{"schemaVersion":3,"id":"SUSE-SU-2018:2752-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for webkit2gtk3\n\nThis update for webkit2gtk3 to version 2.20.5 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-12911: Fix off-by-one in xdg_mime_get_simple_globs (bsc#1101999).\n- CVE-2018-4261, CVE-2018-4262, CVE-2018-4263, CVE-2018-4264, CVE-2018-4265,\n  CVE-2018-4267, CVE-2018-4272, CVE-2018-4284: Processing maliciously crafted\n  web content may lead to arbitrary code execution. A memory corruption issue\n  was addressed with improved memory handling.\n- CVE-2018-4266: A malicious website may be able to cause a denial of service.\n  A race condition was addressed with additional validation.\n- CVE-2018-4270, CVE-2018-4271, CVE-2018-4273: Processing maliciously crafted\n  web content may lead to an unexpected application crash. A memory corruption\n  issue was addressed with improved input validation.\n- CVE-2018-4278: A malicious website may exfiltrate audio data cross-origin.\n  Sound fetched through audio elements may be exfiltrated cross-origin. This\n  issue was addressed with improved audio taint tracking.\n\nOther bugs fixed:\n\n- Fix rendering artifacts in some web sites due to a bug introduced in 2.20.4.\n- Fix a crash when leaving accelerated compositing mode.\n- Fix non-deterministic build failure due to missing JavaScriptCore/JSContextRef.h.","dates":{"published":"2018-09-19T10:58:11.000Z","modified":"2026-02-04T03:26:27.146Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Basesystem 15","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Basesystem 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Module for Basesystem 15","purlType":"rpm","versions":[{"text":"< 2.20.5-3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.20.5-3.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Desktop Applications 15","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Desktop Applications 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Module for Desktop Applications 15","purlType":"rpm","versions":[{"text":"< 2.20.5-3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.20.5-3.8.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182752-1/","label":"www.suse.com/support/update/announcement/2018/suse-su-20182752-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1101999","label":"bugzilla.suse.com/1101999","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1104169","label":"bugzilla.suse.com/1104169","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12911","label":"www.suse.com/security/cve/CVE-2018-12911","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4261","label":"www.suse.com/security/cve/CVE-2018-4261","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4262","label":"www.suse.com/security/cve/CVE-2018-4262","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4263","label":"www.suse.com/security/cve/CVE-2018-4263","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4264","label":"www.suse.com/security/cve/CVE-2018-4264","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4265","label":"www.suse.com/security/cve/CVE-2018-4265","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4266","label":"www.suse.com/security/cve/CVE-2018-4266","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4267","label":"www.suse.com/security/cve/CVE-2018-4267","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4270","label":"www.suse.com/security/cve/CVE-2018-4270","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4271","label":"www.suse.com/security/cve/CVE-2018-4271","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4272","label":"www.suse.com/security/cve/CVE-2018-4272","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4273","label":"www.suse.com/security/cve/CVE-2018-4273","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4278","label":"www.suse.com/security/cve/CVE-2018-4278","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4284","label":"www.suse.com/security/cve/CVE-2018-4284","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2018-12911","CVE-2018-4261","CVE-2018-4262","CVE-2018-4263","CVE-2018-4264","CVE-2018-4265","CVE-2018-4266","CVE-2018-4267","CVE-2018-4270","CVE-2018-4271","CVE-2018-4272","CVE-2018-4273","CVE-2018-4278","CVE-2018-4284"],"downstream":[],"duplicates":[],"related":["CVE-2018-12911","CVE-2018-4261","CVE-2018-4262","CVE-2018-4263","CVE-2018-4264","CVE-2018-4265","CVE-2018-4266","CVE-2018-4267","CVE-2018-4270","CVE-2018-4271","CVE-2018-4272","CVE-2018-4273","CVE-2018-4278","CVE-2018-4284"]},"timeline":[{"kind":"published","date":"2018-09-19T10:58:11.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:26:27.146Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T23:22:42.974Z","stale":false,"partial":false}}