FEDORA-2018-93ba62d099 — security update for webkitgtk4

stable

webkitgtk4-2.20.2-1.fc27

FEDORA-2018-93ba62d099 created by tpopela 4 years ago for Fedora 27

This update addresses the following vulnerabilities:

CVE-2018-4200

Additional fixes:

Do TLS error checking on GTlsConnection::accept-certificate to finish the load earlier in case of errors.
Properly close the connection to the nested wayland compositor in the Web Process.
Avoid painting backing stores for zero-opacity layers.
Fix downloads started by context menu failing in some websites due to missing user agent HTTP header.
Fix video unpause when GStreamerGL is disabled.
Fix several GObject introspection annotations.
Update user agent quirks to fix Outlook.com and Chase.com.
Fix several crashes and rendering issues.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2018-93ba62d099

This update has been submitted for testing by tpopela.

4 years ago

This update has been pushed to testing.

4 years ago

cserpentis commented & provided feedback 4 years ago

karma

works for me in a VM

pwalter commented & provided feedback 4 years ago

karma

Works

cairo provided feedback 4 years ago

karma

This update has been submitted for batched by bodhi.

4 years ago

This update has been submitted for stable by tpopela.

4 years ago

This update has been pushed to stable.

4 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

webkitgtk4-2.20.2-1.fc27

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

webkitgtk4-2.20.2-1.fc27

Automated Test Results

ignored