Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/1.1/patches/2225365/?format=api
{ "id": 2225365, "url": "http://patchwork.ozlabs.org/api/1.1/patches/2225365/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/patch/20260420214451.2704785-1-aperez@igalia.com/", "project": { "id": 27, "url": "http://patchwork.ozlabs.org/api/1.1/projects/27/?format=api", "name": "Buildroot development", "link_name": "buildroot", "list_id": "buildroot.buildroot.org", "list_email": "buildroot@buildroot.org", "web_url": "", "scm_url": "", "webscm_url": "" }, "msgid": "<20260420214451.2704785-1-aperez@igalia.com>", "date": "2026-04-20T21:44:50", "name": "package/webkitgtk: security bump to 2.52.3", "commit_ref": null, "pull_url": null, "state": "accepted", "archived": false, "hash": "16a2a8f88eb4c8d1994400e5ad2ec25dce631ed9", "submitter": { "id": 71810, "url": "http://patchwork.ozlabs.org/api/1.1/people/71810/?format=api", "name": "Adrian Perez de Castro", "email": "aperez@igalia.com" }, "delegate": { "id": 89618, "url": "http://patchwork.ozlabs.org/api/1.1/users/89618/?format=api", "username": "juju", "first_name": "Julien", "last_name": "Olivain", "email": "juju@cotds.org" }, "mbox": "http://patchwork.ozlabs.org/project/buildroot/patch/20260420214451.2704785-1-aperez@igalia.com/mbox/", "series": [ { "id": 500688, "url": "http://patchwork.ozlabs.org/api/1.1/series/500688/?format=api", "web_url": "http://patchwork.ozlabs.org/project/buildroot/list/?series=500688", "date": "2026-04-20T21:44:50", "name": "package/webkitgtk: security bump to 2.52.3", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/500688/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2225365/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2225365/checks/", "tags": {}, "headers": { "Return-Path": "<buildroot-bounces@buildroot.org>", "X-Original-To": [ "incoming-buildroot@patchwork.ozlabs.org", "buildroot@buildroot.org" ], "Delivered-To": [ "patchwork-incoming-buildroot@legolas.ozlabs.org", "buildroot@buildroot.org" ], "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=d3ICtpxv;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::137; helo=smtp4.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)" ], "Received": [ "from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fzzYL5jPbz1yD8\n\tfor <incoming-buildroot@patchwork.ozlabs.org>;\n Tue, 21 Apr 2026 07:45:09 +1000 (AEST)", "from localhost (localhost [127.0.0.1])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id 5D93F40762;\n\tMon, 20 Apr 2026 21:45:06 +0000 (UTC)", "from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id bjFFzKxCZ1Tr; Mon, 20 Apr 2026 21:45:02 +0000 (UTC)", "from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id 3969440511;\n\tMon, 20 Apr 2026 21:45:02 +0000 (UTC)", "from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n by lists1.osuosl.org (Postfix) with ESMTP id 565C4259\n for <buildroot@buildroot.org>; Mon, 20 Apr 2026 21:45:00 +0000 (UTC)", "from localhost (localhost [127.0.0.1])\n by smtp1.osuosl.org (Postfix) with ESMTP id 3C90880F91\n for <buildroot@buildroot.org>; Mon, 20 Apr 2026 21:45:00 +0000 (UTC)", "from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id ETlWjpRUocNG for <buildroot@buildroot.org>;\n Mon, 20 Apr 2026 21:44:59 +0000 (UTC)", "from fanzine2.igalia.com (fanzine2.igalia.com [213.97.179.56])\n by smtp1.osuosl.org (Postfix) with ESMTPS id 0BA17807F4\n for <buildroot@buildroot.org>; Mon, 20 Apr 2026 21:44:56 +0000 (UTC)", "from 91-154-227-245.elisa-laajakaista.fi ([91.154.227.245]\n helo=kodama) by fanzine2.igalia.com with esmtpsa\n (Cipher TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim)\n id 1wEwQG-001QHW-W1; Mon, 20 Apr 2026 23:44:53 +0200", "from localhost (kodama [local])\n by kodama (OpenSMTPD) with ESMTPA id ba065d01;\n Mon, 20 Apr 2026 21:44:51 +0000 (UTC)" ], "X-Virus-Scanned": [ "amavis at osuosl.org", "amavis at osuosl.org" ], "X-Comment": "SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver=<UNKNOWN> ", "DKIM-Filter": [ "OpenDKIM Filter v2.11.0 smtp4.osuosl.org 3969440511", "OpenDKIM Filter v2.11.0 smtp1.osuosl.org 0BA17807F4" ], "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1776721502;\n\tbh=09KdFODjNsc1lMyU9L8INDM2NOmqB4nazCPkJASNqc0=;\n\th=From:To:Cc:Date:Subject:List-Id:List-Unsubscribe:List-Archive:\n\t List-Post:List-Help:List-Subscribe:From;\n\tb=d3ICtpxvMA9imPvrEOsJlpZi/uqGQghG4nDIdyzmQ38EkIQXzQ64c+hsgGbjNys57\n\t mAhr+bGBGBzhXR6evEagN90fluS1lCLESvERBzcHt3+MxT8fIEvU99sOHlO5K0ocTt\n\t RNzVjJc9K2HdGbFdJgReNOp3BY7Z7xDJZNX09qBwZr0W953eVfwUtVGz0jIUa+iKCd\n\t FhRGOT9vHG8aQwSA7+RTo55DkZ6pjOfQHuo8xyiqiZrTTFC55tYKWj/MjJXYX7TaHe\n\t e8eCaTn1zmXAXzgy5DSXywiSaPrPzxTjHwor2hPZJYlfQggkOLz5dGChaajJaC2CHP\n\t Tvy8UHNh9WZ7Q==", "Received-SPF": "Pass (mailfrom) identity=mailfrom; client-ip=213.97.179.56;\n helo=fanzine2.igalia.com; envelope-from=aperez@igalia.com;\n receiver=<UNKNOWN>", "DMARC-Filter": "OpenDMARC Filter v1.4.2 smtp1.osuosl.org 0BA17807F4", "From": "Adrian Perez de Castro <aperez@igalia.com>", "To": "buildroot@buildroot.org", "Cc": "Adrian Perez de Castro <aperez@igalia.com>", "Date": "Tue, 21 Apr 2026 00:44:50 +0300", "Message-ID": "<20260420214451.2704785-1-aperez@igalia.com>", "X-Mailer": "git-send-email 2.53.0", "MIME-Version": "1.0", "X-Mailman-Original-DKIM-Signature": "v=1; a=rsa-sha256; q=dns/txt;\n c=relaxed/relaxed; d=igalia.com;\n s=20170329; h=Content-Transfer-Encoding:MIME-Version:Message-ID:Date:Subject:\n Cc:To:From:Sender:Reply-To:Content-Type:Content-ID:Content-Description:\n Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:\n In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:\n List-Post:List-Owner:List-Archive;\n bh=0NAr7rkoWs95nMpdf7DwVbCmlHGn49/o5m7N7Dhexlk=; b=mm3s27UySlOK5Ng+e4+EWB6iiW\n PuvjF0bLoubFNRbNycLW5pfYm1nhOpxIdIESmc1IGzefDNs7xav2er5UVgNFFMKEdyPz9iEfMDu8W\n 9So2FnEyg2CKl5jiQNsLiE7RC1h5qQ1dC937QbvkbtHLV7P9pi4IO7ymnJAYhIlYYQ8/PifJ9WZsA\n Z21LS4HWDDza8zrmEdwbTRT5iv0lWnHvICDevZoATVIB+66qzetsf8b+uu59LWfY/yE/1+nF56gs7\n u/vgNRcGws4/9ShCe9KqX6Hkz7LArJuPeN2FZHpC1ObMQz1434Cv+tgKycq4iUGvdL8XU/kXuugpN\n hhkTTm2A==;", "X-Mailman-Original-Authentication-Results": [ "smtp1.osuosl.org;\n dmarc=pass (p=none dis=none)\n header.from=igalia.com", "smtp1.osuosl.org;\n dkim=pass (2048-bit key,\n unprotected) header.d=igalia.com header.i=@igalia.com header.a=rsa-sha256\n header.s=20170329 header.b=mm3s27Uy" ], "Subject": "[Buildroot] [PATCH] package/webkitgtk: security bump to 2.52.3", "X-BeenThere": "buildroot@buildroot.org", "X-Mailman-Version": "2.1.30", "Precedence": "list", "List-Id": "Discussion and development of buildroot <buildroot.buildroot.org>", "List-Unsubscribe": "<https://lists.buildroot.org/mailman/options/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=unsubscribe>", "List-Archive": "<http://lists.buildroot.org/pipermail/buildroot/>", "List-Post": "<mailto:buildroot@buildroot.org>", "List-Help": "<mailto:buildroot-request@buildroot.org?subject=help>", "List-Subscribe": "<https://lists.buildroot.org/mailman/listinfo/buildroot>,\n <mailto:buildroot-request@buildroot.org?subject=subscribe>", "Content-Type": "text/plain; charset=\"us-ascii\"", "Content-Transfer-Encoding": "7bit", "Errors-To": "buildroot-bounces@buildroot.org", "Sender": "\"buildroot\" <buildroot-bounces@buildroot.org>" }, "content": "This bumps WebKitGTK to the 2.52 stable series. A welcome change\nis the addition of the USE_GSTREAMER CMake option that can be used\nas a blanket option to toggle all multimedia support, which matches\nexactly the intention behind BR2_PACKAGE_WEBKITGTK_MULTIMEDIA.\n\nIncludes fixes (among others) for CVE-2026-20643, CVE-2026-20664,\nCVE-2026-20665, CVE-2026-20691, CVE-2026-28857, CVE-2026-28859,\nCVE-2026-28861, CVE-2026-28871, CVE-2025-43457, CVE-2025-46299,\nCVE-2026-20608, CVE-2026-20635, CVE-2026-20636, CVE-2026-20644,\nCVE-2026-20652, and CVE-2026-20676.\n\nHighlights of the 2.52 series:\n- https://webkitgtk.org/2026/03/18/webkitgtk-2.52-highlights.html\n\nRelease notes:\n- https://webkitgtk.org/2026/04/16/webkitgtk2.52.3-released.html\n- https://webkitgtk.org/2026/04/13/webkitgtk2.52.2-released.html\n- https://webkitgtk.org/2026/03/27/webkitgtk2.52.1-released.html\n- https://webkitgtk.org/2026/03/18/webkitgtk2.52.0-released.html\n- https://webkitgtk.org/2026/03/12/webkitgtk2.50.6-released.html\n\nSecurity advisories:\n- https://webkitgtk.org/security/WSA-2026-0002.html\n- https://webkitgtk.org/security/WSA-2026-0001.html\n\nSigned-off-by: Adrian Perez de Castro <aperez@igalia.com>\n---\n package/webkitgtk/webkitgtk.hash | 6 +++---\n package/webkitgtk/webkitgtk.mk | 12 +++---------\n 2 files changed, 6 insertions(+), 12 deletions(-)", "diff": "diff --git a/package/webkitgtk/webkitgtk.hash b/package/webkitgtk/webkitgtk.hash\nindex 77bdc5485b..03b8d0a9be 100644\n--- a/package/webkitgtk/webkitgtk.hash\n+++ b/package/webkitgtk/webkitgtk.hash\n@@ -1,6 +1,6 @@\n-# From https://webkitgtk.org/releases/webkitgtk-2.50.5.tar.xz.sums\n-sha1 e93f7efa9fbc7304cc159c35d8e76d7febab2515 webkitgtk-2.50.5.tar.xz\n-sha256 8737631bac3e9c7ad3e5208f9370e076c09d9c45b39980021ce54edadcc6f94f webkitgtk-2.50.5.tar.xz\n+# From https://webkitgtk.org/releases/webkitgtk-2.52.3.tar.xz.sums\n+sha1 17f9b127618040a5f3fcbb70e37ea16ab6d69b0b webkitgtk-2.52.3.tar.xz\n+sha256 5b3e0d174e63dcc28848b1194e0e7448d5948c3c2427ecd931c2c5be5261aebb webkitgtk-2.52.3.tar.xz\n \n # Hashes for license files:\n sha256 0b5d3a7cc325942567373b0ecd757d07c132e0ebd7c97bfc63f7e1a76094edb4 Source/WebCore/LICENSE-APPLE\ndiff --git a/package/webkitgtk/webkitgtk.mk b/package/webkitgtk/webkitgtk.mk\nindex 26c70ae6c8..54e769d589 100644\n--- a/package/webkitgtk/webkitgtk.mk\n+++ b/package/webkitgtk/webkitgtk.mk\n@@ -4,7 +4,7 @@\n #\n ################################################################################\n \n-WEBKITGTK_VERSION = 2.50.5\n+WEBKITGTK_VERSION = 2.52.3\n WEBKITGTK_SITE = https://www.webkitgtk.org/releases\n WEBKITGTK_SOURCE = webkitgtk-$(WEBKITGTK_VERSION).tar.xz\n WEBKITGTK_INSTALL_STAGING = YES\n@@ -56,16 +56,10 @@ WEBKITGTK_CONF_OPTS += -DENABLE_BUBBLEWRAP_SANDBOX=OFF\n endif\n \n ifeq ($(BR2_PACKAGE_WEBKITGTK_MULTIMEDIA),y)\n-WEBKITGTK_CONF_OPTS += \\\n-\t-DENABLE_VIDEO=ON \\\n-\t-DENABLE_WEB_AUDIO=ON \\\n-\t-DENABLE_WEB_CODECS=ON\n+WEBKITGTK_CONF_OPTS += -DUSE_GSTREAMER=ON\n WEBKITGTK_DEPENDENCIES += gstreamer1 gst1-libav gst1-plugins-bad gst1-plugins-base\n else\n-WEBKITGTK_CONF_OPTS += \\\n-\t-DENABLE_VIDEO=OFF \\\n-\t-DENABLE_WEB_AUDIO=OFF \\\n-\t-DENABLE_WEB_CODECS=OFF\n+WEBKITGTK_CONF_OPTS += -DUSE_GSTREAMER=OFF\n endif\n \n ifeq ($(BR2_PACKAGE_WEBKITGTK_WEBDRIVER),y)\n", "prefixes": [] }