Change log : webkit2gtk package : Debian

2.22.5-1

Superseded in buster-release on 2019-02-12

Superseded in sid-release on 2019-02-11

webkit2gtk (2.22.5-1) unstable; urgency=medium

  * New upstream release.
  * debian/patches/detect-jit.patch:
    + Drop patch, this has been fixed upstream.
  * debian/patches/detect-woff.patch:
    + Refresh.

 -- Alberto Garcia <email address hidden>  Thu, 13 Dec 2018 20:43:29 +0200

Available diffs

diff from 2.22.4-1 to 2.22.5-1 (53.7 KiB)

2.23.1-1

Superseded in experimental-release on 2019-01-09

webkit2gtk (2.23.1-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/source/lintian-overrides:
    + Update source-is-missing overrides.
  * debian/watch, debian/gbp.conf:
    + Update for 2.23.x packages in experimental.
  * debian/rules:
    + Build with ENABLE_BUBBLEWRAP_SANDBOX=OFF, since it requires
      xdg-dbus-proxy which is not available in Debian.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.
  * debian/patches/build-minibrowser.patch:
    + Add missing cmake code to build the minibrowser.

 -- Alberto Garcia <email address hidden>  Fri, 23 Nov 2018 16:16:56 +0200

2.22.4-1

Superseded in buster-release on 2018-12-19

Superseded in sid-release on 2018-12-14

webkit2gtk (2.22.4-1) unstable; urgency=high

  * New upstream release.
  * The WebKitGTK+ security advisory WSA-2018-0008 lists the following
    security fixes in the latest versions of WebKitGTK+:
    + CVE-2018-4373 (fixed in 2.22.0).
    + CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382,
      CVE-2018-4392 and CVE-2018-4416 (fixed in 2.22.1).
    + CVE-2018-4345 and CVE-2018-4386 (fixed in 2.22.3).
    + CVE-2018-4372 (fixed in 2.22.4).
  * debian/control:
    + libwoff-dev is now available on kfreebsd, so we can use it.

 -- Alberto Garcia <email address hidden>  Thu, 22 Nov 2018 14:59:41 +0200

Available diffs

diff from 2.22.3-1 to 2.22.4-1 (49.9 KiB)
diff from 2.22.3-1build1 (in Ubuntu) to 2.22.4-1 (50.0 KiB)

2.22.3-1

Superseded in buster-release on 2018-11-27

Superseded in sid-release on 2018-11-27

webkit2gtk (2.22.3-1) unstable; urgency=medium

  * New upstream release.

  [ Jeremy Bicha ]
  * Enable woff2 support in Ubuntu too.
  * Opt out of Ubuntu language packs. This package is updated too often.

  [ Alberto Garcia ]
  * debian/patches/detect-woff.patch:
    + WOFF2 is not available on all platforms, so don't abort the build if
      it's not installed. This way it's enough if we simply remove
      libwoff-dev from the Build-Depends when necessary.
  * debian/control:
    + Don't depend on libwoff-dev on kfreebsd, it's not available.

 -- Alberto Garcia <email address hidden>  Mon, 29 Oct 2018 13:36:11 +0200

Available diffs

diff from 2.22.2-1ubuntu2 (in Ubuntu) to 2.22.3-1 (78.2 KiB)

2.22.2-1

Superseded in buster-release on 2018-11-03

Superseded in sid-release on 2018-10-30

webkit2gtk (2.22.2-1) unstable; urgency=medium

  * New upstream release.
  * debian/upstream/signing-key.asc:
    + Add Adrian Perez's GPG key to the keyring. He'll also be in charge
      of making upstream releases.
  * debian/patches/fix-ftbfs-x32.patch:
    + Fix the X32 build.
  * debian/patches/fix-ftbfs-armel.patch:
    + Fix the armel build.
    + debian/rules:
      - Stop passing -DENABLE_JIT=OFF manually.

 -- Alberto Garcia <email address hidden>  Sat, 22 Sep 2018 00:31:55 +0300

Available diffs

diff from 2.22.1-1 to 2.22.2-1 (85.7 KiB)

2.22.1-1

Superseded in sid-release on 2018-09-22

webkit2gtk (2.22.1-1) unstable; urgency=medium

  * New upstream release.
  * debian/patches/replace-stdmax.patch:
    + Drop patch, this has been merged upstream.

 -- Alberto Garcia <email address hidden>  Thu, 20 Sep 2018 11:55:58 +0300

Available diffs

diff from 2.22.0-1 to 2.22.1-1 (96.6 KiB)

2.22.0-2

Superseded in buster-release on 2018-09-27

Superseded in sid-release on 2018-09-21

webkit2gtk (2.22.0-2) unstable; urgency=medium

  * Upload to unstable.
  * debian/rules:
    + Disable JIT on armel, it's currently broken.
  * debian/gbp.conf:
    + Update upstream branch name.
  * debian/watch:
    + Scan stable releases only.

 -- Alberto Garcia <email address hidden>  Fri, 14 Sep 2018 21:23:00 +0300

2.22.0-1

Deleted in experimental-release (Reason: None provided.)

webkit2gtk (2.22.0-1) experimental; urgency=medium

  * New upstream release.
  * Drop use-wtf-cpu-mips64.patch and refresh fix-ftbfs-x86.patch.
  * debian/control:
    + Update Standards-Version to 4.2.1 (no changes).
  * debian/copyright:
    + Remove nonexistent files.
  * debian/patches/replace-stdmax.patch:
    + Don't use std::max in RegisterState.h, this causes build failures
      with some versions of libstdc++.

 -- Alberto Garcia <email address hidden>  Mon, 03 Sep 2018 15:51:37 +0300

Available diffs

diff from 2.21.91-2 to 2.22.0-1 (179.0 KiB)

2.21.92-1

Superseded in experimental-release on 2018-09-04

webkit2gtk (2.21.92-1) experimental; urgency=medium

  * New upstream development release.
  * debian/patches/use-wtf-cpu-mips64.patch:
    + Don't use WTF_CPU_MIPS on mips64. This makes WebKit enable JIT,
      which breaks the build.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <email address hidden>  Fri, 24 Aug 2018 18:37:29 +0300

2.21.91-2

Superseded in experimental-release on 2018-09-03

webkit2gtk (2.21.91-2) experimental; urgency=medium

  * debian/rules:
    + Pass --fail-missing to dh_missing.
  * debian/libjavascriptcoregtk-4.0-dev.install:
    + Install headers in usr/include/webkitgtk-4.0/jsc/ (Closes: #906519).
  * Install the jsc-glib and webkitdomgtk documentation.
  * debian/patches/detect-jit.patch:
    + Fix detection of when to enable the JIT and USE_SYSTEM_MALLOC.

 -- Alberto Garcia <email address hidden>  Tue, 21 Aug 2018 10:47:19 +0300

Available diffs

diff from 2.20.5-1 to 2.21.91-2 (4.4 MiB)

2.21.91-1

Superseded in experimental-release on 2018-08-25

webkit2gtk (2.21.91-1) experimental; urgency=medium

  * New upstream development release.
  * debian/patches/fix-ftbfs-m68k.patch:
    + Refresh.
  * debian/patches/gtk-doc-build-fix.patch:
    + Remove.
  * Don't use NEWS as an upstream changelog anymore (as required by Debian
    policy 4.2.0).
  * debian/control:
    + Update Standards-Version to 4.2.0.
  * debian/source/lintian-overrides:
    + Update source-is-missing overrides.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.
  * debian/rules:
    + Don't pass -DENABLE_JIT=OFF manually anymore, since r232918 WebKit
      only enables JIT in the targets where it's known to work.
    + Stop passing --ddeb-migration to dh_strip, the automatic debug
      symbol migration is complete.

 -- Alberto Garcia <email address hidden>  Thu, 16 Aug 2018 18:06:58 +0300

2.20.5-1

Superseded in buster-release on 2018-09-20

Superseded in sid-release on 2019-02-02

webkit2gtk (2.20.5-1) unstable; urgency=medium

  * New upstream release.
  * debian/patches/fix-ftbfs-m68k.patch:
    + Update patch (Closes: #902100).

 -- Alberto Garcia <email address hidden>  Mon, 13 Aug 2018 10:52:34 +0300

Available diffs

diff from 2.20.4-1 to 2.20.5-1 (2.1 KiB)

2.20.4-1

Superseded in buster-release on 2018-08-25

Superseded in sid-release on 2018-08-25

webkit2gtk (2.20.4-1) unstable; urgency=high

  * New upstream release.
    + This fixes CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
      CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
      CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
      CVE-2018-4284.
  * Don't use NEWS as an upstream changelog anymore (as required by Debian
    policy 4.2.0).
  * debian/control:
    + Update Standards-Version to 4.2.0.

 -- Alberto Garcia <email address hidden>  Mon, 06 Aug 2018 16:39:27 +0300

Available diffs

diff from 2.20.3-1 to 2.20.4-1 (33.3 KiB)

2.21.5-1

Deleted in experimental-release (Reason: None provided.)

webkit2gtk (2.21.5-1) experimental; urgency=medium

  * New upstream development release.
  * debian/control:
    + Update Standards-Version to 4.1.5 (no changes needed).
  * debian/patches/detect-gstreamer-gl.patch:
    + Refresh.
  * debian/patches/gtk-doc-build-fix.patch:
    + Fix build failure when generating documentation.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <email address hidden>  Mon, 30 Jul 2018 13:58:42 +0300

2.20.3-1

Superseded in buster-release on 2018-08-09

Superseded in sid-release on 2018-08-07

webkit2gtk (2.20.3-1) unstable; urgency=high

  * New upstream release.
    + This fixes CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
      CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246 and
      CVE-2018-11646.
  * debian/control:
    + Remove compatibility with versions of debhelper < 9.20151219 in
      override_dh_strip, we require version 10 since 2.20.1-1.
  * debian/patches/fix-atomics-build.patch:
    + The __atomic_fetch_add_8() check is now in this release. Update the
      patch to enable THREADS_PREFER_PTHREAD_FLAG. This fixes the riscv64
      build.
  * debian/rules:
    + Build with -DRELEASE_WITHOUT_OPTIMIZATIONS if "noopt" is set.
  * debian/libwebkit2gtk-4.0-doc.install, debian/rules:
    + Update path of installed documentation. This changed upstream in
      2.20.2 but it was reverted in this release.

 -- Alberto Garcia <email address hidden>  Tue, 12 Jun 2018 12:58:42 +0300

Available diffs

diff from 2.20.2-1 to 2.20.3-1 (46.6 KiB)

2.21.4-1

Superseded in experimental-release on 2018-08-04

webkit2gtk (2.21.4-1) experimental; urgency=medium

  * New upstream development release.
  * debian/patches/fix-ftbfs-sparc64.patch:
    + Refresh.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <email address hidden>  Tue, 12 Jun 2018 15:34:54 +0300

2.21.3-1

Superseded in experimental-release on 2018-06-13

webkit2gtk (2.21.3-1) experimental; urgency=medium

  * New upstream development release (Closes: #899338).
  * debian/rules:
    + Build with -DRELEASE_WITHOUT_OPTIMIZATIONS if "noopt" is set.
  * debian/patches/prefer-pthread.patch:
    + Enable THREADS_PREFER_PTHREAD_FLAG. This fixes a FTBFS in riscv64
      (see Debian #895969 and WebKit #182622).

 -- Alberto Garcia <email address hidden>  Mon, 28 May 2018 15:48:50 +0200

2.21.2-1

Superseded in experimental-release on 2018-06-03

webkit2gtk (2.21.2-1) experimental; urgency=medium

  * New upstream development release.
  * debian/patches/fix-atomics-build.patch,
    debian/patches/fix-format-security.patch:
    + Remove these patches, they are now upstream.
  * debian/patches/fix-ftbfs-m68k.patch:
    + Update.
  * debian/rules:
    + Remove compatibility with versions of debhelper < 9.20151219 in
      override_dh_strip, we require version 10 since 2.20.1-1.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <email address hidden>  Mon, 21 May 2018 11:16:26 +0300

2.20.2-1

Superseded in buster-release on 2018-06-14

Superseded in sid-release on 2018-06-13

webkit2gtk (2.20.2-1) unstable; urgency=high

  * New upstream release.
    + This fixes CVE-2018-4200.
  * debian/patches/fix-atomics-build.patch:
    + Set THREADS_PREFER_PTHREAD_FLAG to ON. This fixes the build in
      riscv64 (thanks, Aurelien Jarno).
  * debian/libwebkit2gtk-4.0-doc.install, debian/rules:
    + Update path of installed documentation (see WebKit #184771).

 -- Alberto Garcia <email address hidden>  Mon, 07 May 2018 14:41:30 +0300

Available diffs

diff from 2.20.1-1 to 2.20.2-1 (50.4 KiB)

2.21.1-1

Superseded in experimental-release on 2018-05-23

webkit2gtk (2.21.1-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/patches/fix-format-security.patch:
    + Fix build with GCC due to bogus format-security error.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <email address hidden>  Fri, 20 Apr 2018 11:23:59 +0300

2.20.1-1

Superseded in buster-release on 2018-05-20

Superseded in sid-release on 2018-05-08

webkit2gtk (2.20.1-1) unstable; urgency=medium

  [ Alberto Garcia ]
  * New upstream release.
  * debian/rules:
    + Ubuntu doesn't install changelogs with dh_installchangelogs, so
      let's use dh_installdocs instead (but keep dh_installchangelogs for
      Debian).
  * debian/control:
    + Update Standards-Version to 4.1.4 (no changes needed).

  [ Jeremy Bicha ]
  * The WebKitGTK+ security advisory WSA-2018-0003 lists the following
    security fixes in the latest versions of WebKitGTK+:
    + CVE-2018-4101, CVE-2018-4113, CVE-2018-4114, CVE-2018-4117,
      CVE-2018-4118, CVE-2018-4119, CVE-2018-4120, CVE-2018-4122,
      CVE-2018-4125, CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
      CVE-2018-4133, CVE-2018-4146, CVE-2018-4161, CVE-2018-4162,
      CVE-2018-4163, CVE-2018-4165 (fixed in 2.20.0).
  * Update Vcs fields for migration to https://salsa.debian.org/
  * Enable gstreamer-gl on Ubuntu too (LP: #1752197)
  * Bump debhelper compat to 10

 -- Alberto Garcia <email address hidden>  Tue, 10 Apr 2018 20:34:42 +0200

Available diffs

diff from 2.20.0-2ubuntu1 (in Ubuntu) to 2.20.1-1 (55.8 KiB)

2.20.0-2

Superseded in buster-release on 2018-04-19

Superseded in sid-release on 2018-04-13

webkit2gtk (2.20.0-2) unstable; urgency=medium

  * Upload to unstable (Closes: #889659, #888543).
  * debian/gbp.conf:
    + Update upstream branch name.
  * debian/NEWS:
    + Add news item about the Gigacage feature.

 -- Alberto Garcia <email address hidden>  Wed, 21 Mar 2018 14:31:13 +0200

Available diffs

diff from 2.20.0-1 to 2.20.0-2 (875 bytes)

2.20.0-1

Deleted in experimental-release (Reason: None provided.)

webkit2gtk (2.20.0-1) experimental; urgency=medium

  * New upstream release.
  * debian/patches/fix-ftbfs-armel.patch:
    + Detect missing __atomic_fetch_add_8() and rename patch to
      fix-atomics-build.patch.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.
  * debian/copyright:
    + Remove nonexistent files.
  * debian/source/lintian-overrides:
    + Update source-is-missing overrides.

 -- Alberto Garcia <email address hidden>  Mon, 12 Mar 2018 16:49:26 +0200

Available diffs

diff from 2.19.92-1 to 2.20.0-1 (19.2 KiB)

2.18.6-1~deb9u1

Published in stretch-release on 2018-03-10

webkit2gtk (2.18.6-1~deb9u1) stretch; urgency=medium

  * Team upload.
  * New security and bugfix release backported from Buster.

 -- Jeremy Bicha <email address hidden>  Mon, 29 Jan 2018 20:54:00 -0500

2.19.92-1

Superseded in experimental-release on 2018-03-14

webkit2gtk (2.19.92-1) experimental; urgency=medium

  [ Alberto Garcia ]
  * New upstream development release.
  * debian/rules:
    + Don't redefine CFLAGS or LDFLAGS when calling cmake, and don't add
      CPPFLAGS to CFLAGS/CXXFLAGS. Cmake already reads all those
      environment variables.
  * Build the documentation:
    + debian/rules:
      - Support the DEB_BUILD_OPTIONS "nodoc" tag and pass -DENABLE_GTKDOC
        to CMake depending on whether it's set or not.
      - Override the dh_install rule to make sure that a dummy doc
        directory is present if "nodoc" is set.
    + debian/control:
      - Add build dependencies on libglib2.0-doc, libgtk-3-doc and
        libsoup2.4-doc.
      - Update Standards-Version to 4.1.3 (we now support "nodoc").
    + debian/libwebkit2gtk-4.0-doc.install:
      - Install the generated documentation instead of the one provided by
        upstream.
  * debian/copyright:
    + Update copyright years.

  [ Jeremy Bicha ]
  * gstreamergl has moved to gstreamer base in 1.13 so update dependencies
  * Fix Ubuntu useragent (LP: #1751484)
  * Temporarily disable WOFF2 on Ubuntu, see bug 1742743

 -- Alberto Garcia <email address hidden>  Wed, 07 Mar 2018 11:18:52 +0200

Available diffs

diff from 2.19.91-1ubuntu1 (in Ubuntu) to 2.19.92-1 (158.1 KiB)
diff from 2.19.91-1ubuntu2~bionic1.5.1 (in Ubuntu) to 2.19.92-1 (157.4 KiB)

2.19.91-1

Deleted in experimental-release (Reason: None provided.)

webkit2gtk (2.19.91-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/rules:
    + Use -O1 in powerpc as well.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <email address hidden>  Wed, 21 Feb 2018 13:09:22 +0200

2.19.90-1

Superseded in experimental-release on 2018-03-13

webkit2gtk (2.19.90-1) experimental; urgency=medium

  * New upstream development release.
  * debian/rules:
    + Use -O1 in sh3 and sh4 (thanks, John Paul Adrian Glaubitz).
  * Refresh all patches.

 -- Alberto Garcia <email address hidden>  Mon, 05 Feb 2018 14:19:43 +0200

2.18.6-1

Superseded in buster-release on 2018-03-28

Superseded in sid-release on 2018-06-13

webkit2gtk (2.18.6-1) unstable; urgency=high

  * New upstream release.
    + This fixes CVE-2018-4088, CVE-2017-13885, CVE-2017-7165,
      CVE-2017-13884, CVE-2017-7160, CVE-2017-7153, CVE-2017-7153,
      CVE-2017-7161 and CVE-2018-4096.

 -- Alberto Garcia <email address hidden>  Wed, 24 Jan 2018 13:30:06 +0200

Available diffs

diff from 2.18.4-1 to 2.18.6-1 (17.6 KiB)
diff from 2.18.5-1 to 2.18.6-1 (15.5 KiB)

2.19.6-1

Superseded in experimental-release on 2018-02-22

webkit2gtk (2.19.6-1) experimental; urgency=medium

  * New upstream development release.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <email address hidden>  Wed, 17 Jan 2018 15:55:19 +0200

2.18.5-1

Superseded in buster-release on 2018-01-27

Superseded in sid-release on 2018-02-11

webkit2gtk (2.18.5-1) unstable; urgency=high

  * New upstream release.
    + This includes fixes to mitigate the effects of the Spectre
      vulnerability (CVE-2017-5753 and CVE-2017-5715).

 -- Alberto Garcia <email address hidden>  Wed, 10 Jan 2018 14:23:33 +0200

Available diffs

diff from 2.18.4-1 to 2.18.5-1 (4.0 KiB)

2.18.4-1

Superseded in buster-release on 2018-01-12

Superseded in sid-release on 2018-01-11

webkit2gtk (2.18.4-1) unstable; urgency=high

  [ Alberto Garcia ]
  * New upstream release.
    + This fixes CVE-2017-13866, CVE-2017-13870, CVE-2017-7156 and
      CVE-2017-13856.
  * Refresh all patches.
  * debian/control:
    + Request native version of the Ruby package (thanks, Helmut Grohne)
      (Closes: #881637).
  * Instead of passing -DUSE_GSTREAMER_GL=OFF explicitly, let CMake do it
    if libgstreamer-plugins-bad1.0-dev is not installed.
    + debian/patches/detect-gstreamer-gl.patch:
      - Disable USE_GSTREAMER_GL if GStreamerGL is not found.
    + debian/rules:
      - Remove the list of architectures that are not using GStreamerGL.
  * debian/control:
    + Don't require libgstreamer-plugins-bad1.0-dev in hppa, m68k,
      powerpcspe, sh4 or x32.

  [ Jeremy Bicha ]
  * debian/control: Update Vcs-Git to point to correct branch.
  * Allow setting the distributor name in the User Agent string. Ubuntu
    wants this patch, but since it makes it easier to identify the user
    let's leave it disabled in Debian (Closes: #883712).
    + debian/patches/user-agent-branding.patch:
      - Patch to support updating the User-Agent string.
    + debian/rules:
      - Pass -DUSER_AGENT_GTK_DISTRIBUTOR_NAME when building for Ubuntu.

 -- Alberto Garcia <email address hidden>  Tue, 19 Dec 2017 18:31:33 +0200

Available diffs

diff from 2.18.3-1 to 2.18.4-1 (99.5 KiB)

2.19.3-1

Superseded in experimental-release on 2018-02-05

webkit2gtk (2.19.3-1) experimental; urgency=medium

  * New upstream development release (Closes: #882387).

  [ Jeremy Bicha ]
  * debian/control: Update Vcs-Git to point to correct branch.
  * Allow setting the distributor name in the User Agent string. Ubuntu
    wants this patch, but since it makes it easier to identify the user
    let's leave it disabled in Debian (Closes: #883712).
    + debian/patches/user-agent-branding.patch:
      - Patch to support updating the User-Agent string.
    + debian/rules:
      - Pass -DUSER_AGENT_GTK_DISTRIBUTOR_NAME when building for Ubuntu.

  [ Alberto Garcia ]
  * Refresh all patches.
  * Several cross-compilation fixes in debian/rules (thanks, Helmut
    Grohne).
    + Include /usr/share/dpkg/architecture.mk instead of calling
      dpkg-architecture manually to set the DEB_*_ARCH variables.
    + Use DEB_BUILD_ARCH_BITS to decide whether to pass --no-keep-memory
      to the linker.
    + Use DEB_HOST_ARCH to decide whether to use -g1 and -DENABLE_JIT=OFF.
    + Remove the --no-relax flag for alpha, this was a workaround for a 10
      year old binutils bug.

 -- Alberto Garcia <email address hidden>  Wed, 13 Dec 2017 14:26:06 +0100

2.19.2-1

Superseded in experimental-release on 2017-12-14

webkit2gtk (2.19.2-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/control:
    + Request native version of the Ruby package (thanks, Helmut Grohne)
    + Build depend on libfile-copy-recursive-perl.
  * Instead of passing -DUSE_GSTREAMER_GL=OFF explicitly, let CMake do it
    if libgstreamer-plugins-bad1.0-dev is not installed.
    + debian/patches/detect-gstreamer-gl.patch:
      - Disable USE_GSTREAMER_GL if GStreamerGL is not found.
    + debian/rules:
      - Remove the list of architectures that are not using GStreamerGL.
  * debian/control:
    + Don't require libgstreamer-plugins-bad1.0-dev in hppa, m68k,
      powerpcspe, sh4 or x32.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <email address hidden>  Tue, 21 Nov 2017 12:54:32 +0200

2.18.3-1

Superseded in buster-release on 2017-12-24

Superseded in sid-release on 2019-06-04

webkit2gtk (2.18.3-1) unstable; urgency=high

  * New upstream release.
  * The WebKitGTK+ security advisory WSA-2017-0009 lists the following
    security fixes in the latest versions of WebKitGTK+:
    + CVE-2017-13783, CVE-2017-13784, CVE-2017-13785, CVE-2017-13791,
      CVE-2017-13792, CVE-2017-13793, CVE-2017-13794, CVE-2017-13795,
      CVE-2017-13796 and CVE-2017-13802 (fixed in 2.18.1).
    + CVE-2017-13788, CVE-2017-13798, CVE-2017-13803 (fixed in 2.18.3)
  * Several cross-compilation fixes in debian/rules (thanks, Helmut
    Grohne) (Closes: #881341):
    + Include /usr/share/dpkg/architecture.mk instead of calling
      dpkg-architecture manually to set the DEB_*_ARCH variables.
    + Use DEB_BUILD_ARCH_BITS to decide whether to pass --no-keep-memory
      to the linker.
    + Use DEB_HOST_ARCH to decide whether to use -g1, -DENABLE_JIT=OFF and
      -DUSE_GSTREAMER_GL=OFF.
    + Remove the --no-relax flag for alpha, this was a workaround for a 10
      year old binutils bug.

 -- Alberto Garcia <email address hidden>  Sat, 11 Nov 2017 14:26:11 +0200

Available diffs

diff from 2.18.2-1 to 2.18.3-1 (6.8 KiB)
diff from 2.18.2-1build1 (in Ubuntu) to 2.18.3-1 (6.9 KiB)

2.19.1-1

Deleted in experimental-release (Reason: None provided.)

webkit2gtk (2.19.1-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/watch, debian/gbp.conf:
    + Update for 2.19.x packages in experimental.
  * debian/control:
    + Add build dependency on libupower-glib-dev.
  * debian/rules:
    + Build with -DUSE_WOFF2=OFF, this needs libwoff2dec which is still
      not available in Debian.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <email address hidden>  Thu, 02 Nov 2017 16:48:14 +0200

2.18.2-1

Superseded in buster-release on 2017-11-14

Superseded in sid-release on 2017-11-13

webkit2gtk (2.18.2-1) unstable; urgency=medium

  * New upstream release.
  * debian/control:
    + Set the minimum versions of these build dependencies: cmake >= 3.3,
      libcairo2-dev >= 1.10.2, libfontconfig1-dev >= 2.8, and
      libgcrypt20-dev >= 1.7.0, libxml2-dev >= 2.8.

 -- Alberto Garcia <email address hidden>  Fri, 27 Oct 2017 15:05:15 +0200

Available diffs

diff from 2.18.0-2build1 (in Ubuntu) to 2.18.2-1 (407.7 KiB)

2.18.1-1

Superseded in buster-release on 2017-11-02

Superseded in sid-release on 2017-10-29

webkit2gtk (2.18.1-1) unstable; urgency=medium

  * New upstream release.
  * The WebKitGTK+ security advisory WSA-2017-0008 lists the following
    security fixes in the latest versions of WebKitGTK+:
    + CVE-2017-7081 and CVE-2017-7142 (fixed in 2.16.1).
    + CVE-2017-7094 (fixed in 2.16.3).
    + CVE-2017-7099 (fixed in 2.16.4).
    + CVE-2017-7087, CVE-2017-7089, CVE-2017-7090, CVE-2017-7091,
      CVE-2017-7092, CVE-2017-7093, CVE-2017-7095, CVE-2017-7096,
      CVE-2017-7098, CVE-2017-7100, CVE-2017-7102, CVE-2017-7104,
      CVE-2017-7107, CVE-2017-7109, CVE-2017-7111, CVE-2017-7117,
      CVE-2017-7120 (fixed in 2.18.0).
  * debian/control:
    + Recommend the Pulseaudio or ALSA GStreamer plugins, since they're
      needed for audio playback (Closes: #877281).
  * debian/patches/fix-ftbfs-alpha.patch:
    + This patch is no longer needed, drop it.
  * Refresh all other patches.
  * debian/control:
    + Remove 'Priority: extra' fields, all packages have optional priority
      now (the 'extra' priority has been deprecated).
  * debian/copyright:
    + Use https for the Format URL.

 -- Alberto Garcia <email address hidden>  Wed, 18 Oct 2017 14:36:55 +0300

2.16.6-0+deb9u1

Superseded in stretch-release on 2018-03-10

webkit2gtk (2.16.6-0+deb9u1) stretch; urgency=medium

  * Team upload.
  * New upstream security and bugfix release.
  * Fixes these security issues reported in WSA-2017-0005 and
    WSA-2017-0006:
    + CVE-2017-2538, CVE-2017-7052 (fixed in 2.16.4)
    + CVE-2017-7018, CVE-2017-7030, CVE-2017-7034, CVE-2017-7037,
      CVE-2017-7039, CVE-2017-7046, CVE-2017-7048, CVE-2017-7055,
      CVE-2017-7056, CVE-2017-7061, CVE-2017-7064 (fixed in 2.16.6).
  * Add debian/patches/fix-ftbfs-m68k.patch:
    + Fix FTBFS in m68k (Closes: #868126).

 -- Jeremy Bicha <email address hidden>  Mon, 07 Aug 2017 00:35:25 -0400

2.18.0-2

Superseded in sid-release on 2017-11-09

webkit2gtk (2.18.0-2) unstable; urgency=medium

  * Upload to unstable.
  * debian/gbp.conf:
    + Update upstream branch name.
  * The WebKitGTK+ security advisory WSA-2017-0007 lists the following
    security fixes in WebKitGTK+ 2.16.3:
    + CVE-2017-1000121.
    + CVE-2017-1000122.

 -- Alberto Garcia <email address hidden>  Thu, 14 Sep 2017 10:44:32 +0300

Available diffs

diff from 2.18.0-1 to 2.18.0-2 (508 bytes)

2.18.0-1

Deleted in experimental-release (Reason: None provided.)

webkit2gtk (2.18.0-1) experimental; urgency=medium

  * New upstream release.

 -- Alberto Garcia <email address hidden>  Mon, 11 Sep 2017 11:05:27 +0300

Available diffs

diff from 2.17.92-1 to 2.18.0-1 (179.2 KiB)

2.17.92-1

Deleted in experimental-release (Reason: None provided.)

webkit2gtk (2.17.92-1) experimental; urgency=medium

  * New upstream development release.
  * Disable GStreamerGL in the Hurd:
    + Pass -DUSE_GSTREAMER_GL=OFF in debian/rules.
    + Remove build dependency on libgstreamer-plugins-bad1.0-dev from
      debian/control.
  * debian/control:
    + Recommmend libgl1-mesa-dri (Closes: #873084).
  * debian/patches/fix-ftbfs-m68k.patch:
    + Refresh.

 -- Alberto Garcia <email address hidden>  Mon, 04 Sep 2017 17:02:41 +0300

Available diffs

diff from 2.17.91-1ubuntu1 (in Ubuntu) to 2.17.92-1 (312.6 KiB)

2.17.91-1

Deleted in experimental-release (Reason: None provided.)

webkit2gtk (2.17.91-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches and remove no-whole-archive.patch.
  * debian/patches/fix-ftbfs-hurd.patch:
    + Work around missing PATH_MAX definition in ConfigFile.h
  * Disable GStreamerGL in kFreeBSD and sparc64:
    + Pass -DUSE_GSTREAMER_GL=OFF in debian/rules.
    + Remove build dependency on libgstreamer-plugins-bad1.0-dev from
      debian/control.

 -- Alberto Garcia <email address hidden>  Fri, 18 Aug 2017 14:32:00 +0300

2.17.90-1

Superseded in experimental-release on 2017-08-19

webkit2gtk (2.17.90-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/control:
    + Add build dependency on libtasn1-6-dev (for Web Crypto).
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.
  * Disable GStreamerGL in armel and armhf, the usage of two different GL
    implementations causes a build failure (see WebKit but #175127).
    + debian/control: Don't install libgstreamer-plugins-bad1.0-dev in
      those architectures.
    + debian/rules: Pass -DUSE_GSTREAMER_GL=OFF.
  * debian/patches/no-whole-archive.patch:
    + Don't use --whole-archive for the WebKit2 target libraries.

 -- Alberto Garcia <email address hidden>  Thu, 10 Aug 2017 12:45:07 +0300

Available diffs

diff from 2.16.6-1 to 2.17.90-1 (10.1 MiB)

2.17.5-2

Superseded in experimental-release on 2017-08-13

webkit2gtk (2.17.5-2) experimental; urgency=medium

  * debian/rules:
    + Don't pass -DENABLE_DISASSEMBLER=0, this is no longer necessary.
    + Don't disable JIT in arm64.
    + Don't disable the gold linker in any architecture.
  * debian/control:
    + Add build dependency on mesa-common-dev (GStreamerGL needs GL/gl.h),
      this is automatically pulled in some architectures by
      libgl1-mesa-dev, but without it the build fails in all others.
  * Refresh debian/patches/fix-ftbfs-m68k.patch.

 -- Alberto Garcia <email address hidden>  Fri, 04 Aug 2017 15:23:53 +0300

2.17.5-1

Superseded in experimental-release on 2017-08-05

webkit2gtk (2.17.5-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/source/lintian-overrides:
    + Update source-is-missing overrides.
  * debian/patches/fix-ftbfs-m68k.patch:
    + Fix FTBFS in m68k.
  * debian/control:
    + Add build dependency on libgstreamer-plugins-bad1.0-dev for
      GStreamerGL and bump all GStreamer dependencies to >= 1.2.3.
    + Add build dependency on libgles2-mesa-dev for all
      architectures (GStreamerGL needs GLES3/gl3.h).
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.
  * Override typelib-package-name-does-not-match and
    gir-missing-typelib-dependency lintian warnings in
    gir1.2-javascriptcoregtk-4.0, gir1.2-webkit2-4.0,
    libjavascriptcoregtk-4.0-dev and libwebkit2gtk-4.0-dev.

 -- Alberto Garcia <email address hidden>  Fri, 28 Jul 2017 23:27:14 +0200

2.16.6-1

Superseded in buster-release on 2017-10-26

Superseded in sid-release on 2018-03-21

webkit2gtk (2.16.6-1) unstable; urgency=high

  * New upstream release.
  * The WebKitGTK+ security advisory WSA-2017-0006 lists the following
    security fixes in the latest versions of WebKitGTK+:
    + CVE-2017-7020 (fixed in 2.16.1).
    + CVE-2017-7006, CVE-2017-7012, CVE-2017-7019, CVE-2017-7038,
      CVE-2017-7041, CVE-2017-7042, CVE-2017-7043, CVE-2017-7049
      (fixed in 2.16.2).
    + CVE-2017-7011, CVE-2017-7040, CVE-2017-7059 (fixed in 2.16.3).
    + CVE-2017-7052 (fixed in 2.16.4).
    + CVE-2017-7018, CVE-2017-7030, CVE-2017-7034, CVE-2017-7037,
      CVE-2017-7039, CVE-2017-7046, CVE-2017-7048, CVE-2017-7055,
      CVE-2017-7056, CVE-2017-7061, CVE-2017-7064 (fixed in 2.16.6).
  * debian/patches/fix-ftbfs-m68k.patch:
    + Fix FTBFS in m68k (Closes: #868126).
  * Override typelib-package-name-does-not-match and
    gir-missing-typelib-dependency lintian warnings in
    gir1.2-javascriptcoregtk-4.0, gir1.2-webkit2-4.0,
    libjavascriptcoregtk-4.0-dev and libwebkit2gtk-4.0-dev.

 -- Alberto Garcia <email address hidden>  Thu, 27 Jul 2017 02:16:11 +0200

Available diffs

diff from 2.16.5-1 to 2.16.6-1 (18.2 KiB)

2.16.5-1

Superseded in buster-release on 2017-07-29

Superseded in sid-release on 2017-07-29

webkit2gtk (2.16.5-1) unstable; urgency=medium

  * New upstream release (Closes: #865772).

 -- Alberto Garcia <email address hidden>  Tue, 27 Jun 2017 10:29:49 +0300

Available diffs

diff from 2.16.3-2 to 2.16.5-1 (33.7 KiB)
diff from 2.16.4-1 to 2.16.5-1 (3.7 KiB)

2.16.4-1

Superseded in sid-release on 2017-06-30

webkit2gtk (2.16.4-1) unstable; urgency=high

  * New upstream release.
    + This fixes CVE-2017-2538.

 -- Alberto Garcia <email address hidden>  Tue, 20 Jun 2017 17:24:48 +0300

Available diffs

diff from 2.16.3-2 to 2.16.4-1 (34.6 KiB)

2.17.4-1

Superseded in experimental-release on 2017-08-18

webkit2gtk (2.17.4-1) experimental; urgency=medium

  * New upstream development release.
  * debian/patches/fix-ftbfs-sparc64.patch:
    + Refresh.
  * debian/patches/fix-ftbfs-x86.patch:
    + Update to fix build in x86_64.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <email address hidden>  Mon, 19 Jun 2017 10:42:06 +0300

2.17.3-1

Superseded in experimental-release on 2017-07-31

webkit2gtk (2.17.3-1) experimental; urgency=medium

  * New upstream development release.
  * Refresh all patches.
  * debian/patches/fix-ftbfs-x86.patch:
    + Fix FTBFS in x86.
  * debian/watch, debian/gbp.conf:
    + Update for 2.17.x packages in experimental.
  * debian/libwebkit2gtk-4.0-37.symbols:
    + Update symbols.

 -- Alberto Garcia <email address hidden>  Sat, 03 Jun 2017 18:51:02 +0300

Debian
webkit2gtk package

Change log for webkit2gtk package in Debian

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Debianwebkit2gtk package

Change log for webkit2gtk package in Debian

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Debian
webkit2gtk package