FlawAtlas
Search the atlas
SUSE-SU-2020:1198-1 Not scored

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Security issue fixed: - CVE-2020-3899: Fixed a memory consumption issue that could have led to remote code execution (bsc#1170643). Non-security issues fixed: - Update to version 2.28.2 (bsc#1170643): + Fix excessive CPU usage due to GdkFrameClock not being stopped. + Fix UI process crash when EGL_WL_bind_wayland_display extension is not available. + Fix position of select popup menus in X11. + Fix playing of Youtube 'live stream'/H264 URLs. + Fix a crash under X11 when cairo uses xcb. + Fix several crashes and rendering issues.

Exploit probability Not scored
Published May 6, 2020
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise High Performance Computing 15-ESPOS webkit2gtk3
SUSE:Linux Enterprise High Performance Computing 15-LTSS webkit2gtk3
SUSE:Linux Enterprise Module for Basesystem 15 SP1 webkit2gtk3
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1 webkit2gtk3
SUSE:Linux Enterprise Server 15-LTSS webkit2gtk3
SUSE:Linux Enterprise Server for SAP Applications 15 webkit2gtk3

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2020:1198-1

This update for webkit2gtk3 fixes the following issues: Security issue fixed: - CVE-2020-3899: Fixed a memory consumption issue that could have led to remote code execution (bsc#1170643). Non-security issues fixed: - Update to version 2.28.2 (bsc#1170643): + Fix excessive CPU usage due to GdkFrameClock not being stopped. + Fix UI process crash when EGL_WL_bind_wayland_display extension is not available. + Fix position of select popup menus in X11. + Fix playing of Youtube 'live stream'/H264 URLs. + Fix a crash under X11 when cairo uses xcb. + Fix several crashes and rendering issues.

View original source

05 / REFERENCES

Further evidence