<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for webkit2gtk3</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2025:02033-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2025-06-20T08:04:15Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2025-06-20T08:04:15Z</InitialReleaseDate>
    <CurrentReleaseDate>2025-06-20T08:04:15Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for webkit2gtk3</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">This update for webkit2gtk3 fixes the following issues:

Update to version 2.48.2:

- CVE-2025-24223: Processing maliciously crafted web content may lead to memory corruption (bsc#1243424).
- CVE-2025-31204: Processing maliciously crafted web content may lead to memory corruption (bsc#1243286).
- CVE-2025-31205: A malicious website may exfiltrate data cross-origin (bsc#1243282).
- CVE-2025-31206: Processing maliciously crafted web content may lead to an unexpected crash (bsc#1243288).
- CVE-2025-31215: Processing maliciously crafted web content may lead to an unexpected process crash (bsc#1243289).
- CVE-2025-31257: Improper memory handling when processing certain web content may lead to an unexpected crash (bsc#1243596).
- CVE-2023-42875: Improper memory handling may lead to arbitrary code execution when processing certain web content (bsc#1241158).
- CVE-2023-42970: Improper memory management may lead to use-after-free when processing certain web content (bsc#1241160).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-2025-2033,SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-2033,SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-2033,SUSE-SLE-Product-SLES_SAP-15-SP3-2025-2033,SUSE-Storage-7.1-2025-2033</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2025/suse-su-202502033-1/</URL>
      <Description>Link for SUSE-SU-2025:02033-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-updates/2025-June/040413.html</URL>
      <Description>E-Mail link for SUSE-SU-2025:02033-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1241158</URL>
      <Description>SUSE Bug 1241158</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1241160</URL>
      <Description>SUSE Bug 1241160</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1243282</URL>
      <Description>SUSE Bug 1243282</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1243286</URL>
      <Description>SUSE Bug 1243286</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1243288</URL>
      <Description>SUSE Bug 1243288</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1243289</URL>
      <Description>SUSE Bug 1243289</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1243424</URL>
      <Description>SUSE Bug 1243424</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1243596</URL>
      <Description>SUSE Bug 1243596</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-42875/</URL>
      <Description>SUSE CVE CVE-2023-42875 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2023-42970/</URL>
      <Description>SUSE CVE CVE-2023-42970 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-24223/</URL>
      <Description>SUSE CVE CVE-2025-24223 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-31204/</URL>
      <Description>SUSE CVE CVE-2025-31204 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-31205/</URL>
      <Description>SUSE CVE CVE-2025-31205 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-31206/</URL>
      <Description>SUSE CVE CVE-2025-31206 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-31215/</URL>
      <Description>SUSE CVE CVE-2025-31215 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2025-31257/</URL>
      <Description>SUSE CVE CVE-2025-31257 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Enterprise Storage 7.1">
      <Branch Type="Product Name" Name="SUSE Enterprise Storage 7.1">
        <FullProductName ProductID="SUSE Enterprise Storage 7.1" CPE="cpe:/o:suse:ses:7.1">SUSE Enterprise Storage 7.1</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS" CPE="cpe:/o:suse:sle_hpc-ltss:15:sp3">SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 15 SP3-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS" CPE="cpe:/o:suse:sles-ltss:15:sp3">SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3" CPE="cpe:/o:suse:sles_sap:15:sp3">SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1">
      <FullProductName ProductID="libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1">libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libjavascriptcoregtk-4_0-18-32bit-2.48.2-150200.147.1">
      <FullProductName ProductID="libjavascriptcoregtk-4_0-18-32bit-2.48.2-150200.147.1">libjavascriptcoregtk-4_0-18-32bit-2.48.2-150200.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libjavascriptcoregtk-4_0-18-64bit-2.48.2-150200.147.1">
      <FullProductName ProductID="libjavascriptcoregtk-4_0-18-64bit-2.48.2-150200.147.1">libjavascriptcoregtk-4_0-18-64bit-2.48.2-150200.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwebkit2gtk-4_0-37-2.48.2-150200.147.1">
      <FullProductName ProductID="libwebkit2gtk-4_0-37-2.48.2-150200.147.1">libwebkit2gtk-4_0-37-2.48.2-150200.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwebkit2gtk-4_0-37-32bit-2.48.2-150200.147.1">
      <FullProductName ProductID="libwebkit2gtk-4_0-37-32bit-2.48.2-150200.147.1">libwebkit2gtk-4_0-37-32bit-2.48.2-150200.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwebkit2gtk-4_0-37-64bit-2.48.2-150200.147.1">
      <FullProductName ProductID="libwebkit2gtk-4_0-37-64bit-2.48.2-150200.147.1">libwebkit2gtk-4_0-37-64bit-2.48.2-150200.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="libwebkit2gtk3-lang-2.48.2-150200.147.1">
      <FullProductName ProductID="libwebkit2gtk3-lang-2.48.2-150200.147.1">libwebkit2gtk3-lang-2.48.2-150200.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1">
      <FullProductName ProductID="typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1">typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1">
      <FullProductName ProductID="typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1">typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1">
      <FullProductName ProductID="typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1">typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="webkit-jsc-4-2.48.2-150200.147.1">
      <FullProductName ProductID="webkit-jsc-4-2.48.2-150200.147.1">webkit-jsc-4-2.48.2-150200.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1">
      <FullProductName ProductID="webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1">webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="webkit2gtk3-devel-2.48.2-150200.147.1">
      <FullProductName ProductID="webkit2gtk3-devel-2.48.2-150200.147.1">webkit2gtk3-devel-2.48.2-150200.147.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="webkit2gtk3-minibrowser-2.48.2-150200.147.1">
      <FullProductName ProductID="webkit2gtk3-minibrowser-2.48.2-150200.147.1">webkit2gtk3-minibrowser-2.48.2-150200.147.1</FullProductName>
    </Branch>
    <Relationship ProductReference="libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1">libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk-4_0-37-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:libwebkit2gtk-4_0-37-2.48.2-150200.147.1">libwebkit2gtk-4_0-37-2.48.2-150200.147.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk3-lang-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:libwebkit2gtk3-lang-2.48.2-150200.147.1">libwebkit2gtk3-lang-2.48.2-150200.147.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1">typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1">typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1">typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1">webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk3-devel-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Enterprise Storage 7.1">
      <FullProductName ProductID="SUSE Enterprise Storage 7.1:webkit2gtk3-devel-2.48.2-150200.147.1">webkit2gtk3-devel-2.48.2-150200.147.1 as a component of SUSE Enterprise Storage 7.1</FullProductName>
    </Relationship>
    <Relationship ProductReference="libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1">libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk-4_0-37-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1">libwebkit2gtk-4_0-37-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk3-lang-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1">libwebkit2gtk3-lang-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1">typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1">typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1">typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1">webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk3-devel-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1">webkit2gtk3-devel-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1">libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk-4_0-37-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1">libwebkit2gtk-4_0-37-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk3-lang-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1">libwebkit2gtk3-lang-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1">typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1">typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1">typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1">webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk3-devel-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 15 SP3-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1">webkit2gtk3-devel-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1">libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk-4_0-37-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk-4_0-37-2.48.2-150200.147.1">libwebkit2gtk-4_0-37-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="libwebkit2gtk3-lang-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk3-lang-2.48.2-150200.147.1">libwebkit2gtk3-lang-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1">typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1">typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1">typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1">webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
    <Relationship ProductReference="webkit2gtk3-devel-2.48.2-150200.147.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 15 SP3">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk3-devel-2.48.2-150200.147.1">webkit2gtk3-devel-2.48.2-150200.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. The issue was addressed with improved memory handling.</Note>
    </Notes>
    <CVE>CVE-2023-42875</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7.1:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2025/suse-su-202502033-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-42875.html</URL>
        <Description>CVE-2023-42875</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1241158</URL>
        <Description>SUSE Bug 1241158</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. Processing web content may lead to arbitrary code execution.</Note>
    </Notes>
    <CVE>CVE-2023-42970</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7.1:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>8.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2025/suse-su-202502033-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2023-42970.html</URL>
        <Description>CVE-2023-42970</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1241160</URL>
        <Description>SUSE Bug 1241160</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to memory corruption.</Note>
    </Notes>
    <CVE>CVE-2025-24223</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7.1:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2025/suse-su-202502033-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-24223.html</URL>
        <Description>CVE-2025-24223</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1243424</URL>
        <Description>SUSE Bug 1243424</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to memory corruption.</Note>
    </Notes>
    <CVE>CVE-2025-31204</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7.1:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>8.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2025/suse-su-202502033-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-31204.html</URL>
        <Description>CVE-2025-31204</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1243286</URL>
        <Description>SUSE Bug 1243286</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. A malicious website may exfiltrate data cross-origin.</Note>
    </Notes>
    <CVE>CVE-2025-31205</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7.1:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2025/suse-su-202502033-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-31205.html</URL>
        <Description>CVE-2025-31205</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1243282</URL>
        <Description>SUSE Bug 1243282</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A type confusion issue was addressed with improved state handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.</Note>
    </Notes>
    <CVE>CVE-2025-31206</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7.1:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2025/suse-su-202502033-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-31206.html</URL>
        <Description>CVE-2025-31206</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1243288</URL>
        <Description>SUSE Bug 1243288</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The issue was addressed with improved checks. This issue is fixed in watchOS 11.5, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to an unexpected process crash.</Note>
    </Notes>
    <CVE>CVE-2025-31215</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7.1:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2025/suse-su-202502033-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-31215.html</URL>
        <Description>CVE-2025-31215</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1243289</URL>
        <Description>SUSE Bug 1243289</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">This issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.</Note>
    </Notes>
    <CVE>CVE-2025-31257</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Enterprise Storage 7.1:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Enterprise Storage 7.1:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 15 SP3-LTSS:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libjavascriptcoregtk-4_0-18-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk-4_0-37-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:libwebkit2gtk3-lang-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-JavaScriptCore-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:typelib-1_0-WebKit2WebExtension-4_0-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk-4_0-injected-bundles-2.48.2-150200.147.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 15 SP3:webkit2gtk3-devel-2.48.2-150200.147.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>4.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2025/suse-su-202502033-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2025-31257.html</URL>
        <Description>CVE-2025-31257</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1243596</URL>
        <Description>SUSE Bug 1243596</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
