Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

SUSE-SU-2024:3005-1 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceSUSE-SU-2024:3005-1

SUSE-SU-2024:3005-1

CRITICAL9.6

Security update for webkit2gtk3

Published Aug 23, 2024

Modified 1 years ago

Fix available

Details

Description of the patch:

This update for webkit2gtk3 fixes the following issues:

Update to version 2.44.3 (bsc#1228696 bsc#1228697 bsc#1228698):

Fix web process cache suspend/resume when sandbox is enabled.
Fix accelerated images dissapearing after scrolling.
Fix video flickering with DMA-BUF sink.
Fix pointer lock on X11.
Fix movement delta on mouse events in GTK3.
Undeprecate console message API and make it available in 2022 API.
Fix several crashes and rendering issues.
Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780, CVE-2023-40782, CVE-2024-40785, CVE-2024-40789, CVE-2024-40794, CVE-2024-4558.

Affected Packages

libjavascriptcoregtk-4_0-18

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.44.3-4.12.1

libwebkit2gtk-4_0-37

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.44.3-4.12.1

libwebkit2gtk3-lang

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.44.3-4.12.1

typelib-1_0-JavaScriptCore-4_0

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.44.3-4.12.1

typelib-1_0-WebKit2-4_0

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.44.3-4.12.1

typelib-1_0-WebKit2WebExtension-4_0

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

2.44.3-4.12.1

webkit2gtk-4_0-injected-bundles

SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

2.44.3-4.12.1

webkit2gtk3-devel

SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

2.44.3-4.12.1

libjavascriptcoregtk-4_0-18-32bit

SUSE Linux Enterprise Workstation Extension 12 SP5

Fixed in:

2.44.3-4.12.1

References

https://bugzilla.suse.com/1228613

https://bugzilla.suse.com/1228693

https://bugzilla.suse.com/1228694

https://bugzilla.suse.com/1228695

https://bugzilla.suse.com/1228696

https://bugzilla.suse.com/1228697

https://bugzilla.suse.com/1228698

https://lists.suse.com/pipermail/sle-updates/2024-August/036666.html

https://www.suse.com/security/cve/CVE-2023-40782/

https://www.suse.com/security/cve/CVE-2024-40776/

https://www.suse.com/security/cve/CVE-2024-40779/

https://www.suse.com/security/cve/CVE-2024-40780/

https://www.suse.com/security/cve/CVE-2024-40785/

https://www.suse.com/security/cve/CVE-2024-40789/

https://www.suse.com/security/cve/CVE-2024-40794/

https://www.suse.com/security/cve/CVE-2024-4558/

https://www.suse.com/support/security/rating/

https://www.suse.com/support/update/announcement/2024/suse-su-20243005-1/

CVSS Analysis

CVSS v3.1

9.6

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Upstream

CVE-2023-40782 CVE-2024-40776 CVE-2024-40779 CVE-2024-40780 CVE-2024-40785 CVE-2024-40789 CVE-2024-40794 CVE-2024-4558

Ecosystems

SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5

Timeline

PublishedAug 23, 2024

ModifiedAug 23, 2024