| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for webkit2gtk3 (Moderate) |
| Description: |
This update for webkit2gtk3 to version 2.20.5 fixes the following issues:
Security issue fixed:
- CVE-2018-12911: Fix off-by-one in xdg_mime_get_simple_globs (bsc#1101999). - CVE-2018-4261, CVE-2018-4262, CVE-2018-4263, CVE-2018-4264, CVE-2018-4265, CVE-2018-4267, CVE-2018-4272, CVE-2018-4284: Processing maliciously crafted web content may lead to arbitrary code execution. A memory corruption issue was addressed with improved memory handling. - CVE-2018-4266: A malicious website may be able to cause a denial of service. A race condition was addressed with additional validation. - CVE-2018-4270, CVE-2018-4271, CVE-2018-4273: Processing maliciously crafted web content may lead to an unexpected application crash. A memory corruption issue was addressed with improved input validation. - CVE-2018-4278: A malicious website may exfiltrate audio data cross-origin. Sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking.
Other bugs fixed:
- Fix rendering artifacts in some web sites due to a bug introduced in 2.20.4. - Fix a crash when leaving accelerated compositing mode. - Fix non-deterministic build failure due to missing JavaScriptCore/JSContextRef.h.
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1013721
1013732
1058115
1065600
1065729
1071995
1074701
1083548
1085030
1085235
1085308
1087078
1087082
1094912
1100394
1101999
1102640
1103098
1104169
1105412
1111666
1112178
1113956
1115015
1115022
1115025
1118599
1118832
1119396
1120163
1125230
1126711
1126713
1126821
1126823
1126827
1127122
1128722
1128883
1128886
1128887
1128889
1128892
1129032
1132837
1132838
1133021
1134322
1136666
1144333
1145579
1145580
1145582
1149121
1149792
1149955
1150003
1150250
1151490
1152148
1153165
1153238
1154217
1159913
1163524
1165629
1165631
1166965
1169790
1170232
1171558
1171688
1171988
1172073
1172108
1172247
1172418
1172428
1172781
1172782
1172783
1172871
1172872
1172873
1172963
1173060
1173485
1173798
1173902
1173954
1173994
1173998
1174003
1174026
1174070
1174161
1174205
1174247
1174298
1174299
1174387
1174484
1174547
1174549
1174550
1174625
1174658
1174685
1174689
1174699
1174734
1174757
1174771
1174840
1174841
1174843
1174844
1174845
1174852
1174873
1174887
1174904
1174926
1174968
1175062
1175063
1175064
1175065
1175066
1175067
1175112
1175127
1175128
1175149
1175199
1175213
1175228
1175232
1175284
1175393
1175394
1175396
1175397
1175398
1175399
1175400
1175401
1175402
1175403
1175404
1175405
1175406
1175407
1175408
1175409
1175410
1175411
1175412
1175413
1175414
1175415
1175416
1175417
1175418
1175419
1175420
1175421
1175422
1175423
1175440
1175493
1175515
1175518
1175526
1175550
1175654
1175666
1175667
1175668
1175669
1175670
1175691
1175767
1175768
1175769
1175770
1175771
1175772
1175786
1175873
1175992
1176069
1177613
CVE-2016-9800
CVE-2016-9801
CVE-2018-12911
CVE-2018-15587
CVE-2018-16843
CVE-2018-16844
CVE-2018-16845
CVE-2018-19869
CVE-2018-19935
CVE-2018-20783
CVE-2018-4261
CVE-2018-4262
CVE-2018-4263
CVE-2018-4264
CVE-2018-4265
CVE-2018-4266
CVE-2018-4267
CVE-2018-4270
CVE-2018-4271
CVE-2018-4272
CVE-2018-4273
CVE-2018-4278
CVE-2018-4284
CVE-2018-5391
CVE-2019-11034
CVE-2019-11035
CVE-2019-11036
CVE-2019-14853
CVE-2019-14859
CVE-2019-1547
CVE-2019-1563
CVE-2019-16056
CVE-2019-16935
CVE-2019-5108
CVE-2019-9020
CVE-2019-9021
CVE-2019-9022
CVE-2019-9023
CVE-2019-9024
CVE-2019-9511
CVE-2019-9513
CVE-2019-9516
CVE-2019-9637
CVE-2019-9638
CVE-2019-9639
CVE-2019-9640
CVE-2019-9641
CVE-2019-9675
CVE-2020-10135
CVE-2020-13753
CVE-2020-14314
CVE-2020-14314
CVE-2020-14318
CVE-2020-14323
CVE-2020-14331
CVE-2020-14331
CVE-2020-14356
CVE-2020-14356
CVE-2020-14383
CVE-2020-14386
CVE-2020-16166
CVE-2020-16166
CVE-2020-1749
CVE-2020-24394
CVE-2020-24394
CVE-2020-9802
CVE-2020-9803
CVE-2020-9805
CVE-2020-9806
CVE-2020-9807
CVE-2020-9843
CVE-2020-9850
SUSE-SU-2018:2752-1
SUSE-SU-2018:4189-1
SUSE-SU-2019:0706-1
SUSE-SU-2019:1266-2
SUSE-SU-2019:1461-1
SUSE-SU-2019:2309-1
SUSE-SU-2019:2410-1
SUSE-SU-2019:2802-1
SUSE-SU-2019:2891-1
SUSE-SU-2020:2541-1
SUSE-SU-2020:2579-1
|
| Platform(s): | SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for Basesystem 15
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Module for Public Cloud 15
SUSE Linux Enterprise Module for Public Cloud 15 SP1
SUSE Linux Enterprise Module for Python2 packages 15 SP1
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Module for Web Scripting 15 SP1
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE Linux Enterprise Workstation Extension 15 SP2
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 6-LTSS
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information
MozillaFirefox-10.0.11-0.3 is installed
OR MozillaFirefox-translations-10.0.11-0.3 is installed
OR libfreebl3-3.14-0.3 is installed
OR libfreebl3-32bit-3.14-0.3 is installed
OR mozilla-nss-3.14-0.3 is installed
OR mozilla-nss-32bit-3.14-0.3 is installed
OR mozilla-nss-tools-3.14-0.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP3 is installed
AND Package Information
MozillaFirefox-17.0.9esr-0.7 is installed
OR MozillaFirefox-translations-17.0.9esr-0.7 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND Package Information
coreutils-8.22-5 is installed
OR coreutils-lang-8.22-5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND Package Information
DirectFB-1.7.1-4 is installed
OR lib++dfb-1_7-1-1.7.1-4 is installed
OR libdirectfb-1_7-1-1.7.1-4 is installed
OR libdirectfb-1_7-1-32bit-1.7.1-4 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND cvs-1.12.12-181 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND Package Information
freerdp-2.0.0~git.1463131968.4e66df7-11 is installed
OR libfreerdp2-2.0.0~git.1463131968.4e66df7-11 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
cups-filters-1.0.58-19.2 is installed
OR cups-filters-cups-browsed-1.0.58-19.2 is installed
OR cups-filters-foomatic-rip-1.0.58-19.2 is installed
OR cups-filters-ghostscript-1.0.58-19.2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Basesystem 15 is installed
AND Package Information
libjavascriptcoregtk-4_0-18-2.20.5-3.8 is installed
OR libwebkit2gtk-4_0-37-2.20.5-3.8 is installed
OR libwebkit2gtk3-lang-2.20.5-3.8 is installed
OR webkit2gtk-4_0-injected-bundles-2.20.5-3.8 is installed
OR webkit2gtk3-2.20.5-3.8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 is installed
AND Package Information
kernel-livepatch-4_12_14-25_6-default-6-2 is installed
OR kernel-livepatch-SLE15_Update_2-6-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
AND Package Information
kernel-livepatch-4_12_14-197_26-default-3-2 is installed
OR kernel-livepatch-SLE15-SP1_Update_7-3-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
AND Package Information
php7-7.2.5-4.32 is installed
OR php7-embed-7.2.5-4.32 is installed
OR php7-readline-7.2.5-4.32 is installed
OR php7-sodium-7.2.5-4.32 is installed
OR php7-tidy-7.2.5-4.32 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
AND Package Information
evolution-3.26.6-4.3 is installed
OR glade-catalog-evolution-3.26.6-4.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed
AND Package Information
libjavascriptcoregtk-4_0-18-32bit-2.28.3-3.3 is installed
OR libwebkit2gtk-4_0-37-32bit-2.28.3-3.3 is installed
OR webkit-jsc-4-2.28.3-3.3 is installed
OR webkit2gtk3-2.28.3-3.3 is installed
OR webkit2gtk3-minibrowser-2.28.3-3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Public Cloud 15 is installed
AND Package Information
python-ecdsa-0.13.3-3.3 is installed
OR python3-ecdsa-0.13.3-3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed
AND Package Information
kernel-azure-4.12.14-8.41 is installed
OR kernel-azure-base-4.12.14-8.41 is installed
OR kernel-azure-devel-4.12.14-8.41 is installed
OR kernel-devel-azure-4.12.14-8.41 is installed
OR kernel-source-azure-4.12.14-8.41 is installed
OR kernel-syms-azure-4.12.14-8.41 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed
AND Package Information
python-requests-2.20.1-6.3 is installed
OR python2-requests-2.20.1-6.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 is installed
AND Package Information
libxmltooling-devel-1.6.4-3.3 is installed
OR libxmltooling7-1.6.4-3.3 is installed
OR xmltooling-1.6.4-3.3 is installed
OR xmltooling-schemas-1.6.4-3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
AND Package Information
qemu-3.1.1.1-9.21 is installed
OR qemu-arm-3.1.1.1-9.21 is installed
OR qemu-audio-alsa-3.1.1.1-9.21 is installed
OR qemu-audio-oss-3.1.1.1-9.21 is installed
OR qemu-audio-pa-3.1.1.1-9.21 is installed
OR qemu-block-curl-3.1.1.1-9.21 is installed
OR qemu-block-iscsi-3.1.1.1-9.21 is installed
OR qemu-block-rbd-3.1.1.1-9.21 is installed
OR qemu-block-ssh-3.1.1.1-9.21 is installed
OR qemu-guest-agent-3.1.1.1-9.21 is installed
OR qemu-ipxe-1.0.0+-9.21 is installed
OR qemu-kvm-3.1.1.1-9.21 is installed
OR qemu-lang-3.1.1.1-9.21 is installed
OR qemu-ppc-3.1.1.1-9.21 is installed
OR qemu-s390-3.1.1.1-9.21 is installed
OR qemu-seabios-1.12.0-9.21 is installed
OR qemu-sgabios-8-9.21 is installed
OR qemu-ui-curses-3.1.1.1-9.21 is installed
OR qemu-ui-gtk-3.1.1.1-9.21 is installed
OR qemu-vgabios-1.12.0-9.21 is installed
OR qemu-x86-3.1.1.1-9.21 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 15 is installed
AND Package Information
nodejs8-8.11.4-3.8 is installed
OR nodejs8-devel-8.11.4-3.8 is installed
OR nodejs8-docs-8.11.4-3.8 is installed
OR npm8-8.11.4-3.8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed
AND Package Information
tomcat-9.0.21-4.5 is installed
OR tomcat-admin-webapps-9.0.21-4.5 is installed
OR tomcat-el-3_0-api-9.0.21-4.5 is installed
OR tomcat-jsp-2_3-api-9.0.21-4.5 is installed
OR tomcat-lib-9.0.21-4.5 is installed
OR tomcat-servlet-4_0-api-9.0.21-4.5 is installed
OR tomcat-webapps-9.0.21-4.5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND Package Information
ecryptfs-utils-103-5 is installed
OR ecryptfs-utils-32bit-103-5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1-LTSS is installed
AND Package Information
kgraft-patch-3_12_74-60_64_69-default-4-2 is installed
OR kgraft-patch-3_12_74-60_64_69-xen-4-2 is installed
OR kgraft-patch-SLE12-SP1_Update_24-4-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
apache-commons-beanutils-1.9.2-1 is installed
OR apache-commons-beanutils-javadoc-1.9.2-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
res-signingkeys-3.0.37-52.23 is installed
OR smt-3.0.37-52.23 is installed
OR smt-support-3.0.37-52.23 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
kernel-default-4.4.121-92.85 is installed
OR kernel-default-base-4.4.121-92.85 is installed
OR kernel-default-devel-4.4.121-92.85 is installed
OR kernel-devel-4.4.121-92.85 is installed
OR kernel-macros-4.4.121-92.85 is installed
OR kernel-source-4.4.121-92.85 is installed
OR kernel-syms-4.4.121-92.85 is installed
OR kgraft-patch-4_4_121-92_85-default-1-3.5 is installed
OR kgraft-patch-SLE12-SP2_Update_23-1-3.5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
kgraft-patch-4_4_74-92_32-default-10-2 is installed
OR kgraft-patch-SLE12-SP2_Update_11-10-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
alsa-1.0.27.2-15 is installed
OR alsa-docs-1.0.27.2-15 is installed
OR libasound2-1.0.27.2-15 is installed
OR libasound2-32bit-1.0.27.2-15 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
kgraft-patch-4_4_175-94_79-default-5-2 is installed
OR kgraft-patch-SLE12-SP3_Update_23-5-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND Package Information
libSoundTouch0-1.7.1-5.6 is installed
OR soundtouch-1.7.1-5.6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 15-LTSS is installed
AND Package Information
nodejs10-10.22.1-1.27 is installed
OR nodejs10-devel-10.22.1-1.27 is installed
OR nodejs10-docs-10.22.1-1.27 is installed
OR npm10-10.22.1-1.27 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for SAP Applications 15 is installed
AND Package Information
gstreamer-plugins-base-1.12.5-3.3 is installed
OR gstreamer-plugins-base-lang-1.12.5-3.3 is installed
OR libgstallocators-1_0-0-1.12.5-3.3 is installed
OR libgstapp-1_0-0-1.12.5-3.3 is installed
OR libgstaudio-1_0-0-1.12.5-3.3 is installed
OR libgstfft-1_0-0-1.12.5-3.3 is installed
OR libgstpbutils-1_0-0-1.12.5-3.3 is installed
OR libgstriff-1_0-0-1.12.5-3.3 is installed
OR libgstrtp-1_0-0-1.12.5-3.3 is installed
OR libgstrtsp-1_0-0-1.12.5-3.3 is installed
OR libgstsdp-1_0-0-1.12.5-3.3 is installed
OR libgsttag-1_0-0-1.12.5-3.3 is installed
OR libgstvideo-1_0-0-1.12.5-3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
AND Package Information
dia-0.97.3-4.3 is installed
OR dia-lang-0.97.3-4.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 SP2 is installed
AND Package Information
LibVNCServer-0.9.10-4.22 is installed
OR libvncclient0-0.9.10-4.22 is installed
OR libvncserver0-0.9.10-4.22 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 6 is installed
AND Package Information
xorg-x11-server-7.6_1.15.2-53.3 is installed
OR xorg-x11-server-extra-7.6_1.15.2-53.3 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 6-LTSS is installed
AND python-setuptools-18.0.1-4.8 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 7 is installed
AND Package Information
glibc-2.22-62.13 is installed
OR glibc-32bit-2.22-62.13 is installed
OR glibc-devel-2.22-62.13 is installed
OR glibc-devel-32bit-2.22-62.13 is installed
OR glibc-html-2.22-62.13 is installed
OR glibc-i18ndata-2.22-62.13 is installed
OR glibc-info-2.22-62.13 is installed
OR glibc-locale-2.22-62.13 is installed
OR glibc-locale-32bit-2.22-62.13 is installed
OR glibc-profile-2.22-62.13 is installed
OR glibc-profile-32bit-2.22-62.13 is installed
OR nscd-2.22-62.13 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 8 is installed
AND git-2.12.3-27.14 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 8 is installed
AND Package Information
dovecot22-2.2.31-19.17 is installed
OR dovecot22-backend-mysql-2.2.31-19.17 is installed
OR dovecot22-backend-pgsql-2.2.31-19.17 is installed
OR dovecot22-backend-sqlite-2.2.31-19.17 is installed
|