gpp_maybe
Security update for webkit2gtk3
SUSE-SLE-Module-Desktop-Applications-15-SP2-2020-3867
This update for webkit2gtk3 fixes the following issues: -webkit2gtk3 was updated to version 2.30.3 (bsc#1179122 bsc#1179451): - CVE-2021-13543: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-13584: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-9948: Fixed a type confusion which could have led to arbitrary code execution. - CVE-2021-9951: Fixed a use after free which could have led to arbitrary code execution. - CVE-2021-9983: Fixed an out of bounds write which could have led to arbitrary code execution. - Have the libwebkit2gtk package require libjavascriptcoregtk of the same version (bsc#1171531). - Enable c_loop on aarch64: currently needed for compilation to succeed with JIT disabled. Also disable sampling profiler, since it conflicts with c_loop (bsc#1177087).
-
Release DateDec 17 2020
-
ReferencesBugzilla: 1171531, 1177087, 1179122, 1179451
CVEs: CVE-2020-9948, CVE-2020-9951, CVE-2020-9983, CVE-2020-13543, CVE-2020-13584 -
Typesecurity
-
Severityimportant
cloud_download Downloads
Desktop Applications Module 15.2 s390x
-
Packagestypelib-1_0-JavaScriptCore-4_0
Introspection bindings for the GTK+ port of the JavaScript Core Enginetypelib-1_0-WebKit2-4_02.30.3-3.9.3 lock rpm
Introspection bindings for webkit2gtk3typelib-1_0-WebKit2WebExtension-4_02.30.3-3.9.3 lock rpm
Introspection bindings for webkit2gtk3webkit2gtk32.30.3-3.9.3 lock rpm
Library for rendering web content, GTK+ Portwebkit2gtk3-devel2.30.3-3.9.3 lock src
Development files for webkit2gtk32.30.3-3.9.3 lock rpm
Desktop Applications Module 15.2 aarch64
-
Packagestypelib-1_0-JavaScriptCore-4_0
Introspection bindings for the GTK+ port of the JavaScript Core Enginetypelib-1_0-WebKit2-4_02.30.3-3.9.3 lock rpm
Introspection bindings for webkit2gtk3typelib-1_0-WebKit2WebExtension-4_02.30.3-3.9.3 lock rpm
Introspection bindings for webkit2gtk3webkit2gtk32.30.3-3.9.3 lock rpm
Library for rendering web content, GTK+ Portwebkit2gtk3-devel2.30.3-3.9.3 lock src
Development files for webkit2gtk32.30.3-3.9.3 lock rpm
Desktop Applications Module 15.2 x86_64
-
Packagestypelib-1_0-JavaScriptCore-4_0
Introspection bindings for the GTK+ port of the JavaScript Core Enginetypelib-1_0-WebKit2-4_02.30.3-3.9.3 lock rpm
Introspection bindings for webkit2gtk3typelib-1_0-WebKit2WebExtension-4_02.30.3-3.9.3 lock rpm
Introspection bindings for webkit2gtk3webkit2gtk32.30.3-3.9.3 lock rpm
Library for rendering web content, GTK+ Portwebkit2gtk3-devel2.30.3-3.9.3 lock src
Development files for webkit2gtk32.30.3-3.9.3 lock rpm
Desktop Applications Module 15.2 ppc64le
-
Packagestypelib-1_0-JavaScriptCore-4_0
Introspection bindings for the GTK+ port of the JavaScript Core Enginetypelib-1_0-WebKit2-4_02.30.3-3.9.3 lock rpm
Introspection bindings for webkit2gtk3typelib-1_0-WebKit2WebExtension-4_02.30.3-3.9.3 lock rpm
Introspection bindings for webkit2gtk3webkit2gtk32.30.3-3.9.3 lock rpm
Library for rendering web content, GTK+ Portwebkit2gtk3-devel2.30.3-3.9.3 lock src
Development files for webkit2gtk32.30.3-3.9.3 lock rpm