-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 30 May 2019 10:36:55 +0200 Source: webkit2gtk Binary: libjavascriptcoregtk-4.0-18 libjavascriptcoregtk-4.0-dev libjavascriptcoregtk-4.0-bin gir1.2-javascriptcoregtk-4.0 libwebkit2gtk-4.0-37 libwebkit2gtk-4.0-dev libwebkit2gtk-4.0-doc gir1.2-webkit2-4.0 libwebkit2gtk-4.0-37-gtk2 webkit2gtk-driver Architecture: source i386 all Version: 2.24.2-1~bpo9+1 Distribution: stretch-backports Urgency: medium Maintainer: Debian WebKit Maintainers <pkg-webkit-maintainers@lists.alioth.debian.org> Changed-By: Alberto Garcia <berto@igalia.com> Description: gir1.2-javascriptcoregtk-4.0 - JavaScript engine library from WebKitGTK - GObject introspection gir1.2-webkit2-4.0 - Web content engine library for GTK - GObject introspection data libjavascriptcoregtk-4.0-18 - JavaScript engine library from WebKitGTK libjavascriptcoregtk-4.0-bin - JavaScript engine library from WebKitGTK - command-line interpret libjavascriptcoregtk-4.0-dev - JavaScript engine library from WebKitGTK - development files libwebkit2gtk-4.0-37 - Web content engine library for GTK libwebkit2gtk-4.0-37-gtk2 - Web content engine library for GTK - GTK 2 plugin process libwebkit2gtk-4.0-dev - Web content engine library for GTK - development files libwebkit2gtk-4.0-doc - Web content engine library for GTK - documentation webkit2gtk-driver - WebKitGTK WebDriver support Changes: webkit2gtk (2.24.2-1~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports. * debian/control: + Versions of GStreamer < 1.13 had GStreamerGL in the "bad" set, so depend on libgstreamer-plugins-bad1.0-dev and don't require GStreamer 1.13. Don't install libgstreamer-plugins-bad1.0-dev in armel or armhf: the usage of two different GL implementations causes a build failure (see WebKit bug #175127). + Remove build dependency on libwoff-dev, this is not available in this Debian release. + Don't recommend gstreamer1.0-gl, that package is not available in this Debian release. + Downgrade build dependency on debhelper to 10 and don't require ninja-build. + Don't depend on libopenjp2-7-dev. * debian/rules: + Build with -DENABLE_MEDIA_SOURCE=OFF. This feature requires a more recent version of GStreamer. + Build with -DUSE_OPENJPEG=OFF. This feature requires a more recent version of libopenjp2-7-dev. + Don't use cmake+ninja. * debian/patches/fix-gst-build.patch: + Fix build with GStreamer <= 1.12.5 . webkit2gtk (2.24.2-1) unstable; urgency=medium . * New upstream release. + This fixes CVE-2019-8595, CVE-2019-8607 and CVE-2019-8615. * debian/patches/fix-redirected-streams.patch, debian/patches/fix-cjk-white-space.patch: + Drop these patches. * debian/libwebkit2gtk-4.0-37.symbols: + Update symbols. Checksums-Sha1: 2623cb8c7803f295b63f6e22e93206412491293e 4142 webkit2gtk_2.24.2-1~bpo9+1.dsc 17c355c137e66f7a3e89ef2bb906dd195fee6fde 61160 webkit2gtk_2.24.2-1~bpo9+1.debian.tar.xz 9c7aa2c28e8afe135812aec3f5dc490bd61f106f 80948 gir1.2-javascriptcoregtk-4.0_2.24.2-1~bpo9+1_i386.deb 3fff13c593329d13f83dae2dac1581dbbc19b290 127750 gir1.2-webkit2-4.0_2.24.2-1~bpo9+1_i386.deb 332a9631541e21e59b1321d38213c9f278a61203 9099364 libjavascriptcoregtk-4.0-18-dbgsym_2.24.2-1~bpo9+1_i386.deb e2e904d8a322f22e70e431f3bc08fa1b62515525 2832446 libjavascriptcoregtk-4.0-18_2.24.2-1~bpo9+1_i386.deb 8bba0a74c6a23b14200e12bdfa3a33ff3eadd274 205688 libjavascriptcoregtk-4.0-bin-dbgsym_2.24.2-1~bpo9+1_i386.deb f8c60344bdc7898e9b53039df6bbdbbb7c8c9736 152272 libjavascriptcoregtk-4.0-bin_2.24.2-1~bpo9+1_i386.deb 588afadc032cdf47d770d4b572b00a56df3c18a6 103630 libjavascriptcoregtk-4.0-dev_2.24.2-1~bpo9+1_i386.deb 5212b125be568d75bc16eab232c5cfd9b73d93fd 56929056 libwebkit2gtk-4.0-37-dbgsym_2.24.2-1~bpo9+1_i386.deb 997992437c187511ba9841df2baa46712cac7a59 45035602 libwebkit2gtk-4.0-37-gtk2-dbgsym_2.24.2-1~bpo9+1_i386.deb 62fc107aa3d8a0c411ab5eb574f93fd3c16668e9 10705600 libwebkit2gtk-4.0-37-gtk2_2.24.2-1~bpo9+1_i386.deb 89e3c83503358963a104a25a3dade480f6e6084b 12773134 libwebkit2gtk-4.0-37_2.24.2-1~bpo9+1_i386.deb 70cb32d57e7bfbfbcb0f28b21f5d5a500880d810 239784 libwebkit2gtk-4.0-dev_2.24.2-1~bpo9+1_i386.deb 75ad3aad35cac54d312027e9e97504819048df93 414298 libwebkit2gtk-4.0-doc_2.24.2-1~bpo9+1_all.deb 8c4181db302c2727c3d27918e9185944d68d6b5c 731550 webkit2gtk-driver-dbgsym_2.24.2-1~bpo9+1_i386.deb 005a7ce42d67323b4e16ddff0c72d71dd79952de 322386 webkit2gtk-driver_2.24.2-1~bpo9+1_i386.deb 3bce798a09e03e76a2f18b36e5bb00a7bf6d908d 22013 webkit2gtk_2.24.2-1~bpo9+1_i386.buildinfo Checksums-Sha256: 009a4b815e05cf0a973a09f0e9b20469289fb4d1a3124036fc697d9257006298 4142 webkit2gtk_2.24.2-1~bpo9+1.dsc c3900d3ae9da58cf236178b51321d468e56b9e6800d69c1bacc45dfa474d0de8 61160 webkit2gtk_2.24.2-1~bpo9+1.debian.tar.xz 54ae1eb6981cbe0efa124bfaca1a5b5a5a3702444067c932885ac4ab75ce7ac4 80948 gir1.2-javascriptcoregtk-4.0_2.24.2-1~bpo9+1_i386.deb 12a10fb4f01e8e29f695fd7037c754d0b4eea7a9abc60e1fceb16272e5c15b03 127750 gir1.2-webkit2-4.0_2.24.2-1~bpo9+1_i386.deb 09515ccd04c3e6502401f16884026a44a0f6115cee9e1651ded85c5dbaee7905 9099364 libjavascriptcoregtk-4.0-18-dbgsym_2.24.2-1~bpo9+1_i386.deb 016440ec3cdff4e0893871c4970f83317ebf39d674e2c9e584296ce3d422fc6f 2832446 libjavascriptcoregtk-4.0-18_2.24.2-1~bpo9+1_i386.deb 475de1f7fdbf5f2b4e8f67ffd184bd39740fd2fb0456d9f1549f76553dfb9d21 205688 libjavascriptcoregtk-4.0-bin-dbgsym_2.24.2-1~bpo9+1_i386.deb 6f1222972ae124fb7506abb2314e26d665a9003f368aad7195e9bf75cb9b5e2c 152272 libjavascriptcoregtk-4.0-bin_2.24.2-1~bpo9+1_i386.deb dca184d4bd060bb7658f89c476bfe3a2e14b7cc4c9b1a7226cd2015eb073b951 103630 libjavascriptcoregtk-4.0-dev_2.24.2-1~bpo9+1_i386.deb a8a7337d492d7e1d58d27aceaa9ae11405a438313fd8a8ebd8754f0b0825b04d 56929056 libwebkit2gtk-4.0-37-dbgsym_2.24.2-1~bpo9+1_i386.deb 1a56230e0fcf502f392dfef06602b0c78d4383e5f5b67a60f76a45a03dd28c96 45035602 libwebkit2gtk-4.0-37-gtk2-dbgsym_2.24.2-1~bpo9+1_i386.deb 6e00c1de1eeb591ae8a5e74e9f9a0ffa38cd357798af885494de924f7c2c95ca 10705600 libwebkit2gtk-4.0-37-gtk2_2.24.2-1~bpo9+1_i386.deb 7bc476d2d4e8e042c02b5b99d3df0886cc227c88134fcbab2d9a1902fc7d28c5 12773134 libwebkit2gtk-4.0-37_2.24.2-1~bpo9+1_i386.deb 349ffa25b2dbe6f4ea485724bf5c3c9f77cf63df0f2b4deff3be959aaacc1b47 239784 libwebkit2gtk-4.0-dev_2.24.2-1~bpo9+1_i386.deb a3a3636b42eaca8d73adfc526450fd5d4440a1468a6871b378130c3bec4902ad 414298 libwebkit2gtk-4.0-doc_2.24.2-1~bpo9+1_all.deb 865ba10e5eaa7b0bc77b1b555e1f41068826b7fc35f2243f18bf14ec352ee104 731550 webkit2gtk-driver-dbgsym_2.24.2-1~bpo9+1_i386.deb 8a66ecfdfe5dd655fa5f8b0cf74462fe4620bef9cf2b0ad9fc3c4d47a99d70fa 322386 webkit2gtk-driver_2.24.2-1~bpo9+1_i386.deb 6d51b5bdb4e1eec1c55317cd0a08cdd05e779008ec89a0909520809d5005f600 22013 webkit2gtk_2.24.2-1~bpo9+1_i386.buildinfo Files: 9c8017a9e04e5e263f25043091a87be3 4142 web optional webkit2gtk_2.24.2-1~bpo9+1.dsc d77574114c63df1c39be844ae4c6d749 61160 web optional webkit2gtk_2.24.2-1~bpo9+1.debian.tar.xz fb6a7706e9c3ccc9dd60394e74e96730 80948 introspection optional gir1.2-javascriptcoregtk-4.0_2.24.2-1~bpo9+1_i386.deb 4aab3cfbd645f360dc2c8b3e563e84ca 127750 introspection optional gir1.2-webkit2-4.0_2.24.2-1~bpo9+1_i386.deb cae7cbd67d29e652dd0abcb5f85d0522 9099364 debug extra libjavascriptcoregtk-4.0-18-dbgsym_2.24.2-1~bpo9+1_i386.deb 52df0184d46a8f0cf37dfc68fe875c54 2832446 libs optional libjavascriptcoregtk-4.0-18_2.24.2-1~bpo9+1_i386.deb fc79ea61db9ba90c4e8a1652acd1c4e3 205688 debug extra libjavascriptcoregtk-4.0-bin-dbgsym_2.24.2-1~bpo9+1_i386.deb 9b010d7c901fa5212593e7462d1a7e73 152272 interpreters optional libjavascriptcoregtk-4.0-bin_2.24.2-1~bpo9+1_i386.deb cc5d270faf1459917f4e2d8da880a25f 103630 libdevel optional libjavascriptcoregtk-4.0-dev_2.24.2-1~bpo9+1_i386.deb f00066d7576eb250206d2d19c3a1c099 56929056 debug extra libwebkit2gtk-4.0-37-dbgsym_2.24.2-1~bpo9+1_i386.deb 883bdaac04d9edb731f2b40d9aa7969c 45035602 debug extra libwebkit2gtk-4.0-37-gtk2-dbgsym_2.24.2-1~bpo9+1_i386.deb cf513cf4aedd2a76e9a7befd3edfdae3 10705600 libs optional libwebkit2gtk-4.0-37-gtk2_2.24.2-1~bpo9+1_i386.deb 74dfc20ead594c7d7a88b5f0f5ed1703 12773134 libs optional libwebkit2gtk-4.0-37_2.24.2-1~bpo9+1_i386.deb 86a4fe38b6db423a36048a5e5b86983b 239784 libdevel optional libwebkit2gtk-4.0-dev_2.24.2-1~bpo9+1_i386.deb b140fc71a9a9b84ec314c5fd010a12b0 414298 doc optional libwebkit2gtk-4.0-doc_2.24.2-1~bpo9+1_all.deb ff465438a24722f7a20a0ccc74c9f3fa 731550 debug extra webkit2gtk-driver-dbgsym_2.24.2-1~bpo9+1_i386.deb 5c8bb8007beaea4812384fabfad08030 322386 web optional webkit2gtk-driver_2.24.2-1~bpo9+1_i386.deb b47e4449b196110a59ce593547e6bfd3 22013 web optional webkit2gtk_2.24.2-1~bpo9+1_i386.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEYrwugQBKzlHMYFizAAyEYu0C2AIFAlzvsUwACgkQAAyEYu0C 2AKvZg//YLwC9aJOy0uFb3frOTOnkKeWB2Jclw/o350Xhk50mRaVv315z7GfVPss UxFaS9yV6AGsP2L9VRLg1nbseyH8+P51a2KQF8kG2crKxNCGr6mLXaku5rBH/ogJ UNQwMBAnTdawTDoPO7pQiG5GCECAQ5qHcFCKjO9Vrbwbygyzfczs5mcubh7jfkff lQnz7phCbwkr4qYl6+cE1QUWb1HQzleAVJb61+CInSJEyv9TXt9TxUHNByhx2WnZ tL+TpkVRYFtETQVO19l6nRPEMhqmXcu1g/VeRvRIeDJKC9k7oZL9EyPms9wfQ7T8 9Fq16q682IpXK87oVS3j+0HeBvyOGLQQ+kjU68lEV186ZQ2OsgOsp490vNfezXAZ iyexehPeSgE+DobytaLA00F+KQDZAZHnBOe9rqM11vWTQeMp+uqzBNZF/AWTbDRR 5j6/K80GDGgrX89T8x8sdkuiHE4laB6C3lB70oTlKBAT9VFgBUzt3VAUpnq+5sBg mKCDgkR/8+5kMXY06qxUoIgCFX+7jJ243M11S8Mw4lAWRbgD/O6vBIGmLmhzzpYc YIPhXMhdtLcjwDnVSCTUhglSHJvI9Z81sqZGFUdR7Ykr91zOdm0g+j1uGPUXahTJ OpN+eTd54+Ly+Yalhy/Uvd7TKXAMVpSGrcPDm55DcwgUvQ4slOA= =i07d -----END PGP SIGNATURE-----