Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2020:1992-1 Critical Update for webkit2gtk3 Security Risks

suse
Calendar Grey July 21, 2020
Dist Suse Esm H88
SUSE has released a security update for webkit2gtk3 addressing 8 critical vulnerabilities, significantly improving both system security and overall performance.
An update that fixes 8 vulnerabilities is now available

Summary

This update for webkit2gtk3 fixes the following issues: - Update to version 2.28.3 (bsc#1173998): + Enable kinetic scrolling with async scrolling. + Fix web process hangs on large GitHub pages. + Bubblewrap sandbox should not attempt to bind empty paths. + Fix threading issues in the media player. + Fix several crashes and rendering issues. + Security fixes: CVE-2020-9802, CVE-2020-9803, CVE-2020-9805, CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850, CVE-2020-13753. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Desktop Applications 15-SP2:

References

#1173998

Cross- CVE-2020-13753 CVE-2020-9802 CVE-2020-9803

CVE-2020-9805 CVE-2020-9806 CVE-2020-9807

CVE-2020-9843 CVE-2020-9850

Affected Products:

SUSE Linux Enterprise Module for Desktop Applications 15-SP2

SUSE Linux Enterprise Module for Basesystem 15-SP2

https://www.suse.com/security/cve/CVE-2020-13753.html

https://www.suse.com/security/cve/CVE-2020-9802.html

https://www.suse.com/security/cve/CVE-2020-9803.html

https://www.suse.com/security/cve/CVE-2020-9805.html

https://www.suse.com/security/cve/CVE-2020-9806.html

https://www.suse.com/security/cve/CVE-2020-9807.html

https://www.suse.com/security/cve/CVE-2020-9843.html

https://www.suse.com/security/cve/CVE-2020-9850.html

https://bugzilla.suse.com/1173998

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:1992-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here