Hello community, here is the log from the commit of package webkit2gtk3 for openSUSE:Leap:15.2 checked in at 2020-01-30 14:48:43 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2/webkit2gtk3 (Old) and /work/SRC/openSUSE:Leap:15.2/.webkit2gtk3.new.26092 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "webkit2gtk3" Thu Jan 30 14:48:43 2020 rev:67 rq:752819 version:2.26.2 Changes: -------- --- /work/SRC/openSUSE:Leap:15.2/webkit2gtk3/webkit2gtk3.changes 2020-01-15 16:28:55.952770656 +0100 +++ /work/SRC/openSUSE:Leap:15.2/.webkit2gtk3.new.26092/webkit2gtk3.changes 2020-01-30 14:49:23.970870523 +0100 @@ -1,0 +2,184 @@ +Mon Nov 11 22:31:54 UTC 2019 - Michael Gorse <[email protected]> + +- Add webkit2gtk3-icu-build-fix.patch: fix build with icu 65.1. + +------------------------------------------------------------------- +Thu Nov 7 16:38:56 UTC 2019 - Michael Gorse <[email protected]> + +- Only use wpe and xdg-dbus-proxy/bubblewrap for TW and + SLE-15-SP2 / leap 15.2. +- Don't pass -DENABLE_BUBBLEWRAP_SANDBOX=ON; it is on by default. +- Remove conditionals for EOL versions of openSUSE. +- Always build with python3; remove the conditional. + +------------------------------------------------------------------- +Wed Nov 6 16:26:43 UTC 2019 - Bjørn Lie <[email protected]> + +- Update to version 2.26.2 (boo#1156318): + + Improve performance of querying system fallback fonts. + + Don't use prgname in dbus-proxy socket path. + + Fix thread-safety issues in image decoders. + + Fix the build with WebDriver disabled. + + Disable accelerated compositing when we fail to initialize the + EGL dispaly under Wayland. + + Fill the objects category in emoji picker. + + Fix several crashes and rendering issues. + + Security fixes: CVE-2019-8812, CVE-2019-8814. + +------------------------------------------------------------------- +Thu Sep 26 10:03:59 UTC 2019 - Bjørn Lie <[email protected]> + +- Enable sandbox again (pass -DENABLE_BUBBLEWRAP_SANDBOX=ON to + cmake). +- Move bubblewrap and xdg-dbus-proxy Requires from main package to + main library package libwebkit2gtk-4_0-37, they are needed at + runtime, and there is no webkit2gtk3 package that we can install. + +------------------------------------------------------------------- +Mon Sep 23 15:24:34 UTC 2019 - Bjørn Lie <[email protected]> + +- Update to version 2.26.1: + + Fix MSE media player with GStreamer 1.14. + + Fix HTML alternate loads never finishing. + + Fix web view initialization delay on fisrt load. + + Validate user agent string set via API. + + Fix a crash when a web view is destroyed with accelerated + compositing mode enabled. + + Fix EGL initialization with newer versions of Mesa. + + Do not enable the sandbox inside docker. + + Fix several crashes and rendering issues. + ++ Security fixes: CVE-2019-8783, CVE-2019-8811, CVE-2019-8813, + CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8823. + +------------------------------------------------------------------- +Thu Sep 19 16:44:45 UTC 2019 - Michael Gorse <[email protected]> + +- Add webkit2gtk3-fdo-soname.patch: don't try to open WPE backend + with an unversioned soname. + +------------------------------------------------------------------- +Tue Sep 17 14:42:14 UTC 2019 - Michael Gorse <[email protected]> + +- Enable pkgconfig(wpe-1.0) and pkgconfig(wpebackend-fdo-1.0) + BuildRequires and stop passing DUSE_WPE_RENDERER=OFF to cmake. + +------------------------------------------------------------------- +Thu Sep 12 21:09:23 UTC 2019 - Bjørn Lie <[email protected]> + +- Test disable sandbox, does this fix epiphany? + (pass -DENABLE_BUBBLEWRAP_SANDBOX=OFF to cmake). + +------------------------------------------------------------------- +Mon Sep 9 09:59:58 UTC 2019 - Bjørn Lie <[email protected]> + +- Update to version 2.26.0 (boo#1155321): + + Add support for subprocess sandboxing. + + Add support for HSTS (HTTP Strict Transport Security). + + Use libwpe with fdo backend to implement accelerated + compositing under wayland. + + Remove support for GTK2 NPAPI plugins. + + Add support for datalist element in text input fields. + + Show the emoji chooser popover for editable content. + + Improve rendering of form controls when GTK theme is dark. + + Fix rendering artifacts in youtube volume button and github + comment box. + + Single process model has been deprecated for security reasons. + + Security fixes: CVE-2019-8625, CVE-2019-8720, CVE-2019-8769, + CVE-2019-8771, CVE-2019-8710, CVE-2019-8743, CVE-2019-8764, + CVE-2019-8766, CVE-2019-8782, CVE-2019-8808, CVE-2019-8815. + +------------------------------------------------------------------- +Tue Sep 3 12:11:49 UTC 2019 - Bjørn Lie <[email protected]> + +- Update to version 2.25.92: + + Add WEBKIT_USE_SINGLE_WEB_PROCESS environment variable to force + single process model in all WebKitWebContext. This is a + temporary solution for applications still depending on the + single process mode behavior. It will be only available in 2.26 + series. + + Add new API to remove a filter from an user content manager + given its identifier. + + Add support for HSTS. + + Several improvements and bug fixes in MSE media player. + + Fix building without unified sources. + + Fix several crashes and rendering issues. + + Updated translations. + +------------------------------------------------------------------- +Fri Aug 30 11:25:04 UTC 2019 - Bjørn Lie <[email protected]> + +- Disable pkgconfig(wpe-1.0) and pkgconfig(wpebackend-fdo-1.0) + BuildRequires and pass DUSE_WPE_RENDERER=OFF to cmake. Needs more + work upstream. + +------------------------------------------------------------------- +Fri Aug 30 02:25:04 UTC 2019 - Bjørn Lie <[email protected]> + +- Update to version 2.25.4: + + Switch to use libsoup WebSockets API. + + Add support for permessage-deflate WebSocket extension. + + Add support for datalist element in text input fields. + + Fix a crash with empty video source. + + Fix several crashes and rendering issues. + +------------------------------------------------------------------- +Fri Aug 30 02:25:03 UTC 2019 - Bjørn Lie <[email protected]> + +- Update to version 2.25.3: + + Remove support for GTK2 NPAPI plugins. + + Fix web view updates after swapping web process if accelerated + compositing mode is forced. + + Make kinetic scrolling work again. + + Fix position of emoji chooser when page is scrolled. + + Fix web process deadlock when scrolling twitter timeline which + contains HLS videos. + + Make navigation gesture use dark fallback background color + color on dark themes. + + Make Previous/Next gesture work in RTL mode. + + Support cancelling touchscreen back/forward gesture. + + Add user agent quirk to make github work in FreeBSD. + + Fix content disappearing when using CSS transforms. + + Fix some radio streams that could not be played. + + Fix video pause that sometimes caused to skip to finish. + + Fix volume level changes when playing a video. + + Fix several crashes and rendering issues. +- Changes from version 2.25.2: + + Enable process switch on cross site navigation. + + Use libwpe with fdo backend to implement accelerated + compositing under wayland. + + Fix rendering artifacts in youtube volume button. + + Fix trapezoid artifact in github comment box. + + Ensure web extensions directory is readable when sandbox is + enabled. + + Fix the executable name of WebDriver process, renamed by + mistake in 2.25.1. + + Enable hyperlink auditing setting by default. + + Remove the option to build without using the redirected + XComposite window. + + Fix HLS streams being slow to start. + + Make accessibility work when sandbox is enabled. + + Fix several crashes and rendering issues. +- Changes from version 2.25.1: + + Add support for subprocess sandboxing. + + Add API to get the web process unique identifier of a + WebKitFrame. + + Add WebKitWebPage::did-associate-form-controls-for-frame signal + and deprecate did-associate-form-controls. + + Implement AtkComponentIface scroll_to methods. + + Improve rendering of form controls when GTK theme is dark and + enable prefers-color-scheme media query. + + Show the emoji chooser popover for editable content. + + Fix touch capabilities detection for websites checking touch + events properties present in window or pointer media queries. + + Fix several crashes and rendering issues. +- Drop webkit2gtk3-bwo197558-hang.patch: Fixed upstream. +- Add pkgconfig(wpe-1.0) and pkgconfig(wpebackend-fdo-1.0) + BuildRequires: New dependencies. +- Enable bubblewrap, xdg-dbus-proxy and pkgconfig(libseccomp) + BuildRequires as well as bubblewrap and xdg-dbus-proxy Requires: + Sandbox feature is enabled again. +- Drop conditional pkgconfig(gtk+-2.0) BuildRequires and + webkit2gtk3-plugin-process-gtk2 sub-package, support for gtk2 + plugins are now dropped upstream. Add Obsoletes in libwebkit2gtk. + +------------------------------------------------------------------- @@ -21 +205,3 @@ - CVE-2019-8684, CVE-2019-8688. + CVE-2019-8684, CVE-2019-8688, CVE-2019-8674, CVE-2019-8707, + CVE-2019-8719, CVE-2019-8733, CVE-2019-8763, CVE-2019-8765, + CVE-2019-8821, CVE-2019-8822. @@ -51 +237,2 @@ - CVE-2019-8681, CVE-2019-8687, CVE-2019-8689, CVE-2019-8690. + CVE-2019-8681, CVE-2019-8687, CVE-2019-8689, CVE-2019-8690, + CVE-2019-8726. @@ -65 +252 @@ -Wed Jun 19 14:37:58 UTC 2019 - [email protected] +Fri May 24 08:00:33 UTC 2019 - Bjørn Lie <[email protected]> @@ -78 +265 @@ ++++ 238 more lines (skipped) ++++ between /work/SRC/openSUSE:Leap:15.2/webkit2gtk3/webkit2gtk3.changes ++++ and /work/SRC/openSUSE:Leap:15.2/.webkit2gtk3.new.26092/webkit2gtk3.changes Old: ---- webkitgtk-2.24.4.tar.xz webkitgtk-2.24.4.tar.xz.asc New: ---- webkit2gtk3-fdo-soname.patch webkit2gtk3-icu-build-fix.patch webkitgtk-2.26.2.tar.xz webkitgtk-2.26.2.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ webkit2gtk3.spec ++++++ --- /var/tmp/diff_new_pack.ulzhjk/_old 2020-01-30 14:49:25.446871308 +0100 +++ /var/tmp/diff_new_pack.ulzhjk/_new 2020-01-30 14:49:25.446871308 +0100 @@ -27,31 +27,24 @@ %define _name webkitgtk # gold linker not available on old s390/s390x %define _gold_linker 1 -%if 0%{?suse_version} < 1320 -%ifarch s390 s390x -%define _gold_linker 0 -%endif -%else %ifarch ppc s390 %define _gold_linker 0 %endif -%endif -%if 0%{?suse_version} >= 1500 -%bcond_without python3 -%else -%bcond_with python3 -%endif Name: webkit2gtk3 -Version: 2.24.4 +Version: 2.26.2 Release: 0 Summary: Library for rendering web content, GTK+ Port License: LGPL-2.0-or-later AND BSD-3-Clause Group: Development/Libraries/C and C++ URL: https://webkitgtk.org/ -Source0: https://webkitgtk.org/releases/%{_name}-%{version}.tar.xz -Source1: https://webkitgtk.org/releases/%{_name}-%{version}.tar.xz.asc +Source0: %{url}/releases/%{_name}-%{version}.tar.xz +Source1: %{url}/releases/%{_name}-%{version}.tar.xz.asc Source98: baselibs.conf Source99: webkit2gtk3.keyring +# PATCH-FIX-OPENSUSE webkit2gtk3-fdo-soname.patch [email protected] -- don't call dlopen with an unversioned soname. +Patch0: webkit2gtk3-fdo-soname.patch +# PATCh-FIX-UPSTREAM webkit2gtk3-icu-build-fix.patch [email protected] -- fix build with icu 65.1. +Patch1: webkit2gtk3-icu-build-fix.patch BuildRequires: Mesa-libEGL-devel BuildRequires: Mesa-libGL-devel @@ -59,7 +52,9 @@ BuildRequires: Mesa-libGLESv2-devel BuildRequires: Mesa-libGLESv3-devel BuildRequires: bison >= 2.3 -#BuildRequires: bubblewrap +%if 0%{?suse_version} > 1510 +BuildRequires: bubblewrap +%endif BuildRequires: cmake BuildRequires: enchant-devel BuildRequires: gobject-introspection-devel @@ -71,7 +66,9 @@ BuildRequires: perl >= 5.10.0 BuildRequires: pkgconfig BuildRequires: ruby >= 1.8.7 -#BuildRequires: xdg-dbus-proxy +%if 0%{?suse_version} > 1510 +BuildRequires: xdg-dbus-proxy +%endif BuildRequires: pkgconfig(atk) BuildRequires: pkgconfig(atspi-2) >= 2.5.3 BuildRequires: pkgconfig(cairo) >= 1.10.2 @@ -97,7 +94,7 @@ BuildRequires: pkgconfig(libbrotlidec) >= 1.0.1 BuildRequires: pkgconfig(libnotify) BuildRequires: pkgconfig(libpng) -#BuildRequires: pkgconfig(libseccomp) +BuildRequires: pkgconfig(libseccomp) BuildRequires: pkgconfig(libsecret-1) BuildRequires: pkgconfig(libsoup-2.4) >= 2.61.90 BuildRequires: pkgconfig(libwebp) @@ -105,13 +102,13 @@ BuildRequires: pkgconfig(libxslt) >= 1.1.7 BuildRequires: pkgconfig(sqlite3) BuildRequires: pkgconfig(upower-glib) +%if 0%{?suse_version} > 1510 +BuildRequires: pkgconfig(wpe-1.0) >= 1.3.0 +BuildRequires: pkgconfig(wpebackend-fdo-1.0) >= 1.3.0 +%endif +BuildRequires: gcc-c++ >= 4.9 BuildRequires: pkgconfig(xt) BuildRequires: pkgconfig(zlib) -%if 0%{?suse_version} == 1315 -BuildRequires: gcc7-c++ -%else -BuildRequires: gcc-c++ >= 4.9 -%endif %if 0%{?suse_version} >= 1500 BuildRequires: openjpeg2 BuildRequires: openjpeg2-devel @@ -119,21 +116,10 @@ %if 0%{?suse_version} > 1500 BuildRequires: pkgconfig(libwoff2dec) %endif -%if %{with python3} BuildRequires: python3 -%else -BuildRequires: python >= 2.6.0 -BuildRequires: python2-xml -%endif %if %{_gold_linker} BuildRequires: binutils-gold %endif -%if 0%{?is_opensuse} -# We require gtk2 for the Gtk2 plugin wrapper -BuildRequires: pkgconfig(gtk+-2.0) >= 2.24.10 -%endif -#Requires: bubblewrap -#Requires: xdg-dbus-proxy %description WebKit is a web content engine, derived from KHTML and KJS from KDE, @@ -148,9 +134,16 @@ Summary: Library for rendering web content, GTK+ Port # Require the injected bundles. The bundles are dlopen()ed Group: System/Libraries +%if 0%{?suse_version} > 1510 +Requires: bubblewrap +%endif Requires: webkit2gtk-4_0-injected-bundles +%if 0%{?suse_version} > 1510 +Requires: xdg-dbus-proxy +%endif Recommends: %{_pkgname_no_slpp}-lang Provides: %{_pkgname_no_slpp} = %{version} +Obsoletes: webkit2gtk3-plugin-process-gtk2 %description -n libwebkit2gtk%{_wk2sover} WebKit is a web content engine, derived from KHTML and KJS from KDE, @@ -161,16 +154,6 @@ also supports DOM, XMLHttpRequest, XSLT, CSS, Javascript/ECMAscript and more. -%if 0%{?is_opensuse} -%package plugin-process-gtk2 -Summary: GTK+ 2 based NPAPI plugins support for %{name} -Group: Development/Libraries/C and C++ -Requires: libwebkit2gtk%{_wk2sover} = %{version} - -%description plugin-process-gtk2 -Support for GTK+ 2 based NPAPI plugins (such as Adobe Flash) for %{name}. -%endif - %package -n webkit2gtk-4_0-injected-bundles Summary: Injected bundles for %{name} Group: System/Libraries @@ -306,9 +289,7 @@ test "$max_link_jobs" -le 0 && max_link_jobs=1 && echo "Warning: Not linking in parallel at all becuse of memory limits" fi -%if %{with python3} export PYTHON=%{_bindir}/python3 -%endif # Use linker flags to reduce memory consumption %if %{_gold_linker} %global optflags %(echo %{optflags} -Wl,--no-keep-memory | sed 's/-g /-g1 /') @@ -324,23 +305,15 @@ -DCMAKE_EXE_LINKER_FLAGS="-Wl,--as-needed -Wl,-z,now -pthread" \ -DCMAKE_MODULE_LINKER_FLAGS="-Wl,--as-needed -Wl,-z,now -pthread" \ -DCMAKE_SHARED_LINKER_FLAGS="-Wl,--as-needed -Wl,-z,now -pthread" \ -%if 0%{?suse_version} == 1315 - -DCMAKE_C_COMPILER=gcc-7 \ - -DCMAKE_CXX_COMPILER=g++-7 \ - -DENABLE_WEB_CRYPTO=OFF \ - -DUSE_GSTREAMER_GL=false \ - -DUSE_OPENJPEG=false \ -%endif %if 0%{?suse_version} <= 1500 -DUSE_WOFF2=false \ -DENABLE_MEDIA_SOURCE=OFF \ %endif -%if %{with python3} - -DPYTHON_EXECUTABLE=%{_bindir}/python3 \ -%endif -%if !0%{?is_opensuse} - -DENABLE_PLUGIN_PROCESS_GTK2=OFF \ +%if 0%{?suse_version} <= 1510 + -DUSE_WPE_RENDERER=OFF \ + -DENABLE_BUBBLEWRAP_SANDBOX=OFF \ %endif + -DPYTHON_EXECUTABLE=%{_bindir}/python3 \ %ifarch armv6hl ppc ppc64 ppc64le riscv64 s390 s390x -DENABLE_JIT=OFF \ %endif @@ -358,10 +331,6 @@ %postun -n libjavascriptcoregtk%{_sover} -p /sbin/ldconfig %files -n libwebkit2gtk%{_wk2sover} -%if 0%{?is_opensuse} -# Exclude Gtk2 plugin support from this package. That goes into plugin-process-gtk2. -%exclude %{_libexecdir}/libwebkit2gtk%{_wk2sover}/WebKitPluginProcess2 -%endif # Exclude jsc and MiniBrowser - we package them on their own %exclude %{_libexecdir}/libwebkit2gtk%{_wk2sover}/jsc %exclude %{_libexecdir}/libwebkit2gtk%{_wk2sover}/MiniBrowser @@ -369,11 +338,6 @@ %{_libdir}/libwebkit2gtk-4.0.so.* %{_bindir}/WebKitWebDriver -%if 0%{?is_opensuse} -%files plugin-process-gtk2 -%{_libexecdir}/libwebkit2gtk%{_wk2sover}/WebKitPluginProcess2 -%endif - %files -n webkit2gtk-4_0-injected-bundles %dir %{_libdir}/webkit2gtk-4.0 %dir %{_libdir}/webkit2gtk-4.0/injected-bundle ++++++ webkit2gtk3-fdo-soname.patch ++++++ diff --git a/Source/WebKit/UIProcess/glib/WebProcessPoolGLib.cpp b/Source/WebKit/UIProcess/glib/WebProcessPoolGLib.cpp index a380a25fa4b..d96d23bce2e 100644 --- a/Source/WebKit/UIProcess/glib/WebProcessPoolGLib.cpp +++ b/Source/WebKit/UIProcess/glib/WebProcessPoolGLib.cpp @@ -114,7 +114,7 @@ void WebProcessPool::platformInitializeWebProcess(const WebProcessProxy& process #if PLATFORM(WAYLAND) if (WebCore::PlatformDisplay::sharedDisplay().type() == WebCore::PlatformDisplay::Type::Wayland) { #if USE(WPE_RENDERER) - wpe_loader_init("libWPEBackend-fdo-1.0.so"); + wpe_loader_init("libWPEBackend-fdo-1.0.so.1"); if (wpe_fdo_initialize_for_egl_display(WebCore::PlatformDisplay::sharedDisplay().eglDisplay())) { parameters.hostClientFileDescriptor = wpe_renderer_host_create_client(); parameters.implementationLibraryName = FileSystem::fileSystemRepresentation(wpe_loader_get_loaded_implementation_library_name()); ++++++ webkit2gtk3-icu-build-fix.patch ++++++ >From 730b80e691a4b9dd0e9727cfcd9806dfa542397b Mon Sep 17 00:00:00 2001 From: "[email protected]" <[email protected]@268f45cc-cd09-0410-ab3c-d52691b4dbfc> Date: Fri, 4 Oct 2019 21:51:37 +0000 Subject: [PATCH] Fix build with icu 65.1 https://bugs.webkit.org/show_bug.cgi?id=202600 Patch by Heiko Becker <[email protected]> on 2019-10-04 Reviewed by Konstantin Tokarev. Source/WebCore: * dom/Document.cpp: (WebCore::isValidNameNonASCII): (WebCore::Document::parseQualifiedName): Source/WTF: * wtf/URLHelpers.cpp: (WTF::URLHelpers::allCharactersInIDNScriptWhiteList): git-svn-id: http://svn.webkit.org/repository/webkit/trunk@250747 268f45cc-cd09-0410-ab3c-d52691b4dbfc --- Source/WTF/ChangeLog | 10 ++++++++++ Source/WTF/wtf/URLHelpers.cpp | 2 +- Source/WebCore/ChangeLog | 11 +++++++++++ Source/WebCore/dom/Document.cpp | 6 +++--- 4 files changed, 25 insertions(+), 4 deletions(-) diff --git a/Source/WTF/wtf/URLHelpers.cpp b/Source/WTF/wtf/URLHelpers.cpp index 18e7f13cd61..c584f1a0cb7 100644 --- a/Source/WTF/wtf/URLHelpers.cpp +++ b/Source/WTF/wtf/URLHelpers.cpp @@ -301,7 +301,7 @@ static bool allCharactersInIDNScriptWhiteList(const UChar* buffer, int32_t lengt Optional<UChar32> previousCodePoint; while (i < length) { UChar32 c; - U16_NEXT(buffer, i, length, c) + U16_NEXT(buffer, i, length, c); UErrorCode error = U_ZERO_ERROR; UScriptCode script = uscript_getScript(c, &error); if (error != U_ZERO_ERROR) { diff --git a/Source/WebCore/dom/Document.cpp b/Source/WebCore/dom/Document.cpp index 2443e24c9bc..1fbb3a71600 100644 --- a/Source/WebCore/dom/Document.cpp +++ b/Source/WebCore/dom/Document.cpp @@ -4954,12 +4954,12 @@ static bool isValidNameNonASCII(const UChar* characters, unsigned length) unsigned i = 0; UChar32 c; - U16_NEXT(characters, i, length, c) + U16_NEXT(characters, i, length, c); if (!isValidNameStart(c)) return false; while (i < length) { - U16_NEXT(characters, i, length, c) + U16_NEXT(characters, i, length, c); if (!isValidNamePart(c)) return false; } @@ -5019,7 +5019,7 @@ ExceptionOr<std::pair<AtomString, AtomString>> Document::parseQualifiedName(cons for (unsigned i = 0; i < length; ) { UChar32 c; - U16_NEXT(qualifiedName, i, length, c) + U16_NEXT(qualifiedName, i, length, c); if (c == ':') { if (sawColon) return Exception { InvalidCharacterError }; -- 2.23.0 ++++++ webkitgtk-2.24.4.tar.xz -> webkitgtk-2.26.2.tar.xz ++++++ /work/SRC/openSUSE:Leap:15.2/webkit2gtk3/webkitgtk-2.24.4.tar.xz /work/SRC/openSUSE:Leap:15.2/.webkit2gtk3.new.26092/webkitgtk-2.26.2.tar.xz differ: char 26, line 1
