-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 02 Jan 2018 11:34:19 +0200 Source: webkit2gtk Binary: libjavascriptcoregtk-4.0-18 libjavascriptcoregtk-4.0-dev libjavascriptcoregtk-4.0-bin gir1.2-javascriptcoregtk-4.0 libwebkit2gtk-4.0-37 libwebkit2gtk-4.0-dev libwebkit2gtk-4.0-doc gir1.2-webkit2-4.0 libwebkit2gtk-4.0-37-gtk2 Architecture: source i386 all Version: 2.18.4-1~bpo9+1 Distribution: stretch-backports Urgency: high Maintainer: Debian WebKit Maintainers <pkg-webkit-maintainers@lists.alioth.debian.org> Changed-By: Alberto Garcia <berto@igalia.com> Description: gir1.2-javascriptcoregtk-4.0 - JavaScript engine library from WebKitGTK+ - GObject introspection gir1.2-webkit2-4.0 - Web content engine library for GTK+ - GObject introspection data libjavascriptcoregtk-4.0-18 - JavaScript engine library from WebKitGTK+ libjavascriptcoregtk-4.0-bin - JavaScript engine library from WebKitGTK+ - command-line interpre libjavascriptcoregtk-4.0-dev - JavaScript engine library from WebKitGTK+ - development files libwebkit2gtk-4.0-37 - Web content engine library for GTK+ libwebkit2gtk-4.0-37-gtk2 - Web content engine library for GTK+ - GTK+2 plugin process libwebkit2gtk-4.0-dev - Web content engine library for GTK+ - development files libwebkit2gtk-4.0-doc - Web content engine library for GTK+ - documentation Closes: 881637 883712 Changes: webkit2gtk (2.18.4-1~bpo9+1) stretch-backports; urgency=medium . * Rebuild for stretch-backports. . webkit2gtk (2.18.4-1) unstable; urgency=high . [ Alberto Garcia ] * New upstream release. + This fixes CVE-2017-13866, CVE-2017-13870, CVE-2017-7156 and CVE-2017-13856. * Refresh all patches. * debian/control: + Request native version of the Ruby package (thanks, Helmut Grohne) (Closes: #881637). * Instead of passing -DUSE_GSTREAMER_GL=OFF explicitly, let CMake do it if libgstreamer-plugins-bad1.0-dev is not installed. + debian/patches/detect-gstreamer-gl.patch: - Disable USE_GSTREAMER_GL if GStreamerGL is not found. + debian/rules: - Remove the list of architectures that are not using GStreamerGL. * debian/control: + Don't require libgstreamer-plugins-bad1.0-dev in hppa, m68k, powerpcspe, sh4 or x32. . [ Jeremy Bicha ] * debian/control: Update Vcs-Git to point to correct branch. * Allow setting the distributor name in the User Agent string. Ubuntu wants this patch, but since it makes it easier to identify the user let's leave it disabled in Debian (Closes: #883712). + debian/patches/user-agent-branding.patch: - Patch to support updating the User-Agent string. + debian/rules: - Pass -DUSER_AGENT_GTK_DISTRIBUTOR_NAME when building for Ubuntu. Checksums-Sha1: 802abc2b4bd10a9a89d5b5ba881f4d6ec6375dd3 4070 webkit2gtk_2.18.4-1~bpo9+1.dsc 7a0b101bb09ca3b7ae7680282171ce0f62695d43 56076 webkit2gtk_2.18.4-1~bpo9+1.debian.tar.xz 894f925da84eea49200bc136aa52716c5042a734 72570 gir1.2-javascriptcoregtk-4.0_2.18.4-1~bpo9+1_i386.deb c48088c9e91d3f34a54d093bf496eb016fe9daae 121578 gir1.2-webkit2-4.0_2.18.4-1~bpo9+1_i386.deb 485966e2143415dec033f15f0141bf9194658055 12692194 libjavascriptcoregtk-4.0-18-dbgsym_2.18.4-1~bpo9+1_i386.deb 33f242e0d32c7ff26776d17269650d1fa96fcbfe 3742224 libjavascriptcoregtk-4.0-18_2.18.4-1~bpo9+1_i386.deb 18b887bcd2ce0367951ae7840ac181d7b0dad7eb 236556 libjavascriptcoregtk-4.0-bin-dbgsym_2.18.4-1~bpo9+1_i386.deb fad5021720385553270639be5a7034175a65d187 161516 libjavascriptcoregtk-4.0-bin_2.18.4-1~bpo9+1_i386.deb 88cbe2fa45ede7ad28e2da04ee9959622ca178aa 85022 libjavascriptcoregtk-4.0-dev_2.18.4-1~bpo9+1_i386.deb 7d62df109a591286c89c98a398f8e7251397654f 52588188 libwebkit2gtk-4.0-37-dbgsym_2.18.4-1~bpo9+1_i386.deb 6d01a9b44a1b67ab63602976f73a0785a88c87ae 44240692 libwebkit2gtk-4.0-37-gtk2-dbgsym_2.18.4-1~bpo9+1_i386.deb f983e846aa18c6f7962daf764b5cfc917a162797 9999334 libwebkit2gtk-4.0-37-gtk2_2.18.4-1~bpo9+1_i386.deb 0861e9693594c4b06763b755ec584e8a31dd1173 12734656 libwebkit2gtk-4.0-37_2.18.4-1~bpo9+1_i386.deb 6d10e778feaffbaf0e9e4ecdb1a3aa4180edf693 225622 libwebkit2gtk-4.0-dev_2.18.4-1~bpo9+1_i386.deb bb506bae4e1e56f57faa9f2a8f711e3adde4cbaa 221794 libwebkit2gtk-4.0-doc_2.18.4-1~bpo9+1_all.deb 70e21f9be792a9c85054567a631cf080f60bbd36 20767 webkit2gtk_2.18.4-1~bpo9+1_i386.buildinfo Checksums-Sha256: 745845fcffa7af5500bae47b20c1e35d05299cddc3d715fdb2e545b84d50b8c1 4070 webkit2gtk_2.18.4-1~bpo9+1.dsc 2735b5efd960a312af0e68866826575ceefbbc0727798fee1a6551b26429af9b 56076 webkit2gtk_2.18.4-1~bpo9+1.debian.tar.xz 19bb9bcb81d71b222a64c83862451b7118aa9fb0e449b3655648c22f20ff514f 72570 gir1.2-javascriptcoregtk-4.0_2.18.4-1~bpo9+1_i386.deb 6641ed28d2f304468ede610cbdba2faded27907b9d1240bc1d8657c93228b293 121578 gir1.2-webkit2-4.0_2.18.4-1~bpo9+1_i386.deb bf68da39bbc52edcd922efa3f12c75236d13648d4d45a6488fff73a4c7045c26 12692194 libjavascriptcoregtk-4.0-18-dbgsym_2.18.4-1~bpo9+1_i386.deb f3fee810467b125ad4065cfa2673a475f33b59b7a2f736a824adf6c8a0b7f81f 3742224 libjavascriptcoregtk-4.0-18_2.18.4-1~bpo9+1_i386.deb 7ce5645569a81f08e73b2233335c07371759a582ac1cfcbe0cc27f354de2f76a 236556 libjavascriptcoregtk-4.0-bin-dbgsym_2.18.4-1~bpo9+1_i386.deb 5680e9f0b761f97667383b03481eb3a56cb29ec9a85080a7e52ff917f5dbe345 161516 libjavascriptcoregtk-4.0-bin_2.18.4-1~bpo9+1_i386.deb 1050336ac6b4047f7b160d4588361674710a60357f79b735ddd013360b3a76ed 85022 libjavascriptcoregtk-4.0-dev_2.18.4-1~bpo9+1_i386.deb 4ea2fc83f97986c0125fc001395153498af31acbcab92a632d9dbce2b49babbf 52588188 libwebkit2gtk-4.0-37-dbgsym_2.18.4-1~bpo9+1_i386.deb 80a2c8787b97f7a59a2ceb0de7a27f68986ebca4d64799a54dda1c4a1333a2af 44240692 libwebkit2gtk-4.0-37-gtk2-dbgsym_2.18.4-1~bpo9+1_i386.deb be5b00f6ffdf1b2cac1332e313ad67c1e257fb5df5738e2d516e029d295077a8 9999334 libwebkit2gtk-4.0-37-gtk2_2.18.4-1~bpo9+1_i386.deb 95f04bb71b17850245a875fab625193bbc97c6d9d4261d3c9d07a9daa51431f3 12734656 libwebkit2gtk-4.0-37_2.18.4-1~bpo9+1_i386.deb 41236ce939c3c53dc9950a9ccbd5e2025afef92c0fa5544e0978e831f3db41fe 225622 libwebkit2gtk-4.0-dev_2.18.4-1~bpo9+1_i386.deb 5d74c49050d4ffbd20ec29111b04d2f038bfb9ff79a5fa217cc7c972fcade574 221794 libwebkit2gtk-4.0-doc_2.18.4-1~bpo9+1_all.deb d23328738d203d3538eb6276d4161cf407ca478eec3645241e021ea0c4ab9b75 20767 webkit2gtk_2.18.4-1~bpo9+1_i386.buildinfo Files: 09592da86bbc31dc759f73db12736e60 4070 web optional webkit2gtk_2.18.4-1~bpo9+1.dsc f79d3d7e4f3f174cb654712c606e5ac2 56076 web optional webkit2gtk_2.18.4-1~bpo9+1.debian.tar.xz cce831475b277bc669e22f12b2929032 72570 introspection optional gir1.2-javascriptcoregtk-4.0_2.18.4-1~bpo9+1_i386.deb 75f2678e4662c9b8ac6adcee1d82b269 121578 introspection optional gir1.2-webkit2-4.0_2.18.4-1~bpo9+1_i386.deb 299e2e684b5b7ecb1faaa2a63e0d6dbe 12692194 debug extra libjavascriptcoregtk-4.0-18-dbgsym_2.18.4-1~bpo9+1_i386.deb c14fdf194dca985e4a608e6bfebae89e 3742224 libs optional libjavascriptcoregtk-4.0-18_2.18.4-1~bpo9+1_i386.deb 834cdee4f824c2fffef8edd6bdbd42c3 236556 debug extra libjavascriptcoregtk-4.0-bin-dbgsym_2.18.4-1~bpo9+1_i386.deb 1198ad1340e22d7d40db0b960413250d 161516 interpreters optional libjavascriptcoregtk-4.0-bin_2.18.4-1~bpo9+1_i386.deb 3769574dd6bcf9a4ee3e7791a2378f24 85022 libdevel optional libjavascriptcoregtk-4.0-dev_2.18.4-1~bpo9+1_i386.deb 820b1a4d6d349bf5d503f58314896f71 52588188 debug extra libwebkit2gtk-4.0-37-dbgsym_2.18.4-1~bpo9+1_i386.deb c6fac40394abb60eb7240555aa038b19 44240692 debug extra libwebkit2gtk-4.0-37-gtk2-dbgsym_2.18.4-1~bpo9+1_i386.deb ec887350b7f2b88ad7f65c68cfa5084a 9999334 libs optional libwebkit2gtk-4.0-37-gtk2_2.18.4-1~bpo9+1_i386.deb f790f30113e888a2666b5108ab71a8e2 12734656 libs optional libwebkit2gtk-4.0-37_2.18.4-1~bpo9+1_i386.deb b559c4dac6ea4e252e227d605965a05f 225622 libdevel optional libwebkit2gtk-4.0-dev_2.18.4-1~bpo9+1_i386.deb 867726b918a8e3eed7728971e33fca6a 221794 doc optional libwebkit2gtk-4.0-doc_2.18.4-1~bpo9+1_all.deb 595fb608e7bf76ed62aad010f8fd4957 20767 web optional webkit2gtk_2.18.4-1~bpo9+1_i386.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEG4Kq8pR5Ln9Vhk8+vjIZrz7UE0EFAlpLXz4ACgkQvjIZrz7U E0HAfQ/+MSNosahwVmXoAkdxyqGmmPigvhy2+rTRuOk3P19Xva6GV7wVu6cpRZnF 67KsQ4o9BHtbwbM7bjNYo7+nHCt4Lt4I6AK9C6vXLmTjkuxdmyxWLSF7FyUVkHKc 40R6zKSTOCqjsQmAJD7+F6RIpnNGDXpYVhFnHlm5LP2dCL9buWK13VSRKISG2yjE BADp9HpsUlyzOp73h46k5An6+MbFKNlHpka86HpzNNECnmoR+HNNXtKSCBwLQ4oB dw/thm20S1RUdwTyJT6E0Es2TK2SspDDt/jG92CDvZG8GCbFgs0CkGk/U85kUy9k D2dJOFBBurZc/mRpMUdUSBxuRAVRMy1qHkSHB+CPe++7654dlZ/eyekSXZ3yGJtq 6Wged2rm4tIlmH67SmJIzoBo6WWmtL36OfdXo8N64yCUe0T+zjGfey583Vu6ViYz 7KtCliu40pMvzC/c/Ys6T+mXcNaNXTkXok5INbr9nGkRVUDDGQhd0lrECEu60KdH dmBXQWJZsaCm81d6PZZdHPCFEstD9FEjQq/2SJYWqoErcLdlHJVHhFy51B+FWf9/ NFpVmDGCTW225IzPKsd64a2EuHPziBMIIU9Ew+FSaoB0cM8Lz/jRjJPDaHIHIQZa l3EQY7fDSKjf15zn79BGysU71v+1RVthX42ytOxyZI611QQONbY= =Vx+5 -----END PGP SIGNATURE-----