-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 30 Dec 2022 15:03:33 +0100
Source: webkit2gtk
Architecture: source
Version: 2.38.3-1~deb11u1
Distribution: bullseye-security
Urgency: medium
Maintainer: Debian WebKit Maintainers <pkg-webkit-maintainers@lists.alioth.debian.org>
Changed-By: Alberto Garcia <berto@igalia.com>
Changes:
webkit2gtk (2.38.3-1~deb11u1) bullseye-security; urgency=medium
.
* Rebuild for bullseye-security.
* The WebKitGTK security advisory WSA-2022-0011 lists the following
security fixes in the latest versions of WebKitGTK:
- CVE-2022-42863 (fixed in 2.38.0).
- CVE-2022-46691 (fixed in 2.38.1).
- CVE-2022-42852, CVE-2022-42856, CVE-2022-42867, CVE-2022-46692,
CVE-2022-46698, CVE-2022-46699, CVE-2022-46700 (fixed in 2.38.3).
* gcc 10 segfaults when building webkit in amd64 (see #1008098) so use
clang instead. Keep using gcc in other architectures because clang has
problems in at least i386, arm64 and mipsel (see #1010329 and
#1016811).
- debian/rules: Tell CMake to use clang.
- debian/control.in: Build depend on clang.
* Build libsoup2 packages only.
- debian/rules: Set ENABLE_SOUP3=NO, ENABLE_GTK4=NO and
USE_PREBUILT_DOCS=YES.
- debian/control.in: Remove build dependency on ccache.
Checksums-Sha1:
f7a7fdbac3dcd5a5968704bfb3f6efdf37a7a5f7 4137 webkit2gtk_2.38.3-1~deb11u1.dsc
04cb5923d8ac6f435424b74115c3219ec597e9ad 33003928 webkit2gtk_2.38.3.orig.tar.xz
0f434d405c69395b3bf4d00f394319e5caa37d18 195 webkit2gtk_2.38.3.orig.tar.xz.asc
8e687fd75884fd8ff6dc86badd3aebb1ce702400 77984 webkit2gtk_2.38.3-1~deb11u1.debian.tar.xz
3d25fbf3762a1b327980f84c04481bac980c5a30 15139 webkit2gtk_2.38.3-1~deb11u1_source.buildinfo
Checksums-Sha256:
207f6b16240322f3a8a914bdb5fdfeadb53879ee11c825e9889000436d25fc9a 4137 webkit2gtk_2.38.3-1~deb11u1.dsc
41f001d1ed448c6936b394a9f20e4640eebf83a7f08262df28504f7410604a5a 33003928 webkit2gtk_2.38.3.orig.tar.xz
f6d825cefdba499f026f76f70ddc16acd959355951849b4eb5433d1c7516d233 195 webkit2gtk_2.38.3.orig.tar.xz.asc
0c1b21d1d3b95410560976e0a9f109578f97c6e35f7e80b00c4656ecaf472d2c 77984 webkit2gtk_2.38.3-1~deb11u1.debian.tar.xz
4acc126c0053987e85eb744b4ff39bcb89948263b71855e61f259cb30d7c6ac9 15139 webkit2gtk_2.38.3-1~deb11u1_source.buildinfo
Files:
917f9235edc0e751cf11cc1763c581f2 4137 web optional webkit2gtk_2.38.3-1~deb11u1.dsc
1c1cc5eb59273091e228406937b23947 33003928 web optional webkit2gtk_2.38.3.orig.tar.xz
1ace598e8a07e14abb725fa64cfdf793 195 web optional webkit2gtk_2.38.3.orig.tar.xz.asc
85399297302bb9322fec30aa0ffc1e45 77984 web optional webkit2gtk_2.38.3-1~deb11u1.debian.tar.xz
45198201c98e74de09764dfa80e17941 15139 web optional webkit2gtk_2.38.3-1~deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEYrwugQBKzlHMYFizAAyEYu0C2AIFAmOu8EEACgkQAAyEYu0C
2AKEexAAoyuj7/RH3ou0EByLdTWalA9oGeZ7fb3N/IQFajqxJV+mzmVD9/7McvnE
1C1938QkfFh+fNrZB70qrI5mXxPUDC39P7bForIxGTJbe8bilfo5Zsafv/DqFC32
m/hH5aEOe1o4OSqJxXEBMVeeBCzWWw9k0Of7XsFDFGXy5y8uXFRMWTEnEMLF24pd
1I2e8slRpyRqXfriy2njBz+qYuNnnPsZ2lPTNVAn+bwaQZ4C6FDOAJQBC7HJQq3l
kx/QDqK5k6J3UQoM0fQRv2riP8WH0MoRwaR9WK7zVwL9h0u+XUiVxom5tn83zS20
6elqmFk7asxZd3GBrYjJDRlPByXwwDvy0XfEFRT41JQ+Cj8nDiFJDreA/2Sis8nR
Lu6gdlMGZFiUnPu1fZPJzt47Ep0SlCHMe1PNHFPlnp2SLg78sflKprX9gHduP1ax
5hCpYCoQ4uifWVfyt2GRig3GHh7Q2cO9B5B7GRJYVRrdPOdvr7SDliihCiEo87IF
PX0DHUPJuNDb1MM21ZpH2SWSZSyweSP7L8ltYDhwkRkiN/JomAWSMcXGW66KBdIq
jvs/QYUaQflRNK1u8a9B7TBmUSp34/VaRGq9PnQW+LEi/FafGIJE70D4POpjf2Jr
BYuNQnvVa8J2MdQbDowQPiQXoGEdoAjHpBx2fBs+NIA19O1vMIQ=
=M5l/
-----END PGP SIGNATURE-----
