{"schemaVersion":3,"id":"SUSE-SU-2019:3044-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for webkit2gtk3\n\nThis update for webkit2gtk3 to version 2.26.2 fixes the following issues:\n\nWebkit2gtk3 was updated to version 2.26.2 (WSA-2019-0005 and WSA-2019-0006, bsc#1155321 bsc#1156318)\n\nSecurity issues addressed:\n\n- CVE-2019-8625: Fixed a logic issue where by processing maliciously crafted web content may lead to\n  universal cross site scripting.\n- CVE-2019-8674: Fixed a logic issue where by processing maliciously crafted web content may lead to\n  universal cross site scripting.\n- CVE-2019-8707: Fixed multiple  memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8719: Fixed a logic issue where by processing maliciously crafted web content may lead to\n  universal cross site scripting.\n- CVE-2019-8720: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8726: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8733: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8735: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8763: Fixed multiple  memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8768: Fixed an issue where a user may be unable to delete browsing history items.\n- CVE-2019-8769: Fixed an issue where a maliciously crafted website may reveal browsing history.\n- CVE-2019-8771: Fixed an issue where a maliciously crafted web content may violate iframe\n  sandboxing policy.\n- CVE-2019-8710: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8743: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8764: Fixed a logic issue where by processing maliciously crafted web content may lead to\n  universal cross site scripting.\n- CVE-2019-8765: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8766: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8782: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8783: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8808: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8811: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8812: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8813: Fixed a logic issue where by processing maliciously crafted web content may lead to\n  universal cross site scripting.\n- CVE-2019-8814: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8815: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8816: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8819: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8820: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8821: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8822: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.\n- CVE-2019-8823: Fixed multiple memory corruption issues where by processing maliciously crafted web\n  content may lead to arbitrary code execution.","dates":{"published":"2019-11-25T08:12:16.000Z","modified":"2025-05-02T04:09:25.671Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Basesystem 15","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Basesystem 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Module for Basesystem 15","purlType":"rpm","versions":[{"text":"< 2.26.2-3.34.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.26.2-3.34.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1","purlType":"rpm","versions":[{"text":"< 2.26.2-3.34.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.26.2-3.34.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Desktop Applications 15","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Desktop Applications 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Module for Desktop Applications 15","purlType":"rpm","versions":[{"text":"< 2.26.2-3.34.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.26.2-3.34.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP1","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SP1","purlType":"rpm","versions":[{"text":"< 2.26.2-3.34.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.26.2-3.34.3","eol":null,"hubHref":null}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193044-1/","label":"www.suse.com/support/update/announcement/2019/suse-su-20193044-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1155321","label":"bugzilla.suse.com/1155321","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1156318","label":"bugzilla.suse.com/1156318","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8551","label":"www.suse.com/security/cve/CVE-2019-8551","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8558","label":"www.suse.com/security/cve/CVE-2019-8558","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8559","label":"www.suse.com/security/cve/CVE-2019-8559","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8563","label":"www.suse.com/security/cve/CVE-2019-8563","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8625","label":"www.suse.com/security/cve/CVE-2019-8625","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8674","label":"www.suse.com/security/cve/CVE-2019-8674","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8681","label":"www.suse.com/security/cve/CVE-2019-8681","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8684","label":"www.suse.com/security/cve/CVE-2019-8684","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8686","label":"www.suse.com/security/cve/CVE-2019-8686","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8687","label":"www.suse.com/security/cve/CVE-2019-8687","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8688","label":"www.suse.com/security/cve/CVE-2019-8688","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8689","label":"www.suse.com/security/cve/CVE-2019-8689","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8690","label":"www.suse.com/security/cve/CVE-2019-8690","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8707","label":"www.suse.com/security/cve/CVE-2019-8707","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8710","label":"www.suse.com/security/cve/CVE-2019-8710","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8719","label":"www.suse.com/security/cve/CVE-2019-8719","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8720","label":"www.suse.com/security/cve/CVE-2019-8720","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8726","label":"www.suse.com/security/cve/CVE-2019-8726","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8733","label":"www.suse.com/security/cve/CVE-2019-8733","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8735","label":"www.suse.com/security/cve/CVE-2019-8735","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8743","label":"www.suse.com/security/cve/CVE-2019-8743","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8763","label":"www.suse.com/security/cve/CVE-2019-8763","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8764","label":"www.suse.com/security/cve/CVE-2019-8764","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8765","label":"www.suse.com/security/cve/CVE-2019-8765","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8766","label":"www.suse.com/security/cve/CVE-2019-8766","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8768","label":"www.suse.com/security/cve/CVE-2019-8768","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8769","label":"www.suse.com/security/cve/CVE-2019-8769","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8771","label":"www.suse.com/security/cve/CVE-2019-8771","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8782","label":"www.suse.com/security/cve/CVE-2019-8782","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8783","label":"www.suse.com/security/cve/CVE-2019-8783","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8808","label":"www.suse.com/security/cve/CVE-2019-8808","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8811","label":"www.suse.com/security/cve/CVE-2019-8811","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8812","label":"www.suse.com/security/cve/CVE-2019-8812","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8813","label":"www.suse.com/security/cve/CVE-2019-8813","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8814","label":"www.suse.com/security/cve/CVE-2019-8814","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8815","label":"www.suse.com/security/cve/CVE-2019-8815","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8816","label":"www.suse.com/security/cve/CVE-2019-8816","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8819","label":"www.suse.com/security/cve/CVE-2019-8819","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8820","label":"www.suse.com/security/cve/CVE-2019-8820","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8821","label":"www.suse.com/security/cve/CVE-2019-8821","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8822","label":"www.suse.com/security/cve/CVE-2019-8822","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8823","label":"www.suse.com/security/cve/CVE-2019-8823","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2019-8551","CVE-2019-8558","CVE-2019-8559","CVE-2019-8563","CVE-2019-8625","CVE-2019-8674","CVE-2019-8681","CVE-2019-8684","CVE-2019-8686","CVE-2019-8687","CVE-2019-8688","CVE-2019-8689","CVE-2019-8690","CVE-2019-8707","CVE-2019-8710","CVE-2019-8719","CVE-2019-8720","CVE-2019-8726","CVE-2019-8733","CVE-2019-8735","CVE-2019-8743","CVE-2019-8763","CVE-2019-8764","CVE-2019-8765","CVE-2019-8766","CVE-2019-8768","CVE-2019-8769","CVE-2019-8771","CVE-2019-8782","CVE-2019-8783","CVE-2019-8808","CVE-2019-8811","CVE-2019-8812","CVE-2019-8813","CVE-2019-8814","CVE-2019-8815","CVE-2019-8816","CVE-2019-8819","CVE-2019-8820","CVE-2019-8821","CVE-2019-8822","CVE-2019-8823"],"downstream":[],"duplicates":[],"related":["CVE-2019-8551","CVE-2019-8558","CVE-2019-8559","CVE-2019-8563","CVE-2019-8625","CVE-2019-8674","CVE-2019-8681","CVE-2019-8684","CVE-2019-8686","CVE-2019-8687","CVE-2019-8688","CVE-2019-8689","CVE-2019-8690","CVE-2019-8707","CVE-2019-8710","CVE-2019-8719","CVE-2019-8720","CVE-2019-8726","CVE-2019-8733","CVE-2019-8735","CVE-2019-8743","CVE-2019-8763","CVE-2019-8764","CVE-2019-8765","CVE-2019-8766","CVE-2019-8768","CVE-2019-8769","CVE-2019-8771","CVE-2019-8782","CVE-2019-8783","CVE-2019-8808","CVE-2019-8811","CVE-2019-8812","CVE-2019-8813","CVE-2019-8814","CVE-2019-8815","CVE-2019-8816","CVE-2019-8819","CVE-2019-8820","CVE-2019-8821","CVE-2019-8822","CVE-2019-8823"]},"timeline":[{"kind":"published","date":"2019-11-25T08:12:16.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-05-02T04:09:25.671Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T23:37:15.877Z","stale":false,"partial":false}}