FEDORA-2018-6a9fea1b3a — security update for webkitgtk4

stable

webkitgtk4-2.20.2-1.fc26

FEDORA-2018-6a9fea1b3a created by tpopela 6 years ago for Fedora 26

This update addresses the following vulnerabilities:

CVE-2018-4200

Additional fixes:

Do TLS error checking on GTlsConnection::accept-certificate to finish the load earlier in case of errors.
Properly close the connection to the nested wayland compositor in the Web Process.
Avoid painting backing stores for zero-opacity layers.
Fix downloads started by context menu failing in some websites due to missing user agent HTTP header.
Fix video unpause when GStreamerGL is disabled.
Fix several GObject introspection annotations.
Update user agent quirks to fix Outlook.com and Chase.com.
Fix several crashes and rendering issues.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-6a9fea1b3a

This update has been submitted for testing by tpopela.

6 years ago

This update has been pushed to testing.

6 years ago

cserpentis commented & provided feedback 6 years ago

karma

works for me in a VM

pwalter commented & provided feedback 6 years ago

karma

Works

czmolr commented & provided feedback 6 years ago

karma

seems ok :)

This update has been submitted for batched by bodhi.

6 years ago

This update has been submitted for stable by bodhi.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

Builds

webkitgtk4-2.20.2-1.fc26

Automated Test Results

ignored