From patchwork Sun Nov 10 16:25:03 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adrian Perez de Castro X-Patchwork-Id: 1192638 Return-Path: X-Original-To: incoming-buildroot@patchwork.ozlabs.org Delivered-To: patchwork-incoming-buildroot@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=busybox.net (client-ip=140.211.166.137; helo=fraxinus.osuosl.org; envelope-from=buildroot-bounces@busybox.net; receiver=) Authentication-Results: ozlabs.org; dmarc=none (p=none dis=none) header.from=igalia.com Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=igalia.com header.i=@igalia.com header.b="KpLR/RyZ"; dkim-atps=neutral Received: from fraxinus.osuosl.org (smtp4.osuosl.org [140.211.166.137]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 479zrV2rlsz9sNx for ; Mon, 11 Nov 2019 03:25:30 +1100 (AEDT) Received: from localhost (localhost [127.0.0.1]) by fraxinus.osuosl.org (Postfix) with ESMTP id DD36D859D5; Sun, 10 Nov 2019 16:25:27 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from fraxinus.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hKKwkbEwCMbc; Sun, 10 Nov 2019 16:25:25 +0000 (UTC) Received: from ash.osuosl.org (ash.osuosl.org [140.211.166.34]) by fraxinus.osuosl.org (Postfix) with ESMTP id C162085036; Sun, 10 Nov 2019 16:25:25 +0000 (UTC) X-Original-To: buildroot@lists.busybox.net Delivered-To: buildroot@osuosl.org Received: from whitealder.osuosl.org (smtp1.osuosl.org [140.211.166.138]) by ash.osuosl.org (Postfix) with ESMTP id B11B61BF318 for ; Sun, 10 Nov 2019 16:25:24 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by whitealder.osuosl.org (Postfix) with ESMTP id A9FC886499 for ; Sun, 10 Nov 2019 16:25:24 +0000 (UTC) X-Virus-Scanned: amavisd-new at osuosl.org Received: from whitealder.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h519BNMe7wmI for ; Sun, 10 Nov 2019 16:25:21 +0000 (UTC) X-Greylist: domain auto-whitelisted by SQLgrey-1.7.6 Received: from fanzine.igalia.com (fanzine.igalia.com [178.60.130.6]) by whitealder.osuosl.org (Postfix) with ESMTPS id 82CEE86292 for ; Sun, 10 Nov 2019 16:25:21 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=igalia.com; s=20170329; h=Content-Transfer-Encoding:MIME-Version:Message-Id:Date:Subject:Cc:To:From; bh=q6sZO5KVwxUxuLl3gGD6Fii8C56oOP6HO055hk09M/0=; b=KpLR/RyZJN6Vcsl/z3utA4QPk5vV6MlkNOdiFytar26NeUsT6mf806AK9p/WOncHv372AuU3FQ5bt+FHerwsQ37y2jFRkP0xFWmenBK53UT5/Dqk8KYwFIg7SdUOfntG17QlcnxmoSRdEOnMQ+90jVFUK2hw3qcdKSo0N22eAgil82Lxv9ni21jSD1zbYm0cv4o9WF0dgib44qmwl6jNfZUdiqyUmy/JfxTcmyeTmzV2zQCL+/o08Ps51yyTpzLCCKeadKVqBH991E3ehiZR6M7MtlkSsSBrTSyspWaDA5oxdR3ETUPDolArdX7zbN4hau6gG1yRucZXDU6lV7DOEw==; Received: from 82-181-115-92.bb.dnainternet.fi ([82.181.115.92] helo=kodama) by fanzine.igalia.com with esmtpsa (Cipher TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim) id 1iTq1b-0006ue-KQ; Sun, 10 Nov 2019 17:25:15 +0100 Received: from localhost (kodama [local]) by kodama (OpenSMTPD) with ESMTPA id edd49080; Sun, 10 Nov 2019 16:25:03 +0000 (UTC) From: Adrian Perez de Castro To: buildroot@buildroot.org Date: Sun, 10 Nov 2019 18:25:03 +0200 Message-Id: <20191110162503.3529982-1-aperez@igalia.com> X-Mailer: git-send-email 2.24.0 MIME-Version: 1.0 Subject: [Buildroot] [PATCH 1/1] package/wpewebkit: security bump to version 2.26.2 X-BeenThere: buildroot@busybox.net X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussion and development of buildroot List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Adrian Perez de Castro Errors-To: buildroot-bounces@busybox.net Sender: "buildroot" This is a minor release which includes fixes for CVE-2019-8812 and CVE-2019-8814. This release also fixes the build with WebDriver disabled, making patch "0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch" unneeded (and therefore removed). There is also a performance improvement for a regression related to fallback font selection, and a couple of small fixes. The full release notes are available at: https://wpewebkit.org/release/wpewebkit-2.26.2.html The detailed security advisory can be found at: https://wpewebkit.org/security/WSA-2019-0006.html Signed-off-by: Adrian Perez de Castro --- ...uild-fails-with-ENABLE_WEBDRIVER-OFF.patch | 56 ------------------- package/wpewebkit/wpewebkit.hash | 8 +-- package/wpewebkit/wpewebkit.mk | 2 +- 3 files changed, 5 insertions(+), 61 deletions(-) delete mode 100644 package/wpewebkit/0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch diff --git a/package/wpewebkit/0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch b/package/wpewebkit/0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch deleted file mode 100644 index d8bf85e8cd..0000000000 --- a/package/wpewebkit/0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch +++ /dev/null @@ -1,56 +0,0 @@ -From fb0f978af0dd3923a1d3bcb6dccf610861e284d3 Mon Sep 17 00:00:00 2001 -From: Adrian Perez de Castro -Date: Tue, 8 Oct 2019 11:06:56 +0300 -Subject: [PATCH xserver 2/2] [WPE][GTK] Build fails with ENABLE_WEBDRIVER=OFF - https://bugs.webkit.org/show_bug.cgi?id=202658 - -Reviewed by NOBODY (OOPS!). - -* UIProcess/Automation/gtk/WebAutomationSessionGtk.cpp: Add missing -ENABLE(WEBDRIVER_MOUSE_INTERACTIONS) and ENABLE(WEBDRIVER_KEYBOARD_INTERACTIONS) -preprocessor guards. -* UIProcess/Automation/wpe/WebAutomationSessionWPE.cpp: Ditto. - -Fetch (and adapted) from: https://bugs.webkit.org/show_bug.cgi?id=202658 -Upstream-Status: Pending -Signed-off-by: Adrian Perez de Castro - ---- - Source/WebKit/ChangeLog | 12 ++++++++++++ - .../Automation/gtk/WebAutomationSessionGtk.cpp | 4 ++++ - .../Automation/wpe/WebAutomationSessionWPE.cpp | 4 ++++ - 3 files changed, 20 insertions(+) - -diff --git a/Source/WebKit/UIProcess/Automation/wpe/WebAutomationSessionWPE.cpp b/Source/WebKit/UIProcess/Automation/wpe/WebAutomationSessionWPE.cpp -index d601f0e57ae..683f0b8eed4 100644 ---- a/Source/WebKit/UIProcess/Automation/wpe/WebAutomationSessionWPE.cpp -+++ b/Source/WebKit/UIProcess/Automation/wpe/WebAutomationSessionWPE.cpp -@@ -32,6 +32,7 @@ - namespace WebKit { - using namespace WebCore; - -+#if ENABLE(WEBDRIVER_MOUSE_INTERACTIONS) - static uint32_t modifiersToEventState(OptionSet modifiers) - { - uint32_t state = 0; -@@ -121,7 +122,9 @@ void WebAutomationSession::platformSimulateMouseInteraction(WebPageProxy& page, - break; - } - } -+#endif // ENABLE(WEBDRIVER_MOUSE_INTERACTIONS) - -+#if ENABLE(WEBDRIVER_KEYBOARD_INTERACTIONS) - static void doKeyStrokeEvent(struct wpe_view_backend* viewBackend, bool pressed, uint32_t keyCode, uint32_t modifiers, bool doReleaseAfterPress = false) - { - struct wpe_input_xkb_keymap_entry* entries; -@@ -309,6 +312,7 @@ void WebAutomationSession::platformSimulateKeySequence(WebPageProxy& page, const - p = g_utf8_next_char(p); - } while (*p); - } -+#endif // ENABLE(WEBDRIVER_KEYBOARD_INTERACTIONS) - - } // namespace WebKit - --- -2.23.0 - diff --git a/package/wpewebkit/wpewebkit.hash b/package/wpewebkit/wpewebkit.hash index 052252c32e..85a3271874 100644 --- a/package/wpewebkit/wpewebkit.hash +++ b/package/wpewebkit/wpewebkit.hash @@ -1,7 +1,7 @@ -# From https://wpewebkit.org/releases/wpewebkit-2.26.1.tar.xz.sums -md5 bec094fe878e03f42de751cbaf0b3e99 wpewebkit-2.26.1.tar.xz -sha1 53dfafab8d5ccb537e7330febb9504c390e3bf52 wpewebkit-2.26.1.tar.xz -sha256 d1ae85dffb5bfc106c5ac6d5e73a3dfe3cb2c1df1f18c16103e1dc744cd4ac14 wpewebkit-2.26.1.tar.xz +# From https://wpewebkit.org/releases/wpewebkit-2.26.2.tar.xz.sums +md5 057cc2647231e90c8197873df9a9f54c wpewebkit-2.26.2.tar.xz +sha1 eca4e35af2c2e70bd36a9bdef3bfbbfbd417210c wpewebkit-2.26.2.tar.xz +sha256 dd4fce390f1721d8d6d017fa712adb990f7230bde84a1b7d27327bd589053fdd wpewebkit-2.26.2.tar.xz # Hashes for license files: sha256 0b5d3a7cc325942567373b0ecd757d07c132e0ebd7c97bfc63f7e1a76094edb4 Source/WebCore/LICENSE-APPLE diff --git a/package/wpewebkit/wpewebkit.mk b/package/wpewebkit/wpewebkit.mk index 012e67af1f..c90e2d1421 100644 --- a/package/wpewebkit/wpewebkit.mk +++ b/package/wpewebkit/wpewebkit.mk @@ -4,7 +4,7 @@ # ################################################################################ -WPEWEBKIT_VERSION = 2.26.1 +WPEWEBKIT_VERSION = 2.26.2 WPEWEBKIT_SITE = http://www.wpewebkit.org/releases WPEWEBKIT_SOURCE = wpewebkit-$(WPEWEBKIT_VERSION).tar.xz WPEWEBKIT_INSTALL_STAGING = YES