-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 12 Mar 2016 00:07:55 +0200 Source: webkit2gtk Binary: libjavascriptcoregtk-4.0-18 libjavascriptcoregtk-4.0-dev libjavascriptcoregtk-4.0-bin gir1.2-javascriptcoregtk-4.0 libwebkit2gtk-4.0-37 libwebkit2gtk-4.0-dev libwebkit2gtk-4.0-doc gir1.2-webkit2-4.0 libwebkit2gtk-4.0-37-gtk2 Architecture: source amd64 all Version: 2.10.8-1 Distribution: unstable Urgency: high Maintainer: Debian WebKit Maintainers <pkg-webkit-maintainers@lists.alioth.debian.org> Changed-By: Alberto Garcia <berto@igalia.com> Description: gir1.2-javascriptcoregtk-4.0 - JavaScript engine library from WebKitGTK+ - GObject introspection gir1.2-webkit2-4.0 - Web content engine library for GTK+ - GObject introspection data libjavascriptcoregtk-4.0-18 - JavaScript engine library from WebKitGTK+ libjavascriptcoregtk-4.0-bin - JavaScript engine library from WebKitGTK+ - command-line interpre libjavascriptcoregtk-4.0-dev - JavaScript engine library from WebKitGTK+ - development files libwebkit2gtk-4.0-37 - Web content engine library for GTK+ libwebkit2gtk-4.0-37-gtk2 - Web content engine library for GTK+ - GTK+2 plugin process libwebkit2gtk-4.0-dev - Web content engine library for GTK+ - development files libwebkit2gtk-4.0-doc - Web content engine library for GTK+ - documentation Closes: 802380 815124 Changes: webkit2gtk (2.10.8-1) unstable; urgency=high . * New upstream release. This fixes CVE-2016-1726 (Closes: #802380). * Allow building the package with debhelper < 9.20151219. This won't produce any debug packages (since they are automatically generated now), but it can be useful for backports. + debian/control: - Revert build dependency on debhelper back to >= 9. + debian/rules: - Don't make dh_strip fail if it doesn't support --ddeb-migration. * debian/rules: + The list of architectures in which the debug packages are causing problems continues to grow, so let's try the opposite approach: we build by default using -g1 except in the cases where we know that -g works fine (amd64, ppc64, ppc64el). + Enable all hardening flags. * debian/patches/fix-ftbfs-m68k.patch: + Enclose the changes to the compile assertions inside an #ifdef block so they only apply to m68k. * debian/patches/fix-ftbfs-alpha.patch: + Fix FTBFS in alpha (Closes: #815124). * debian/patches/fix-ftbfs-sparc64.patch: + Add patch metadata. * debian/source/lintian-overrides: + Update overrides so the latest lintian doesn't give more source-is-missing false positives. * debian/control: + Bump Standards-Version to 3.9.7; no changes needed. + Use secure URIs for the Vcs-* fields. Checksums-Sha1: 0fd29c6065d3d4db6aa6ce692fce086a8f74f30f 3546 webkit2gtk_2.10.8-1.dsc e27ec325e54d340f69d39ab26085de5a4104cf86 10994340 webkit2gtk_2.10.8.orig.tar.xz 8f0d926b39290aa0ccacc1261e14933d4d5eb879 55148 webkit2gtk_2.10.8-1.debian.tar.xz 879a006a3a4b5a1d869e1163179ab27ffc1006f7 40592 gir1.2-javascriptcoregtk-4.0_2.10.8-1_amd64.deb 50ef8d393f24ee4bcb1200e612bb36e3b4a13fac 84144 gir1.2-webkit2-4.0_2.10.8-1_amd64.deb a94a28bd2e070cfa0ded22ed7c14ce75990e694e 247272650 libjavascriptcoregtk-4.0-18-dbgsym_2.10.8-1_amd64.deb 602a303eb3f73a86351a5993ae460f2b80023c69 2385018 libjavascriptcoregtk-4.0-18_2.10.8-1_amd64.deb 7874a13f7755971dc24e7a646ea82bc5f156cf22 1447866 libjavascriptcoregtk-4.0-bin-dbgsym_2.10.8-1_amd64.deb 83a4704fc7f1279bfcb13fca92617e5b3f5bcdfe 74014 libjavascriptcoregtk-4.0-bin_2.10.8-1_amd64.deb c92adae745d112ebef6a248dbde6c2149d7eb0a5 51366 libjavascriptcoregtk-4.0-dev_2.10.8-1_amd64.deb a330a93a0ffd23988790ba9fd9c33fd262d7c687 1158630144 libwebkit2gtk-4.0-37-dbgsym_2.10.8-1_amd64.deb 779543f8b4ac637debedfbd2120e11f456b2f27d 962564720 libwebkit2gtk-4.0-37-gtk2-dbgsym_2.10.8-1_amd64.deb 2ec4d6b6ef31fe4baba46e66a993116f8150fae8 7469452 libwebkit2gtk-4.0-37-gtk2_2.10.8-1_amd64.deb e5376a7a5c53ec616eafc5050ab8fddbd700e1ec 9405124 libwebkit2gtk-4.0-37_2.10.8-1_amd64.deb 79c2b0b68178b6aa6cdf7f69e9fbf423674080e8 197810 libwebkit2gtk-4.0-dev_2.10.8-1_amd64.deb 68c7e9cb54a7c849432575d69a22998f8e89d9ad 167276 libwebkit2gtk-4.0-doc_2.10.8-1_all.deb Checksums-Sha256: 83e8288fe6d0653d74c221960cb4bff6ebe3b44c3c893a347c8b79b912dc4925 3546 webkit2gtk_2.10.8-1.dsc 313682b23f03c457b28a7ef2d5bdb70a8174cca1d32e0a853fb36fa4dcf928a9 10994340 webkit2gtk_2.10.8.orig.tar.xz b881b5b1d4b4c6df07bc1543f26d7d76061f40ff7505bd5b18df71151f76f220 55148 webkit2gtk_2.10.8-1.debian.tar.xz a9137b73c8c6d7d8eef59003cb1656c1dcbf920c7ea87e3a23d0eab4c8cf2ea5 40592 gir1.2-javascriptcoregtk-4.0_2.10.8-1_amd64.deb abeb014302314c8f091625d732d01036a3c6b9a7496e1b2d684de6bdf5c87382 84144 gir1.2-webkit2-4.0_2.10.8-1_amd64.deb 82db4b3909698ffa693781db4d3dde2d6e14bca6fceee85c3e09859a285ebcb3 247272650 libjavascriptcoregtk-4.0-18-dbgsym_2.10.8-1_amd64.deb f6e5405ae9ee38af0eaf0e1861063aea2e0f87454bd11d9fc91b4a75284034e2 2385018 libjavascriptcoregtk-4.0-18_2.10.8-1_amd64.deb 01e3d3302ef2f696510d63e2f0e7f3aa1d9d32bb69dadae56d1a45c12fcabd3b 1447866 libjavascriptcoregtk-4.0-bin-dbgsym_2.10.8-1_amd64.deb 17e10df11cd62a5347c6d653f963b878a4e1395407d8362f2128e260400216fe 74014 libjavascriptcoregtk-4.0-bin_2.10.8-1_amd64.deb e7304b9a76312c454f3324cbc752c7c6382ab9f008dbbc015448452ec06dc307 51366 libjavascriptcoregtk-4.0-dev_2.10.8-1_amd64.deb 22885c7148095c09c51a206264ced6758f8ec12a9257ce1311d61bb3019c1248 1158630144 libwebkit2gtk-4.0-37-dbgsym_2.10.8-1_amd64.deb 4259df0c9dd445dd0eb492fcbfad26aa3de1a1f884e2e18beb4ffec5708d76f9 962564720 libwebkit2gtk-4.0-37-gtk2-dbgsym_2.10.8-1_amd64.deb 450b29870795005019b8219d2d5b6a67254e9f6139f7a9e7980f7bcc9c2022df 7469452 libwebkit2gtk-4.0-37-gtk2_2.10.8-1_amd64.deb 203a75b7b51336dd0b88f91175c6728e52dc45efb8ed096f365e85308b572c7a 9405124 libwebkit2gtk-4.0-37_2.10.8-1_amd64.deb 16bc321fe47f12587d998fcd15404071a2acf0cea60e81b2a28007fdba310103 197810 libwebkit2gtk-4.0-dev_2.10.8-1_amd64.deb c860aa215ae13639a5b394ab1fd2469a8cc923f869cbaf7058616794c4abe2ad 167276 libwebkit2gtk-4.0-doc_2.10.8-1_all.deb Files: 00c93a14631f386dfc632c079821834e 3546 web optional webkit2gtk_2.10.8-1.dsc 252aad5319aa59d940b3d8161c5a9dc0 10994340 web optional webkit2gtk_2.10.8.orig.tar.xz ab19eab79acd13aeec77fe0f96dc5df5 55148 web optional webkit2gtk_2.10.8-1.debian.tar.xz 2c9e314f53c8766791fc05637fdeccf8 40592 introspection optional gir1.2-javascriptcoregtk-4.0_2.10.8-1_amd64.deb cc3fd629ba17d0c154eaee6f64b6bc71 84144 introspection optional gir1.2-webkit2-4.0_2.10.8-1_amd64.deb ee296b654ab4c813144e9c3c7db1442a 247272650 debug extra libjavascriptcoregtk-4.0-18-dbgsym_2.10.8-1_amd64.deb a34ca7f3650515bdc5a652f0936056bd 2385018 libs optional libjavascriptcoregtk-4.0-18_2.10.8-1_amd64.deb bfad32ac2b3b947968d3632f76456efd 1447866 debug extra libjavascriptcoregtk-4.0-bin-dbgsym_2.10.8-1_amd64.deb 81a11612625e8b4261f4f8b679109ee5 74014 interpreters optional libjavascriptcoregtk-4.0-bin_2.10.8-1_amd64.deb 174630fb3a9a9a3902d596d5e94466f1 51366 libdevel extra libjavascriptcoregtk-4.0-dev_2.10.8-1_amd64.deb 4734f2c4ff3e3bb1fba881a1d41b54c2 1158630144 debug extra libwebkit2gtk-4.0-37-dbgsym_2.10.8-1_amd64.deb a3fbdf79ced4437e748537107b48aeec 962564720 debug extra libwebkit2gtk-4.0-37-gtk2-dbgsym_2.10.8-1_amd64.deb 7cc48ee5dfcf930c10d192b7d1f76433 7469452 libs optional libwebkit2gtk-4.0-37-gtk2_2.10.8-1_amd64.deb a72377d8b0db824e48a00ad5cd6690e4 9405124 libs optional libwebkit2gtk-4.0-37_2.10.8-1_amd64.deb d92d94d5ad9de71e2a79894dbce4b657 197810 libdevel extra libwebkit2gtk-4.0-dev_2.10.8-1_amd64.deb 5695b574db7b9c940d67c5e5e62043df 167276 doc extra libwebkit2gtk-4.0-doc_2.10.8-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBVuNT4b4yGa8+1BNBAQiXgA//Vi/x/n/KjVcX5T/4SWerGr+aufnx1jey LSUYupUGJgXAbQWCflFtjh/tHQWGa9az7h5ePHI81zNlk4s5pzTMGvPWx3NG9CIk qXsn6tuKK2Mt3YFUOt5vA/W6AM8hrcUe0tiuFGhSMKDHnIQOG9LtN1Vg6bUQTK1c nxWRtDS0e97hXgRG2245nVSTefl0fRsGDHEjve/5EoXD5gJHnZ0UqwvUdNjH8Hir kPn2ydqzBWzLYTH2NdfC/Ci91oBF7a9RL+q1Ja6AjP359UmL9IY5a8m9EB4c+7Db +Pf7n8+WyBqcngZjl2QXeLktMzx1gY8qHT22BdgWkR713rJXcEvdlhvCbjWpcG9X 0fuuJwS3opH9f26sbjLQcw1uqxz4CzS2xjuS2rmm89jaah5OAdI0D5my7gav5xxA 5pgcltNv+bOopaiLEouzZp0A0oEMoLITItH5ZhgyCpFqYUgxW2D+H5SuFmv5wDe3 nITiWdF0A5pbomfFCET/v4EwogwIpFdGr+O9TidZNwnavnvytPQKAdFfT7tQh6Bx B9h+gRXPrHnZLXaNPZ0EwXfahiqywCByhZFGnOFf3yr/gSDK74wA+BDEgFeZ3egC kjzEGq5qfC047amwTyOyxz/pvKjFEMxfoTVtYQa7DMDpO/tS4i7t47CQjWmsccYZ VK+jywT+0cA= =BR70 -----END PGP SIGNATURE-----