[1/1] package/wpewebkit: security bump to version 2.26.2
diff mbox series

Message ID 20191110162503.3529982-1-aperez@igalia.com
State Accepted
Headers show
Series
  • [1/1] package/wpewebkit: security bump to version 2.26.2
Related show

Commit Message

Adrian Perez de Castro Nov. 10, 2019, 4:25 p.m. UTC
This is a minor release which includes fixes for CVE-2019-8812 and
CVE-2019-8814.

This release also fixes the build with WebDriver disabled, making patch
"0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch" unneeded
(and therefore removed). There is also a performance improvement for
a regression related to fallback font selection, and a couple of small
fixes. The full release notes are available at:

  https://wpewebkit.org/release/wpewebkit-2.26.2.html

The detailed security advisory can be found at:

  https://wpewebkit.org/security/WSA-2019-0006.html

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
---
 ...uild-fails-with-ENABLE_WEBDRIVER-OFF.patch | 56 -------------------
 package/wpewebkit/wpewebkit.hash              |  8 +--
 package/wpewebkit/wpewebkit.mk                |  2 +-
 3 files changed, 5 insertions(+), 61 deletions(-)
 delete mode 100644 package/wpewebkit/0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch

Comments

Thomas Petazzoni Nov. 15, 2019, 10:35 p.m. UTC | #1
On Sun, 10 Nov 2019 18:25:03 +0200
Adrian Perez de Castro <aperez@igalia.com> wrote:

> This is a minor release which includes fixes for CVE-2019-8812 and
> CVE-2019-8814.
> 
> This release also fixes the build with WebDriver disabled, making patch
> "0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch" unneeded
> (and therefore removed). There is also a performance improvement for
> a regression related to fallback font selection, and a couple of small
> fixes. The full release notes are available at:
> 
>   https://wpewebkit.org/release/wpewebkit-2.26.2.html
> 
> The detailed security advisory can be found at:
> 
>   https://wpewebkit.org/security/WSA-2019-0006.html
> 
> Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
> ---
>  ...uild-fails-with-ENABLE_WEBDRIVER-OFF.patch | 56 -------------------
>  package/wpewebkit/wpewebkit.hash              |  8 +--
>  package/wpewebkit/wpewebkit.mk                |  2 +-
>  3 files changed, 5 insertions(+), 61 deletions(-)
>  delete mode 100644 package/wpewebkit/0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch

Applied to master, thanks.

Thomas
Peter Korsgaard Nov. 16, 2019, 9:58 p.m. UTC | #2
>>>>> "Adrian" == Adrian Perez de Castro <aperez@igalia.com> writes:

 > This is a minor release which includes fixes for CVE-2019-8812 and
 > CVE-2019-8814.

 > This release also fixes the build with WebDriver disabled, making patch
 > "0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch" unneeded
 > (and therefore removed). There is also a performance improvement for
 > a regression related to fallback font selection, and a couple of small
 > fixes. The full release notes are available at:

 >   https://wpewebkit.org/release/wpewebkit-2.26.2.html

 > The detailed security advisory can be found at:

 >   https://wpewebkit.org/security/WSA-2019-0006.html

 > Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>

How about the corresponding bump of webkitgtk?
Adrian Perez de Castro Nov. 22, 2019, 6:01 p.m. UTC | #3
Hi there,

On Sat, 16 Nov 2019 22:58:10 +0100, Peter Korsgaard <peter@korsgaard.com> wrote:
> >>>>> "Adrian" == Adrian Perez de Castro <aperez@igalia.com> writes:
> 
>  > This is a minor release which includes fixes for CVE-2019-8812 and
>  > CVE-2019-8814.
> 
>  > This release also fixes the build with WebDriver disabled, making patch
>  > "0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch" unneeded
>  > (and therefore removed). There is also a performance improvement for
>  > a regression related to fallback font selection, and a couple of small
>  > fixes. The full release notes are available at:
> 
>  >   https://wpewebkit.org/release/wpewebkit-2.26.2.html
> 
>  > The detailed security advisory can be found at:
> 
>  >   https://wpewebkit.org/security/WSA-2019-0006.html
> 
>  > Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
> 
> How about the corresponding bump of webkitgtk?

Here goes:

  https://patchwork.ozlabs.org/patch/1199576/

Best regards,
—Adrián

Patch
diff mbox series

diff --git a/package/wpewebkit/0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch b/package/wpewebkit/0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch
deleted file mode 100644
index d8bf85e8cd..0000000000
--- a/package/wpewebkit/0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch
+++ /dev/null
@@ -1,56 +0,0 @@ 
-From fb0f978af0dd3923a1d3bcb6dccf610861e284d3 Mon Sep 17 00:00:00 2001
-From: Adrian Perez de Castro <aperez@igalia.com>
-Date: Tue, 8 Oct 2019 11:06:56 +0300
-Subject: [PATCH xserver 2/2] [WPE][GTK] Build fails with ENABLE_WEBDRIVER=OFF
- https://bugs.webkit.org/show_bug.cgi?id=202658
-
-Reviewed by NOBODY (OOPS!).
-
-* UIProcess/Automation/gtk/WebAutomationSessionGtk.cpp: Add missing
-ENABLE(WEBDRIVER_MOUSE_INTERACTIONS) and ENABLE(WEBDRIVER_KEYBOARD_INTERACTIONS)
-preprocessor guards.
-* UIProcess/Automation/wpe/WebAutomationSessionWPE.cpp: Ditto.
-
-Fetch (and adapted) from: https://bugs.webkit.org/show_bug.cgi?id=202658
-Upstream-Status: Pending
-Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
-
----
- Source/WebKit/ChangeLog                              | 12 ++++++++++++
- .../Automation/gtk/WebAutomationSessionGtk.cpp       |  4 ++++
- .../Automation/wpe/WebAutomationSessionWPE.cpp       |  4 ++++
- 3 files changed, 20 insertions(+)
-
-diff --git a/Source/WebKit/UIProcess/Automation/wpe/WebAutomationSessionWPE.cpp b/Source/WebKit/UIProcess/Automation/wpe/WebAutomationSessionWPE.cpp
-index d601f0e57ae..683f0b8eed4 100644
---- a/Source/WebKit/UIProcess/Automation/wpe/WebAutomationSessionWPE.cpp
-+++ b/Source/WebKit/UIProcess/Automation/wpe/WebAutomationSessionWPE.cpp
-@@ -32,6 +32,7 @@
- namespace WebKit {
- using namespace WebCore;
- 
-+#if ENABLE(WEBDRIVER_MOUSE_INTERACTIONS)
- static uint32_t modifiersToEventState(OptionSet<WebEvent::Modifier> modifiers)
- {
-     uint32_t state = 0;
-@@ -121,7 +122,9 @@ void WebAutomationSession::platformSimulateMouseInteraction(WebPageProxy& page,
-         break;
-     }
- }
-+#endif // ENABLE(WEBDRIVER_MOUSE_INTERACTIONS)
- 
-+#if ENABLE(WEBDRIVER_KEYBOARD_INTERACTIONS)
- static void doKeyStrokeEvent(struct wpe_view_backend* viewBackend, bool pressed, uint32_t keyCode, uint32_t modifiers, bool doReleaseAfterPress = false)
- {
-     struct wpe_input_xkb_keymap_entry* entries;
-@@ -309,6 +312,7 @@ void WebAutomationSession::platformSimulateKeySequence(WebPageProxy& page, const
-         p = g_utf8_next_char(p);
-     } while (*p);
- }
-+#endif // ENABLE(WEBDRIVER_KEYBOARD_INTERACTIONS)
- 
- } // namespace WebKit
- 
--- 
-2.23.0
-
diff --git a/package/wpewebkit/wpewebkit.hash b/package/wpewebkit/wpewebkit.hash
index 052252c32e..85a3271874 100644
--- a/package/wpewebkit/wpewebkit.hash
+++ b/package/wpewebkit/wpewebkit.hash
@@ -1,7 +1,7 @@ 
-# From https://wpewebkit.org/releases/wpewebkit-2.26.1.tar.xz.sums
-md5 bec094fe878e03f42de751cbaf0b3e99 wpewebkit-2.26.1.tar.xz
-sha1 53dfafab8d5ccb537e7330febb9504c390e3bf52 wpewebkit-2.26.1.tar.xz
-sha256 d1ae85dffb5bfc106c5ac6d5e73a3dfe3cb2c1df1f18c16103e1dc744cd4ac14 wpewebkit-2.26.1.tar.xz
+# From https://wpewebkit.org/releases/wpewebkit-2.26.2.tar.xz.sums
+md5 057cc2647231e90c8197873df9a9f54c wpewebkit-2.26.2.tar.xz
+sha1 eca4e35af2c2e70bd36a9bdef3bfbbfbd417210c wpewebkit-2.26.2.tar.xz
+sha256 dd4fce390f1721d8d6d017fa712adb990f7230bde84a1b7d27327bd589053fdd wpewebkit-2.26.2.tar.xz
 
 # Hashes for license files:
 sha256 0b5d3a7cc325942567373b0ecd757d07c132e0ebd7c97bfc63f7e1a76094edb4 Source/WebCore/LICENSE-APPLE
diff --git a/package/wpewebkit/wpewebkit.mk b/package/wpewebkit/wpewebkit.mk
index 012e67af1f..c90e2d1421 100644
--- a/package/wpewebkit/wpewebkit.mk
+++ b/package/wpewebkit/wpewebkit.mk
@@ -4,7 +4,7 @@ 
 #
 ################################################################################
 
-WPEWEBKIT_VERSION = 2.26.1
+WPEWEBKIT_VERSION = 2.26.2
 WPEWEBKIT_SITE = http://www.wpewebkit.org/releases
 WPEWEBKIT_SOURCE = wpewebkit-$(WPEWEBKIT_VERSION).tar.xz
 WPEWEBKIT_INSTALL_STAGING = YES