Bug 1216778

Summary: Unable to read the text of emails in Evolution
Product: [openSUSE] openSUSE Distribution Reporter: Alan Lewis <alan>
Component: GNOMEAssignee: E-mail List <gnome-bugs>
Status: RESOLVED FIXED QA Contact: E-mail List <qa-bugs>
Severity: Major    
Priority: P2 - High CC: alan, bugs, mgorse
Version: Leap 15.5   
Target Milestone: ---   
Hardware: x86-64   
OS: openSUSE Leap 15.5   
Whiteboard:
Found By: Community User Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Bug Depends on: 1213858    
Bug Blocks:    

Description Alan Lewis 2023-11-01 08:51:01 UTC
From today, 1st November, I cannot see any text when opening an email in Evolution - the screen is completely blank.  There was a problem recently with reading messages in Evolution due to an issue with WebKitGTK - Bug 1213858.

I checked /var/log/zypp/history to see what was installed yesterday.  I found the following entries:

2023-10-31 13:34:58|install|libwebkit2gtk-4_0-37|2.42.1-150400.4.57.2|x86_64||repo-sle-update|fec686b7d3025267b020cdec51d4dc12c65840db7572dff958d0ec93e1138618|
2023-10-31 13:34:59|install|webkit2gtk-4_0-injected-bundles|2.42.1-150400.4.57.2|x86_64||repo-sle-update|c6e7c7f15f460b2799afcc8a65ec1dd055c56af19ce127972a960f37f3a98e09|
2023-10-31 13:35:01|install|WebKitGTK-4.0-lang|2.42.1-150400.4.57.2|noarch||repo-sle-update|b68968a6fbeeb3ae3b472813a0c529576b7f72c8417eae46a6e22e574d28a086|

I have not had time to investigate further at the moment.
Comment 1 Alan Lewis 2023-11-01 15:54:19 UTC
There is now no way to read any of my previous emails - so this renders Evolution unusable.  I note that Bug 1213858 has been re-opened.

Would going back to version 2.40.5-150400.4.51.1 of packages:

WebKitGTK4.0-lang
libwebkit2gtk-4_0-37
typelib-1_0-WebKit2-4_0
webkit2gtk4-4_0-injected-bundles
libjavascriptcoregtk-4_0-18

be a safe thing to do for the time being?
Comment 2 Michael Gorse 2023-11-01 15:58:55 UTC
Are you using the proprietary NVIDIA driver? If so, then it is probably the same issue as this debian bug:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052055

Regardless, we should probably add the patch for it.
Otherwise, do you get any warnings if you run evolution from the terminal?
Comment 3 Michael Gorse 2023-11-01 16:06:12 UTC
Anyway, it sounds like a regression from the WebKitGTK update, so downgrading back to 2.40.5 should be a work-around for now.
Comment 4 Alan Lewis 2023-11-01 17:17:26 UTC
I am using the Nvidia proprietary driver.

If I run Evolution from a terminal I get the following messages:

(evolution:8985): Gtk-WARNING **: 17:13:56.376: Theme directory /apps of theme adwaita-xfce has no size field


** (evolution:8985): WARNING **: 17:13:56.458: WEBKIT_FORCE_SANDBOX no longer allows disabling the sandbox. Use WEBKIT_DISABLE_SANDBOX_THIS_IS_DANGEROUS=1 instead.
Comment 5 Michael Gorse 2023-11-01 18:23:42 UTC
I have a test package with the Debian patch applied in home:mgorse:branches:GNOME:STABLE:41. Ie,
zypper ar http://download.opensuse.org/repositories/home:/mgorse:/branches:/GNOME:/STABLE:/41/openSUSE_Leap_15.4/home:mgorse:branches:GNOME:STABLE:41.repo

(I know that it's built against 15.4, but it should also run on 15.5)
Comment 6 Alan Lewis 2023-11-01 20:10:49 UTC
I have installed the packages from the test repo.  As far as I can tell everything is working correctly - all mail messages displayed as expected.  Many thanks for the quick fix - much appreciated.
Comment 7 Michael Gorse 2023-11-01 20:14:23 UTC
Thanks for testing. I'm glad that it works for you. I've submitted the patch to factory and 15.4/15.5.
Comment 9 OBSbugzilla Bot 2023-11-03 08:25:02 UTC
This is an autogenerated message for OBS integration:
This bug (1216778) was mentioned in
https://build.opensuse.org/request/show/1123045 Factory / webkit2gtk3
Comment 10 elhoy 2023-11-05 20:56:10 UTC
Hi all, small extra research evidence -

Same behaviour as noted in earlier bug 
https://bugzilla.opensuse.org/show_bug.cgi?id=1215249

Per https://bugzilla.opensuse.org/show_bug.cgi?id=1216778#c1 (Alan), I've proven workaround by reverting to 4.40.5 for all installed Webkit 4.n components (ie.  belt and braces approach!):
* WebKitGTX-4.0-lang
* WebKitGTX-4.1-lang
* libwebkit2gtk-4_0-37
* libwebkit2gtk-4_1-0
* typelib-1_0-WebKit2-4_0
* typelib-1_0-WebKit2-4_1
* webkit2gtk-4_0-injected-bundles
* webkit2gtk-4_1-injected-bundles

Evolution particularly requires libwebkit2gtk-4.0.so.37
Installed version 3.42.4-150400.3.8.2.

Thanks Michael for the pending patch. :)
Comment 11 Maintenance Automation 2023-11-17 08:30:14 UTC
SUSE-RU-2023:4474-1: An update that has one fix can now be installed.

Category: recommended (important)
Bug References: 1216778
Sources used:
openSUSE Leap 15.4 (src): webkit2gtk3-soup2-2.42.1-150400.4.60.1, webkit2gtk3-2.42.1-150400.4.60.1, webkit2gtk4-2.42.1-150400.4.60.1
openSUSE Leap 15.5 (src): webkit2gtk3-soup2-2.42.1-150400.4.60.1, webkit2gtk3-2.42.1-150400.4.60.1, webkit2gtk4-2.42.1-150400.4.60.1
Basesystem Module 15-SP4 (src): webkit2gtk3-soup2-2.42.1-150400.4.60.1
Basesystem Module 15-SP5 (src): webkit2gtk3-soup2-2.42.1-150400.4.60.1
Desktop Applications Module 15-SP4 (src): webkit2gtk3-2.42.1-150400.4.60.1
Desktop Applications Module 15-SP5 (src): webkit2gtk3-2.42.1-150400.4.60.1
Development Tools Module 15-SP4 (src): webkit2gtk4-2.42.1-150400.4.60.1
Development Tools Module 15-SP5 (src): webkit2gtk4-2.42.1-150400.4.60.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 12 Michael Gorse 2023-11-17 13:57:09 UTC
Released.
Comment 14 Maintenance Automation 2023-11-24 20:30:24 UTC
SUSE-SU-2023:4559-1: An update that solves seven vulnerabilities can now be installed.

Category: security (important)
Bug References: 1216778, 1217210
CVE References: CVE-2022-32919, CVE-2022-32933, CVE-2022-46705, CVE-2022-46725, CVE-2023-32359, CVE-2023-41983, CVE-2023-42852
Sources used:
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (src): webkit2gtk3-2.42.2-150000.3.157.1
SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (src): webkit2gtk3-2.42.2-150000.3.157.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1 (src): webkit2gtk3-2.42.2-150000.3.157.1
SUSE CaaS Platform 4.0 (src): webkit2gtk3-2.42.2-150000.3.157.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 15 Maintenance Automation 2023-11-24 20:30:26 UTC
SUSE-SU-2023:4558-1: An update that solves seven vulnerabilities can now be installed.

Category: security (important)
Bug References: 1216778, 1217210
CVE References: CVE-2022-32919, CVE-2022-32933, CVE-2022-46705, CVE-2022-46725, CVE-2023-32359, CVE-2023-41983, CVE-2023-42852
Sources used:
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (src): webkit2gtk3-2.42.2-150200.91.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (src): webkit2gtk3-2.42.2-150200.91.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src): webkit2gtk3-2.42.2-150200.91.1
SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (src): webkit2gtk3-2.42.2-150200.91.1
SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (src): webkit2gtk3-2.42.2-150200.91.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2 (src): webkit2gtk3-2.42.2-150200.91.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src): webkit2gtk3-2.42.2-150200.91.1
SUSE Enterprise Storage 7.1 (src): webkit2gtk3-2.42.2-150200.91.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 17 Maintenance Automation 2023-12-06 16:30:53 UTC
SUSE-SU-2023:4651-1: An update that solves seven vulnerabilities can now be installed.

Category: security (important)
Bug References: 1216778, 1217210
CVE References: CVE-2022-32919, CVE-2022-32933, CVE-2022-46705, CVE-2022-46725, CVE-2023-32359, CVE-2023-41983, CVE-2023-42852
Sources used:
SUSE Linux Enterprise Software Development Kit 12 SP5 (src): webkit2gtk3-2.42.2-2.158.2
SUSE Linux Enterprise High Performance Computing 12 SP5 (src): webkit2gtk3-2.42.2-2.158.2
SUSE Linux Enterprise Server 12 SP5 (src): webkit2gtk3-2.42.2-2.158.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5 (src): webkit2gtk3-2.42.2-2.158.2
SUSE Linux Enterprise Workstation Extension 12 12-SP5 (src): webkit2gtk3-2.42.2-2.158.2

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.