-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 19 Dec 2017 18:31:33 +0200 Source: webkit2gtk Binary: libjavascriptcoregtk-4.0-18 libjavascriptcoregtk-4.0-dev libjavascriptcoregtk-4.0-bin gir1.2-javascriptcoregtk-4.0 libwebkit2gtk-4.0-37 libwebkit2gtk-4.0-dev libwebkit2gtk-4.0-doc gir1.2-webkit2-4.0 libwebkit2gtk-4.0-37-gtk2 Architecture: source Version: 2.18.4-1 Distribution: unstable Urgency: high Maintainer: Debian WebKit Maintainers <pkg-webkit-maintainers@lists.alioth.debian.org> Changed-By: Alberto Garcia <berto@igalia.com> Description: gir1.2-javascriptcoregtk-4.0 - JavaScript engine library from WebKitGTK+ - GObject introspection gir1.2-webkit2-4.0 - Web content engine library for GTK+ - GObject introspection data libjavascriptcoregtk-4.0-18 - JavaScript engine library from WebKitGTK+ libjavascriptcoregtk-4.0-bin - JavaScript engine library from WebKitGTK+ - command-line interpre libjavascriptcoregtk-4.0-dev - JavaScript engine library from WebKitGTK+ - development files libwebkit2gtk-4.0-37 - Web content engine library for GTK+ libwebkit2gtk-4.0-37-gtk2 - Web content engine library for GTK+ - GTK+2 plugin process libwebkit2gtk-4.0-dev - Web content engine library for GTK+ - development files libwebkit2gtk-4.0-doc - Web content engine library for GTK+ - documentation Closes: 881637 883712 Changes: webkit2gtk (2.18.4-1) unstable; urgency=high . [ Alberto Garcia ] * New upstream release. + This fixes CVE-2017-13866, CVE-2017-13870, CVE-2017-7156 and CVE-2017-13856. * Refresh all patches. * debian/control: + Request native version of the Ruby package (thanks, Helmut Grohne) (Closes: #881637). * Instead of passing -DUSE_GSTREAMER_GL=OFF explicitly, let CMake do it if libgstreamer-plugins-bad1.0-dev is not installed. + debian/patches/detect-gstreamer-gl.patch: - Disable USE_GSTREAMER_GL if GStreamerGL is not found. + debian/rules: - Remove the list of architectures that are not using GStreamerGL. * debian/control: + Don't require libgstreamer-plugins-bad1.0-dev in hppa, m68k, powerpcspe, sh4 or x32. . [ Jeremy Bicha ] * debian/control: Update Vcs-Git to point to correct branch. * Allow setting the distributor name in the User Agent string. Ubuntu wants this patch, but since it makes it easier to identify the user let's leave it disabled in Debian (Closes: #883712). + debian/patches/user-agent-branding.patch: - Patch to support updating the User-Agent string. + debian/rules: - Pass -DUSER_AGENT_GTK_DISTRIBUTOR_NAME when building for Ubuntu. Checksums-Sha1: 2866afbb33518ee1212b263c866adc598aedc97c 4042 webkit2gtk_2.18.4-1.dsc 709616b445158dc3163a64bb59e95aadbe58949c 14828528 webkit2gtk_2.18.4.orig.tar.xz 54b3341ee293aa2b38e7f94ef0d8022737c9d9ae 191 webkit2gtk_2.18.4.orig.tar.xz.asc 0df68ab65260382662b24182c97203254ba2e70d 56064 webkit2gtk_2.18.4-1.debian.tar.xz 4e23dce50e384584921a8de775b97419c2e3d7e4 16452 webkit2gtk_2.18.4-1_source.buildinfo Checksums-Sha256: 7f6eb853c95e35374e8a6fc5eac7366e095ca3b3ec1ad79bba50fc1fafb889e8 4042 webkit2gtk_2.18.4-1.dsc 87b6bb9a6065b949ecbe6191313c43e57ad28efdf1f2b5e763405093520632b8 14828528 webkit2gtk_2.18.4.orig.tar.xz 2bd6bb1542f232d7de0f356c80090e4b8e994c05eb7ef0e7aa629e00fc76b8b8 191 webkit2gtk_2.18.4.orig.tar.xz.asc cd5d7c75b2ed65606c2fc83a8da8eeb45d12d2bf64ac3f74004a4e79531751af 56064 webkit2gtk_2.18.4-1.debian.tar.xz 50210747b5929840a1b529033332120f4930f13a04cbed9b57a71f2e26518ca0 16452 webkit2gtk_2.18.4-1_source.buildinfo Files: cc552d8b51ee2187ef37bd00e0387646 4042 web optional webkit2gtk_2.18.4-1.dsc c4686971eac2760bab685e21ac8849be 14828528 web optional webkit2gtk_2.18.4.orig.tar.xz b343e6c2bdddf6f523edfd345ac38a5d 191 web optional webkit2gtk_2.18.4.orig.tar.xz.asc 0bf6dc0fb0ca9896b80904c84532c411 56064 web optional webkit2gtk_2.18.4-1.debian.tar.xz 34c708c38ef2280250315253e3e5233c 16452 web optional webkit2gtk_2.18.4-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEG4Kq8pR5Ln9Vhk8+vjIZrz7UE0EFAlo5TGMACgkQvjIZrz7U E0ELVQ/+J6z+F3G5DPcc9emASP/KY2fUnnfhMeFgqgFQqIfuXenhSbfuemfh6Pbl u2KjaCA5dWzCuSOdoqSKyOqTqXFdtF6gFdfoVYDy7/9fK7llwJrLiBGUTYFK18LE e2fmiHeh2jthQkwW09rjprnTi85qEqY+L6wSYNs31NUu+BkeT3MEFDnUK0Txtbp9 CYxYM5TLSR3ELZ7K76Eb29JNiWysSuPtZeexcn1Hp2Cd2Gy4Oq6AaISgLYotz5Yl H5tUDjHTMv0mNyN3gJd8nbumYVwkhtUu7g3dnYolxoR7xtRIJKQZES+l3VmweMcT aHYnVbSDSQC/8NeKv77TAEC6uMYXqiIuEWbnd6wVAMclaodSLba+6ye0Z3TT7DAc oH9yLqThEqU/uDQlPDIU3lMRxdv+HSf+WCadoO45TMW6kSwj5gB3hO/iR6MQvZNr hUsonAwsieLNeCWnXjPZ3OknozyymUHPHr52TuXRxJcBIUpF5ovwwFZWCuXX+U70 Z3RLmM9ifupbsYQ9zSsDyP/NJsCaZf/a21/kLSZI2GwgvFCBaqbl9SK2I0qlVbo/ i7LyuZDqYFq/f2Dg7CzWrYk7G5OgIOOp9ONZFclzVXc93enh5W3B7ImqnX+NQCwN b1Y6WruzUi37PoAZA6di7W8Mo8DJlQ34Z8l10vCkONTgg8BaDCI= =T6wW -----END PGP SIGNATURE-----
