Bug#999358: libwebkit2gtk-4.0-37: Upgrade from 2.30.1-1~bpo10+1 to 2.34.1-1~deb10u1 crashes evolution with "std::bad_alloc"

[Norbert Berzen]

Package: libwebkit2gtk-4.0-37
Version: 2.34.1-1~deb10u1
Severity: important

Dear Maintainer,

I recently upgraded libwebkit2gtk-4.0-37 from version 2.30.1-1~bpo10+1
to version 2.34.1-1~deb10u1 as suggested for security.

After upgrade my evolution mail client crashed immediately after
startup by "std::bad_alloc".

Launching evolution from gdb and looking at the stack backtrace shows
up that the exception gets thrown by "libwebkit2gtk-4.0-37".

So I downgraded libwebkit2gtk-4.0-37 to the previous version 2.30.1-
1~bpo10+1. After that evolution is working again.

Probably there is a bug introduced in libwebkit with the security
update.

I would appreciate if you could check it out.

Best regards,
-- 
Norbert Berzen



-- System Information:
Debian Release: 10.11
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-18-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libwebkit2gtk-4.0-37 depends on:
ii  bubblewrap                      0.3.1-4
ii  libatk1.0-0                     2.30.0-2
ii  libc6                           2.28-10
ii  libcairo-gobject2               1.16.0-4+deb10u1
ii  libcairo2                       1.16.0-4+deb10u1
ii  libegl1                         1.1.0-1
ii  libenchant1c2a                  1.6.0-11.1+b1
ii  libfontconfig1                  2.13.1-2
ii  libfreetype6                    2.9.1-3+deb10u2
ii  libgcc1                         1:8.3.0-6
ii  libgcrypt20                     1.8.4-5+deb10u1
ii  libgdk-pixbuf2.0-0              2.38.1+dfsg-1
ii  libgl1                          1.1.0-1
ii  libglib2.0-0                    2.58.3-2+deb10u3
ii  libgstreamer-gl1.0-0            1.14.4-2+deb10u1
ii  libgstreamer-plugins-base1.0-0  1.14.4-2+deb10u1
ii  libgstreamer1.0-0               1.14.4-1
ii  libgtk-3-0                      3.24.5-1
ii  libharfbuzz-icu0                2.3.1-1
ii  libharfbuzz0b                   2.3.1-1
ii  libhyphen0                      2.8.8-7
ii  libicu63                        63.1-6+deb10u1
ii  libjavascriptcoregtk-4.0-18     2.30.1-1~bpo10+1
ii  libjpeg62-turbo                 1:1.5.2-2+deb10u1
ii  libnotify4                      0.7.7-4
ii  libopenjp2-7                    2.3.0-2+deb10u2
ii  libpango-1.0-0                  1.42.4-8~deb10u1
ii  libpangocairo-1.0-0             1.42.4-8~deb10u1
ii  libpng16-16                     1.6.36-6
ii  libseccomp2                     2.3.3-4
ii  libsecret-1-0                   0.18.7-1
ii  libsoup2.4-1                    2.64.2-2
ii  libsqlite3-0                    3.27.2-3+deb10u1
ii  libstdc++6                      8.3.0-6
ii  libsystemd0                     241-7~deb10u8
ii  libtasn1-6                      4.13-3
ii  libwayland-client0              1.16.0-1
ii  libwayland-egl1                 1.16.0-1
ii  libwayland-server0              1.16.0-1
ii  libwebp6                        0.6.1-2+deb10u1
ii  libwebpdemux2                   0.6.1-2+deb10u1
ii  libwoff1                        1.0.2-1
ii  libx11-6                        2:1.6.7-1+deb10u2
ii  libxcomposite1                  1:0.4.4-2
ii  libxdamage1                     1:1.1.4-3+b3
ii  libxml2                         2.9.4+dfsg1-7+deb10u2
ii  libxrender1                     1:0.9.10-1
ii  libxslt1.1                      1.1.32-2.2~deb10u1
ii  libxt6                          1:1.1.5-1+b3
ii  xdg-dbus-proxy                  0.1.1-1
ii  zlib1g                          1:1.2.11.dfsg-1

Versions of packages libwebkit2gtk-4.0-37 recommends:
ii  gstreamer1.0-gl            1.14.4-2+deb10u1
ii  gstreamer1.0-libav         1.15.0.1+git20180723+db823502-2+deb10u1
ii  gstreamer1.0-plugins-good  1.14.4-1+deb10u1
ii  gstreamer1.0-pulseaudio    1.14.4-1+deb10u1
ii  libgl1-mesa-dri            18.3.6-2+deb10u1

libwebkit2gtk-4.0-37 suggests no packages.

-- no debconf information