SUSE-SU-2019:2345-2

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2019/suse-su-20192345-2/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2345-2.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2019:2345-2

Related

Published

2019-10-11T14:12:08Z

Modified

2019-10-11T14:12:08Z

Summary

Security update for webkit2gtk3

Details

This update for webkit2gtk3 fixes the following issues:

Updated to version 2.24.4 (bsc#1148931).

Security issues fixed:

CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683, CVE-2019-8684, CVE-2019-8688, CVE-2019-8595, CVE-2019-8607, CVE-2019-8615, CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8666, CVE-2019-8669, CVE-2019-8671, CVE-2019-8672, CVE-2019-8673, CVE-2019-8676, CVE-2019-8677, CVE-2019-8678, CVE-2019-8679, CVE-2019-8680, CVE-2019-8681, CVE-2019-8683, CVE-2019-8684, CVE-2019-8686, CVE-2019-8687, CVE-2019-8688, CVE-2019-8689, CVE-2019-8690

Non-security issues fixed:

Improved loading of multimedia streams to avoid memory exhaustion due to excessive caching.
Updated the user agent string to make happy certain websites which would claim that the browser being used was unsupported.

References

Affected packages

SUSE:HPE Helion OpenStack 8 / webkit2gtk3

Package

Name: webkit2gtk3
Purl: purl:rpm/suse/webkit2gtk3&distro=HPE%20Helion%20OpenStack%208

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.4-2.47.1

Ecosystem specific

{
    "binaries": [
        {
            "libwebkit2gtk-4_0-37": "2.24.4-2.47.1",
            "typelib-1_0-JavaScriptCore-4_0": "2.24.4-2.47.1",
            "libwebkit2gtk3-lang": "2.24.4-2.47.1",
            "libjavascriptcoregtk-4_0-18": "2.24.4-2.47.1",
            "webkit2gtk-4_0-injected-bundles": "2.24.4-2.47.1",
            "typelib-1_0-WebKit2-4_0": "2.24.4-2.47.1"
        }
    ]
}

SUSE:OpenStack Cloud 7 / webkit2gtk3

Package

Name: webkit2gtk3
Purl: purl:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.4-2.47.1

Ecosystem specific

{
    "binaries": [
        {
            "typelib-1_0-WebKit2-4_0": "2.24.4-2.47.1",
            "typelib-1_0-JavaScriptCore-4_0": "2.24.4-2.47.1",
            "libjavascriptcoregtk-4_0-18": "2.24.4-2.47.1",
            "webkit2gtk-4_0-injected-bundles": "2.24.4-2.47.1",
            "libwebkit2gtk-4_0-37": "2.24.4-2.47.1",
            "libwebkit2gtk3-lang": "2.24.4-2.47.1",
            "typelib-1_0-WebKit2WebExtension-4_0": "2.24.4-2.47.1",
            "webkit2gtk3-devel": "2.24.4-2.47.1"
        }
    ]
}

SUSE:OpenStack Cloud 8 / webkit2gtk3

Package

Name: webkit2gtk3
Purl: purl:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%208

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.4-2.47.1

Ecosystem specific

{
    "binaries": [
        {
            "libwebkit2gtk-4_0-37": "2.24.4-2.47.1",
            "typelib-1_0-JavaScriptCore-4_0": "2.24.4-2.47.1",
            "libwebkit2gtk3-lang": "2.24.4-2.47.1",
            "libjavascriptcoregtk-4_0-18": "2.24.4-2.47.1",
            "webkit2gtk-4_0-injected-bundles": "2.24.4-2.47.1",
            "typelib-1_0-WebKit2-4_0": "2.24.4-2.47.1"
        }
    ]
}

SUSE:OpenStack Cloud Crowbar 8 / webkit2gtk3

Package

Name: webkit2gtk3
Purl: purl:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.4-2.47.1

Ecosystem specific

{
    "binaries": [
        {
            "libwebkit2gtk-4_0-37": "2.24.4-2.47.1",
            "typelib-1_0-JavaScriptCore-4_0": "2.24.4-2.47.1",
            "libwebkit2gtk3-lang": "2.24.4-2.47.1",
            "libjavascriptcoregtk-4_0-18": "2.24.4-2.47.1",
            "webkit2gtk-4_0-injected-bundles": "2.24.4-2.47.1",
            "typelib-1_0-WebKit2-4_0": "2.24.4-2.47.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP2 / webkit2gtk3

Package

Name: webkit2gtk3
Purl: purl:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.4-2.47.1

Ecosystem specific

{
    "binaries": [
        {
            "typelib-1_0-WebKit2-4_0": "2.24.4-2.47.1",
            "typelib-1_0-JavaScriptCore-4_0": "2.24.4-2.47.1",
            "libjavascriptcoregtk-4_0-18": "2.24.4-2.47.1",
            "webkit2gtk-4_0-injected-bundles": "2.24.4-2.47.1",
            "libwebkit2gtk-4_0-37": "2.24.4-2.47.1",
            "libwebkit2gtk3-lang": "2.24.4-2.47.1",
            "typelib-1_0-WebKit2WebExtension-4_0": "2.24.4-2.47.1",
            "webkit2gtk3-devel": "2.24.4-2.47.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP3 / webkit2gtk3

Package

Name: webkit2gtk3
Purl: purl:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.4-2.47.1

Ecosystem specific

{
    "binaries": [
        {
            "libwebkit2gtk-4_0-37": "2.24.4-2.47.1",
            "typelib-1_0-JavaScriptCore-4_0": "2.24.4-2.47.1",
            "libwebkit2gtk3-lang": "2.24.4-2.47.1",
            "libjavascriptcoregtk-4_0-18": "2.24.4-2.47.1",
            "webkit2gtk-4_0-injected-bundles": "2.24.4-2.47.1",
            "typelib-1_0-WebKit2-4_0": "2.24.4-2.47.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP2-LTSS / webkit2gtk3

Package

Name: webkit2gtk3
Purl: purl:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.4-2.47.1

Ecosystem specific

{
    "binaries": [
        {
            "typelib-1_0-WebKit2-4_0": "2.24.4-2.47.1",
            "typelib-1_0-JavaScriptCore-4_0": "2.24.4-2.47.1",
            "libjavascriptcoregtk-4_0-18": "2.24.4-2.47.1",
            "webkit2gtk-4_0-injected-bundles": "2.24.4-2.47.1",
            "libwebkit2gtk-4_0-37": "2.24.4-2.47.1",
            "libwebkit2gtk3-lang": "2.24.4-2.47.1",
            "typelib-1_0-WebKit2WebExtension-4_0": "2.24.4-2.47.1",
            "webkit2gtk3-devel": "2.24.4-2.47.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP2-BCL / webkit2gtk3

Package

Name: webkit2gtk3
Purl: purl:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.4-2.47.1

Ecosystem specific

{
    "binaries": [
        {
            "typelib-1_0-WebKit2-4_0": "2.24.4-2.47.1",
            "typelib-1_0-JavaScriptCore-4_0": "2.24.4-2.47.1",
            "libjavascriptcoregtk-4_0-18": "2.24.4-2.47.1",
            "webkit2gtk-4_0-injected-bundles": "2.24.4-2.47.1",
            "libwebkit2gtk-4_0-37": "2.24.4-2.47.1",
            "libwebkit2gtk3-lang": "2.24.4-2.47.1",
            "typelib-1_0-WebKit2WebExtension-4_0": "2.24.4-2.47.1",
            "webkit2gtk3-devel": "2.24.4-2.47.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP3-LTSS / webkit2gtk3

Package

Name: webkit2gtk3
Purl: purl:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.4-2.47.1

Ecosystem specific

{
    "binaries": [
        {
            "libwebkit2gtk-4_0-37": "2.24.4-2.47.1",
            "typelib-1_0-JavaScriptCore-4_0": "2.24.4-2.47.1",
            "libwebkit2gtk3-lang": "2.24.4-2.47.1",
            "libjavascriptcoregtk-4_0-18": "2.24.4-2.47.1",
            "webkit2gtk-4_0-injected-bundles": "2.24.4-2.47.1",
            "typelib-1_0-WebKit2-4_0": "2.24.4-2.47.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP3-BCL / webkit2gtk3

Package

Name: webkit2gtk3
Purl: purl:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.4-2.47.1

Ecosystem specific

{
    "binaries": [
        {
            "libwebkit2gtk-4_0-37": "2.24.4-2.47.1",
            "typelib-1_0-JavaScriptCore-4_0": "2.24.4-2.47.1",
            "libjavascriptcoregtk-4_0-18": "2.24.4-2.47.1",
            "webkit2gtk-4_0-injected-bundles": "2.24.4-2.47.1",
            "typelib-1_0-WebKit2-4_0": "2.24.4-2.47.1"
        }
    ]
}

SUSE:Enterprise Storage 4 / webkit2gtk3

Package

Name: webkit2gtk3
Purl: purl:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%204

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.4-2.47.1

Ecosystem specific

{
    "binaries": [
        {
            "typelib-1_0-WebKit2-4_0": "2.24.4-2.47.1",
            "typelib-1_0-JavaScriptCore-4_0": "2.24.4-2.47.1",
            "libjavascriptcoregtk-4_0-18": "2.24.4-2.47.1",
            "webkit2gtk-4_0-injected-bundles": "2.24.4-2.47.1",
            "libwebkit2gtk-4_0-37": "2.24.4-2.47.1",
            "libwebkit2gtk3-lang": "2.24.4-2.47.1",
            "typelib-1_0-WebKit2WebExtension-4_0": "2.24.4-2.47.1",
            "webkit2gtk3-devel": "2.24.4-2.47.1"
        }
    ]
}

SUSE:Enterprise Storage 5 / webkit2gtk3

Package

Name: webkit2gtk3
Purl: purl:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%205

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.24.4-2.47.1

Ecosystem specific

{
    "binaries": [
        {
            "libwebkit2gtk-4_0-37": "2.24.4-2.47.1",
            "typelib-1_0-JavaScriptCore-4_0": "2.24.4-2.47.1",
            "libwebkit2gtk3-lang": "2.24.4-2.47.1",
            "libjavascriptcoregtk-4_0-18": "2.24.4-2.47.1",
            "webkit2gtk-4_0-injected-bundles": "2.24.4-2.47.1",
            "typelib-1_0-WebKit2-4_0": "2.24.4-2.47.1"
        }
    ]
}