[ubuntu/jammy-security] webkit2gtk 2.40.4-0ubuntu0.22.04.1 (Accepted)

[Marc Deslauriers]

webkit2gtk (2.40.4-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * Update to 2.40.4 to fix security issues.
    - debian/control.in: remove libavif-dev as there are no i386 binaries
      for it in 22.04 and it blocks the i386 build.
    - CVE-2023-28204, CVE-2023-32373, CVE-2023-32435, CVE-2023-32439,
      CVE-2023-37450, CVE-2023-32393

webkit2gtk (2.40.3-1) unstable; urgency=high

  * New upstream release (Closes: #1036946).
  * debian/control.in:
    - Enable the bubblewrap sandbox in riscv64.
  * debian/copyright:
    - Update copyright information of all files.
  * debian/patches/fix-jsc-timestamp.patch:
    - Ensure reproducibility of __TIMESTAMP__ in JSCBytecodeCacheVersion.cpp.

webkit2gtk (2.40.2-1) unstable; urgency=high

  * New upstream release.
  * debian/rules:
    - Pass -VNone to dh_makeshlibs for javascriptcore to keep the behavior
      of the debhelper compat level 11 and earlier.

webkit2gtk (2.40.1-1) unstable; urgency=high

  * New upstream release.
  * debian/rules:
    - Build with -DUSE_GBM=OFF in the Hurd (Closes: #1033999).
  * Drop fix-script-message-received-marshaller.patch and
    fix-gst-crash.patch. Refresh all other patches.
  * debian/copyright:
    - Update copyright information of all files.

webkit2gtk (2.40.0-3) unstable; urgency=medium

  * debian/{rules,control.in}:
    - Add dependency on libgles2 on arm (Closes: #1033230).

webkit2gtk (2.40.0-2) unstable; urgency=medium

  * debian/patches/fix-script-message-received-marshaller.patch:
    - Cherry pick fix for a regression that affects Epiphany.
  * debian/patches/fix-gst-crash.patch:
    - Cherry pick fix for a GStreamer-related crash.

webkit2gtk (2.40.0-1) unstable; urgency=medium

  * New upstream release.
  * Bring all changes from the 2.39 (experimental) branch.
  * The GTK4 build's API number changes from 5.0 to 6.0.
    - debian/{rules,not-installed,control.in,control-common.in}: Update
      all these files to reflect the API and package name changes.
  * debian/rules:
    - Build with -DDEBUG_FISSION=OFF since it adds the -gsplit-dwarf flag
      that is currently not supported by dh_dwz (see #1016936).
    - Disable WebGL in armel, mipsel, m68k, powerpc and sh4 to work around
      a FTBFS caused by upstream bug #252670.
    - Stop passing -DUSE_LD_GOLD=OFF, this option no longer exists (and
      update reduce-memory-overheads.patch accordingly).
    - Use reduced optimizations on m68k in order to lower memory
      requirements (John Paul Adrian Glaubitz) (Closes: #1032404).
    - Disable AVIF and GStreamer transcoding on Ubuntu (Jeremy Bicha).
    - Build the 4.1 API version of the WebKit WebDriver if possible.
    - Rename WebKit2WebExtension to WebKitWebProcessExtension in the GTK4
      build's install files.
    - Remove /usr/include/*/JavaScriptCore from the GTK4 build's .install
      files.
  * Use the documentation from the 4.1 API build. This simplifies the
    build process a bit (the package is still named 4.0-doc to make
    backports easier).
  * debian/control.in:
    - Add build dependencies on unifdef, libavif-dev and
      libgstreamer-plugins-bad1.0-dev (for webrtc).
    - Require libgstreamer-plugins-bad1.0-dev >= 1.20.0, this is needed
      for USE_GSTREAMER_TRANSCODER.
    - Don't use ccache on m68k (thanks, John Paul Adrian Glaubitz)
      (Closes: #1033042).
  * debian/copyright:
    - Update copyright information of all files.
  * debian/gbp.conf:
    - Update upstream branch name.
  * debian/libwebkit2gtk-4.0-37.symbols:
    - Update symbols.
    - Mark with (gtk3-only) and (gtk4-only) the symbols that are specific
      to each build.
  * debian/libwebkit2gtk-4.0-37.install:
    - WebKit2GTK-*.mo is now WebKitGTK-*.mo.
  * debian/libwebkit2gtk-4.0-dev.install:
    - Update include path.
  * debian/source/lintian-overrides:
    - Update source-is-missing overrides.
  * debian/patches/dont-detect-sse2.patch:
    - Don't build ANGLE with SSE support in i386.
  * Drop debian/patches/fix-non-unified-build.patch and use unified builds
    in all architecture.
  * Refresh all other patches.

Date: 2023-07-23 18:51:08.840471+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/webkit2gtk/2.40.4-0ubuntu0.22.04.1
-------------- next part --------------
Sorry, changesfile not available.