Upstream has issued an advisory today (April 8): https://webkitgtk.org/security/WSA-2022-0004.html The issues are fixed upstream in 2.36.0: https://webkitgtk.org/2022/03/21/webkitgtk2.36.0-released.html
Status comment: (none) => Fixed upstream i 2.36.0
We already (just) have version 2.36.0 in Cauldron thanks to ns80, so it seems sensible to assign this update to you.
Assignee: bugsquad => nicolas.salguero
Suggested advisory: ======================== Updated webkit2 packages fix security vulnerabilities: The webkit2 package has been updated to version 2.36.0, fixing several security issues and other bugs. References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22624 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22628 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22629 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22637 https://webkitgtk.org/security/WSA-2022-0004.html https://webkitgtk.org/2022/03/21/webkitgtk2.36.0-released.html ======================== Updated packages in core/updates_testing: ======================== webkit2-2.36.0-1.mga8 webkit2-jsc-2.36.0-1.mga8 lib(64)webkit2gtk-gir4.0-2.36.0-1.mga8 lib(64)javascriptcore-gir4.0-2.36.0-1.mga8 lib(64)javascriptcoregtk4.0_18-2.36.0-1.mga8 lib(64)webkit2gtk4.0_37-2.36.0-1.mga8 lib(64)webkit2-devel-2.36.0-1.mga8 from SRPM: webkit2-2.36.0-1.mga8.src.rpm
Status comment: Fixed upstream i 2.36.0 => (none)Assignee: nicolas.salguero => qa-bugsStatus: NEW => ASSIGNED
CC: (none) => nicolas.salguero
Tested in a Gnome Vbox guest. No installation issues. Referred to bug 30018 and Bug 30064 for tests: $ zenity --calendar Used the mouse to select a date, which was reported back to the command line. Ran Atril and loaded a pdf, looked OK Ran Evolution and Epiphany, both GUIs came up normally. Looks OK in Gnome.
CC: (none) => andrewsfarm
Tested with a Plasma install on real 64-bit hardware. No installation issues. This install does not include Evolution or Epiphany, but the zenity calendar and Atril both work OK. Giving this a 64-bit OK, and validating. Advisory in Comment 2.
CC: (none) => sysadmin-bugsWhiteboard: (none) => MGA8-64-OKKeywords: (none) => validated_update
Keywords: (none) => advisoryCC: (none) => davidwhodgins
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2022-0139.html
Resolution: (none) => FIXEDStatus: ASSIGNED => RESOLVED