gpp_maybe Security update for webkit2gtk3

SUSE-SLE-Module-Basesystem-15-SP2-2020-3867

This update for webkit2gtk3 fixes the following issues: -webkit2gtk3 was updated to version 2.30.3 (bsc#1179122 bsc#1179451): - CVE-2021-13543: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-13584: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-9948: Fixed a type confusion which could have led to arbitrary code execution. - CVE-2021-9951: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-9983: Fixed an out of bounds write which could have led to arbitrary code execution. - Have the libwebkit2gtk package require libjavascriptcoregtk of the same version (bsc#1171531). - Enable c_loop on aarch64: currently needed for compilation to succeed with JIT disabled. Also disable sampling profiler, since it conflicts with c_loop (bsc#1177087).

• Release Date
  Dec 17 2020
• References
  Bugzilla: 1171531, 1177087, 1179122, 1179451
  CVEs: CVE-2020-13584, CVE-2020-9948, CVE-2020-9951, CVE-2020-9983, CVE-2020-13543
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.2 s390x

• Packages
  libjavascriptcoregtk-4_0-18
  JavaScript Core Engine, GTK+ Port

  2.30.3-3.9.3 lock rpm

  libwebkit2gtk-4_0-37
  Library for rendering web content, GTK+ Port

  2.30.3-3.9.3 lock rpm

  libwebkit2gtk3-lang
  Translations for package webkit2gtk3

  2.30.3-3.9.3 lock rpm

  webkit2gtk-4_0-injected-bundles
  Injected bundles for webkit2gtk3

  2.30.3-3.9.3 lock rpm

  webkit2gtk3
  Library for rendering web content, GTK+ Port

  2.30.3-3.9.3 lock src

Basesystem Module 15.2 aarch64

• Packages
  libjavascriptcoregtk-4_0-18
  JavaScript Core Engine, GTK+ Port

  2.30.3-3.9.3 lock rpm

  libwebkit2gtk-4_0-37
  Library for rendering web content, GTK+ Port

  2.30.3-3.9.3 lock rpm

  libwebkit2gtk3-lang
  Translations for package webkit2gtk3

  2.30.3-3.9.3 lock rpm

  webkit2gtk-4_0-injected-bundles
  Injected bundles for webkit2gtk3

  2.30.3-3.9.3 lock rpm

  webkit2gtk3
  Library for rendering web content, GTK+ Port

  2.30.3-3.9.3 lock src

Basesystem Module 15.2 ppc64le

• Packages
  libjavascriptcoregtk-4_0-18
  JavaScript Core Engine, GTK+ Port

  2.30.3-3.9.3 lock rpm

  libwebkit2gtk-4_0-37
  Library for rendering web content, GTK+ Port

  2.30.3-3.9.3 lock rpm

  libwebkit2gtk3-lang
  Translations for package webkit2gtk3

  2.30.3-3.9.3 lock rpm

  webkit2gtk-4_0-injected-bundles
  Injected bundles for webkit2gtk3

  2.30.3-3.9.3 lock rpm

  webkit2gtk3
  Library for rendering web content, GTK+ Port

  2.30.3-3.9.3 lock src

Basesystem Module 15.2 x86_64

• Packages
  libjavascriptcoregtk-4_0-18
  JavaScript Core Engine, GTK+ Port

  2.30.3-3.9.3 lock rpm

  libwebkit2gtk-4_0-37
  Library for rendering web content, GTK+ Port

  2.30.3-3.9.3 lock rpm

  libwebkit2gtk3-lang
  Translations for package webkit2gtk3

  2.30.3-3.9.3 lock rpm

  webkit2gtk-4_0-injected-bundles
  Injected bundles for webkit2gtk3

  2.30.3-3.9.3 lock rpm

  webkit2gtk3
  Library for rendering web content, GTK+ Port

  2.30.3-3.9.3 lock src