PT-2024-41394 · Suse · Webkit2Gtk3

Published 2024-11-27 · Updated 2024-12-06 · CVE-2024-46185

OSV

This update for webkit2gtk3 fixes the following issues:

Update to version 2.46.3 (bsc#1232747):

• CVE-2024-44244: Processing maliciously crafted web content may lead to an unexpected process crash.
• CVE-2024-44296: Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

New references to version 2.46.0 (boo#1231039):

• CVE-2024-44185: Processing maliciously crafted web content may lead to an unexpected process crash.

Related Identifiers

CVE-2024-46185

SUSE-SU-2024:4079-1

SUSE-SU-2024:4079-2

Affected Products

Webkit2Gtk3

References · 9

• https://osv.dev/vulnerability/SUSE-SU-2024:4079-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:4079-2 · Vendor Advisory
• https://suse.com/security/cve/CVE-2024-44296 · Note
• https://suse.com/support/update/announcement/2024/suse-su-20244079-2 · Note
• https://suse.com/security/cve/CVE-2024-46185 · Note
• https://suse.com/support/update/announcement/2024/suse-su-20244079-1 · Note
• https://suse.com/security/cve/CVE-2024-44244 · Note
• https://bugzilla.suse.com/1231039 · Note
• https://bugzilla.suse.com/1232747 · Note