Security update for webkit2gtk3 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:1211-1 Final 1 1 2020-05-07T08:41:06Z current 2020-05-07T08:41:06Z 2020-05-07T08:41:06Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for webkit2gtk3 This update for webkit2gtk3 fixes the following issues: Security issue fixed: - CVE-2020-3899: Fixed a memory consumption issue that could have led to remote code execution (bsc#1170643). Non-security issues fixed: - Update to version 2.28.2 (bsc#1170643): + Fix excessive CPU usage due to GdkFrameClock not being stopped. + Fix UI process crash when EGL_WL_bind_wayland_display extension is not available. + Fix position of select popup menus in X11. + Fix playing of Youtube 'live stream'/H264 URLs. + Fix a crash under X11 when cairo uses xcb. + Fix the build in MIPS64. + Fix several crashes and rendering issues. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2020-1211,SUSE-2020-1211,SUSE-OpenStack-Cloud-7-2020-1211,SUSE-OpenStack-Cloud-8-2020-1211,SUSE-OpenStack-Cloud-Crowbar-8-2020-1211,SUSE-SLE-SAP-12-SP2-2020-1211,SUSE-SLE-SAP-12-SP3-2020-1211,SUSE-SLE-SDK-12-SP4-2020-1211,SUSE-SLE-SDK-12-SP5-2020-1211,SUSE-SLE-SERVER-12-SP2-2020-1211,SUSE-SLE-SERVER-12-SP2-BCL-2020-1211,SUSE-SLE-SERVER-12-SP3-2020-1211,SUSE-SLE-SERVER-12-SP3-BCL-2020-1211,SUSE-SLE-SERVER-12-SP4-2020-1211,SUSE-SLE-SERVER-12-SP5-2020-1211,SUSE-SLE-WE-12-SP4-2020-1211,SUSE-Storage-5-2020-1211 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20201211-1/ Link for SUSE-SU-2020:1211-1 https://lists.suse.com/pipermail/sle-security-updates/2020-May/006800.html E-Mail link for SUSE-SU-2020:1211-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1170643 SUSE Bug 1170643 https://www.suse.com/security/cve/CVE-2020-3899/ SUSE CVE CVE-2020-3899 page HPE Helion OpenStack 8 SUSE Enterprise Storage 5 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 libwebkit2gtk-4_0-37-2.28.2-2.53.2 libwebkit2gtk3-lang-2.28.2-2.53.2 typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 libjavascriptcoregtk-4_0-18-32bit-2.28.2-2.53.2 libjavascriptcoregtk-4_0-18-64bit-2.28.2-2.53.2 libwebkit2gtk-4_0-37-32bit-2.28.2-2.53.2 libwebkit2gtk-4_0-37-64bit-2.28.2-2.53.2 typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 webkit-jsc-4-2.28.2-2.53.2 webkit2gtk3-devel-2.28.2-2.53.2 webkit2gtk3-minibrowser-2.28.2-2.53.2 libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 as a component of HPE Helion OpenStack 8 libwebkit2gtk-4_0-37-2.28.2-2.53.2 as a component of HPE Helion OpenStack 8 libwebkit2gtk3-lang-2.28.2-2.53.2 as a component of HPE Helion OpenStack 8 typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 as a component of HPE Helion OpenStack 8 typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 as a component of HPE Helion OpenStack 8 webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 as a component of HPE Helion OpenStack 8 libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 as a component of SUSE Enterprise Storage 5 libwebkit2gtk-4_0-37-2.28.2-2.53.2 as a component of SUSE Enterprise Storage 5 libwebkit2gtk3-lang-2.28.2-2.53.2 as a component of SUSE Enterprise Storage 5 typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 as a component of SUSE Enterprise Storage 5 typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 as a component of SUSE Enterprise Storage 5 webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 as a component of SUSE Enterprise Storage 5 libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libwebkit2gtk-4_0-37-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libwebkit2gtk3-lang-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL webkit2gtk3-devel-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libwebkit2gtk-4_0-37-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libwebkit2gtk3-lang-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS webkit2gtk3-devel-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libwebkit2gtk-4_0-37-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libwebkit2gtk-4_0-37-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libwebkit2gtk3-lang-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP4 libwebkit2gtk-4_0-37-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP4 libwebkit2gtk3-lang-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP4 typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP4 typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP4 webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP4 libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP5 libwebkit2gtk-4_0-37-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP5 libwebkit2gtk3-lang-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP5 typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP5 typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP5 typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP5 webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server 12 SP5 libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libwebkit2gtk-4_0-37-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libwebkit2gtk3-lang-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 webkit2gtk3-devel-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libwebkit2gtk-4_0-37-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libwebkit2gtk3-lang-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libwebkit2gtk-4_0-37-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libwebkit2gtk3-lang-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libwebkit2gtk-4_0-37-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libwebkit2gtk3-lang-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 webkit2gtk3-devel-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 webkit2gtk3-devel-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libwebkit2gtk3-lang-2.28.2-2.53.2 as a component of SUSE Linux Enterprise Workstation Extension 12 SP4 libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud 7 libwebkit2gtk-4_0-37-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud 7 libwebkit2gtk3-lang-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud 7 typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud 7 typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud 7 typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud 7 webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud 7 webkit2gtk3-devel-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud 7 libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud 8 libwebkit2gtk-4_0-37-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud 8 libwebkit2gtk3-lang-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud 8 typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud 8 typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud 8 webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud 8 libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud Crowbar 8 libwebkit2gtk-4_0-37-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud Crowbar 8 libwebkit2gtk3-lang-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud Crowbar 8 typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud Crowbar 8 typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud Crowbar 8 webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 as a component of SUSE OpenStack Cloud Crowbar 8 A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution. CVE-2020-3899 HPE Helion OpenStack 8:libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 HPE Helion OpenStack 8:libwebkit2gtk-4_0-37-2.28.2-2.53.2 HPE Helion OpenStack 8:libwebkit2gtk3-lang-2.28.2-2.53.2 HPE Helion OpenStack 8:typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 HPE Helion OpenStack 8:typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 HPE Helion OpenStack 8:webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 SUSE Enterprise Storage 5:libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 SUSE Enterprise Storage 5:libwebkit2gtk-4_0-37-2.28.2-2.53.2 SUSE Enterprise Storage 5:libwebkit2gtk3-lang-2.28.2-2.53.2 SUSE Enterprise Storage 5:typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 SUSE Enterprise Storage 5:typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 SUSE Enterprise Storage 5:webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-BCL:libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk-4_0-37-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-BCL:libwebkit2gtk3-lang-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-BCL:typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-BCL:typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-BCL:typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-BCL:webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-BCL:webkit2gtk3-devel-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-LTSS:libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-LTSS:libwebkit2gtk-4_0-37-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-LTSS:libwebkit2gtk3-lang-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-LTSS:typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-LTSS:typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-LTSS:typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-LTSS:webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP2-LTSS:webkit2gtk3-devel-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP3-BCL:libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP3-BCL:libwebkit2gtk-4_0-37-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP3-BCL:typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP3-BCL:typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP3-BCL:webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP3-LTSS:libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP3-LTSS:libwebkit2gtk-4_0-37-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP3-LTSS:libwebkit2gtk3-lang-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP3-LTSS:typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP3-LTSS:typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP3-LTSS:webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP4:libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP4:libwebkit2gtk-4_0-37-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP4:libwebkit2gtk3-lang-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP4:typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP4:typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP4:webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP5:libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP5:libwebkit2gtk-4_0-37-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP5:libwebkit2gtk3-lang-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP5:typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP5:typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP5:typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server 12 SP5:webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwebkit2gtk-4_0-37-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libwebkit2gtk3-lang-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:webkit2gtk3-devel-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwebkit2gtk-4_0-37-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:libwebkit2gtk3-lang-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libwebkit2gtk-4_0-37-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libwebkit2gtk3-lang-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libwebkit2gtk-4_0-37-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libwebkit2gtk3-lang-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 SUSE Linux Enterprise Software Development Kit 12 SP4:typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Software Development Kit 12 SP4:webkit2gtk3-devel-2.28.2-2.53.2 SUSE Linux Enterprise Software Development Kit 12 SP5:typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 SUSE Linux Enterprise Software Development Kit 12 SP5:webkit2gtk3-devel-2.28.2-2.53.2 SUSE Linux Enterprise Workstation Extension 12 SP4:libwebkit2gtk3-lang-2.28.2-2.53.2 SUSE OpenStack Cloud 7:libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 SUSE OpenStack Cloud 7:libwebkit2gtk-4_0-37-2.28.2-2.53.2 SUSE OpenStack Cloud 7:libwebkit2gtk3-lang-2.28.2-2.53.2 SUSE OpenStack Cloud 7:typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 SUSE OpenStack Cloud 7:typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 SUSE OpenStack Cloud 7:typelib-1_0-WebKit2WebExtension-4_0-2.28.2-2.53.2 SUSE OpenStack Cloud 7:webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 SUSE OpenStack Cloud 7:webkit2gtk3-devel-2.28.2-2.53.2 SUSE OpenStack Cloud 8:libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 SUSE OpenStack Cloud 8:libwebkit2gtk-4_0-37-2.28.2-2.53.2 SUSE OpenStack Cloud 8:libwebkit2gtk3-lang-2.28.2-2.53.2 SUSE OpenStack Cloud 8:typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 SUSE OpenStack Cloud 8:typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 SUSE OpenStack Cloud 8:webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 SUSE OpenStack Cloud Crowbar 8:libjavascriptcoregtk-4_0-18-2.28.2-2.53.2 SUSE OpenStack Cloud Crowbar 8:libwebkit2gtk-4_0-37-2.28.2-2.53.2 SUSE OpenStack Cloud Crowbar 8:libwebkit2gtk3-lang-2.28.2-2.53.2 SUSE OpenStack Cloud Crowbar 8:typelib-1_0-JavaScriptCore-4_0-2.28.2-2.53.2 SUSE OpenStack Cloud Crowbar 8:typelib-1_0-WebKit2-4_0-2.28.2-2.53.2 SUSE OpenStack Cloud Crowbar 8:webkit2gtk-4_0-injected-bundles-2.28.2-2.53.2 important 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20201211-1/ https://www.suse.com/security/cve/CVE-2020-3899.html CVE-2020-3899 https://bugzilla.suse.com/1170643 SUSE Bug 1170643