gpp_maybe Security update for webkit2gtk3

SUSE-SLE-Module-Basesystem-15-SP1-2020-1109

This update for webkit2gtk3 to version 2.28.1 fixes the following issues: Security issues fixed: - CVE-2020-10018: Fixed a denial of service because the m_deferredFocusedNodeChange data structure was mishandled (bsc#1165528). - CVE-2020-11793: Fixed a potential arbitrary code execution caused by a use-after-free vulnerability (bsc#1169658). Non-security issues fixed: - Add API to enable Process Swap on (Cross-site) Navigation. - Add user messages API for the communication with the web extension. - Add support for same-site cookies. - Service workers are enabled by default. - Add support for Pointer Lock API. - Add flatpak sandbox support. - Make ondemand hardware acceleration policy never leave accelerated compositing mode. - Always use a light theme for rendering form controls. - Add about:gpu to show information about the graphics stack.

• Release Date
  Apr 24 2020
• References
  Bugzilla: 1165528, 1169658
  CVEs: CVE-2020-10018, CVE-2020-11793
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.1 aarch64

• Packages
  libjavascriptcoregtk-4_0-18
  JavaScript Core Engine, GTK+ Port

  2.28.1-3.49.2 lock rpm

  libwebkit2gtk-4_0-37
  Library for rendering web content, GTK+ Port

  2.28.1-3.49.2 lock rpm

  libwebkit2gtk3-lang
  Translations for package webkit2gtk3

  2.28.1-3.49.2 lock rpm

  webkit2gtk-4_0-injected-bundles
  Injected bundles for webkit2gtk3

  2.28.1-3.49.2 lock rpm

  webkit2gtk3
  Library for rendering web content, GTK+ Port

  2.28.1-3.49.2 lock src

Basesystem Module 15.1 x86_64

• Packages
  libjavascriptcoregtk-4_0-18
  JavaScript Core Engine, GTK+ Port

  2.28.1-3.49.2 lock rpm

  libwebkit2gtk-4_0-37
  Library for rendering web content, GTK+ Port

  2.28.1-3.49.2 lock rpm

  libwebkit2gtk3-lang
  Translations for package webkit2gtk3

  2.28.1-3.49.2 lock rpm

  webkit2gtk-4_0-injected-bundles
  Injected bundles for webkit2gtk3

  2.28.1-3.49.2 lock rpm

  webkit2gtk3
  Library for rendering web content, GTK+ Port

  2.28.1-3.49.2 lock src

Basesystem Module 15.1 ppc64le

• Packages
  libjavascriptcoregtk-4_0-18
  JavaScript Core Engine, GTK+ Port

  2.28.1-3.49.2 lock rpm

  libwebkit2gtk-4_0-37
  Library for rendering web content, GTK+ Port

  2.28.1-3.49.2 lock rpm

  libwebkit2gtk3-lang
  Translations for package webkit2gtk3

  2.28.1-3.49.2 lock rpm

  webkit2gtk-4_0-injected-bundles
  Injected bundles for webkit2gtk3

  2.28.1-3.49.2 lock rpm

  webkit2gtk3
  Library for rendering web content, GTK+ Port

  2.28.1-3.49.2 lock src

Basesystem Module 15.1 s390x

• Packages
  libjavascriptcoregtk-4_0-18
  JavaScript Core Engine, GTK+ Port

  2.28.1-3.49.2 lock rpm

  libwebkit2gtk-4_0-37
  Library for rendering web content, GTK+ Port

  2.28.1-3.49.2 lock rpm

  libwebkit2gtk3-lang
  Translations for package webkit2gtk3

  2.28.1-3.49.2 lock rpm

  webkit2gtk-4_0-injected-bundles
  Injected bundles for webkit2gtk3

  2.28.1-3.49.2 lock rpm

  webkit2gtk3
  Library for rendering web content, GTK+ Port

  2.28.1-3.49.2 lock src