Lucene search

K
suseSuseOPENSUSE-SU-2022:0182-2
HistoryFeb 17, 2022 - 12:00 a.m.

Security update for webkit2gtk3 (important)

2022-02-1700:00:00
lists.opensuse.org
24

0.593 Medium

EPSS

Percentile

97.8%

An update that fixes 43 vulnerabilities is now available.

Description:

This update for webkit2gtk3 fixes the following issues:

  • Update to version 2.34.3 (bsc#1194019).
  • CVE-2021-30887: Fixed logic issue allowing unexpectedly unenforced
    Content Security Policy when processing maliciously crafted web content.
  • CVE-2021-30890: Fixed logic issue allowing universal cross site
    scripting when processing maliciously crafted web content.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.4:

    zypper in -t patch openSUSE-SLE-15.4-2022-182=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.4noarch< - openSUSE Leap 15.4 (noarch):- openSUSE Leap 15.4 (noarch):.noarch.rpm