Your message dated Mon, 05 May 2025 14:54:12 +0000
with message-id <[email protected]>
and subject line Bug#1104703: fixed in webkit2gtk 2.48.1-3
has caused the Debian Bug report #1104703,
regarding libwebkitgtk-6.0-4: JTI broken on arm64 with BTI enabled
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1104703: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104703
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libwebkitgtk-6.0-4
Version: 2.48.1-2
Severity: important
Tags: upstream patch
X-Debbugs-Cc: [email protected], [email protected],
[email protected]
User: [email protected]
Usertags: arm64
Control: forwarded -1 https://bugs.webkit.org/show_bug.cgi?id=245697
Dear Maintainer,
Earlier today we received a report in Bananas Team [1] that WebKitGTK is
broken on arm64 when BTI is enabled (CONFIG_ARM64_BTI=y in Debian) and
actually in use. Apparently, this is a longstanding bug (it was first
reported to Fedora back in 2022, see [2]) of which upstream is aware [3].
Based on the latter, it seems a workaround is to switch from
branch-protection=standard to branch-protection=pac-ret (see e.g. Fedora [4]).
The user who reported this, Adam Reviczky (in c.c.), suggests to use [5]
```
DEB_BUILD_MAINT_OPTIONS = hardening=+all,-branch
CXXFLAGS += -mbranch-protection=pac-ret
```
for arm64. I am flagging this bug as important, but it should probably be
serious since IIUC it makes WebKitGTK unusable on these platforms.
Cheers!
[1] https://salsa.debian.org/bananas-team/bananas-tracker/-/issues/3
[2] https://bugzilla.redhat.com/show_bug.cgi?id=2130009
[3] https://bugs.webkit.org/show_bug.cgi?id=245697
[4]
https://src.fedoraproject.org/rpms/webkitgtk/c/fac6852e5695051ade276ed08835d7baa487bf32?branch=rawhide
[5]
https://github.com/reviczky/webkit-bti/commit/e7226117a8d976300e3be0037f999fafde3e7c0f
--- End Message ---
--- Begin Message ---
Source: webkit2gtk
Source-Version: 2.48.1-3
Done: Alberto Garcia <[email protected]>
We believe that the bug you reported is fixed in the latest version of
webkit2gtk, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Alberto Garcia <[email protected]> (supplier of updated webkit2gtk package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 05 May 2025 15:58:39 +0200
Source: webkit2gtk
Architecture: source
Version: 2.48.1-3
Distribution: unstable
Urgency: high
Maintainer: Debian WebKit Maintainers
<[email protected]>
Changed-By: Alberto Garcia <[email protected]>
Closes: 1104703
Changes:
webkit2gtk (2.48.1-3) unstable; urgency=high
.
* debian/rules:
- Build with -mbranch-protection=pac-ret on arm64 (Closes: #1104703).
Checksums-Sha1:
2893b5c1347256cf6dd33e4be5189a642c80c325 4983 webkit2gtk_2.48.1-3.dsc
8a2fdadef9ed89b0727288c0b52d6fc8e3e759c1 90356
webkit2gtk_2.48.1-3.debian.tar.xz
2a62033ccf98e05428211904c1c207dd350d067d 15640
webkit2gtk_2.48.1-3_source.buildinfo
Checksums-Sha256:
8a35fd5fca04b496746da623d1697bff9d9068b8155ff1560b071ed87e65c633 4983
webkit2gtk_2.48.1-3.dsc
2f07edfdb56e948a1cef26264b2062f2cd6009fae2110905dfcdae826f6deac6 90356
webkit2gtk_2.48.1-3.debian.tar.xz
c8359ac0859903bed8ee2826b17b52a9c6cbaac9f26fa952744fca0274f5669b 15640
webkit2gtk_2.48.1-3_source.buildinfo
Files:
8a4c30723370fbfda75122143bee6c69 4983 web optional webkit2gtk_2.48.1-3.dsc
f1f5eb3f51f34696439225c9513ec687 90356 web optional
webkit2gtk_2.48.1-3.debian.tar.xz
920a7a36d1d3fc01b5030454e288a6ae 15640 web optional
webkit2gtk_2.48.1-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=mw6p
-----END PGP SIGNATURE-----
pgpCFhIVyjrLZ.pgp
Description: PGP signature
--- End Message ---
