Bug 2079655

Summary: QtWebEngine 5.15.10 is available
Product: [Fedora] Fedora Reporter: Kevin Kofler <kevin>
Component: qt5-qtwebengineAssignee: Rex Dieter <rdieter>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: urgent Docs Contact:
Priority: unspecified    
Version: rawhideCC: kde-sig, kevin, plambri, rdieter, sanjay.ankur
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: qt5-qtwebengine-5.15.10-1.fc36 qt5-qtwebengine-5.15.10-1.fc37 qt5-qtwebengine-5.15.10-1.fc35 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-09-05 09:06:49 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Kevin Kofler 2022-04-28 03:14:43 UTC
https://code.qt.io/cgit/qt/qtwebengine.git/tag/?h=v5.15.9-lts is available with several security fixes. (It was tagged on 2022-04-05.) Rawhide is stuck on 5.15.8.

Comment 1 Kevin Kofler 2022-07-20 01:00:35 UTC
5.15.9 is now in Rawhide, but the security update has still not been pushed as an update to F36 and F35. Surely, a security update ought to take less than 3 months to push to stable releases!

Meanwhile, 5.15.10 is available: https://code.qt.io/cgit/qt/qtwebengine.git/tag/?h=v5.15.10-lts – again with several security fixes. In fact, it was already branched when you pushed 5.15.9 to Rawhide and tagged only 4 days after that.

At this point, I would recommend getting 5.15.10 into Rawhide ASAP and upgrading the stable releases directly to that, but if that is going to take 3 months again, we might as well push 5.15.9 now.

Comment 2 Ben Cotton 2022-08-09 13:15:08 UTC
This bug appears to have been reported against 'rawhide' during the Fedora Linux 37 development cycle.
Changing version to 37.

Comment 3 Pierguido Lambri 2022-08-26 11:51:40 UTC
I'm not sure if I should open another bz, but the current version in F36 (and I think it's the same in F37) is affected by https://bugreports.qt.io/browse/QTBUG-102961, which is quite annoying for Qutebrowser users.
This should be fixed in 5.15.10.

Comment 4 Ankur Sinha (FranciscoD) 2022-08-29 19:22:29 UTC
I'm seeing the crashes on qutebrowser here too, although abrt never files them. 

I can try the 5.15.10 update and open a PR (if no one is already working on this?)

Cheers,

Comment 5 Ankur Sinha (FranciscoD) 2022-08-30 09:09:38 UTC
PR: https://src.fedoraproject.org/rpms/qt5-qtwebengine/pull-request/12

Comment 6 Fedora Update System 2022-09-01 09:30:16 UTC
FEDORA-2022-b572ba3a1e has been submitted as an update to Fedora 37. https://bodhi.fedoraproject.org/updates/FEDORA-2022-b572ba3a1e

Comment 7 Fedora Update System 2022-09-01 09:30:17 UTC
FEDORA-2022-8c43b4dce7 has been submitted as an update to Fedora 36. https://bodhi.fedoraproject.org/updates/FEDORA-2022-8c43b4dce7

Comment 8 Fedora Update System 2022-09-02 08:26:58 UTC
FEDORA-2022-b572ba3a1e has been pushed to the Fedora 37 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-b572ba3a1e`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-b572ba3a1e

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 9 Fedora Update System 2022-09-02 09:43:20 UTC
FEDORA-2022-8c43b4dce7 has been pushed to the Fedora 36 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-8c43b4dce7`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-8c43b4dce7

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 10 Fedora Update System 2022-09-05 09:06:49 UTC
FEDORA-2022-8c43b4dce7 has been pushed to the Fedora 36 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 11 Fedora Update System 2022-09-06 07:55:14 UTC
FEDORA-2022-ae75c0ca4f has been submitted as an update to Fedora 35. https://bodhi.fedoraproject.org/updates/FEDORA-2022-ae75c0ca4f

Comment 12 Fedora Update System 2022-09-06 11:07:23 UTC
FEDORA-2022-ae75c0ca4f has been pushed to the Fedora 35 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-ae75c0ca4f`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-ae75c0ca4f

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 13 Fedora Update System 2022-09-12 17:44:04 UTC
FEDORA-2022-b572ba3a1e has been pushed to the Fedora 37 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 14 Fedora Update System 2022-09-14 01:41:53 UTC
FEDORA-2022-ae75c0ca4f has been pushed to the Fedora 35 stable repository.
If problem still persists, please make note of it in this bug report.