{"schemaVersion":3,"id":"SUSE-SU-2020:1135-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for webkit2gtk3\n\nThis update for webkit2gtk3 to version 2.28.1 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-10018: Fixed a denial of service because the m_deferredFocusedNodeChange data structure was mishandled (bsc#1165528).\n- CVE-2020-11793: Fixed a potential arbitrary code execution caused by a use-after-free vulnerability (bsc#1169658).\n- CVE-2019-8835: Fixed multiple memory corruption issues (bsc#1161719).\n- CVE-2019-8844: Fixed multiple memory corruption issues (bsc#1161719).\n- CVE-2019-8846: Fixed a use-after-free issue (bsc#1161719).\n- CVE-2020-3862: Fixed a memory handling issue (bsc#1163809).\n- CVE-2020-3867: Fixed an XSS issue (bsc#1163809).\n- CVE-2020-3868: Fixed multiple memory corruption issues that could have lead to arbitrary code execution (bsc#1163809).\n- CVE-2020-3864,CVE-2020-3865: Fixed logic issues in the DOM object context handling (bsc#1163809).\n\nNon-security issues fixed:\n\n- Add API to enable Process Swap on (Cross-site) Navigation.\n- Add user messages API for the communication with the web extension.\n- Add support for same-site cookies.\n- Service workers are enabled by default.\n- Add support for Pointer Lock API.\n- Add flatpak sandbox support.\n- Make ondemand hardware acceleration policy never leave accelerated compositing mode.\n- Always use a light theme for rendering form controls.\n- Add about:gpu to show information about the graphics stack.\n- Fixed issues while trying to play a video on NextCloud.\n- Fixed vertical alignment of text containing arabic diacritics.\n- Fixed build with icu 65.1.\n- Fixed page loading errors with websites using HSTS.\n- Fixed web process crash when displaying a KaTeX formula.\n- Fixed several crashes and rendering issues.\n- Switched to a single web process for Evolution and geary (bsc#1159329).","dates":{"published":"2020-04-29T05:53:20.000Z","modified":"2026-02-04T03:15:40.812Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"webkit2gtk3&distro=HPE Helion OpenStack 8","name":"webkit2gtk3","label":"webkit2gtk3&distro=HPE Helion OpenStack 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=HPE Helion OpenStack 8","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Enterprise Storage 5","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Enterprise Storage 5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Enterprise Storage 5","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP2-BCL","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP2-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP2-BCL","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP3-BCL","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP3-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP3-BCL","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP3-LTSS","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP4","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP4","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP5","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Server 12 SP5","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Software Development Kit 12 SP4","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Software Development Kit 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Software Development Kit 12 SP4","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE Linux Enterprise Workstation Extension 12 SP4","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE Linux Enterprise Workstation Extension 12 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE Linux Enterprise Workstation Extension 12 SP4","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE OpenStack Cloud 7","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE OpenStack Cloud 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE OpenStack Cloud 7","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE OpenStack Cloud 8","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE OpenStack Cloud 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE OpenStack Cloud 8","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null},{"vendor":"suse","product":"webkit2gtk3&distro=SUSE OpenStack Cloud Crowbar 8","name":"webkit2gtk3","label":"webkit2gtk3&distro=SUSE OpenStack Cloud Crowbar 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/webkit2gtk3&distro=SUSE OpenStack Cloud Crowbar 8","purlType":"rpm","versions":[{"text":"< 2.28.1-2.50.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.1-2.50.3","eol":null,"hubHref":null}],"affectedCount":18,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201135-1/","label":"www.suse.com/support/update/announcement/2020/suse-su-20201135-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1155321","label":"bugzilla.suse.com/1155321","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1156318","label":"bugzilla.suse.com/1156318","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1159329","label":"bugzilla.suse.com/1159329","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1161719","label":"bugzilla.suse.com/1161719","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1163809","label":"bugzilla.suse.com/1163809","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1165528","label":"bugzilla.suse.com/1165528","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1169658","label":"bugzilla.suse.com/1169658","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8625","label":"www.suse.com/security/cve/CVE-2019-8625","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8710","label":"www.suse.com/security/cve/CVE-2019-8710","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8720","label":"www.suse.com/security/cve/CVE-2019-8720","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8743","label":"www.suse.com/security/cve/CVE-2019-8743","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8764","label":"www.suse.com/security/cve/CVE-2019-8764","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8766","label":"www.suse.com/security/cve/CVE-2019-8766","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8769","label":"www.suse.com/security/cve/CVE-2019-8769","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8771","label":"www.suse.com/security/cve/CVE-2019-8771","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8782","label":"www.suse.com/security/cve/CVE-2019-8782","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8783","label":"www.suse.com/security/cve/CVE-2019-8783","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8808","label":"www.suse.com/security/cve/CVE-2019-8808","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8811","label":"www.suse.com/security/cve/CVE-2019-8811","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8812","label":"www.suse.com/security/cve/CVE-2019-8812","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8813","label":"www.suse.com/security/cve/CVE-2019-8813","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8814","label":"www.suse.com/security/cve/CVE-2019-8814","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8815","label":"www.suse.com/security/cve/CVE-2019-8815","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8816","label":"www.suse.com/security/cve/CVE-2019-8816","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8819","label":"www.suse.com/security/cve/CVE-2019-8819","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8820","label":"www.suse.com/security/cve/CVE-2019-8820","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8823","label":"www.suse.com/security/cve/CVE-2019-8823","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8835","label":"www.suse.com/security/cve/CVE-2019-8835","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8844","label":"www.suse.com/security/cve/CVE-2019-8844","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-8846","label":"www.suse.com/security/cve/CVE-2019-8846","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10018","label":"www.suse.com/security/cve/CVE-2020-10018","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11793","label":"www.suse.com/security/cve/CVE-2020-11793","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3862","label":"www.suse.com/security/cve/CVE-2020-3862","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3864","label":"www.suse.com/security/cve/CVE-2020-3864","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3865","label":"www.suse.com/security/cve/CVE-2020-3865","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3867","label":"www.suse.com/security/cve/CVE-2020-3867","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2020-3868","label":"www.suse.com/security/cve/CVE-2020-3868","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2019-8625","CVE-2019-8710","CVE-2019-8720","CVE-2019-8743","CVE-2019-8764","CVE-2019-8766","CVE-2019-8769","CVE-2019-8771","CVE-2019-8782","CVE-2019-8783","CVE-2019-8808","CVE-2019-8811","CVE-2019-8812","CVE-2019-8813","CVE-2019-8814","CVE-2019-8815","CVE-2019-8816","CVE-2019-8819","CVE-2019-8820","CVE-2019-8823","CVE-2019-8835","CVE-2019-8844","CVE-2019-8846","CVE-2020-10018","CVE-2020-11793","CVE-2020-3862","CVE-2020-3864","CVE-2020-3865","CVE-2020-3867","CVE-2020-3868"],"downstream":[],"duplicates":[],"related":["CVE-2019-8625","CVE-2019-8710","CVE-2019-8720","CVE-2019-8743","CVE-2019-8764","CVE-2019-8766","CVE-2019-8769","CVE-2019-8771","CVE-2019-8782","CVE-2019-8783","CVE-2019-8808","CVE-2019-8811","CVE-2019-8812","CVE-2019-8813","CVE-2019-8814","CVE-2019-8815","CVE-2019-8816","CVE-2019-8819","CVE-2019-8820","CVE-2019-8823","CVE-2019-8835","CVE-2019-8844","CVE-2019-8846","CVE-2020-10018","CVE-2020-11793","CVE-2020-3862","CVE-2020-3864","CVE-2020-3865","CVE-2020-3867","CVE-2020-3868"]},"timeline":[{"kind":"published","date":"2020-04-29T05:53:20.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:15:40.812Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T02:29:19.515Z","stale":false,"partial":false}}