SUSE-SU-2024:2949-1
SUSE-SU-2024:2949-1 · Security update for webkit2gtk3
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for webkit2gtk3 fixes the following issues: - CVE-2024-40776: Fixed a use-after-free issue with improved memory management (bsc#1228613). - CVE-2024-40779: Fixed a out-of-bounds read with improved bounds checking (bsc#1228693). - CVE-2024-40780: Fixed another out-of-bounds read with improved bounds checking (bsc#1228694). - CVE-2024-40782: Fixed a second use-after-free issue with improved memory management (bsc#1228695).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
webkit2gtk3 SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 2.44.2-150200.115.1
Update to 2.44.2-150200.115.1
webkit2gtk3 SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
- Affected ranges
- ECOSYSTEM: < 2.44.2-150200.115.1
Update to 2.44.2-150200.115.1
webkit2gtk3 SUSE:Linux Enterprise Server 15 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 2.44.2-150200.115.1
Update to 2.44.2-150200.115.1
webkit2gtk3 SUSE:Linux Enterprise Server 15 SP3-LTSS
- Affected ranges
- ECOSYSTEM: < 2.44.2-150200.115.1
Update to 2.44.2-150200.115.1
webkit2gtk3 SUSE:Linux Enterprise Server for SAP Applications 15 SP2
- Affected ranges
- ECOSYSTEM: < 2.44.2-150200.115.1
Update to 2.44.2-150200.115.1
webkit2gtk3 SUSE:Linux Enterprise Server for SAP Applications 15 SP3
- Affected ranges
- ECOSYSTEM: < 2.44.2-150200.115.1
Update to 2.44.2-150200.115.1
webkit2gtk3 SUSE:Enterprise Storage 7.1
- Affected ranges
- ECOSYSTEM: < 2.44.2-150200.115.1
Update to 2.44.2-150200.115.1
Original sources
- https://www.suse.com/support/update/announcement/2024/suse-su-20242949-1/
- https://bugzilla.suse.com/1228613
- https://bugzilla.suse.com/1228693
- https://bugzilla.suse.com/1228694
- https://bugzilla.suse.com/1228695
- https://www.suse.com/security/cve/CVE-2024-40776
- https://www.suse.com/security/cve/CVE-2024-40779
- https://www.suse.com/security/cve/CVE-2024-40780
- https://www.suse.com/security/cve/CVE-2024-40782
- https://osv.dev/vulnerability/SUSE-SU-2024:2949-1