gpp_maybe Security update for webkit2gtk3

SUSE-SLE-Module-Development-Tools-15-SP5-2024-4

This update for webkit2gtk3 fixes the following issues: - CVE-2023-42890: Fixed processing malicious web content may lead to arbitrary code execution (bsc#1218033). - CVE-2023-42883: Fixed processing a malicious image may lead to a denial-of-service (bsc#1218032). - CVE-2023-41074: Fixed use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (bsc#1215870). - CVE-2023-40451, CVE-2023-41074: Update to version 2.42.4 (bsc#1218032, bsc#1215868).

• Release Date
  Jan 2 2024
• References
  Bugzilla: 1215869, 1218033, 1218032, 1215870, 1215868
  CVEs: CVE-2023-39928, CVE-2023-32359, CVE-2023-41074, CVE-2023-42890, CVE-2023-42883, CVE-2023-40451
• Type
  security
• Severity
  important

cloud_download Downloads

Development Tools Module 15.5 x86_64

• Packages
  WebKitGTK-6.0-lang
  Translations for package webkit2gtk4

  2.42.4-150400.4.70.3 lock rpm

  libjavascriptcoregtk-6_0-1
  JavaScript Core Engine, GTK+ Port

  2.42.4-150400.4.70.3 lock rpm

  libwebkitgtk-6_0-4
  Library for rendering web content, GTK+ Port

  2.42.4-150400.4.70.3 lock rpm

  webkit2gtk4
  Library for rendering web content, GTK+ Port

  2.42.4-150400.4.70.3 lock src

  webkitgtk-6_0-injected-bundles
  Injected bundles for webkit2gtk4

  2.42.4-150400.4.70.3 lock rpm

Development Tools Module 15.5 ppc64le

• Packages
  WebKitGTK-6.0-lang
  Translations for package webkit2gtk4

  2.42.4-150400.4.70.3 lock rpm

  libjavascriptcoregtk-6_0-1
  JavaScript Core Engine, GTK+ Port

  2.42.4-150400.4.70.3 lock rpm

  libwebkitgtk-6_0-4
  Library for rendering web content, GTK+ Port

  2.42.4-150400.4.70.3 lock rpm

  webkit2gtk4
  Library for rendering web content, GTK+ Port

  2.42.4-150400.4.70.3 lock src

  webkitgtk-6_0-injected-bundles
  Injected bundles for webkit2gtk4

  2.42.4-150400.4.70.3 lock rpm

Development Tools Module 15.5 s390x

• Packages
  WebKitGTK-6.0-lang
  Translations for package webkit2gtk4

  2.42.4-150400.4.70.3 lock rpm

  libjavascriptcoregtk-6_0-1
  JavaScript Core Engine, GTK+ Port

  2.42.4-150400.4.70.3 lock rpm

  libwebkitgtk-6_0-4
  Library for rendering web content, GTK+ Port

  2.42.4-150400.4.70.3 lock rpm

  webkit2gtk4
  Library for rendering web content, GTK+ Port

  2.42.4-150400.4.70.3 lock src

  webkitgtk-6_0-injected-bundles
  Injected bundles for webkit2gtk4

  2.42.4-150400.4.70.3 lock rpm

Development Tools Module 15.5 aarch64

• Packages
  WebKitGTK-6.0-lang
  Translations for package webkit2gtk4

  2.42.4-150400.4.70.3 lock rpm

  libjavascriptcoregtk-6_0-1
  JavaScript Core Engine, GTK+ Port

  2.42.4-150400.4.70.3 lock rpm

  libwebkitgtk-6_0-4
  Library for rendering web content, GTK+ Port

  2.42.4-150400.4.70.3 lock rpm

  webkit2gtk4
  Library for rendering web content, GTK+ Port

  2.42.4-150400.4.70.3 lock src

  webkitgtk-6_0-injected-bundles
  Injected bundles for webkit2gtk4

  2.42.4-150400.4.70.3 lock rpm