What Are You Looking For?

Sign Up

   SUSE Security Update: Security update for webkit2gtk3
______________________________________________________________________________

Announcement ID:    SUSE-SU-2020:1135-1
Rating:             important
References:         #1155321 #1156318 #1159329 #1161719 #1163809 
                    #1165528 #1169658 
Cross-References:   CVE-2019-8625 CVE-2019-8710 CVE-2019-8720
                    CVE-2019-8743 CVE-2019-8764 CVE-2019-8766
                    CVE-2019-8769 CVE-2019-8771 CVE-2019-8782
                    CVE-2019-8783 CVE-2019-8808 CVE-2019-8811
                    CVE-2019-8812 CVE-2019-8813 CVE-2019-8814
                    CVE-2019-8815 CVE-2019-8816 CVE-2019-8819
                    CVE-2019-8820 CVE-2019-8823 CVE-2019-8835
                    CVE-2019-8844 CVE-2019-8846 CVE-2020-10018
                    CVE-2020-11793 CVE-2020-3862 CVE-2020-3864
                    CVE-2020-3865 CVE-2020-3867 CVE-2020-3868
                   
Affected Products:
                    SUSE OpenStack Cloud Crowbar 8
                    SUSE OpenStack Cloud 8
                    SUSE OpenStack Cloud 7
                    SUSE Linux Enterprise Workstation Extension 12-SP4
                    SUSE Linux Enterprise Software Development Kit 12-SP5
                    SUSE Linux Enterprise Software Development Kit 12-SP4
                    SUSE Linux Enterprise Server for SAP 12-SP3
                    SUSE Linux Enterprise Server for SAP 12-SP2
                    SUSE Linux Enterprise Server 12-SP5
                    SUSE Linux Enterprise Server 12-SP4
                    SUSE Linux Enterprise Server 12-SP3-LTSS
                    SUSE Linux Enterprise Server 12-SP3-BCL
                    SUSE Linux Enterprise Server 12-SP2-LTSS
                    SUSE Linux Enterprise Server 12-SP2-BCL
                    SUSE Enterprise Storage 5
                    HPE Helion Openstack 8
______________________________________________________________________________

   An update that fixes 30 vulnerabilities is now available.

Description:

   This update for webkit2gtk3 to version 2.28.1 fixes the following issues:

   Security issues fixed:

   - CVE-2020-10018: Fixed a denial of service because the
     m_deferredFocusedNodeChange data structure was mishandled (bsc#1165528).
   - CVE-2020-11793: Fixed a potential arbitrary code execution caused by a
     use-after-free vulnerability (bsc#1169658).
   - CVE-2019-8835: Fixed multiple memory corruption issues (bsc#1161719).
   - CVE-2019-8844: Fixed multiple memory corruption issues (bsc#1161719).
   - CVE-2019-8846: Fixed a use-after-free issue (bsc#1161719).
   - CVE-2020-3862: Fixed a memory handling issue (bsc#1163809).
   - CVE-2020-3867: Fixed an XSS issue (bsc#1163809).
   - CVE-2020-3868: Fixed multiple memory corruption issues that could have
     lead to arbitrary code execution (bsc#1163809).
   - CVE-2020-3864,CVE-2020-3865: Fixed logic issues in the DOM object
     context handling (bsc#1163809).

   Non-security issues fixed:

   - Add API to enable Process Swap on (Cross-site) Navigation.
   - Add user messages API for the communication with the web extension.
   - Add support for same-site cookies.
   - Service workers are enabled by default.
   - Add support for Pointer Lock API.
   - Add flatpak sandbox support.
   - Make ondemand hardware acceleration policy never leave accelerated
     compositing mode.
   - Always use a light theme for rendering form controls.
   - Add about:gpu to show information about the graphics stack.
   - Fixed issues while trying to play a video on NextCloud.
   - Fixed vertical alignment of text containing arabic diacritics.
   - Fixed build with icu 65.1.
   - Fixed page loading errors with websites using HSTS.
   - Fixed web process crash when displaying a KaTeX formula.
   - Fixed several crashes and rendering issues.
   - Switched to a single web process for Evolution and geary (bsc#1159329).


Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE OpenStack Cloud Crowbar 8:

      zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2020-1135=1

   - SUSE OpenStack Cloud 8:

      zypper in -t patch SUSE-OpenStack-Cloud-8-2020-1135=1

   - SUSE OpenStack Cloud 7:

      zypper in -t patch SUSE-OpenStack-Cloud-7-2020-1135=1

   - SUSE Linux Enterprise Workstation Extension 12-SP4:

      zypper in -t patch SUSE-SLE-WE-12-SP4-2020-1135=1

   - SUSE Linux Enterprise Software Development Kit 12-SP5:

      zypper in -t patch SUSE-SLE-SDK-12-SP5-2020-1135=1

   - SUSE Linux Enterprise Software Development Kit 12-SP4:

      zypper in -t patch SUSE-SLE-SDK-12-SP4-2020-1135=1

   - SUSE Linux Enterprise Server for SAP 12-SP3:

      zypper in -t patch SUSE-SLE-SAP-12-SP3-2020-1135=1

   - SUSE Linux Enterprise Server for SAP 12-SP2:

      zypper in -t patch SUSE-SLE-SAP-12-SP2-2020-1135=1

   - SUSE Linux Enterprise Server 12-SP5:

      zypper in -t patch SUSE-SLE-SERVER-12-SP5-2020-1135=1

   - SUSE Linux Enterprise Server 12-SP4:

      zypper in -t patch SUSE-SLE-SERVER-12-SP4-2020-1135=1

   - SUSE Linux Enterprise Server 12-SP3-LTSS:

      zypper in -t patch SUSE-SLE-SERVER-12-SP3-2020-1135=1

   - SUSE Linux Enterprise Server 12-SP3-BCL:

      zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2020-1135=1

   - SUSE Linux Enterprise Server 12-SP2-LTSS:

      zypper in -t patch SUSE-SLE-SERVER-12-SP2-2020-1135=1

   - SUSE Linux Enterprise Server 12-SP2-BCL:

      zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2020-1135=1

   - SUSE Enterprise Storage 5:

      zypper in -t patch SUSE-Storage-5-2020-1135=1

   - HPE Helion Openstack 8:

      zypper in -t patch HPE-Helion-OpenStack-8-2020-1135=1



Package List:

   - SUSE OpenStack Cloud Crowbar 8 (noarch):

      libwebkit2gtk3-lang-2.28.1-2.50.3

   - SUSE OpenStack Cloud Crowbar 8 (x86_64):

      libjavascriptcoregtk-4_0-18-2.28.1-2.50.3
      libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3
      typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2-4_0-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3
      webkit2gtk3-debugsource-2.28.1-2.50.3

   - SUSE OpenStack Cloud 8 (noarch):

      libwebkit2gtk3-lang-2.28.1-2.50.3

   - SUSE OpenStack Cloud 8 (x86_64):

      libjavascriptcoregtk-4_0-18-2.28.1-2.50.3
      libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3
      typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2-4_0-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3
      webkit2gtk3-debugsource-2.28.1-2.50.3

   - SUSE OpenStack Cloud 7 (s390x x86_64):

      libjavascriptcoregtk-4_0-18-2.28.1-2.50.3
      libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3
      typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2WebExtension-4_0-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3
      webkit2gtk3-debugsource-2.28.1-2.50.3
      webkit2gtk3-devel-2.28.1-2.50.3

   - SUSE OpenStack Cloud 7 (noarch):

      libwebkit2gtk3-lang-2.28.1-2.50.3

   - SUSE Linux Enterprise Workstation Extension 12-SP4 (noarch):

      libwebkit2gtk3-lang-2.28.1-2.50.3

   - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64):

      typelib-1_0-WebKit2WebExtension-4_0-2.28.1-2.50.3
      webkit2gtk3-debugsource-2.28.1-2.50.3
      webkit2gtk3-devel-2.28.1-2.50.3

   - SUSE Linux Enterprise Software Development Kit 12-SP4 (aarch64 ppc64le s390x x86_64):

      typelib-1_0-WebKit2WebExtension-4_0-2.28.1-2.50.3
      webkit2gtk3-debugsource-2.28.1-2.50.3
      webkit2gtk3-devel-2.28.1-2.50.3

   - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64):

      libjavascriptcoregtk-4_0-18-2.28.1-2.50.3
      libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3
      typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2-4_0-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3
      webkit2gtk3-debugsource-2.28.1-2.50.3

   - SUSE Linux Enterprise Server for SAP 12-SP3 (noarch):

      libwebkit2gtk3-lang-2.28.1-2.50.3

   - SUSE Linux Enterprise Server for SAP 12-SP2 (ppc64le x86_64):

      libjavascriptcoregtk-4_0-18-2.28.1-2.50.3
      libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3
      typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2WebExtension-4_0-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3
      webkit2gtk3-debugsource-2.28.1-2.50.3
      webkit2gtk3-devel-2.28.1-2.50.3

   - SUSE Linux Enterprise Server for SAP 12-SP2 (noarch):

      libwebkit2gtk3-lang-2.28.1-2.50.3

   - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64):

      libjavascriptcoregtk-4_0-18-2.28.1-2.50.3
      libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3
      typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2WebExtension-4_0-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3
      webkit2gtk3-debugsource-2.28.1-2.50.3

   - SUSE Linux Enterprise Server 12-SP5 (noarch):

      libwebkit2gtk3-lang-2.28.1-2.50.3

   - SUSE Linux Enterprise Server 12-SP4 (aarch64 ppc64le s390x x86_64):

      libjavascriptcoregtk-4_0-18-2.28.1-2.50.3
      libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3
      typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2-4_0-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3
      webkit2gtk3-debugsource-2.28.1-2.50.3

   - SUSE Linux Enterprise Server 12-SP4 (noarch):

      libwebkit2gtk3-lang-2.28.1-2.50.3

   - SUSE Linux Enterprise Server 12-SP3-LTSS (aarch64 ppc64le s390x x86_64):

      libjavascriptcoregtk-4_0-18-2.28.1-2.50.3
      libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3
      typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2-4_0-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3
      webkit2gtk3-debugsource-2.28.1-2.50.3

   - SUSE Linux Enterprise Server 12-SP3-LTSS (noarch):

      libwebkit2gtk3-lang-2.28.1-2.50.3

   - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64):

      libjavascriptcoregtk-4_0-18-2.28.1-2.50.3
      libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3
      typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2-4_0-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3
      webkit2gtk3-debugsource-2.28.1-2.50.3

   - SUSE Linux Enterprise Server 12-SP2-LTSS (ppc64le s390x x86_64):

      libjavascriptcoregtk-4_0-18-2.28.1-2.50.3
      libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3
      typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2WebExtension-4_0-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3
      webkit2gtk3-debugsource-2.28.1-2.50.3
      webkit2gtk3-devel-2.28.1-2.50.3

   - SUSE Linux Enterprise Server 12-SP2-LTSS (noarch):

      libwebkit2gtk3-lang-2.28.1-2.50.3

   - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64):

      libjavascriptcoregtk-4_0-18-2.28.1-2.50.3
      libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3
      typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2WebExtension-4_0-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3
      webkit2gtk3-debugsource-2.28.1-2.50.3
      webkit2gtk3-devel-2.28.1-2.50.3

   - SUSE Linux Enterprise Server 12-SP2-BCL (noarch):

      libwebkit2gtk3-lang-2.28.1-2.50.3

   - SUSE Enterprise Storage 5 (aarch64 x86_64):

      libjavascriptcoregtk-4_0-18-2.28.1-2.50.3
      libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3
      typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2-4_0-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3
      webkit2gtk3-debugsource-2.28.1-2.50.3

   - SUSE Enterprise Storage 5 (noarch):

      libwebkit2gtk3-lang-2.28.1-2.50.3

   - HPE Helion Openstack 8 (noarch):

      libwebkit2gtk3-lang-2.28.1-2.50.3

   - HPE Helion Openstack 8 (x86_64):

      libjavascriptcoregtk-4_0-18-2.28.1-2.50.3
      libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-2.28.1-2.50.3
      libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3
      typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3
      typelib-1_0-WebKit2-4_0-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3
      webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3
      webkit2gtk3-debugsource-2.28.1-2.50.3


References:

   https://www.suse.com/security/cve/CVE-2019-8625.html
   https://www.suse.com/security/cve/CVE-2019-8710.html
   https://www.suse.com/security/cve/CVE-2019-8720.html
   https://www.suse.com/security/cve/CVE-2019-8743.html
   https://www.suse.com/security/cve/CVE-2019-8764.html
   https://www.suse.com/security/cve/CVE-2019-8766.html
   https://www.suse.com/security/cve/CVE-2019-8769.html
   https://www.suse.com/security/cve/CVE-2019-8771.html
   https://www.suse.com/security/cve/CVE-2019-8782.html
   https://www.suse.com/security/cve/CVE-2019-8783.html
   https://www.suse.com/security/cve/CVE-2019-8808.html
   https://www.suse.com/security/cve/CVE-2019-8811.html
   https://www.suse.com/security/cve/CVE-2019-8812.html
   https://www.suse.com/security/cve/CVE-2019-8813.html
   https://www.suse.com/security/cve/CVE-2019-8814.html
   https://www.suse.com/security/cve/CVE-2019-8815.html
   https://www.suse.com/security/cve/CVE-2019-8816.html
   https://www.suse.com/security/cve/CVE-2019-8819.html
   https://www.suse.com/security/cve/CVE-2019-8820.html
   https://www.suse.com/security/cve/CVE-2019-8823.html
   https://www.suse.com/security/cve/CVE-2019-8835.html
   https://www.suse.com/security/cve/CVE-2019-8844.html
   https://www.suse.com/security/cve/CVE-2019-8846.html
   https://www.suse.com/security/cve/CVE-2020-10018.html
   https://www.suse.com/security/cve/CVE-2020-11793.html
   https://www.suse.com/security/cve/CVE-2020-3862.html
   https://www.suse.com/security/cve/CVE-2020-3864.html
   https://www.suse.com/security/cve/CVE-2020-3865.html
   https://www.suse.com/security/cve/CVE-2020-3867.html
   https://www.suse.com/security/cve/CVE-2020-3868.html
   https://bugzilla.suse.com/1155321
   https://bugzilla.suse.com/1156318
   https://bugzilla.suse.com/1159329
   https://bugzilla.suse.com/1161719
   https://bugzilla.suse.com/1163809
   https://bugzilla.suse.com/1165528
   https://bugzilla.suse.com/1169658

_______________________________________________
sle-security-updates mailing list
sle-security-updates@lists.suse.com
https://lists.suse.com/mailman/listinfo/sle-security-updates

SUSE: 2020:1135-1 important: webkit2gtk3

April 29, 2020
An update that fixes 30 vulnerabilities is now available

Summary

This update for webkit2gtk3 to version 2.28.1 fixes the following issues: Security issues fixed: - CVE-2020-10018: Fixed a denial of service because the m_deferredFocusedNodeChange data structure was mishandled (bsc#1165528). - CVE-2020-11793: Fixed a potential arbitrary code execution caused by a use-after-free vulnerability (bsc#1169658). - CVE-2019-8835: Fixed multiple memory corruption issues (bsc#1161719). - CVE-2019-8844: Fixed multiple memory corruption issues (bsc#1161719). - CVE-2019-8846: Fixed a use-after-free issue (bsc#1161719). - CVE-2020-3862: Fixed a memory handling issue (bsc#1163809). - CVE-2020-3867: Fixed an XSS issue (bsc#1163809). - CVE-2020-3868: Fixed multiple memory corruption issues that could have lead to arbitrary code execution (bsc#1163809). - CVE-2020-3864,CVE-2020-3865: Fixed logic issues in the DOM object context handling (bsc#1163809). Non-security issues fixed: - Add API to enable Process Swap on (Cross-site) Navigation. - Add user messages API for the communication with the web extension. - Add support for same-site cookies. - Service workers are enabled by default. - Add support for Pointer Lock API. - Add flatpak sandbox support. - Make ondemand hardware acceleration policy never leave accelerated compositing mode. - Always use a light theme for rendering form controls. - Add about:gpu to show information about the graphics stack. - Fixed issues while trying to play a video on NextCloud. - Fixed vertical alignment of text containing arabic diacritics. - Fixed build with icu 65.1. - Fixed page loading errors with websites using HSTS. - Fixed web process crash when displaying a KaTeX formula. - Fixed several crashes and rendering issues. - Switched to a single web process for Evolution and geary (bsc#1159329). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2020-1135=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2020-1135=1 - SUSE OpenStack Cloud 7: zypper in -t patch SUSE-OpenStack-Cloud-7-2020-1135=1 - SUSE Linux Enterprise Workstation Extension 12-SP4: zypper in -t patch SUSE-SLE-WE-12-SP4-2020-1135=1 - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2020-1135=1 - SUSE Linux Enterprise Software Development Kit 12-SP4: zypper in -t patch SUSE-SLE-SDK-12-SP4-2020-1135=1 - SUSE Linux Enterprise Server for SAP 12-SP3: zypper in -t patch SUSE-SLE-SAP-12-SP3-2020-1135=1 - SUSE Linux Enterprise Server for SAP 12-SP2: zypper in -t patch SUSE-SLE-SAP-12-SP2-2020-1135=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2020-1135=1 - SUSE Linux Enterprise Server 12-SP4: zypper in -t patch SUSE-SLE-SERVER-12-SP4-2020-1135=1 - SUSE Linux Enterprise Server 12-SP3-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2020-1135=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2020-1135=1 - SUSE Linux Enterprise Server 12-SP2-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2020-1135=1 - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2020-1135=1 - SUSE Enterprise Storage 5: zypper in -t patch SUSE-Storage-5-2020-1135=1 - HPE Helion Openstack 8: zypper in -t patch HPE-Helion-OpenStack-8-2020-1135=1 Package List: - SUSE OpenStack Cloud Crowbar 8 (noarch): libwebkit2gtk3-lang-2.28.1-2.50.3 - SUSE OpenStack Cloud Crowbar 8 (x86_64): libjavascriptcoregtk-4_0-18-2.28.1-2.50.3 libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3 libwebkit2gtk-4_0-37-2.28.1-2.50.3 libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3 typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2-4_0-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3 webkit2gtk3-debugsource-2.28.1-2.50.3 - SUSE OpenStack Cloud 8 (noarch): libwebkit2gtk3-lang-2.28.1-2.50.3 - SUSE OpenStack Cloud 8 (x86_64): libjavascriptcoregtk-4_0-18-2.28.1-2.50.3 libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3 libwebkit2gtk-4_0-37-2.28.1-2.50.3 libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3 typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2-4_0-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3 webkit2gtk3-debugsource-2.28.1-2.50.3 - SUSE OpenStack Cloud 7 (s390x x86_64): libjavascriptcoregtk-4_0-18-2.28.1-2.50.3 libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3 libwebkit2gtk-4_0-37-2.28.1-2.50.3 libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3 typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2WebExtension-4_0-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3 webkit2gtk3-debugsource-2.28.1-2.50.3 webkit2gtk3-devel-2.28.1-2.50.3 - SUSE OpenStack Cloud 7 (noarch): libwebkit2gtk3-lang-2.28.1-2.50.3 - SUSE Linux Enterprise Workstation Extension 12-SP4 (noarch): libwebkit2gtk3-lang-2.28.1-2.50.3 - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 ppc64le s390x x86_64): typelib-1_0-WebKit2WebExtension-4_0-2.28.1-2.50.3 webkit2gtk3-debugsource-2.28.1-2.50.3 webkit2gtk3-devel-2.28.1-2.50.3 - SUSE Linux Enterprise Software Development Kit 12-SP4 (aarch64 ppc64le s390x x86_64): typelib-1_0-WebKit2WebExtension-4_0-2.28.1-2.50.3 webkit2gtk3-debugsource-2.28.1-2.50.3 webkit2gtk3-devel-2.28.1-2.50.3 - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64): libjavascriptcoregtk-4_0-18-2.28.1-2.50.3 libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3 libwebkit2gtk-4_0-37-2.28.1-2.50.3 libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3 typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2-4_0-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3 webkit2gtk3-debugsource-2.28.1-2.50.3 - SUSE Linux Enterprise Server for SAP 12-SP3 (noarch): libwebkit2gtk3-lang-2.28.1-2.50.3 - SUSE Linux Enterprise Server for SAP 12-SP2 (ppc64le x86_64): libjavascriptcoregtk-4_0-18-2.28.1-2.50.3 libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3 libwebkit2gtk-4_0-37-2.28.1-2.50.3 libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3 typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2WebExtension-4_0-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3 webkit2gtk3-debugsource-2.28.1-2.50.3 webkit2gtk3-devel-2.28.1-2.50.3 - SUSE Linux Enterprise Server for SAP 12-SP2 (noarch): libwebkit2gtk3-lang-2.28.1-2.50.3 - SUSE Linux Enterprise Server 12-SP5 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.28.1-2.50.3 libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3 libwebkit2gtk-4_0-37-2.28.1-2.50.3 libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3 typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2WebExtension-4_0-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3 webkit2gtk3-debugsource-2.28.1-2.50.3 - SUSE Linux Enterprise Server 12-SP5 (noarch): libwebkit2gtk3-lang-2.28.1-2.50.3 - SUSE Linux Enterprise Server 12-SP4 (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.28.1-2.50.3 libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3 libwebkit2gtk-4_0-37-2.28.1-2.50.3 libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3 typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2-4_0-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3 webkit2gtk3-debugsource-2.28.1-2.50.3 - SUSE Linux Enterprise Server 12-SP4 (noarch): libwebkit2gtk3-lang-2.28.1-2.50.3 - SUSE Linux Enterprise Server 12-SP3-LTSS (aarch64 ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.28.1-2.50.3 libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3 libwebkit2gtk-4_0-37-2.28.1-2.50.3 libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3 typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2-4_0-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3 webkit2gtk3-debugsource-2.28.1-2.50.3 - SUSE Linux Enterprise Server 12-SP3-LTSS (noarch): libwebkit2gtk3-lang-2.28.1-2.50.3 - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64): libjavascriptcoregtk-4_0-18-2.28.1-2.50.3 libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3 libwebkit2gtk-4_0-37-2.28.1-2.50.3 libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3 typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2-4_0-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3 webkit2gtk3-debugsource-2.28.1-2.50.3 - SUSE Linux Enterprise Server 12-SP2-LTSS (ppc64le s390x x86_64): libjavascriptcoregtk-4_0-18-2.28.1-2.50.3 libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3 libwebkit2gtk-4_0-37-2.28.1-2.50.3 libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3 typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2WebExtension-4_0-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3 webkit2gtk3-debugsource-2.28.1-2.50.3 webkit2gtk3-devel-2.28.1-2.50.3 - SUSE Linux Enterprise Server 12-SP2-LTSS (noarch): libwebkit2gtk3-lang-2.28.1-2.50.3 - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): libjavascriptcoregtk-4_0-18-2.28.1-2.50.3 libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3 libwebkit2gtk-4_0-37-2.28.1-2.50.3 libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3 typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2WebExtension-4_0-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3 webkit2gtk3-debugsource-2.28.1-2.50.3 webkit2gtk3-devel-2.28.1-2.50.3 - SUSE Linux Enterprise Server 12-SP2-BCL (noarch): libwebkit2gtk3-lang-2.28.1-2.50.3 - SUSE Enterprise Storage 5 (aarch64 x86_64): libjavascriptcoregtk-4_0-18-2.28.1-2.50.3 libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3 libwebkit2gtk-4_0-37-2.28.1-2.50.3 libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3 typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2-4_0-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3 webkit2gtk3-debugsource-2.28.1-2.50.3 - SUSE Enterprise Storage 5 (noarch): libwebkit2gtk3-lang-2.28.1-2.50.3 - HPE Helion Openstack 8 (noarch): libwebkit2gtk3-lang-2.28.1-2.50.3 - HPE Helion Openstack 8 (x86_64): libjavascriptcoregtk-4_0-18-2.28.1-2.50.3 libjavascriptcoregtk-4_0-18-debuginfo-2.28.1-2.50.3 libwebkit2gtk-4_0-37-2.28.1-2.50.3 libwebkit2gtk-4_0-37-debuginfo-2.28.1-2.50.3 typelib-1_0-JavaScriptCore-4_0-2.28.1-2.50.3 typelib-1_0-WebKit2-4_0-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-2.28.1-2.50.3 webkit2gtk-4_0-injected-bundles-debuginfo-2.28.1-2.50.3 webkit2gtk3-debugsource-2.28.1-2.50.3

References

#1155321 #1156318 #1159329 #1161719 #1163809

#1165528 #1169658

Cross- CVE-2019-8625 CVE-2019-8710 CVE-2019-8720

CVE-2019-8743 CVE-2019-8764 CVE-2019-8766

CVE-2019-8769 CVE-2019-8771 CVE-2019-8782

CVE-2019-8783 CVE-2019-8808 CVE-2019-8811

CVE-2019-8812 CVE-2019-8813 CVE-2019-8814

CVE-2019-8815 CVE-2019-8816 CVE-2019-8819

CVE-2019-8820 CVE-2019-8823 CVE-2019-8835

CVE-2019-8844 CVE-2019-8846 CVE-2020-10018

CVE-2020-11793 CVE-2020-3862 CVE-2020-3864

CVE-2020-3865 CVE-2020-3867 CVE-2020-3868

Affected Products:

SUSE OpenStack Cloud Crowbar 8

SUSE OpenStack Cloud 8

SUSE OpenStack Cloud 7

SUSE Linux Enterprise Workstation Extension 12-SP4

SUSE Linux Enterprise Software Development Kit 12-SP5

SUSE Linux Enterprise Software Development Kit 12-SP4

SUSE Linux Enterprise Server for SAP 12-SP3

SUSE Linux Enterprise Server for SAP 12-SP2

SUSE Linux Enterprise Server 12-SP5

SUSE Linux Enterprise Server 12-SP4

SUSE Linux Enterprise Server 12-SP3-LTSS

SUSE Linux Enterprise Server 12-SP3-BCL

SUSE Linux Enterprise Server 12-SP2-LTSS

SUSE Linux Enterprise Server 12-SP2-BCL

SUSE Enterprise Storage 5

HPE Helion Openstack 8

https://www.suse.com/security/cve/CVE-2019-8625.html

https://www.suse.com/security/cve/CVE-2019-8710.html

https://www.suse.com/security/cve/CVE-2019-8720.html

https://www.suse.com/security/cve/CVE-2019-8743.html

https://www.suse.com/security/cve/CVE-2019-8764.html

https://www.suse.com/security/cve/CVE-2019-8766.html

https://www.suse.com/security/cve/CVE-2019-8769.html

https://www.suse.com/security/cve/CVE-2019-8771.html

https://www.suse.com/security/cve/CVE-2019-8782.html

https://www.suse.com/security/cve/CVE-2019-8783.html

https://www.suse.com/security/cve/CVE-2019-8808.html

https://www.suse.com/security/cve/CVE-2019-8811.html

https://www.suse.com/security/cve/CVE-2019-8812.html

https://www.suse.com/security/cve/CVE-2019-8813.html

https://www.suse.com/security/cve/CVE-2019-8814.html

https://www.suse.com/security/cve/CVE-2019-8815.html

https://www.suse.com/security/cve/CVE-2019-8816.html

https://www.suse.com/security/cve/CVE-2019-8819.html

https://www.suse.com/security/cve/CVE-2019-8820.html

https://www.suse.com/security/cve/CVE-2019-8823.html

https://www.suse.com/security/cve/CVE-2019-8835.html

https://www.suse.com/security/cve/CVE-2019-8844.html

https://www.suse.com/security/cve/CVE-2019-8846.html

https://www.suse.com/security/cve/CVE-2020-10018.html

https://www.suse.com/security/cve/CVE-2020-11793.html

https://www.suse.com/security/cve/CVE-2020-3862.html

https://www.suse.com/security/cve/CVE-2020-3864.html

https://www.suse.com/security/cve/CVE-2020-3865.html

https://www.suse.com/security/cve/CVE-2020-3867.html

https://www.suse.com/security/cve/CVE-2020-3868.html

https://bugzilla.suse.com/1155321

https://bugzilla.suse.com/1156318

https://bugzilla.suse.com/1159329

https://bugzilla.suse.com/1161719

https://bugzilla.suse.com/1163809

https://bugzilla.suse.com/1165528

https://bugzilla.suse.com/1169658

Severity
Announcement ID: SUSE-SU-2020:1135-1
Rating: important

Related News

Kubernetes Security on AWS: A Practical Guide

Nov 18, 2023

Nitrux 3.2.0 Linux Distro Released with Enhanced Security and New Features

Nov 28, 2023

Kinsing Hackers Exploit Apache ActiveMQ Vulnerability to Deploy Linux Rootkits

Nov 25, 2023

Severe Firefox, Thunderbird Bugs Could Lead to System Takeover

Dec 2, 2023

News

Advisories

HOWTOs

Features

Critical Linux Kernel Bugs Lead to DoS, Privilege Escalation - Patch Now!
Unlocking the Future of Authentication: Passkeys vs. Passwords
Empowering MSPs with Straightforward Linux Device Management
A Complete Guide to Torrenting Safely in 2024
Cloud Security Basics for Small Businesses

About Us

Powered By

Footer Logo