gtk3

SUSE:Linux Enterprise Server for SAP Applications 15 SP3 webkit2gtk3

SUSE:Manager Proxy 4.2 webkit2gtk3

SUSE:Manager Server 4.2 webkit2gtk3

03 / CONNECTIONS

Connected vulnerabilities

related CVE-2023-32393

related CVE-2023-35074

related CVE-2023-37450

related CVE-2023-39434

related CVE-2023-39928

related CVE-2023-40451

related CVE-2023-41074

related CVE-2023-41993

upstream CVE-2023-32393

upstream CVE-2023-35074

upstream CVE-2023-37450

upstream CVE-2023-39434

upstream CVE-2023-39928

upstream CVE-2023-40451

upstream CVE-2023-41074

upstream CVE-2023-41993

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2023:4339-1

This update for webkit2gtk3 fixes the following issues: - CVE-2023-41993: Fixed an issue where processing malicious web content could have lead to arbitrary code execution (bsc#1215661). - CVE-2023-39928: Fixed a use-after-free that could be exploited to execute arbitrary code when visiting a malicious webpage (bsc#1215868). - CVE-2023-41074: Fixed an issue where processing malicious web content could have lead to arbitrary code execution (bsc#1215870). Non-security fixes: - Fixed missing package dependencies (bsc#1215072).

View original source

05 / REFERENCES

Affected packages

Connected vulnerabilities

Source records

Further evidence