[Bug 1571071] Re: Merge bugfix release webkitgtk 2.4.11-1 (universe) from Debian unstable (main)

[Mathew Hodson]

** Tags removed: regression-update

** Tags removed: upgrade-software-version

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1571071

Title:
  Merge bugfix release webkitgtk 2.4.11-1 (universe) from Debian
  unstable (main)

Status in webkitgtk package in Ubuntu:
  New

Bug description:
  Please merge bugfix release webkitgtk 2.4.11-1 (universe) from Debian
  unstable (main)

  =================
  WebKitGTK+ 2.4.11
  =================

    - Fix a crash when changing elment attributes with DOM bindings.
    - Fix the build on ARM64.
    - Translation updates: Chinese, Japanese.
  -------------------------------------------

  Explanation of the Ubuntu delta:
    * SECURITY UPDATE: Updated to 2.4.10 to fix multiple security issues
      (LP: #1556964)
      - CVE-2015-1120, CVE-2015-1076, CVE-2015-1071, CVE-2015-1081,
        CVE-2015-1122, CVE-2015-1155, CVE-2014-1748, CVE-2015-3752,
        CVE-2015-5809, CVE-2015-5928, CVE-2015-3749, CVE-2015-3659,
        CVE-2015-3748, CVE-2015-3743, CVE-2015-3731, CVE-2015-3745,
        CVE-2015-5822, CVE-2015-3658, CVE-2015-3741, CVE-2015-3727,
        CVE-2015-5801, CVE-2015-5788, CVE-2015-3747, CVE-2015-5794,
        CVE-2015-1127, CVE-2015-1153, CVE-2015-1083
    * Dropped upstreamed patches:
      - fix-gtkdoc-error.patch, atomic_build_fix.patch, ppc64-align.patch,
        fix-cloop.patch, use-abi64-for-mips64el.patch.
    * Merge with Debian, remaining changes:
      - bugzilla_clear_surface.patch: Take patch to fix upstream bug#123480
        which was a crash affecting software-center in Ubuntu.
      - Stick on geoclue 1 for now, the new version isn't in main and a
        transition plan needs to be worked out, for example for how to integrate
        the Ubuntu GeoIP service.
      - still build libwebkit2gtk-3.0 in Ubuntu
  ----------------------------------------------

  Changelog entries since current xenial version 2.4.10-0ubuntu1:

  webkitgtk (2.4.11-1) unstable; urgency=medium

    * New upstream release.
    * debian/patches/fix-arm64-build.patch:
      + Remove, this has been fixed upstream.
    * debian/patches/fix-ftbfs-m68k.patch:
      + Refresh.
    * debian/{control,rules}:
      + Build depend on libegl1-mesa-dev and libgles2-mesa-dev on arm64.

   -- Alberto Garcia <berto at igalia.com>  Sun, 10 Apr 2016 20:19:20 +0300

  webkitgtk (2.4.10-1) unstable; urgency=high

    * New upstream release.
      + This contains the following security fixes: CVE-2015-1120,
        CVE-2015-1076, CVE-2015-1071, CVE-2015-1081, CVE-2015-1122,
        CVE-2015-1155, CVE-2014-1748, CVE-2015-3752, CVE-2015-5809,
        CVE-2015-5928, CVE-2015-3749, CVE-2015-3659, CVE-2015-3748,
        CVE-2015-3743, CVE-2015-3731, CVE-2015-3745, CVE-2015-5822,
        CVE-2015-3658, CVE-2015-3741, CVE-2015-3727, CVE-2015-5801,
        CVE-2015-5788, CVE-2015-3747, CVE-2015-5794, CVE-2015-1127,
        CVE-2015-1153, CVE-2015-1083.
    * debian/patches/fix-cloop.patch,
      debian/patches/fix-gtkdoc-error.patch,
      debian/patches/ppc64-align.patch,
      debian/patches/use-abi64-for-mips64el.patch:
      + Delete these patches, they are no longer needed.
    * debian/patches/atomic_build_fix.patch,
      debian/patches/x32_support.patch:
      + Refresh.
    * debian/patches/fix-ftbfs-m68k.patch:
      + Fix FTBFS in m68k (Closes: #696236).
    * debian/control:
      + Bump Standards-Version to 3.9.7; no changes needed.
      + Use secure URIs for the Vcs-* fields.
    * debian/rules:
      + Enable all hardening flags.
      + Remove EXTRA_DH_ARGUMENTS, this is no longer being used.
    * debian/copyright:
      + Update copyright years.
    * debian/source/lintian-overrides:
      + Update overrides so the latest lintian doesn't give more
        source-is-missing false positives.
    * Remove the libwebkitgtk-*common* and libwebkit-dev packages:
      + debian/control:
        - Remove package entries and add Breaks and Replaces fields to
          libwebkitgtk-{1,3}.0-0 and libwebkitgtk*-dev.
      + debian/libwebkitgtk-*common*.install:
        - Remove and move all files to libwebkitgtk-{1,3}.0-0.install and
          libwebkitgtk-3.0-dev.install.
      + debian/rules:
        - Remove dh_install rules from binary-indep.
    * Move documentation to a separate libwebkitgtk-doc package:
      + debian/libwebkitgtk-3.0-dev.{install,links},
        debian/libwebkitgtk-dev.{install,links},
        debian/libwebkitgtk-doc.{install,links}:
        debian/rules:
        - Don't install the documentation in the -dev packages and do it in
          libwebkitgtk-doc instead.
      + debian/libwebkitgtk-doc.doc-base:
        - Add doc-base control file.
      + debian/control:
        - Add package entry.
    * Migrate to automatic -dbgsym packages:
      + debian/control:
        - Remove the entries for all -dbg packages.
      + debian/rules:
        - Replace --dbg-package with --ddeb-migration in dh_strip, but don't
          make it fail if debhelper < 9.20151219.

   -- Alberto Garcia <berto at igalia.com>  Thu, 17 Mar 2016 10:15:29 +0200

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/webkitgtk/+bug/1571071/+subscriptions