#1010329 libwebkit2gtk-4.0-37: DSA-5115-1 for i386

Package:
libwebkit2gtk-4.0-37
Source:
webkit2gtk
Description:
Web content engine library for GTK
Submitter:
Paul Szabo
Date:
2022-06-01 13:57:08 UTC
Severity:
normal
#1010329#5
Date:
2022-04-29 05:06:49 UTC
From:
To:
Dear Maintainer,

I have some 32- and 64-bit machines, so with i386 and amd64
architectures, all at bullseye. I notice that updated webkit2gtk
packages were released for amd64 with version 2.36.0-3~deb11u1,
but that i386 is still "stuck" at 2.34.6-1~deb11u1.
Does this indicate some problem?

The page
https://packages.debian.org/search?keywords=libwebkit2gtk-4.0-37
shows just 2.34.6-1~deb11u1 for bullseye, as if no security updates;
whereas both
https://www.debian.org/security/2022/dsa-5115
https://security-tracker.debian.org/tracker/DSA-5115-1
suggest that updates were released (for bullseye, and for all
architectures).

Thanks, Paul
#1010329#10
Date:
2022-04-29 14:29:49 UTC
From:
To:
Thanks for the report,

there is indeed a problem, a bug in the version of clang available in
bullseye is causing build failures in i386 and mipsel:

   int main(int argc, char *argv[])
   {
      long long result;
      return __builtin_smulll_overflow(argc, 5, &result);
   }

This fails to build with:

   /usr/bin/ld: /tmp/test-7a89b4.o: in function `main':
   test.c:(.text+0x47): undefined reference to `__mulodi4'

It will be worked around in the next upload.

Berto
#1010329#17
Date:
2022-06-01 13:27:50 UTC
From:
To:
fixed 1010329 2.36.3-1~deb11u1
thanks

I just published DSA-5154-1 with webkit 2.36.3-1~deb11u1. i386 builds
are available this time.

Berto