Bugzilla – Bug 1213858
Evolution should handle frame flattening changes in WebKitGTK 2.40
Last modified: 2024-02-07 16:40:03 UTC
Evolution should be patched to handle changes in WebKitGTK 2.40. See https://bugzilla.redhat.com/show_bug.cgi?id=2126523
SUSE-SU-2023:3375-1: An update that solves one vulnerability and has one fix can now be installed. Category: security (moderate) Bug References: 1169843, 1213858 CVE References: CVE-2020-11879 Sources used: SUSE Linux Enterprise Software Development Kit 12 SP5 (src): evolution-3.22.6-19.14.1 SUSE Linux Enterprise Workstation Extension 12 12-SP5 (src): evolution-3.22.6-19.14.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
*** Bug 1214639 has been marked as a duplicate of this bug. ***
*** Bug 1214878 has been marked as a duplicate of this bug. ***
*** Bug 1214880 has been marked as a duplicate of this bug. ***
Adjusting product; hopefully this bug will be public now.
Since the release of the latest version of WebKitGTK, 2.40.5 150400.4.48.1, which I installed in Leap 15.4, I am unable to read the body of any messages in Evolution. The screen appears blank. However if you select "reply to message", then you can see the text. Is this related to this bug? Or should I raise a new bug for this?
It is the same bug, yes, no need to open a new one.
Maintenance team, the SLE 15 SP4 fix for this bug has been submitted 28 days ago. This is a regression which makes Evolution almost unusable. Any reason why it hasn't been released yet?
(In reply to Jean Delvare from comment #13) > Maintenance team, the SLE 15 SP4 fix for this bug has been submitted 28 days > ago. This is a regression which makes Evolution almost unusable. Any reason > why it hasn't been released yet? There are dependencies issue with it, because evolution happens to be available in Packagehub, but a lot of its direct and indirect dependencies aren't for aarch64, ppc64el and s390x. Identifying the missing deps and adding them to the incident takes time, but I'm actively working on it.
Thanks Olivier. Michael, I installed the upcoming MU packages for testing. While the main issue is fixed, I noticed that appointment invitations displayed by Evolution as emails aren't displayed properly, body is missing. This sounds suspiciously similar to this bug, so I suspect the root cause could be the same, and maybe a second fix is needed. I think this is actually handled by evolution-ews connector, so maybe that package needs a fix similar to what was done in the main evolution package.
(In reply to Jean Delvare from comment #15) > Thanks Olivier. > > Michael, I installed the upcoming MU packages for testing. While the main > issue is fixed, I noticed that appointment invitations displayed by > Evolution as emails aren't displayed properly, body is missing. This sounds > suspiciously similar to this bug, so I suspect the root cause could be the > same, and maybe a second fix is needed. Might be https://gitlab.gnome.org/GNOME/evolution/-/issues/2204 I'll add the patch for it.
(In reply to Michael Gorse from comment #16) > Might be https://gitlab.gnome.org/GNOME/evolution/-/issues/2204 > I'll add the patch for it. I confirm it is. I have a build at https://build.opensuse.org/package/show/home:jejb1:Tumbleweed/evolution With this patch added and I can now see calendar invites again.
Looks very much like my issue indeed. If you can prepare a MU for SLES 15 SP4 including this fix on top of the other one, I'll be happy to test it. Clearing the NEEDINFO on the maintenance team for now, as I think the maintenance updates should be resubmitted with this new fix.
I installed the submitted MU (307607) on my laptop and calendar messages are displayed properly again. Thank you!
Excellent, I'm looking at that new MU now.
Requested release: https://build.suse.de/request/show/307986
And this is now released.
I've installed the update and had a quick check of Evolution. It seems to be working fine now - on Leap 15.5. Thanks for fixing it.
SUSE-RU-2023:3850-1: An update that has one fix can now be installed. Category: recommended (moderate) Bug References: 1213858 Sources used: openSUSE Leap 15.4 (src): glade-3.38.2-150400.4.2.2, gnome-online-accounts-3.40.1-150400.3.2.2, libxkbcommon-1.3.0-150400.3.2.2, gnome-desktop-41.8-150400.3.5.2, libical-3.0.10-150400.3.2.4, librest-0.8.1-150000.3.4.3, libcanberra-0.30-150400.15.2.2, evolution-3.42.4-150400.3.8.2, evolution-data-server-3.42.5-150400.3.5.4, gtkspell3-3.0.10-150400.11.2.2, libgweather-40.0-150400.3.2.2, bogofilter-1.2.4-150000.3.2.3, gjs-1.70.2-150400.3.5.4, gnome-autoar-0.4.1-150400.3.2.2, gsl_2_4-gnu-hpc-2.4-150100.9.7.1, gspell-1.10.0-150400.3.5.3, geocode-glib-3.26.4-150400.3.5.2, gcr-3.41.1-150400.3.5.2, gsl-2.4-150100.9.7.1, libphonenumber-8.12.23-150400.3.2.3, libical-glib-3.0.10-150400.3.2.3, liboauth-1.0.3-150000.5.2.3, libgdata-0.18.1-150400.4.2.2, mozjs78-78.15.0-150400.3.2.4 openSUSE Leap 15.5 (src): glade-3.38.2-150400.4.2.2, gnome-online-accounts-3.40.1-150400.3.2.2, libxkbcommon-1.3.0-150400.3.2.2, gnome-desktop-41.8-150400.3.5.2, libical-3.0.10-150400.3.2.4, librest-0.8.1-150000.3.4.3, libcanberra-0.30-150400.15.2.2, evolution-3.42.4-150400.3.8.2, evolution-data-server-3.42.5-150400.3.5.4, gtkspell3-3.0.10-150400.11.2.2, bogofilter-1.2.4-150000.3.2.3, libgweather-40.0-150400.3.2.2, gjs-1.70.2-150400.3.5.4, gnome-autoar-0.4.1-150400.3.2.2, gsl_2_4-gnu-hpc-2.4-150100.9.7.1, gspell-1.10.0-150400.3.5.3, geocode-glib-3.26.4-150400.3.5.2, gcr-3.41.1-150400.3.5.2, libphonenumber-8.12.23-150400.3.2.3, libical-glib-3.0.10-150400.3.2.3, liboauth-1.0.3-150000.5.2.3, libgdata-0.18.1-150400.4.2.2, mozjs78-78.15.0-150400.3.2.4 SUSE Linux Enterprise Micro for Rancher 5.3 (src): libxkbcommon-1.3.0-150400.3.2.2 SUSE Linux Enterprise Micro 5.3 (src): libxkbcommon-1.3.0-150400.3.2.2 SUSE Linux Enterprise Micro for Rancher 5.4 (src): libxkbcommon-1.3.0-150400.3.2.2 SUSE Linux Enterprise Micro 5.4 (src): libxkbcommon-1.3.0-150400.3.2.2 Basesystem Module 15-SP4 (src): libxkbcommon-1.3.0-150400.3.2.2, libcanberra-0.30-150400.15.2.2, libical-3.0.10-150400.3.2.4 Basesystem Module 15-SP5 (src): libxkbcommon-1.3.0-150400.3.2.2, libcanberra-0.30-150400.15.2.2 Desktop Applications Module 15-SP4 (src): gnome-online-accounts-3.40.1-150400.3.2.2, libxkbcommon-1.3.0-150400.3.2.2, gnome-desktop-41.8-150400.3.5.2, libical-3.0.10-150400.3.2.4, librest-0.8.1-150000.3.4.3, libcanberra-0.30-150400.15.2.2, gtkspell3-3.0.10-150400.11.2.2, libgweather-40.0-150400.3.2.2, gjs-1.70.2-150400.3.5.4, gnome-autoar-0.4.1-150400.3.2.2, gspell-1.10.0-150400.3.5.3, geocode-glib-3.26.4-150400.3.5.2, gcr-3.41.1-150400.3.5.2, liboauth-1.0.3-150000.5.2.3, libgdata-0.18.1-150400.4.2.2, mozjs78-78.15.0-150400.3.2.4 Desktop Applications Module 15-SP5 (src): gnome-online-accounts-3.40.1-150400.3.2.2, libxkbcommon-1.3.0-150400.3.2.2, gnome-desktop-41.8-150400.3.5.2, libical-3.0.10-150400.3.2.4, librest-0.8.1-150000.3.4.3, libcanberra-0.30-150400.15.2.2, gtkspell3-3.0.10-150400.11.2.2, libgweather-40.0-150400.3.2.2, gjs-1.70.2-150400.3.5.4, gnome-autoar-0.4.1-150400.3.2.2, gspell-1.10.0-150400.3.5.3, geocode-glib-3.26.4-150400.3.5.2, gcr-3.41.1-150400.3.5.2, liboauth-1.0.3-150000.5.2.3, libgdata-0.18.1-150400.4.2.2, mozjs78-78.15.0-150400.3.2.4 Development Tools Module 15-SP4 (src): glade-3.38.2-150400.4.2.2 Development Tools Module 15-SP5 (src): glade-3.38.2-150400.4.2.2 SUSE Package Hub 15 15-SP4 (src): glade-3.38.2-150400.4.2.2, gnome-online-accounts-3.40.1-150400.3.2.2, libxkbcommon-1.3.0-150400.3.2.2, gnome-desktop-41.8-150400.3.5.2, libical-3.0.10-150400.3.2.4, librest-0.8.1-150000.3.4.3, libcanberra-0.30-150400.15.2.2, evolution-3.42.4-150400.3.8.2, evolution-data-server-3.42.5-150400.3.5.4, gtkspell3-3.0.10-150400.11.2.2, bogofilter-1.2.4-150000.3.2.3, libgweather-40.0-150400.3.2.2, gjs-1.70.2-150400.3.5.4, gnome-autoar-0.4.1-150400.3.2.2, gsl-2.4-150100.9.7.1, geocode-glib-3.26.4-150400.3.5.2, gcr-3.41.1-150400.3.5.2, gspell-1.10.0-150400.3.5.3, libphonenumber-8.12.23-150400.3.2.3, libical-glib-3.0.10-150400.3.2.3, liboauth-1.0.3-150000.5.2.3, libgdata-0.18.1-150400.4.2.2, mozjs78-78.15.0-150400.3.2.4 SUSE Package Hub 15 15-SP5 (src): glade-3.38.2-150400.4.2.2, gnome-online-accounts-3.40.1-150400.3.2.2, libxkbcommon-1.3.0-150400.3.2.2, gnome-desktop-41.8-150400.3.5.2, libical-3.0.10-150400.3.2.4, librest-0.8.1-150000.3.4.3, libcanberra-0.30-150400.15.2.2, evolution-3.42.4-150400.3.8.2, evolution-data-server-3.42.5-150400.3.5.4, gtkspell3-3.0.10-150400.11.2.2, bogofilter-1.2.4-150000.3.2.3, libgweather-40.0-150400.3.2.2, gjs-1.70.2-150400.3.5.4, gnome-autoar-0.4.1-150400.3.2.2, gsl-2.4-150100.9.7.1, geocode-glib-3.26.4-150400.3.5.2, gcr-3.41.1-150400.3.5.2, gspell-1.10.0-150400.3.5.3, libphonenumber-8.12.23-150400.3.2.3, libical-glib-3.0.10-150400.3.2.3, liboauth-1.0.3-150000.5.2.3, libgdata-0.18.1-150400.4.2.2, mozjs78-78.15.0-150400.3.2.4 SUSE Manager Proxy 4.2 (src): librest-0.8.1-150000.3.4.3 SUSE Manager Retail Branch Server 4.2 (src): librest-0.8.1-150000.3.4.3 SUSE Manager Server 4.2 (src): librest-0.8.1-150000.3.4.3 SUSE Linux Enterprise Workstation Extension 15 SP4 (src): bogofilter-1.2.4-150000.3.2.3, libgweather-40.0-150400.3.2.2, gnome-online-accounts-3.40.1-150400.3.2.2, libgdata-0.18.1-150400.4.2.2, gsl-2.4-150100.9.7.1, libical-glib-3.0.10-150400.3.2.3, libphonenumber-8.12.23-150400.3.2.3, evolution-3.42.4-150400.3.8.2, evolution-data-server-3.42.5-150400.3.5.4 SUSE Linux Enterprise Workstation Extension 15 SP5 (src): bogofilter-1.2.4-150000.3.2.3, libgweather-40.0-150400.3.2.2, gnome-online-accounts-3.40.1-150400.3.2.2, libgdata-0.18.1-150400.4.2.2, gsl-2.4-150100.9.7.1, libical-glib-3.0.10-150400.3.2.3, libphonenumber-8.12.23-150400.3.2.3, evolution-3.42.4-150400.3.8.2, evolution-data-server-3.42.5-150400.3.5.4 SUSE Linux Enterprise Micro 5.2 (src): librest-0.8.1-150000.3.4.3 SUSE Linux Enterprise Micro for Rancher 5.2 (src): librest-0.8.1-150000.3.4.3 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Done.
SUSE-RU-2023:3850-2: An update that has one fix can now be installed. Category: recommended (moderate) Bug References: 1213858 Sources used: SUSE Linux Enterprise Micro 5.5 (src): libxkbcommon-1.3.0-150400.3.2.2 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Unfortunately openSUSE-SLE-15.5-2023-4294-1 indroduces this bug anew. Evolution message body again is unreadable after installing this security fix.
(In reply to Avu Zel from comment #28) > Unfortunately openSUSE-SLE-15.5-2023-4294-1 indroduces this bug anew. > Evolution message body again is unreadable after installing this security > fix. Are you using the proprietary NVIDIA driver? If so, then this is bug 1216778, and I've just submitted a fix for it.
(In reply to Michael Gorse from comment #29) > (In reply to Avu Zel from comment #28) > > Unfortunately openSUSE-SLE-15.5-2023-4294-1 indroduces this bug anew. > > Evolution message body again is unreadable after installing this security > > fix. > > Are you using the proprietary NVIDIA driver? If so, then this is bug > 1216778, and I've just submitted a fix for it. Indeed I do use the proprietary driver. This evolution-webkit api-change problem comes quite as a surprise to me. I can't remember ever having a problem long term recurring as this one with a software I depended on so much since using SuSE and later openSuse. Thank you very much for patching without any delay.
(In reply to Avu Zel from comment #30) > Indeed I do use the proprietary driver. This evolution-webkit api-change > problem comes quite as a surprise to me. I can't remember ever having a > problem long term recurring as this one with a software I depended on so > much since using SuSE and later openSuse. > Thank you very much for patching without any delay. I apologize for the trouble that this is causing. It is a separate bug from the one this bug was opened for, although the symptoms are similar. The maintenance team is working on getting a patch out. In the meantime, you could install the libwebkit2gtk-4_1-0 package from GNOME:STABLE:41 (the 15.4 build will work on both 15.4 and 15.5), or downgrade to 2.40.5 if you still have the old rpm or can roll back to it.
(In reply to Michael Gorse from comment #31) > In the meantime, you > could install the libwebkit2gtk-4_1-0 package from GNOME:STABLE:41 (the 15.4 > build will work on both 15.4 and 15.5), or downgrade to 2.40.5 if you still > have the old rpm or can roll back to it. Thank you for pointing out the appropriate sources for getting the error undone. The btrfs root fs allowed me to undo the changes and until dependencies come up or the fix gets rolled out I'll avoid the upgrade package.
Released.