PT-2022-37622 · Suse+24 · Webkit2Gtk3

Published 2022-01-20 · Updated 2022-01-25 · CVE-2018-8523

OSV

This update for webkit2gtk3 fixes the following issues:

• Update to version 2.34.3 (bsc#1194019).
• CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced Content Security Policy when processing maliciously crafted web content.
• CVE-2021-30890: Fixed logic issue allowing universal cross site scripting when processing maliciously crafted web content.

Related Identifiers

CVE-2018-8523

SUSE-SU-2022:0142-1

SUSE-SU-2022:0183-1

Affected Products

Webkit2Gtk3

References · 77

• https://osv.dev/vulnerability/SUSE-SU-2022:0183-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0142-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2021-1844 · Note
• https://suse.com/security/cve/CVE-2021-30836 · Note
• https://suse.com/security/cve/CVE-2021-1825 · Note
• https://suse.com/security/cve/CVE-2021-30888 · Note
• https://suse.com/security/cve/CVE-2021-30851 · Note
• https://suse.com/security/cve/CVE-2021-30897 · Note
• https://suse.com/security/cve/CVE-2020-13753 · Note
• https://suse.com/security/cve/CVE-2021-30858 · Note
• https://suse.com/security/cve/CVE-2020-9947 · Note
• https://suse.com/security/cve/CVE-2020-10018 · Note
• https://suse.com/security/cve/CVE-2018-8518 · Note
• https://suse.com/security/cve/CVE-2019-8768 · Note
• https://suse.com/security/cve/CVE-2019-8563 · Note