| Message ID | 20230203212417.874198-1-aperez@igalia.com |
|---|---|
| State | Accepted |
| Headers | show |
| Series | [1/1] package/webkitgtk: security bump to version 2.38.4 | expand |
Adrian, All On 2023-02-03 23:24 +0200, Adrian Perez de Castro spake thusly: > Bugfix release, with many security fixes, including (but not limited to) > patches for CVE-2023-23517, CVE-2023-23518, and CVE-2022-42826. > > Release notes: > > https://webkitgtk.org/2023/02/02/webkitgtk2.38.4-released.html > > Accompanying security advisory: > > https://webkitgtk.org/security/WSA-2023-0001.html > > Signed-off-by: Adrian Perez de Castro <aperez@igalia.com> Applied to master, thanks. Regards, Yann E. MORIN. > --- > package/webkitgtk/webkitgtk.hash | 8 ++++---- > package/webkitgtk/webkitgtk.mk | 2 +- > 2 files changed, 5 insertions(+), 5 deletions(-) > > diff --git a/package/webkitgtk/webkitgtk.hash b/package/webkitgtk/webkitgtk.hash > index eff7f5c18f..34fd19d3de 100644 > --- a/package/webkitgtk/webkitgtk.hash > +++ b/package/webkitgtk/webkitgtk.hash > @@ -1,7 +1,7 @@ > -# From https://webkitgtk.org/releases/webkitgtk-2.38.3.tar.xz.sums > -md5 1c1cc5eb59273091e228406937b23947 webkitgtk-2.38.3.tar.xz > -sha1 04cb5923d8ac6f435424b74115c3219ec597e9ad webkitgtk-2.38.3.tar.xz > -sha256 41f001d1ed448c6936b394a9f20e4640eebf83a7f08262df28504f7410604a5a webkitgtk-2.38.3.tar.xz > +# From https://webkitgtk.org/releases/webkitgtk-2.38.4.tar.xz.sums > +md5 1c9ca83a0ad7e4ca9e933094572cb7d9 webkitgtk-2.38.4.tar.xz > +sha1 38b47df2be9bfb97d68fce8c7fa2819966a79036 webkitgtk-2.38.4.tar.xz > +sha256 4f47ea29a2d4d5f15eef3dc9e2d6c6f067e8de863a3f64455e1ccf9693cc1d36 webkitgtk-2.38.4.tar.xz > > # Hashes for license files: > sha256 0b5d3a7cc325942567373b0ecd757d07c132e0ebd7c97bfc63f7e1a76094edb4 Source/WebCore/LICENSE-APPLE > diff --git a/package/webkitgtk/webkitgtk.mk b/package/webkitgtk/webkitgtk.mk > index b1bca7b88a..b42ac3b644 100644 > --- a/package/webkitgtk/webkitgtk.mk > +++ b/package/webkitgtk/webkitgtk.mk > @@ -4,7 +4,7 @@ > # > ################################################################################ > > -WEBKITGTK_VERSION = 2.38.3 > +WEBKITGTK_VERSION = 2.38.4 > WEBKITGTK_SITE = https://www.webkitgtk.org/releases > WEBKITGTK_SOURCE = webkitgtk-$(WEBKITGTK_VERSION).tar.xz > WEBKITGTK_INSTALL_STAGING = YES > -- > 2.39.1 > > _______________________________________________ > buildroot mailing list > buildroot@buildroot.org > https://lists.buildroot.org/mailman/listinfo/buildroot
diff --git a/package/webkitgtk/webkitgtk.hash b/package/webkitgtk/webkitgtk.hash index eff7f5c18f..34fd19d3de 100644 --- a/package/webkitgtk/webkitgtk.hash +++ b/package/webkitgtk/webkitgtk.hash @@ -1,7 +1,7 @@ -# From https://webkitgtk.org/releases/webkitgtk-2.38.3.tar.xz.sums -md5 1c1cc5eb59273091e228406937b23947 webkitgtk-2.38.3.tar.xz -sha1 04cb5923d8ac6f435424b74115c3219ec597e9ad webkitgtk-2.38.3.tar.xz -sha256 41f001d1ed448c6936b394a9f20e4640eebf83a7f08262df28504f7410604a5a webkitgtk-2.38.3.tar.xz +# From https://webkitgtk.org/releases/webkitgtk-2.38.4.tar.xz.sums +md5 1c9ca83a0ad7e4ca9e933094572cb7d9 webkitgtk-2.38.4.tar.xz +sha1 38b47df2be9bfb97d68fce8c7fa2819966a79036 webkitgtk-2.38.4.tar.xz +sha256 4f47ea29a2d4d5f15eef3dc9e2d6c6f067e8de863a3f64455e1ccf9693cc1d36 webkitgtk-2.38.4.tar.xz # Hashes for license files: sha256 0b5d3a7cc325942567373b0ecd757d07c132e0ebd7c97bfc63f7e1a76094edb4 Source/WebCore/LICENSE-APPLE diff --git a/package/webkitgtk/webkitgtk.mk b/package/webkitgtk/webkitgtk.mk index b1bca7b88a..b42ac3b644 100644 --- a/package/webkitgtk/webkitgtk.mk +++ b/package/webkitgtk/webkitgtk.mk @@ -4,7 +4,7 @@ # ################################################################################ -WEBKITGTK_VERSION = 2.38.3 +WEBKITGTK_VERSION = 2.38.4 WEBKITGTK_SITE = https://www.webkitgtk.org/releases WEBKITGTK_SOURCE = webkitgtk-$(WEBKITGTK_VERSION).tar.xz WEBKITGTK_INSTALL_STAGING = YES
Bugfix release, with many security fixes, including (but not limited to) patches for CVE-2023-23517, CVE-2023-23518, and CVE-2022-42826. Release notes: https://webkitgtk.org/2023/02/02/webkitgtk2.38.4-released.html Accompanying security advisory: https://webkitgtk.org/security/WSA-2023-0001.html Signed-off-by: Adrian Perez de Castro <aperez@igalia.com> --- package/webkitgtk/webkitgtk.hash | 8 ++++---- package/webkitgtk/webkitgtk.mk | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-)