[Bug 1571071] [NEW] Merge bugfix release webkitgtk 2.4.11-1 (universe) from Debian unstable (main)

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Amr Ibrahim (amribrahim1987):

Please merge bugfix release webkitgtk 2.4.11-1 (universe) from Debian
unstable (main)

=================
WebKitGTK+ 2.4.11
=================

  - Fix a crash when changing elment attributes with DOM bindings.
  - Fix the build on ARM64.
  - Translation updates: Chinese, Japanese.
-------------------------------------------

Explanation of the Ubuntu delta:
  * SECURITY UPDATE: Updated to 2.4.10 to fix multiple security issues
    (LP: #1556964)
    - CVE-2015-1120, CVE-2015-1076, CVE-2015-1071, CVE-2015-1081,
      CVE-2015-1122, CVE-2015-1155, CVE-2014-1748, CVE-2015-3752,
      CVE-2015-5809, CVE-2015-5928, CVE-2015-3749, CVE-2015-3659,
      CVE-2015-3748, CVE-2015-3743, CVE-2015-3731, CVE-2015-3745,
      CVE-2015-5822, CVE-2015-3658, CVE-2015-3741, CVE-2015-3727,
      CVE-2015-5801, CVE-2015-5788, CVE-2015-3747, CVE-2015-5794,
      CVE-2015-1127, CVE-2015-1153, CVE-2015-1083
  * Dropped upstreamed patches:
    - fix-gtkdoc-error.patch, atomic_build_fix.patch, ppc64-align.patch,
      fix-cloop.patch, use-abi64-for-mips64el.patch.
  * Merge with Debian, remaining changes:
    - bugzilla_clear_surface.patch: Take patch to fix upstream bug#123480
      which was a crash affecting software-center in Ubuntu.
    - Stick on geoclue 1 for now, the new version isn't in main and a
      transition plan needs to be worked out, for example for how to integrate
      the Ubuntu GeoIP service.
    - still build libwebkit2gtk-3.0 in Ubuntu
----------------------------------------------

Changelog entries since current xenial version 2.4.10-0ubuntu1:

webkitgtk (2.4.11-1) unstable; urgency=medium

  * New upstream release.
  * debian/patches/fix-arm64-build.patch:
    + Remove, this has been fixed upstream.
  * debian/patches/fix-ftbfs-m68k.patch:
    + Refresh.
  * debian/{control,rules}:
    + Build depend on libegl1-mesa-dev and libgles2-mesa-dev on arm64.

 -- Alberto Garcia <berto at igalia.com>  Sun, 10 Apr 2016 20:19:20 +0300

webkitgtk (2.4.10-1) unstable; urgency=high

  * New upstream release.
    + This contains the following security fixes: CVE-2015-1120,
      CVE-2015-1076, CVE-2015-1071, CVE-2015-1081, CVE-2015-1122,
      CVE-2015-1155, CVE-2014-1748, CVE-2015-3752, CVE-2015-5809,
      CVE-2015-5928, CVE-2015-3749, CVE-2015-3659, CVE-2015-3748,
      CVE-2015-3743, CVE-2015-3731, CVE-2015-3745, CVE-2015-5822,
      CVE-2015-3658, CVE-2015-3741, CVE-2015-3727, CVE-2015-5801,
      CVE-2015-5788, CVE-2015-3747, CVE-2015-5794, CVE-2015-1127,
      CVE-2015-1153, CVE-2015-1083.
  * debian/patches/fix-cloop.patch,
    debian/patches/fix-gtkdoc-error.patch,
    debian/patches/ppc64-align.patch,
    debian/patches/use-abi64-for-mips64el.patch:
    + Delete these patches, they are no longer needed.
  * debian/patches/atomic_build_fix.patch,
    debian/patches/x32_support.patch:
    + Refresh.
  * debian/patches/fix-ftbfs-m68k.patch:
    + Fix FTBFS in m68k (Closes: #696236).
  * debian/control:
    + Bump Standards-Version to 3.9.7; no changes needed.
    + Use secure URIs for the Vcs-* fields.
  * debian/rules:
    + Enable all hardening flags.
    + Remove EXTRA_DH_ARGUMENTS, this is no longer being used.
  * debian/copyright:
    + Update copyright years.
  * debian/source/lintian-overrides:
    + Update overrides so the latest lintian doesn't give more
      source-is-missing false positives.
  * Remove the libwebkitgtk-*common* and libwebkit-dev packages:
    + debian/control:
      - Remove package entries and add Breaks and Replaces fields to
        libwebkitgtk-{1,3}.0-0 and libwebkitgtk*-dev.
    + debian/libwebkitgtk-*common*.install:
      - Remove and move all files to libwebkitgtk-{1,3}.0-0.install and
        libwebkitgtk-3.0-dev.install.
    + debian/rules:
      - Remove dh_install rules from binary-indep.
  * Move documentation to a separate libwebkitgtk-doc package:
    + debian/libwebkitgtk-3.0-dev.{install,links},
      debian/libwebkitgtk-dev.{install,links},
      debian/libwebkitgtk-doc.{install,links}:
      debian/rules:
      - Don't install the documentation in the -dev packages and do it in
        libwebkitgtk-doc instead.
    + debian/libwebkitgtk-doc.doc-base:
      - Add doc-base control file.
    + debian/control:
      - Add package entry.
  * Migrate to automatic -dbgsym packages:
    + debian/control:
      - Remove the entries for all -dbg packages.
    + debian/rules:
      - Replace --dbg-package with --ddeb-migration in dh_strip, but don't
        make it fail if debhelper < 9.20151219.

 -- Alberto Garcia <berto at igalia.com>  Thu, 17 Mar 2016 10:15:29 +0200

** Affects: webkitgtk (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Merge bugfix release webkitgtk 2.4.11-1 (universe) from Debian unstable (main)
https://bugs.launchpad.net/bugs/1571071
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.