Fedora has issued an advisory on September 7: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/LMVCTGROJF6NNTYL2FOLPBBG6DMG6K45/ It updates the bundled Chromium code to a newer version with more security fixes. Advisory: ======================== Updated qtwebengine5 packages fix security vulnerabilities: The qtwebengine5 package has been updated to version 5.15.6, fixing several security issues in the bundled chromium code. References: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/LMVCTGROJF6NNTYL2FOLPBBG6DMG6K45/ ======================== Updated packages in core/updates_testing: ======================== qtwebengine5-5.15.6-1.mga8 qtwebengine5-doc-5.15.6-1.mga8 libqt5pdf5-5.15.6-1.mga8 libqt5webengine-devel-5.15.6-1.mga8 libqt5webengine5-5.15.6-1.mga8 libqt5webenginewidgets5-5.15.6-1.mga8 libqt5pdfwidgets5-5.15.6-1.mga8 libqt5webenginecore5-5.15.6-1.mga8 from qtwebengine5-5.15.6-1.mga8.src.rpm
MGA8-64 Plasma on Lenovo B50 No installation issues. Ref bug 29249 for tests. Tried different sites with konqueror. All display text and images OK, but on none do videos play,and at the CLI I see many of those: [17816:13:0915/150026.298277:ERROR:batching_media_log.cc(38)] MediaEvent: {"error":"FFmpegDemuxer: no supported streams"} [17816:1:0915/150026.300199:ERROR:batching_media_log.cc(35)] MediaEvent: {"pipeline_error":14} Testing the previous update on the same laptop with the same sites did not bring this problem forward. I don't know what to make of it.
CC: (none) => herman.viaene
No installation issues here, either. I see similar messages when playing a Transformers clip on Youtube. There were two ad clips before getting to the actual clip, and each generated something: js: Refused to display 'https://accounts.google.com/' in a frame because it set 'X-Frame-Options' to 'deny'. js: The resource https://i.ytimg.com/generate_204 was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it has an appropriate `as` value and it is preloaded intentionally. js: Not allowed to load local resource: about:blank js: Not allowed to load local resource: about:blank [3518:3538:0923/170621.914870:ERROR:context_group.cc(146)] ContextResult::kFatalFailure: WebGL1 blocklisted js: Not allowed to load local resource: about:blank [3518:3538:0923/170628.186456:ERROR:context_group.cc(146)] ContextResult::kFatalFailure: WebGL1 blocklisted libpng warning: iCCP: known incorrect sRGB profile libpng warning: iCCP: known incorrect sRGB profile js: Not allowed to load local resource: about:blank However, this may indicate a bugfix. I noticed that when I ran konqueror from the command line, while it ran Konsole went right to the command prompt. If there had been messages, they would not have been reported before the update. After the update, the command prompt doesn't appear until after the window is closed. The video is played to the conclusion, and if konqueror is run from the menu, no errors appear. I believe this is OK, Validating. Advisory in Comment 0.
CC: (none) => andrewsfarm, sysadmin-bugsWhiteboard: (none) => MGA8-64-OKKeywords: (none) => validated_update
Keywords: (none) => advisory
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2021-0443.html
Resolution: (none) => FIXEDStatus: NEW => RESOLVED