Bug 16914 - webkit 2.4.9 bugfix release plus fix for midori crash
Summary: webkit 2.4.9 bugfix release plus fix for midori crash
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 5
Hardware: i586 Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL: http://lwn.net/Vulnerabilities/659568/
Whiteboard: advisory MGA5-64-OK
Keywords: validated_update
Depends on:
Blocks:
 
Reported: 2015-10-06 20:05 CEST by David Walser
Modified: 2015-10-15 21:51 CEST (History)
4 users (show)

See Also:
Source RPM: webkit-2.4.8-2.mga5.src.rpm
CVE:
Status comment:


Attachments

Description David Walser 2015-10-06 20:05:22 CEST
Fedora has issued an advisory on October 5:
https://lists.fedoraproject.org/pipermail/package-announce/2015-October/168740.html

Patched packages uploaded for Mageia 5 and Cauldron.

The Mageia 5 package was also updated to version 2.4.9, fixing other bugs:
http://www.webkitgtk.org/2015/05/20/webkitgtk2.4.9-released.html

The first bug listed there about TLS was already fixed before the Mageia 5 release in Bug 15512.

Advisory:
---------------------------------------

The webkit package has been updated to version 2.4.9, fixing several bugs.

Additionally, it has been patched to fix a crash in midori (rhbz#1189303).

References:
http://www.webkitgtk.org/2015/05/20/webkitgtk2.4.9-released.html
https://lists.fedoraproject.org/pipermail/package-announce/2015-October/168740.html
---------------------------------------

Updated package in core/updates_testing:
---------------------------------------
webkit-2.4.9-1.mga5
webkit1.0-2.4.9-1.mga5
libwebkitgtk1.0_0-2.4.9-1.mga5
libjavascriptcoregtk1.0_0-2.4.9-1.mga5
libwebkitgtk1.0-devel-2.4.9-1.mga5
webkit-gtklauncher-2.4.9-1.mga5
webkit-jsc-2.4.9-1.mga5
webkit3-2.4.9-1.mga5
webkit3.0-2.4.9-1.mga5
libwebkitgtk3.0_0-2.4.9-1.mga5
libjavascriptcoregtk3.0_0-2.4.9-1.mga5
libwebkitgtk3.0-devel-2.4.9-1.mga5
webkit3-gtklauncher-2.4.9-1.mga5
webkit3-jsc-2.4.9-1.mga5
libjavascriptcore-gir1.0-2.4.9-1.mga5
libwebkit-gir1.0-2.4.9-1.mga5
libjavascriptcore-gir3.0-2.4.9-1.mga5
libwebkit-gir3.0-2.4.9-1.mga5

from webkit-2.4.9-1.mga5.src.rpm

Reproducible: 

Steps to Reproduce:
Comment 1 Len Lawrence 2015-10-08 22:14:30 CEST
Installed missing pre-update packages and then updated mga5 x86_64.
What now?  webkit is described as a browser in some documentation but how is it launched?  There are no obvious commands in /usr/bin; webkit(3)-gtklauncher does not work nor webkit{1,3}.

CC: (none) => tarazed25

Comment 2 David Walser 2015-10-08 22:16:05 CEST
It's actually a library that other apps use to provide browser components.  Check urpmq --whatrequires on the libraries to see what packages use them.
Dave Hodgins 2015-10-09 02:46:51 CEST

CC: (none) => davidwhodgins
Whiteboard: (none) => advisory

Comment 3 Herman Viaene 2015-10-09 16:33:53 CEST
Mageia 5 on HP Probook 6555b KDE
No installation issues.
Found (a.o.) midori as having a dependency on these libraries.
used "strace -o webkit.txt midori" and can confirm that the libs are used while browsing the Mageia website.

CC: (none) => herman.viaene
Whiteboard: advisory => advisory MGA5-64-OK

Comment 4 claire robinson 2015-10-15 16:29:37 CEST
Validating. Advisory to upload.

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Comment 5 Mageia Robot 2015-10-15 21:51:56 CEST
An update for this issue has been pushed to Mageia Updates repository.

http://advisories.mageia.org/MGAA-2015-0159.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.