gpp_maybe Security update for webkit2gtk3

SUSE-SLE-Module-Development-Tools-15-SP4-2023-4561

This update for webkit2gtk3 fixes the following issues: Update to version 2.42.2 (bsc#1217210): - CVE-2023-41983: Processing web content may lead to a denial-of-service. - CVE-2023-42852: Processing web content may lead to arbitrary code execution. Already previously fixed: - CVE-2022-32919: Visiting a website that frames malicious content may lead to UI spoofing (fixed already in 2.38.4). - CVE-2022-32933: A website may be able to track the websites a user visited in private browsing mode (fixed already in 2.38.0). - CVE-2022-46705: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4). - CVE-2022-46725: Visiting a malicious website may lead to address bar spoofing (fixed already in 2.38.4). - CVE-2023-32359: A user’s password may be read aloud by a text-to-speech accessibility feature (fixed already in 2.42.0).

• Release Date
  Nov 24 2023
• References
  Bugzilla: 1217210
  CVEs: CVE-2023-41983, CVE-2023-42852, CVE-2022-32919, CVE-2022-32933, CVE-2022-46705, CVE-2022-46725, CVE-2023-32359
• Type
  security
• Severity
  important

cloud_download Downloads

Development Tools Module 15.4 ppc64le

• Packages
  WebKitGTK-6.0-lang
  Translations for package webkit2gtk4

  2.42.2-150400.4.64.2 lock rpm

  libjavascriptcoregtk-6_0-1
  JavaScript Core Engine, GTK+ Port

  2.42.2-150400.4.64.2 lock rpm

  libwebkitgtk-6_0-4
  Library for rendering web content, GTK+ Port

  2.42.2-150400.4.64.2 lock rpm

  webkit2gtk4
  Library for rendering web content, GTK+ Port

  2.42.2-150400.4.64.2 lock src

  webkitgtk-6_0-injected-bundles
  Injected bundles for webkit2gtk4

  2.42.2-150400.4.64.2 lock rpm

Development Tools Module 15.4 s390x

• Packages
  WebKitGTK-6.0-lang
  Translations for package webkit2gtk4

  2.42.2-150400.4.64.2 lock rpm

  libjavascriptcoregtk-6_0-1
  JavaScript Core Engine, GTK+ Port

  2.42.2-150400.4.64.2 lock rpm

  libwebkitgtk-6_0-4
  Library for rendering web content, GTK+ Port

  2.42.2-150400.4.64.2 lock rpm

  webkit2gtk4
  Library for rendering web content, GTK+ Port

  2.42.2-150400.4.64.2 lock src

  webkitgtk-6_0-injected-bundles
  Injected bundles for webkit2gtk4

  2.42.2-150400.4.64.2 lock rpm

Development Tools Module 15.4 x86_64

• Packages
  WebKitGTK-6.0-lang
  Translations for package webkit2gtk4

  2.42.2-150400.4.64.2 lock rpm

  libjavascriptcoregtk-6_0-1
  JavaScript Core Engine, GTK+ Port

  2.42.2-150400.4.64.2 lock rpm

  libwebkitgtk-6_0-4
  Library for rendering web content, GTK+ Port

  2.42.2-150400.4.64.2 lock rpm

  webkit2gtk4
  Library for rendering web content, GTK+ Port

  2.42.2-150400.4.64.2 lock src

  webkitgtk-6_0-injected-bundles
  Injected bundles for webkit2gtk4

  2.42.2-150400.4.64.2 lock rpm

Development Tools Module 15.4 aarch64

• Packages
  WebKitGTK-6.0-lang
  Translations for package webkit2gtk4

  2.42.2-150400.4.64.2 lock rpm

  libjavascriptcoregtk-6_0-1
  JavaScript Core Engine, GTK+ Port

  2.42.2-150400.4.64.2 lock rpm

  libwebkitgtk-6_0-4
  Library for rendering web content, GTK+ Port

  2.42.2-150400.4.64.2 lock rpm

  webkit2gtk4
  Library for rendering web content, GTK+ Port

  2.42.2-150400.4.64.2 lock src

  webkitgtk-6_0-injected-bundles
  Injected bundles for webkit2gtk4

  2.42.2-150400.4.64.2 lock rpm