Accepting request 1168634 from GNOME:Factory

Add a CVE reference (forwarded request 1168626 from mgorse)

OBS-URL: https://build.opensuse.org/request/show/1168634
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/webkit2gtk3?expand=0&rev=193
This commit is contained in:
Ana Guerrero 2024-04-18 20:10:56 +00:00 committed by Git OBS Bridge
commit 58a4b70221
7 changed files with 26 additions and 32 deletions

View File

@ -1,18 +0,0 @@
diff --git a/Source/WebCore/platform/Timer.cpp b/Source/WebCore/platform/Timer.cpp
index 4f7c0f5c39ca..0f3734cca247 100644
--- a/Source/WebCore/platform/Timer.cpp
+++ b/Source/WebCore/platform/Timer.cpp
@@ -263,7 +263,11 @@ struct SameSizeAsTimer {
WeakPtr<TimerAlignment> timerAlignment;
double times[2];
- void* pointers[3];
+ void* pointers[2];
+#if CPU(ADDRESS32)
+ uint8_t bitfields;
+#endif
+ void* pointer;
};
static_assert(sizeof(Timer) == sizeof(SameSizeAsTimer), "Timer should stay small");

View File

@ -1,3 +1,15 @@
-------------------------------------------------------------------
Tue Apr 16 16:42:31 UTC 2024 - Michael Gorse <mgorse@suse.com>
- Update to version 2.44.1:
+ Fix handling of lifetime of web view child dialogs in GTK4.
+ Do not schedule layer flushes when drawing area size is empty.
+ Fix videos with alpha when using the DMA-BUF sink.
+ Fix the build with USE_GBM=OFF.
+ Fix the build in 32bit platforms
+ Fix several crashes and rendering issues.
- Drop webkit2gtk3-271108.patch: fixed upstream.
------------------------------------------------------------------- -------------------------------------------------------------------
Wed Mar 20 12:19:12 UTC 2024 - Michael Gorse <mgorse@suse.com> Wed Mar 20 12:19:12 UTC 2024 - Michael Gorse <mgorse@suse.com>
@ -203,7 +215,7 @@ Thu Sep 28 08:47:58 UTC 2023 - Marcus Meissner <meissner@suse.com>
------------------------------------------------------------------- -------------------------------------------------------------------
Fri Sep 15 19:04:16 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com> Fri Sep 15 19:04:16 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>
- Update to version 2.42.0 (boo#1218033): - Update to version 2.42.0 (boo#1218033 boo#1222905):
+ New renderer based on DMA-BUF shared buffers. + New renderer based on DMA-BUF shared buffers.
+ Add new permission request to handle DOM paste access requests. + Add new permission request to handle DOM paste access requests.
+ Add API to configure experimental features at runtime. + Add API to configure experimental features at runtime.
@ -211,7 +223,7 @@ Fri Sep 15 19:04:16 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>
for data storage. for data storage.
+ GBM is no longer required for WebGL implementation. + GBM is no longer required for WebGL implementation.
+ Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359, + Security fixes: CVE-2023-39928, CVE-2023-41074, CVE-2023-32359,
CVE-2023-42890, CVE-2014-1745. CVE-2023-42890, CVE-2014-1745, CVE-2024-23226.
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Sep 11 15:02:19 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com> Mon Sep 11 15:02:19 UTC 2023 - Bjørn Lie <bjorn.lie@gmail.com>

View File

@ -76,7 +76,7 @@ ExclusiveArch: do-not-build
Name: webkit2%{_gtknamesuffix} Name: webkit2%{_gtknamesuffix}
### FIXME ### Drop the disabling of LTO on next release/versionbump ### FIXME ### Drop the disabling of LTO on next release/versionbump
%define _lto_cflags %{nil} %define _lto_cflags %{nil}
Version: 2.44.0 Version: 2.44.1
Release: 0 Release: 0
Summary: Library for rendering web content, GTK+ Port Summary: Library for rendering web content, GTK+ Port
License: BSD-3-Clause AND LGPL-2.0-or-later License: BSD-3-Clause AND LGPL-2.0-or-later
@ -89,8 +89,6 @@ Source99: webkit2gtk3.keyring
# PATCH-FEATURE-OPENSUSE reproducibility.patch -- Make build reproducible # PATCH-FEATURE-OPENSUSE reproducibility.patch -- Make build reproducible
Patch0: reproducibility.patch Patch0: reproducibility.patch
# PATCH-FIX-UPSTREAM webkit2gtk3-271108.patch
Patch1: webkit2gtk3-271108.patch
# PATCH-FIX-UPSTREAM webkit2gtk3-disable-dmabuf-nvidia.patch boo#1216778 mgorse@suse.com -- disable the DMABuf renderer for NVIDIA proprietary drivers. # PATCH-FIX-UPSTREAM webkit2gtk3-disable-dmabuf-nvidia.patch boo#1216778 mgorse@suse.com -- disable the DMABuf renderer for NVIDIA proprietary drivers.
Patch2: webkit2gtk3-disable-dmabuf-nvidia.patch Patch2: webkit2gtk3-disable-dmabuf-nvidia.patch
@ -445,6 +443,8 @@ A small test browswer from webkit, useful for testing features.
# Expand %%lang_package to Obsoletes its older-name counterpart # Expand %%lang_package to Obsoletes its older-name counterpart
%package -n WebKitGTK-%{_apiver}-lang %package -n WebKitGTK-%{_apiver}-lang
Summary: Translations for package %{name} Summary: Translations for package %{name}

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:c66530e41ba59b1edba4ee89ef20b2188e273bed0497e95084729e3cfbe30c87
size 37046712

View File

@ -1,6 +0,0 @@
-----BEGIN PGP SIGNATURE-----
iF0EABECAB0WIQTX/PYc+aLeqzHYG9Pz0yLQ7EWCwwUCZfVbrAAKCRDz0yLQ7EWC
w8XkAJ9wH/0dQk9fHx1s5X4W9VIJxfX0dwCeN3dJ03QwNCk6CmZPgxfC6zd7ZA0=
=EFJC
-----END PGP SIGNATURE-----

3
webkitgtk-2.44.1.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:425b1459b0f04d0600c78d1abb5e7edfa3c060a420f8b231e9a6a2d5d29c5561
size 36280696

View File

@ -0,0 +1,6 @@
-----BEGIN PGP SIGNATURE-----
iF0EABECAB0WIQTX/PYc+aLeqzHYG9Pz0yLQ7EWCwwUCZhUJXwAKCRDz0yLQ7EWC
wxIeAKCjCRUlPDSBCqYWCbOPz16QO8nQ3gCdHYgXPNfi1wJcqQRhhsskPYyfBt8=
=6uTU
-----END PGP SIGNATURE-----