Bug 16914

Summary:	webkit 2.4.9 bugfix release plus fix for midori crash
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	RPM Packages	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Normal	CC:	davidwhodgins, herman.viaene, sysadmin-bugs, tarazed25
Version:	5	Keywords:	validated_update
Target Milestone:	---
Hardware:	i586
OS:	Linux
URL:	http://lwn.net/Vulnerabilities/659568/
Whiteboard:	advisory MGA5-64-OK
Source RPM:	webkit-2.4.8-2.mga5.src.rpm	CVE:
Status comment:

Description David Walser 2015-10-06 20:05:22 CEST

Fedora has issued an advisory on October 5:
https://lists.fedoraproject.org/pipermail/package-announce/2015-October/168740.html

Patched packages uploaded for Mageia 5 and Cauldron.

The Mageia 5 package was also updated to version 2.4.9, fixing other bugs:
http://www.webkitgtk.org/2015/05/20/webkitgtk2.4.9-released.html

The first bug listed there about TLS was already fixed before the Mageia 5 release in Bug 15512.

Advisory:
---------------------------------------

The webkit package has been updated to version 2.4.9, fixing several bugs.

Additionally, it has been patched to fix a crash in midori (rhbz#1189303).

References:
http://www.webkitgtk.org/2015/05/20/webkitgtk2.4.9-released.html
https://lists.fedoraproject.org/pipermail/package-announce/2015-October/168740.html
---------------------------------------

Updated package in core/updates_testing:
---------------------------------------
webkit-2.4.9-1.mga5
webkit1.0-2.4.9-1.mga5
libwebkitgtk1.0_0-2.4.9-1.mga5
libjavascriptcoregtk1.0_0-2.4.9-1.mga5
libwebkitgtk1.0-devel-2.4.9-1.mga5
webkit-gtklauncher-2.4.9-1.mga5
webkit-jsc-2.4.9-1.mga5
webkit3-2.4.9-1.mga5
webkit3.0-2.4.9-1.mga5
libwebkitgtk3.0_0-2.4.9-1.mga5
libjavascriptcoregtk3.0_0-2.4.9-1.mga5
libwebkitgtk3.0-devel-2.4.9-1.mga5
webkit3-gtklauncher-2.4.9-1.mga5
webkit3-jsc-2.4.9-1.mga5
libjavascriptcore-gir1.0-2.4.9-1.mga5
libwebkit-gir1.0-2.4.9-1.mga5
libjavascriptcore-gir3.0-2.4.9-1.mga5
libwebkit-gir3.0-2.4.9-1.mga5

from webkit-2.4.9-1.mga5.src.rpm

Reproducible: 

Steps to Reproduce:

Comment 1 Len Lawrence 2015-10-08 22:14:30 CEST

Installed missing pre-update packages and then updated mga5 x86_64.
What now?  webkit is described as a browser in some documentation but how is it launched?  There are no obvious commands in /usr/bin; webkit(3)-gtklauncher does not work nor webkit{1,3}.

CC: (none) => tarazed25

Comment 2 David Walser 2015-10-08 22:16:05 CEST

It's actually a library that other apps use to provide browser components.  Check urpmq --whatrequires on the libraries to see what packages use them.

Dave Hodgins 2015-10-09 02:46:51 CEST

CC: (none) => davidwhodgins
Whiteboard: (none) => advisory

Comment 3 Herman Viaene 2015-10-09 16:33:53 CEST

Mageia 5 on HP Probook 6555b KDE
No installation issues.
Found (a.o.) midori as having a dependency on these libraries.
used "strace -o webkit.txt midori" and can confirm that the libs are used while browsing the Mageia website.

CC: (none) => herman.viaene
Whiteboard: advisory => advisory MGA5-64-OK

Comment 4 claire robinson 2015-10-15 16:29:37 CEST

Validating. Advisory to upload.

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Comment 5 Mageia Robot 2015-10-15 21:51:56 CEST

An update for this issue has been pushed to Mageia Updates repository.

http://advisories.mageia.org/MGAA-2015-0159.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED