Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues:
Security issue fixed:
- CVE-2020-3899: Fixed a memory consumption issue that could have led to remote code execution (bsc#1170643).
Non-security issues fixed:
- Update to version 2.28.2 (bsc#1170643):
+ Fix excessive CPU usage due to GdkFrameClock not being stopped.
+ Fix UI process crash when EGL_WL_bind_wayland_display extension
is not available.
+ Fix position of select popup menus in X11.
+ Fix playing of Youtube 'live stream'/H264 URLs.
+ Fix a crash under X11 when cairo uses xcb.
+ Fix several crashes and rendering issues.
This update was imported from the SUSE:SLE-15:Update update project.
-
Submitted by
Michael Gorse (mgorse)
Fixed bugs
bnc#1170643
VUL-0: CVE-2020-3885, CVE-2020-3894, CVE-2020-3895, CVE-2020-3897, CVE-2020-3899, CVE-2020-3900, CVE-2020-3901, CVE-2020-3902: webkit2gtk3: WebKitGTK and WPE WebKit Security Advisory WSA-2020-0005
