SUSE-SU-2021:1990-1
Security update for webkit2gtk3
Severity by source
No source gives a CVSS score.
Trivy's own label is CRITICAL. Rated critical by SUSE.
Description
This update for webkit2gtk3 fixes the following issues: - Update to version 2.32.1: + Improve handling of Media Capture devices. + Improve WebAudio playback. + Improve video orientation handling. + Improve seeking support for MSE playback. + Improve flush support in EME decryptors. + Fix HTTP status codes for requests done through a custom URI handler. + Fix the Bubblewrap sandbox in certain 32-bit systems. + Fix inconsistencies between the WebKitWebView.is-muted property state and values returned by webkit_web_view_is_playing_audio(). + Fix the build with ENABLE_VIDEO=OFF. + Fix wrong timestamps for long-lived cookies. + Fix UI process crash when failing to load favicons. + Fix several crashes and rendering issues. - Including Security fixes for: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871, CVE-2020-27918, CVE-2020-29623, CVE-2021-1765, CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870, CVE-2020-13558, CVE-2020-13584, CVE-2020-9983, CVE-2020-13543, CVE-2020-9947, CVE-2020-9948, CVE-2020-9951.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 12.2 | libjavascriptcoregtk-4_0-18, libwebkit2gtk-4_0-37, libwebkit2gtk3-lang and 5 more | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.3 | libjavascriptcoregtk-4_0-18, libwebkit2gtk-4_0-37, libwebkit2gtk3-lang and 4 more | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.4 | libjavascriptcoregtk-4_0-18, libwebkit2gtk-4_0-37, libwebkit2gtk3-lang and 4 more | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.5 | libjavascriptcoregtk-4_0-18, libwebkit2gtk-4_0-37, libwebkit2gtk3-lang and 5 more | 2.32.1-2.63.3 |
Show all 30 entries from 4 sources
| Source | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise 12.2 | libjavascriptcoregtk-4_0-18 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.2 | libwebkit2gtk-4_0-37 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.2 | libwebkit2gtk3-lang | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.2 | typelib-1_0-JavaScriptCore-4_0 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.2 | typelib-1_0-WebKit2-4_0 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.2 | typelib-1_0-WebKit2WebExtension-4_0 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.2 | webkit2gtk-4_0-injected-bundles | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.2 | webkit2gtk3-devel | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.3 | libjavascriptcoregtk-4_0-18 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.3 | libwebkit2gtk-4_0-37 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.3 | libwebkit2gtk3-lang | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.3 | typelib-1_0-JavaScriptCore-4_0 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.3 | typelib-1_0-WebKit2-4_0 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.3 | typelib-1_0-WebKit2WebExtension-4_0 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.3 | webkit2gtk-4_0-injected-bundles | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.4 | libjavascriptcoregtk-4_0-18 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.4 | libwebkit2gtk-4_0-37 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.4 | libwebkit2gtk3-lang | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.4 | typelib-1_0-JavaScriptCore-4_0 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.4 | typelib-1_0-WebKit2-4_0 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.4 | typelib-1_0-WebKit2WebExtension-4_0 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.4 | webkit2gtk-4_0-injected-bundles | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.5 | libjavascriptcoregtk-4_0-18 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.5 | libwebkit2gtk-4_0-37 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.5 | libwebkit2gtk3-lang | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.5 | typelib-1_0-JavaScriptCore-4_0 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.5 | typelib-1_0-WebKit2-4_0 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.5 | typelib-1_0-WebKit2WebExtension-4_0 | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.5 | webkit2gtk-4_0-injected-bundles | 2.32.1-2.63.3 |
| SUSE Linux Enterprise 12.5 | webkit2gtk3-devel | 2.32.1-2.63.3 |
References
- https://bugzilla.suse.com/1177087
- https://bugzilla.suse.com/1179122
- https://bugzilla.suse.com/1179451
- https://bugzilla.suse.com/1182286
- https://bugzilla.suse.com/1184155
- https://bugzilla.suse.com/1184262
- https://lists.suse.com/pipermail/sle-security-updates/2021-June/009023.html
- https://www.suse.com/security/cve/CVE-2020-13543/
All 26 references
- https://www.suse.com/security/cve/CVE-2020-13558/
- https://www.suse.com/security/cve/CVE-2020-13584/
- https://www.suse.com/security/cve/CVE-2020-27918/
- https://www.suse.com/security/cve/CVE-2020-29623/
- https://www.suse.com/security/cve/CVE-2020-9947/
- https://www.suse.com/security/cve/CVE-2020-9948/
- https://www.suse.com/security/cve/CVE-2020-9951/
- https://www.suse.com/security/cve/CVE-2020-9983/
- https://www.suse.com/security/cve/CVE-2021-1765/
- https://www.suse.com/security/cve/CVE-2021-1788/
- https://www.suse.com/security/cve/CVE-2021-1789/
- https://www.suse.com/security/cve/CVE-2021-1799/
- https://www.suse.com/security/cve/CVE-2021-1801/
- https://www.suse.com/security/cve/CVE-2021-1844/
- https://www.suse.com/security/cve/CVE-2021-1870/
- https://www.suse.com/security/cve/CVE-2021-1871/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2021/suse-su-20211990-1/