RHBA-2015:2116 - Bug Fix Advisory

Topic

Updated GTK+ packages that fix several bugs and add various enhancements are now available for Red Hat Enterprise Linux 7.

Description

The GTK+ packages contain the GIMP ToolKit (GTK+), a library for creating graphical user interfaces for the X Window System.

This update contains a number of rebases to the latest upstream stable versions, which provides a number of bug fixes and enhancements over the previous versions. For more information on the changes, see the GNOME release notes and Red Hat Enterprise Linux 7.2 Release Notes.

The orc packages have been upgraded to version 0.4.22. (BZ#1174391)
The atk packages have been upgraded to version 2.14.0. (BZ#1174433)
The cairo packages have been upgraded to version 1.14.2. (BZ#1174435)
The pango packages have been upgraded to version 1.36.8. (BZ#1174436)
The gdk-pixbuf2 packages have been upgraded to version 2.31.1. (BZ#1174438)
The gobject-introspection packages have been upgraded to version 1.42.0. (BZ#1174439)
The glib-networking packages have been upgraded to version 2.42.2. (BZ#1174447)
The dconf packages have been upgraded to version 0.22.0. (BZ#1174448)
The gtksourceview3 packages have been upgraded to version 3.14.2. (BZ#1174500)
The json-glib packages have been upgraded to version 1.0.2. (BZ#1174501)
The webkitgtk3 packages have been upgraded to version 2.4.9. (BZ#1174556)
The glibmm24 packages have been upgraded to version 2.42.0. (BZ#1174565)
The harfbuzz packages have been upgraded to version 0.9.36. (BZ#1201148)
The libxklavier packages have been upgraded to version 5.4. (BZ#1202874)
The glib2 packages have been upgraded to version 2.42.2. (BZ#1203755)
The gtk2 packages have been upgraded to version 2.24.28. (BZ#1221171)

This update also fixes the following bugs:

• Previously, GTK+ was treating frame times from _NET_WM_FRAME_DRAWN and

_NET_WM_FRAME_TIMINGS as local monotonic times, but they are actually
extended-precision versions of the server time. This was causing rendering stalls when using GTK+ applications remotely. With this update, frame times are converted to monotonic times when the X server and client are not running on the same system, and GTK+ applications can be used remotely without rendering stalls. (BZ#1243646)

• Previously, the glib2 packages were rebased to a version that deprecated the g_memmove() function. As a consequence, libgsf failed to build from source. This update replaces g_memmove() with memmove(), thus fixing this bug. (BZ#1132679)
• Prior to this update, the Python plug-in for GDB did not work with the version of GDB in Red Hat Enterprise Linux 7.1. As a consequence, GDB returned error messages when debugging glib2 applications. This update applies an upstream fix to use newer GDB APIs, and the Python GDB debugging aid for glib2 applications now works as expected. (BZ#1055733)
• The glib2 utility previously returned confusing warning messages when programs added GObject properties after the class was initialized. The functionality of adding a property after the class was initialized has been added back due to backward compatibility concerns, and error messages on properties thus no longer appear. (BZ#1168600)
• When selecting a file in the "Add attachment" window, Evolution previously terminated unexpectedly with a segmentation fault. This update fixes the gtk_tree_row_ref_deleted() function causing this bug, and attaching a file no longer leads to a crash. (BZ#1175941)
• Previously, the CUPS back end checked an incorrect port to connect to remote printers. Consequently, fetching printer information failed and the "Print" button became insensitive. This update makes sure CUPS checks the correct port, thus fixing this bug. (BZ#1221157, BZ#1154038)

Users of GTK+ are advised to upgrade to these updated packages, which fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.5 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.4 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.3 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.2 ppc64le
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.7 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.4 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.3 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

• BZ - 920023 - eog crashes when opening a folder containing graphic
• BZ - 982620 - Remote applications (un)usability (AppMenu)
• BZ - 986768 - virt-manager start failed by trap int3.
• BZ - 1046312 - [abrt] control-center-3.8.3-1.el7: _gtk_allocated_bitmask_intersects: Process /usr/bin/gnome-control-center was killed by signal 11 (SIGSEGV)
• BZ - 1055733 - No module named backtrace in File "/usr/share/glib-2.0/gdb/gobject.py", line 3
• BZ - 1078063 - Warning "object class `GtkTextTag' has no property named `font-scale'" pops up when click License in debug mode.
• BZ - 1111372 - [abrt] dconf-editor: composite_aligned_boxes(): dconf-editor killed by SIGSEGV
• BZ - 1126756 - Support for GTK 3.10+
• BZ - 1168600 - [glib 2.40 regression] Attempt to add property xxx after class was initialised
• BZ - 1174391 - Rebase to 0.4.22
• BZ - 1174433 - Rebase to 2.14.0
• BZ - 1174435 - Rebase to 1.14.2
• BZ - 1174436 - Rebase to 1.36.8
• BZ - 1174438 - Rebase to 2.31.1
• BZ - 1174439 - Rebase to 1.42.0
• BZ - 1174442 - Rebase to 3.14.13
• BZ - 1174447 - Rebase to 2.42.2
• BZ - 1174448 - Rebase to 0.22.0
• BZ - 1174500 - Rebase to 3.14.2
• BZ - 1174501 - Rebase to 1.0.2
• BZ - 1174556 - Rebase to 2.4.9
• BZ - 1174565 - Rebase to 2.42.0
• BZ - 1203755 - Rebase to 2.42.2 [GNOME 3.14.3]
• BZ - 1207187 - Changing bookmarks order by drag and drop in sidebar cause nautilus to crash
• BZ - 1221157 - CUPS backend checks wrong port for remote printers
• BZ - 1221159 - CUPS backend checks wrong port for remote printers
• BZ - 1221171 - rebase to 2.24.28
• BZ - 1223463 - GtkMenuButton is not disabled even if corresponding GAction is
• BZ - 1235413 - several of the updated desktop packages changed desktop-ids
• BZ - 1243646 - GTK3 apps have huge rendering stalls over SSH connection
• BZ - 1246040 - error: Installed (but unpackaged) file(s) found:
• BZ - 1252498 - 'test-limits' test fails on ppc64le
• BZ - 1259283 - [abrt] yelp: WebCore::SQLiteStatement::prepare(): yelp killed by SIGSEGV
• BZ - 1260577 - problem with signals with enum typed arguments
• BZ - 1264466 - Gdk-pixbuf make check fails on cve-2015-4491

CVEs

• CVE-2016-3190

References

• http://www.redhat.com/security/updates/classification/#normal