-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 16 Feb 2023 13:39:48 +0100 Source: wpewebkit Architecture: source Version: 2.38.5-1~deb11u1 Distribution: bullseye-security Urgency: high Maintainer: Debian WebKit Maintainers <pkg-webkit-maintainers@lists.alioth.debian.org> Changed-By: Alberto Garcia <berto@igalia.com> Changes: wpewebkit (2.38.5-1~deb11u1) bullseye-security; urgency=high . * Rebuild for bullseye-security. * The WPE WebKit security advisory WSA-2023-0001 lists the following security fixes in the latest versions of WPE WebKit: - CVE-2022-42826, CVE-2023-23517, CVE-2023-23518 (fixed in 2.38.4). * gcc 10 segfaults when building webkit in amd64 (see #1008098) so use clang instead. Keep using gcc in other architectures because clang has problems in at least i386, arm64 and mipsel (see #1010329 and #1016811). - debian/rules: Tell CMake to use clang. - debian/control.in: Build depend on clang. * Use libsoup2 instead of libsoup3: - debian/rules: Set USE_SOUP_VERSION=2. Checksums-Sha1: 14ba31e40b1ad0ad45704fc906b60ed47ae0823b 3229 wpewebkit_2.38.5-1~deb11u1.dsc 3f10a04758eeb349f63f841aff765dae25bcde1b 30509960 wpewebkit_2.38.5.orig.tar.xz 05dd35c5a4794ca9304a82aa786f515f97edff72 195 wpewebkit_2.38.5.orig.tar.xz.asc e718691d80ee1f7283fe28a52b655e3f4373b373 45020 wpewebkit_2.38.5-1~deb11u1.debian.tar.xz 9f4e953f5ae93ae8e3630c63f45e9efb9209547f 13722 wpewebkit_2.38.5-1~deb11u1_source.buildinfo Checksums-Sha256: 937af7637c890b47dc4593f7be88fcdc467c1d6007865d4d0ac47f92ad598e32 3229 wpewebkit_2.38.5-1~deb11u1.dsc ff00fd3d0a4c6d551850a78a7dfe4883b6b7ebd93c5549e1121b2f43d3ac1661 30509960 wpewebkit_2.38.5.orig.tar.xz 4e468295759f577f9a370a4740b206e79d3c7bd6477c11a0048bdd34eb40c7ec 195 wpewebkit_2.38.5.orig.tar.xz.asc 67303fc432eff7c896ae401dd95090712ca91abc7864401048fb9a7ee90fd83e 45020 wpewebkit_2.38.5-1~deb11u1.debian.tar.xz 20ee2e37c5665884aa35634038164cffe7ea1e7df31f7eaec9f8658efcb7e38a 13722 wpewebkit_2.38.5-1~deb11u1_source.buildinfo Files: 31c6f5e9036b199d759c1dbcda69fece 3229 libs optional wpewebkit_2.38.5-1~deb11u1.dsc 73f7abd0c1cc808032869f72602166e3 30509960 libs optional wpewebkit_2.38.5.orig.tar.xz e9d800ebc564d3ec431dce74aa27c9d5 195 libs optional wpewebkit_2.38.5.orig.tar.xz.asc c288f30d6d80b5a7f8335f5488091452 45020 libs optional wpewebkit_2.38.5-1~deb11u1.debian.tar.xz b6df3f68c8770681d7d28363f381c488 13722 libs optional wpewebkit_2.38.5-1~deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEYrwugQBKzlHMYFizAAyEYu0C2AIFAmPuJOYACgkQAAyEYu0C 2ALhmQ//daP3xFs8DgpnD6qeekPtkxlRIyVySDG3sXdm3qP0cKomuDJVaFXO/8Hp BnyPfev/VVp8xNaigctWbZj8hqBaJQaWQYv8TnyQ2DwuDM3n2Mj0MOxkRl0KUAF7 sbMhyxnrTM9XD/AVpusnlrZq+/EeRIEtY+xBuPcHANGCdJw5kbyGME/KTlqAsLpt boI4xrjwWv167mr8klaQ7w47YzPPiCD/Wxt1u8dEDytTrsouqJDkHY+926o3bfWh 1DwEh9iwo78fmbfiyNtZ5QTNk6f1MTKgmzblg9/cYDEvQY7pnjjfLJHsAu6av188 +Wj5vzEfoWLUDrGTBhE7u6+WfItDcYR7hihGxb8P10rsrKVauyXOrVaxYmmErTkg IjYbg7iteLpmfrv6sOZINhoYWws59k6LCQVbGwna3xivVrXd77KtDLZBkV+SLeHv 7EEEPnzLGYT37VeI7odH8BozrbdJLNgJ/SlOMvuaN6Kr/Sibtfd0eNUjen9hoYuN ek6Et4RmS0JRA1BCldghG+pNXpesdzVmlz4Zj1eKtC/yuUyGawMwejfIn6ywN5S9 s1L7ndYwZqCnvjJUKGdkQsP9fT9KprF5HcQLi1o1zCLK9UXGI9uug+S72cFrAqm3 r/lOqub/5s1KdaAq5rZZ+R3WPVseebYwa5ZYks4Rp0Nu/97QWgs= =8QIx -----END PGP SIGNATURE-----