SUSE-SU-2024:3109-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2024/suse-su-20243109-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:3109-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2024:3109-1

Related

Published

2024-09-03T15:01:57Z

Modified

2024-09-03T15:01:57Z

Summary

Security update for webkit2gtk3

Details

This update for webkit2gtk3 fixes the following issues:

Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698):

Fix web process cache suspend/resume when sandbox is enabled.
Fix accelerated images dissapearing after scrolling.
Fix video flickering with DMA-BUF sink.
Fix pointer lock on X11.
Fix movement delta on mouse events in GTK3.
Undeprecate console message API and make it available in 2022 API.
Fix several crashes and rendering issues.
Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780, CVE-2024-40782, CVE-2024-40785, CVE-2024-40789, CVE-2024-40794, CVE-2024-4558.

References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP6 / webkit2gtk3-soup2

Package

Name: webkit2gtk3-soup2
Purl: purl:rpm/suse/webkit2gtk3-soup2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.44.3-150600.12.9.1

Ecosystem specific

{
    "binaries": [
        {
            "typelib-1_0-JavaScriptCore-4_0": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-4_0-18": "2.44.3-150600.12.9.1",
            "webkit2gtk3-soup2-devel": "2.44.3-150600.12.9.1",
            "WebKitGTK-6.0-lang": "2.44.3-150600.12.9.1",
            "libwebkitgtk-6_0-4": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-6_0-1": "2.44.3-150600.12.9.1",
            "libwebkit2gtk-4_0-37": "2.44.3-150600.12.9.1",
            "webkit2gtk-4_0-injected-bundles": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2WebExtension-4_0": "2.44.3-150600.12.9.1",
            "WebKitGTK-4.0-lang": "2.44.3-150600.12.9.1",
            "webkitgtk-6_0-injected-bundles": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2-4_0": "2.44.3-150600.12.9.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Basesystem 15 SP6 / webkit2gtk4

Package

Name: webkit2gtk4
Purl: purl:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.44.3-150600.12.9.1

Ecosystem specific

{
    "binaries": [
        {
            "typelib-1_0-JavaScriptCore-4_0": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-4_0-18": "2.44.3-150600.12.9.1",
            "webkit2gtk3-soup2-devel": "2.44.3-150600.12.9.1",
            "WebKitGTK-6.0-lang": "2.44.3-150600.12.9.1",
            "libwebkitgtk-6_0-4": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-6_0-1": "2.44.3-150600.12.9.1",
            "libwebkit2gtk-4_0-37": "2.44.3-150600.12.9.1",
            "webkit2gtk-4_0-injected-bundles": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2WebExtension-4_0": "2.44.3-150600.12.9.1",
            "WebKitGTK-4.0-lang": "2.44.3-150600.12.9.1",
            "webkitgtk-6_0-injected-bundles": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2-4_0": "2.44.3-150600.12.9.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 / webkit2gtk3

Package

Name: webkit2gtk3
Purl: purl:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.44.3-150600.12.9.1

Ecosystem specific

{
    "binaries": [
        {
            "webkit2gtk-4_1-injected-bundles": "2.44.3-150600.12.9.1",
            "libwebkit2gtk-4_1-0": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-4_1-0": "2.44.3-150600.12.9.1",
            "WebKitGTK-4.1-lang": "2.44.3-150600.12.9.1",
            "typelib-1_0-JavaScriptCore-4_1": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2-4_1": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2WebExtension-4_1": "2.44.3-150600.12.9.1",
            "webkit2gtk3-devel": "2.44.3-150600.12.9.1"
        }
    ]
}

SUSE:Linux Enterprise Module for Development Tools 15 SP6 / webkit2gtk4

Package

Name: webkit2gtk4
Purl: purl:rpm/suse/webkit2gtk4&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.44.3-150600.12.9.1

Ecosystem specific

{
    "binaries": [
        {
            "typelib-1_0-JavaScriptCore-6_0": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit-6_0": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKitWebProcessExtension-6_0": "2.44.3-150600.12.9.1",
            "webkit2gtk4-devel": "2.44.3-150600.12.9.1"
        }
    ]
}

openSUSE:Leap 15.6 / webkit2gtk3

Package

Name: webkit2gtk3
Purl: purl:rpm/suse/webkit2gtk3&distro=openSUSE%20Leap%2015.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.44.3-150600.12.9.1

Ecosystem specific

{
    "binaries": [
        {
            "webkit2gtk3-soup2-devel": "2.44.3-150600.12.9.1",
            "webkit-jsc-6.0": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-6_0-1": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-4_0-18-32bit": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2-4_0": "2.44.3-150600.12.9.1",
            "webkit-jsc-4.1": "2.44.3-150600.12.9.1",
            "libwebkit2gtk-4_1-0-32bit": "2.44.3-150600.12.9.1",
            "typelib-1_0-JavaScriptCore-6_0": "2.44.3-150600.12.9.1",
            "webkit2gtk4-devel": "2.44.3-150600.12.9.1",
            "webkit-jsc-4": "2.44.3-150600.12.9.1",
            "webkitgtk-6_0-injected-bundles": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2-4_1": "2.44.3-150600.12.9.1",
            "webkit2gtk3-devel": "2.44.3-150600.12.9.1",
            "webkit2gtk3-soup2-minibrowser": "2.44.3-150600.12.9.1",
            "webkit2gtk3-minibrowser": "2.44.3-150600.12.9.1",
            "webkit2gtk-4_1-injected-bundles": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit-6_0": "2.44.3-150600.12.9.1",
            "WebKitGTK-6.0-lang": "2.44.3-150600.12.9.1",
            "libwebkitgtk-6_0-4": "2.44.3-150600.12.9.1",
            "libwebkit2gtk-4_0-37": "2.44.3-150600.12.9.1",
            "WebKitGTK-4.1-lang": "2.44.3-150600.12.9.1",
            "libwebkit2gtk-4_1-0": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-4_0-18": "2.44.3-150600.12.9.1",
            "typelib-1_0-JavaScriptCore-4_1": "2.44.3-150600.12.9.1",
            "WebKitGTK-4.0-lang": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKitWebProcessExtension-6_0": "2.44.3-150600.12.9.1",
            "typelib-1_0-JavaScriptCore-4_0": "2.44.3-150600.12.9.1",
            "libwebkit2gtk-4_0-37-32bit": "2.44.3-150600.12.9.1",
            "webkit2gtk-4_0-injected-bundles": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-4_1-0": "2.44.3-150600.12.9.1",
            "webkit2gtk4-minibrowser": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-4_1-0-32bit": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2WebExtension-4_0": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2WebExtension-4_1": "2.44.3-150600.12.9.1"
        }
    ]
}

openSUSE:Leap 15.6 / webkit2gtk3-soup2

Package

Name: webkit2gtk3-soup2
Purl: purl:rpm/suse/webkit2gtk3-soup2&distro=openSUSE%20Leap%2015.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.44.3-150600.12.9.1

Ecosystem specific

{
    "binaries": [
        {
            "webkit2gtk3-soup2-devel": "2.44.3-150600.12.9.1",
            "webkit-jsc-6.0": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-6_0-1": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-4_0-18-32bit": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2-4_0": "2.44.3-150600.12.9.1",
            "webkit-jsc-4.1": "2.44.3-150600.12.9.1",
            "libwebkit2gtk-4_1-0-32bit": "2.44.3-150600.12.9.1",
            "typelib-1_0-JavaScriptCore-6_0": "2.44.3-150600.12.9.1",
            "webkit2gtk4-devel": "2.44.3-150600.12.9.1",
            "webkit-jsc-4": "2.44.3-150600.12.9.1",
            "webkitgtk-6_0-injected-bundles": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2-4_1": "2.44.3-150600.12.9.1",
            "webkit2gtk3-devel": "2.44.3-150600.12.9.1",
            "webkit2gtk3-soup2-minibrowser": "2.44.3-150600.12.9.1",
            "webkit2gtk3-minibrowser": "2.44.3-150600.12.9.1",
            "webkit2gtk-4_1-injected-bundles": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit-6_0": "2.44.3-150600.12.9.1",
            "WebKitGTK-6.0-lang": "2.44.3-150600.12.9.1",
            "libwebkitgtk-6_0-4": "2.44.3-150600.12.9.1",
            "libwebkit2gtk-4_0-37": "2.44.3-150600.12.9.1",
            "WebKitGTK-4.1-lang": "2.44.3-150600.12.9.1",
            "libwebkit2gtk-4_1-0": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-4_0-18": "2.44.3-150600.12.9.1",
            "typelib-1_0-JavaScriptCore-4_1": "2.44.3-150600.12.9.1",
            "WebKitGTK-4.0-lang": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKitWebProcessExtension-6_0": "2.44.3-150600.12.9.1",
            "typelib-1_0-JavaScriptCore-4_0": "2.44.3-150600.12.9.1",
            "libwebkit2gtk-4_0-37-32bit": "2.44.3-150600.12.9.1",
            "webkit2gtk-4_0-injected-bundles": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-4_1-0": "2.44.3-150600.12.9.1",
            "webkit2gtk4-minibrowser": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-4_1-0-32bit": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2WebExtension-4_0": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2WebExtension-4_1": "2.44.3-150600.12.9.1"
        }
    ]
}

openSUSE:Leap 15.6 / webkit2gtk4

Package

Name: webkit2gtk4
Purl: purl:rpm/suse/webkit2gtk4&distro=openSUSE%20Leap%2015.6

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.44.3-150600.12.9.1

Ecosystem specific

{
    "binaries": [
        {
            "webkit2gtk3-soup2-devel": "2.44.3-150600.12.9.1",
            "webkit-jsc-6.0": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-6_0-1": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-4_0-18-32bit": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2-4_0": "2.44.3-150600.12.9.1",
            "webkit-jsc-4.1": "2.44.3-150600.12.9.1",
            "libwebkit2gtk-4_1-0-32bit": "2.44.3-150600.12.9.1",
            "typelib-1_0-JavaScriptCore-6_0": "2.44.3-150600.12.9.1",
            "webkit2gtk4-devel": "2.44.3-150600.12.9.1",
            "webkit-jsc-4": "2.44.3-150600.12.9.1",
            "webkitgtk-6_0-injected-bundles": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2-4_1": "2.44.3-150600.12.9.1",
            "webkit2gtk3-devel": "2.44.3-150600.12.9.1",
            "webkit2gtk3-soup2-minibrowser": "2.44.3-150600.12.9.1",
            "webkit2gtk3-minibrowser": "2.44.3-150600.12.9.1",
            "webkit2gtk-4_1-injected-bundles": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit-6_0": "2.44.3-150600.12.9.1",
            "WebKitGTK-6.0-lang": "2.44.3-150600.12.9.1",
            "libwebkitgtk-6_0-4": "2.44.3-150600.12.9.1",
            "libwebkit2gtk-4_0-37": "2.44.3-150600.12.9.1",
            "WebKitGTK-4.1-lang": "2.44.3-150600.12.9.1",
            "libwebkit2gtk-4_1-0": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-4_0-18": "2.44.3-150600.12.9.1",
            "typelib-1_0-JavaScriptCore-4_1": "2.44.3-150600.12.9.1",
            "WebKitGTK-4.0-lang": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKitWebProcessExtension-6_0": "2.44.3-150600.12.9.1",
            "typelib-1_0-JavaScriptCore-4_0": "2.44.3-150600.12.9.1",
            "libwebkit2gtk-4_0-37-32bit": "2.44.3-150600.12.9.1",
            "webkit2gtk-4_0-injected-bundles": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-4_1-0": "2.44.3-150600.12.9.1",
            "webkit2gtk4-minibrowser": "2.44.3-150600.12.9.1",
            "libjavascriptcoregtk-4_1-0-32bit": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2WebExtension-4_0": "2.44.3-150600.12.9.1",
            "typelib-1_0-WebKit2WebExtension-4_1": "2.44.3-150600.12.9.1"
        }
    ]
}