{"affected":[{"ecosystem_specific":{"binaries":[{"libjavascriptcoregtk-4_0-18":"2.44.0-150200.107.1","libwebkit2gtk-4_0-37":"2.44.0-150200.107.1","libwebkit2gtk3-lang":"2.44.0-150200.107.1","typelib-1_0-JavaScriptCore-4_0":"2.44.0-150200.107.1","typelib-1_0-WebKit2-4_0":"2.44.0-150200.107.1","typelib-1_0-WebKit2WebExtension-4_0":"2.44.0-150200.107.1","webkit2gtk-4_0-injected-bundles":"2.44.0-150200.107.1","webkit2gtk3-devel":"2.44.0-150200.107.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","name":"webkit2gtk3","purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.44.0-150200.107.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libjavascriptcoregtk-4_0-18":"2.44.0-150200.107.1","libwebkit2gtk-4_0-37":"2.44.0-150200.107.1","libwebkit2gtk3-lang":"2.44.0-150200.107.1","typelib-1_0-JavaScriptCore-4_0":"2.44.0-150200.107.1","typelib-1_0-WebKit2-4_0":"2.44.0-150200.107.1","typelib-1_0-WebKit2WebExtension-4_0":"2.44.0-150200.107.1","webkit2gtk-4_0-injected-bundles":"2.44.0-150200.107.1","webkit2gtk3-devel":"2.44.0-150200.107.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","name":"webkit2gtk3","purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.44.0-150200.107.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libjavascriptcoregtk-4_0-18":"2.44.0-150200.107.1","libwebkit2gtk-4_0-37":"2.44.0-150200.107.1","libwebkit2gtk3-lang":"2.44.0-150200.107.1","typelib-1_0-JavaScriptCore-4_0":"2.44.0-150200.107.1","typelib-1_0-WebKit2-4_0":"2.44.0-150200.107.1","typelib-1_0-WebKit2WebExtension-4_0":"2.44.0-150200.107.1","webkit2gtk-4_0-injected-bundles":"2.44.0-150200.107.1","webkit2gtk3-devel":"2.44.0-150200.107.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","name":"webkit2gtk3","purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.44.0-150200.107.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libjavascriptcoregtk-4_0-18":"2.44.0-150200.107.1","libwebkit2gtk-4_0-37":"2.44.0-150200.107.1","libwebkit2gtk3-lang":"2.44.0-150200.107.1","typelib-1_0-JavaScriptCore-4_0":"2.44.0-150200.107.1","typelib-1_0-WebKit2-4_0":"2.44.0-150200.107.1","typelib-1_0-WebKit2WebExtension-4_0":"2.44.0-150200.107.1","webkit2gtk-4_0-injected-bundles":"2.44.0-150200.107.1","webkit2gtk3-devel":"2.44.0-150200.107.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","name":"webkit2gtk3","purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.44.0-150200.107.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libjavascriptcoregtk-4_0-18":"2.44.0-150200.107.1","libwebkit2gtk-4_0-37":"2.44.0-150200.107.1","libwebkit2gtk3-lang":"2.44.0-150200.107.1","typelib-1_0-JavaScriptCore-4_0":"2.44.0-150200.107.1","typelib-1_0-WebKit2-4_0":"2.44.0-150200.107.1","typelib-1_0-WebKit2WebExtension-4_0":"2.44.0-150200.107.1","webkit2gtk-4_0-injected-bundles":"2.44.0-150200.107.1","webkit2gtk3-devel":"2.44.0-150200.107.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","name":"webkit2gtk3","purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.44.0-150200.107.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libjavascriptcoregtk-4_0-18":"2.44.0-150200.107.1","libwebkit2gtk-4_0-37":"2.44.0-150200.107.1","libwebkit2gtk3-lang":"2.44.0-150200.107.1","typelib-1_0-JavaScriptCore-4_0":"2.44.0-150200.107.1","typelib-1_0-WebKit2-4_0":"2.44.0-150200.107.1","typelib-1_0-WebKit2WebExtension-4_0":"2.44.0-150200.107.1","webkit2gtk-4_0-injected-bundles":"2.44.0-150200.107.1","webkit2gtk3-devel":"2.44.0-150200.107.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","name":"webkit2gtk3","purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.44.0-150200.107.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libjavascriptcoregtk-4_0-18":"2.44.0-150200.107.1","libwebkit2gtk-4_0-37":"2.44.0-150200.107.1","libwebkit2gtk3-lang":"2.44.0-150200.107.1","typelib-1_0-JavaScriptCore-4_0":"2.44.0-150200.107.1","typelib-1_0-WebKit2-4_0":"2.44.0-150200.107.1","typelib-1_0-WebKit2WebExtension-4_0":"2.44.0-150200.107.1","webkit2gtk-4_0-injected-bundles":"2.44.0-150200.107.1","webkit2gtk3-devel":"2.44.0-150200.107.1"}]},"package":{"ecosystem":"SUSE:Enterprise Storage 7.1","name":"webkit2gtk3","purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%207.1"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.44.0-150200.107.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for webkit2gtk3 fixes the following issues:                                                                                            \n\n- CVE-2024-23252: Fixed denial of service via crafted web content (bsc#1222010).\n- CVE-2024-23254: Fixed possible audio data exilftration cross-origin via malicious website (bsc#1222010).\n- CVE-2024-23263: Fixed lack of Content Security Policy enforcing via malicious crafted web content (bsc#1222010).\n- CVE-2024-23280: Fixed possible user fingeprint via malicious crafted web content (bsc#1222010).\n- CVE-2024-23284: Fixed lack of Content Security Policy enforcing via malicious crafted web content (bsc#1222010).\n- CVE-2023-42950: Fixed arbitrary code execution via crafted web content (bsc#1222010).\n- CVE-2023-42956: Fixed denial of service via crafted web content (bsc#1222010).                                                                   \n- CVE-2023-42843: Fixed address bar spoofing via malicious website (bsc#1222010).\n\nOther fixes:\n\n- Update to version 2.44.0 (bsc#1222010):                                                                                                                         \n  + Make the DOM accessibility tree reachable from UI process with                                                                     \n    GTK4.                                                                        \n  + Removed the X11 and WPE renderers in favor of DMA-BUF.\n  + Improved vblank synchronization when rendering.       \n  + Removed key event reinjection in GTK4 to make keyboard                                                                             \n    shortcuts work in web sites.                                                 \n  + Fix gamepads detection by correctly handling focused window in                                                                     \n    GTK4.                                                                                                                                          \n","id":"SUSE-SU-2024:1269-1","modified":"2024-04-12T13:34:17Z","published":"2024-04-12T13:34:17Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241269-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1222010"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-42843"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-42950"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-42956"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-23252"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-23254"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-23263"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-23280"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-23284"}],"related":["CVE-2023-42843","CVE-2023-42950","CVE-2023-42956","CVE-2024-23252","CVE-2024-23254","CVE-2024-23263","CVE-2024-23280","CVE-2024-23284"],"summary":"Security update for webkit2gtk3","upstream":["CVE-2023-42843","CVE-2023-42950","CVE-2023-42956","CVE-2024-23252","CVE-2024-23254","CVE-2024-23263","CVE-2024-23280","CVE-2024-23284"]}