FlawAtlas
Search the atlas
SUSE-SU-2020:1211-1 Not scored

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Security issue fixed: - CVE-2020-3899: Fixed a memory consumption issue that could have led to remote code execution (bsc#1170643). Non-security issues fixed: - Update to version 2.28.2 (bsc#1170643): + Fix excessive CPU usage due to GdkFrameClock not being stopped. + Fix UI process crash when EGL_WL_bind_wayland_display extension is not available. + Fix position of select popup menus in X11. + Fix playing of Youtube 'live stream'/H264 URLs. + Fix a crash under X11 when cairo uses xcb. + Fix the build in MIPS64. + Fix several crashes and rendering issues.

Exploit probability Not scored
Published May 7, 2020
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 5 webkit2gtk3
SUSE:HPE Helion OpenStack 8 webkit2gtk3
SUSE:Linux Enterprise Server 12 SP2-BCL webkit2gtk3
SUSE:Linux Enterprise Server 12 SP2-LTSS webkit2gtk3
SUSE:Linux Enterprise Server 12 SP3-BCL webkit2gtk3
SUSE:Linux Enterprise Server 12 SP3-LTSS webkit2gtk3
SUSE:Linux Enterprise Server 12 SP4 webkit2gtk3
SUSE:Linux Enterprise Server 12 SP5 webkit2gtk3
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 webkit2gtk3
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 webkit2gtk3
SUSE:Linux Enterprise Server for SAP Applications 12 SP4 webkit2gtk3
SUSE:Linux Enterprise Server for SAP Applications 12 SP5 webkit2gtk3
SUSE:Linux Enterprise Software Development Kit 12 SP4 webkit2gtk3
SUSE:Linux Enterprise Software Development Kit 12 SP5 webkit2gtk3
SUSE:Linux Enterprise Workstation Extension 12 SP4 webkit2gtk3
SUSE:OpenStack Cloud 7 webkit2gtk3
SUSE:OpenStack Cloud 8 webkit2gtk3
SUSE:OpenStack Cloud Crowbar 8 webkit2gtk3

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2020:1211-1

This update for webkit2gtk3 fixes the following issues: Security issue fixed: - CVE-2020-3899: Fixed a memory consumption issue that could have led to remote code execution (bsc#1170643). Non-security issues fixed: - Update to version 2.28.2 (bsc#1170643): + Fix excessive CPU usage due to GdkFrameClock not being stopped. + Fix UI process crash when EGL_WL_bind_wayland_display extension is not available. + Fix position of select popup menus in X11. + Fix playing of Youtube 'live stream'/H264 URLs. + Fix a crash under X11 when cairo uses xcb. + Fix the build in MIPS64. + Fix several crashes and rendering issues.

View original source

05 / REFERENCES

Further evidence