package/wpewebkit: security bump to version 2.24.3
authorAdrian Perez de Castro <aperez@igalia.com>
Fri, 30 Aug 2019 14:15:28 +0000 (17:15 +0300)
committerPeter Korsgaard <peter@korsgaard.com>
Fri, 30 Aug 2019 14:39:32 +0000 (16:39 +0200)
This is a minor release which includes fixes for CVE-2019-8644,
CVE-2019-8649, CVE-2019-8658, CVE-2019-8666, CVE-2019-8669,
CVE-2019-8673, CVE-2019-8676, CVE-2019-8678, CVE-2019-8680,
CVE-2019-8681, CVE-2019-8683, CVE-2019-8684, CVE-2019-8687,
CVE-2019-8688, CVE-2019-8689, and CVE-2019-8690.

This release also contains many build fixes, a few media playback
improvements, and a Web compatibility fix. For a complete list,
the full release notes are available at:

  https://wpewebkit.org/release/wpewebkit-2.24.3.html

The detailed security advisory can be found at:

  https://wpewebkit.org/security/WSA-2019-0004.html

Patch "0001-Build-failure-after-r243644-in-GTK-Li.patch" is now unneeded
because it is one of the build fixes included in this release.

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/wpewebkit/0001-Build-failure-after-r243644-in-GTK-Li.patch [deleted file]
package/wpewebkit/wpewebkit.hash
package/wpewebkit/wpewebkit.mk

diff --git a/package/wpewebkit/0001-Build-failure-after-r243644-in-GTK-Li.patch b/package/wpewebkit/0001-Build-failure-after-r243644-in-GTK-Li.patch
deleted file mode 100644 (file)
index 748fc8e..0000000
+++ /dev/null
@@ -1,36 +0,0 @@
-From a672bbd75f257dd65844ad53dd21fb37345999b5 Mon Sep 17 00:00:00 2001
-From: "aperez@igalia.com"
- <aperez@igalia.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
-Date: Mon, 20 May 2019 21:20:02 +0000
-Subject: [PATCH] Build failure after r243644 in GTK
- Linux 64-bit stable builds https://bugs.webkit.org/show_bug.cgi?id=196440
-
-Patch by Pablo Saavedra <psaavedra@igalia.com> on 2019-04-01
-Reviewed by Philippe Normand.
-
-* platform/graphics/gstreamer/MediaPlayerPrivateGStreamerBase.cpp:
-(WebCore::MediaPlayerPrivateGStreamerBase::updateTextureMapperFlags):
-
-Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
-
-diff --git a/Source/WebCore/platform/graphics/gstreamer/MediaPlayerPrivateGStreamerBase.cpp b/Source/WebCore/platform/graphics/gstreamer/MediaPlayerPrivateGStreamerBase.cpp
-index 608aee2e1b3..c614050972a 100644
---- a/Source/WebCore/platform/graphics/gstreamer/MediaPlayerPrivateGStreamerBase.cpp
-+++ b/Source/WebCore/platform/graphics/gstreamer/MediaPlayerPrivateGStreamerBase.cpp
-@@ -1000,11 +1000,13 @@ void MediaPlayerPrivateGStreamerBase::updateTextureMapperFlags()
-         break;
-     }
-+#if USE(GSTREAMER_GL)
-     // When the imxvpudecoder is used, the texture sampling of the
-     // directviv-uploaded texture returns an RGB value, so there's no need to
-     // convert it.
-     if (m_videoDecoderPlatform != WebKitGstVideoDecoderPlatform::ImxVPU)
-         m_textureMapperFlags |= TEXTURE_MAPPER_COLOR_CONVERT_FLAG;
-+#endif
- }
- #endif
--- 
-2.21.0
-
index ddab159d4f744ee4fb46fb241431a0d815244563..8d09930267489d1d490cb09a55e6a80a11e59409 100644 (file)
@@ -1,7 +1,7 @@
-# From https://wpewebkit.org/releases/wpewebkit-2.24.2.tar.xz.sums
-md5 3604a2167827c8354f6dcbab98305d7b wpewebkit-2.24.2.tar.xz
-sha1 1248d7723d0e6aec52cafc27a92c5c335c1abdd4 wpewebkit-2.24.2.tar.xz
-sha256 cf251a467b3bcae50f97e22f4baccca49fcbbd54162dc5b71c0b1ebf655fd95f wpewebkit-2.24.2.tar.xz
+# From https://wpewebkit.org/releases/wpewebkit-2.24.3.tar.xz.sums
+md5 b5c6fe640b03c3e87594da2c0a0a8469 wpewebkit-2.24.3.tar.xz
+sha1 c9ccb6c4c65446e96ed6d534a1556db0fcca8268 wpewebkit-2.24.3.tar.xz
+sha256 907b20907a32a4288cbf67b56eab04cbbd997a7ca0f40b3c466cbbbbfba0e7ca wpewebkit-2.24.3.tar.xz
 
 # Hashes for license files:
 sha256 0b5d3a7cc325942567373b0ecd757d07c132e0ebd7c97bfc63f7e1a76094edb4 Source/WebCore/LICENSE-APPLE
index 4dc4a29064f984114d28a1bd9d94a47ceefa8bd5..48ed4f4afe0bd213d6face6083d9b0d0b2c77d5f 100644 (file)
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-WPEWEBKIT_VERSION = 2.24.2
+WPEWEBKIT_VERSION = 2.24.3
 WPEWEBKIT_SITE = http://www.wpewebkit.org/releases
 WPEWEBKIT_SOURCE = wpewebkit-$(WPEWEBKIT_VERSION).tar.xz
 WPEWEBKIT_INSTALL_STAGING = YES