openSUSE-SU-2021:0637-1
Security update for webkit2gtk3
Severidad por fuente
Ninguna fuente da una puntuación CVSS.
La etiqueta propia de Trivy es CRITICAL. Crítica según SUSE.
Descripción
This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.0 (bsc#1184155): * Fix the authentication request port when URL omits the port. * Fix iframe scrolling when main frame is scrolled in async * scrolling mode. * Stop using g_memdup. * Show a warning message when overriding signal handler for * threading suspension. * Fix the build on RISC-V with GCC 11. * Fix several crashes and rendering issues. * Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871 - Update in version 2.30.6 (bsc#1184262): * Update user agent quirks again for Google Docs and Google Drive. * Fix several crashes and rendering issues. * Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765 CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870. - Update _constraints for armv6/armv7 (bsc#1182719) - restore NPAPI plugin support which was removed in 2.32.0 This update was imported from the SUSE:SLE-15-SP2:Update update project.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.2 | libjavascriptcoregtk-4_0-18, libjavascriptcoregtk-4_0-18-32bit, libwebkit2gtk-4_0-37 y 9 más | 2.32.0-lp152.2.13.1 |
Mostrar las 12 entradas de 1 fuente
| Fuente | Paquete | Corregido en |
|---|---|---|
| openSUSE Leap 15.2 | libjavascriptcoregtk-4_0-18 | 2.32.0-lp152.2.13.1 |
| openSUSE Leap 15.2 | libjavascriptcoregtk-4_0-18-32bit | 2.32.0-lp152.2.13.1 |
| openSUSE Leap 15.2 | libwebkit2gtk-4_0-37 | 2.32.0-lp152.2.13.1 |
| openSUSE Leap 15.2 | libwebkit2gtk-4_0-37-32bit | 2.32.0-lp152.2.13.1 |
| openSUSE Leap 15.2 | libwebkit2gtk3-lang | 2.32.0-lp152.2.13.1 |
| openSUSE Leap 15.2 | typelib-1_0-JavaScriptCore-4_0 | 2.32.0-lp152.2.13.1 |
| openSUSE Leap 15.2 | typelib-1_0-WebKit2-4_0 | 2.32.0-lp152.2.13.1 |
| openSUSE Leap 15.2 | typelib-1_0-WebKit2WebExtension-4_0 | 2.32.0-lp152.2.13.1 |
| openSUSE Leap 15.2 | webkit-jsc-4 | 2.32.0-lp152.2.13.1 |
| openSUSE Leap 15.2 | webkit2gtk-4_0-injected-bundles | 2.32.0-lp152.2.13.1 |
| openSUSE Leap 15.2 | webkit2gtk3-devel | 2.32.0-lp152.2.13.1 |
| openSUSE Leap 15.2 | webkit2gtk3-minibrowser | 2.32.0-lp152.2.13.1 |
Referencias
- https://bugzilla.suse.com/1182719
- https://bugzilla.suse.com/1184155
- https://bugzilla.suse.com/1184262
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PLZ5MXMQE5PW2OZS4ZK2IAEG3Y3AFJVD/
- https://www.suse.com/security/cve/CVE-2020-27918/
- https://www.suse.com/security/cve/CVE-2020-29623/
- https://www.suse.com/security/cve/CVE-2021-1765/
- https://www.suse.com/security/cve/CVE-2021-1788/
Las 15 referencias
- https://www.suse.com/security/cve/CVE-2021-1789/
- https://www.suse.com/security/cve/CVE-2021-1799/
- https://www.suse.com/security/cve/CVE-2021-1801/
- https://www.suse.com/security/cve/CVE-2021-1844/
- https://www.suse.com/security/cve/CVE-2021-1870/
- https://www.suse.com/security/cve/CVE-2021-1871/
- https://www.suse.com/support/security/rating/