Public bug reported: Please sync webkitgtk 2.4.11-1 (universe) from Debian unstable (main)
Explanation of the Ubuntu delta and why it can be dropped: * Merge with Debian, remaining changes: - bugzilla_clear_surface.patch: Take patch to fix upstream bug#123480 which was a crash affecting software-center in Ubuntu. - Stick on geoclue 1 for now, the new version isn't in main and a transition plan needs to be worked out, for example for how to integrate the Ubuntu GeoIP service. - still build libwebkit2gtk-3.0 in Ubuntu - We're moving to geoclue 2 now (see bug 1389336) - https://bugs.webkit.org/show_bug.cgi?id=123480 says the software-center bug is fixed in 2.4.11 TODO: verify on yakkety - The only thing dependant on webkit2gtk-3 in yakkety is anjuta which just needs a rebuild (it will also need the 3.20 autosynced package deleted for that since we're not ready for GTK 3.20) Test builds and packages at https://launchpad.net/~jbicha/+archive/ubuntu/arch/+packages TODO: building Changelog entries since last synced version 2.4.9-2: webkitgtk (2.4.11-1) unstable; urgency=medium * New upstream release. * debian/patches/fix-arm64-build.patch: + Remove, this has been fixed upstream. * debian/patches/fix-ftbfs-m68k.patch: + Refresh. * debian/{control,rules}: + Build depend on libegl1-mesa-dev and libgles2-mesa-dev on arm64. -- Alberto Garcia <be...@igalia.com> Sun, 10 Apr 2016 20:19:20 +0300 webkitgtk (2.4.10-1) unstable; urgency=high * New upstream release. + This contains the following security fixes: CVE-2015-1120, CVE-2015-1076, CVE-2015-1071, CVE-2015-1081, CVE-2015-1122, CVE-2015-1155, CVE-2014-1748, CVE-2015-3752, CVE-2015-5809, CVE-2015-5928, CVE-2015-3749, CVE-2015-3659, CVE-2015-3748, CVE-2015-3743, CVE-2015-3731, CVE-2015-3745, CVE-2015-5822, CVE-2015-3658, CVE-2015-3741, CVE-2015-3727, CVE-2015-5801, CVE-2015-5788, CVE-2015-3747, CVE-2015-5794, CVE-2015-1127, CVE-2015-1153, CVE-2015-1083. * debian/patches/fix-cloop.patch, debian/patches/fix-gtkdoc-error.patch, debian/patches/ppc64-align.patch, debian/patches/use-abi64-for-mips64el.patch: + Delete these patches, they are no longer needed. * debian/patches/atomic_build_fix.patch, debian/patches/x32_support.patch: + Refresh. * debian/patches/fix-ftbfs-m68k.patch: + Fix FTBFS in m68k (Closes: #696236). * debian/control: + Bump Standards-Version to 3.9.7; no changes needed. + Use secure URIs for the Vcs-* fields. * debian/rules: + Enable all hardening flags. + Remove EXTRA_DH_ARGUMENTS, this is no longer being used. * debian/copyright: + Update copyright years. * debian/source/lintian-overrides: + Update overrides so the latest lintian doesn't give more source-is-missing false positives. * Remove the libwebkitgtk-*common* and libwebkit-dev packages: + debian/control: - Remove package entries and add Breaks and Replaces fields to libwebkitgtk-{1,3}.0-0 and libwebkitgtk*-dev. + debian/libwebkitgtk-*common*.install: - Remove and move all files to libwebkitgtk-{1,3}.0-0.install and libwebkitgtk-3.0-dev.install. + debian/rules: - Remove dh_install rules from binary-indep. * Move documentation to a separate libwebkitgtk-doc package: + debian/libwebkitgtk-3.0-dev.{install,links}, debian/libwebkitgtk-dev.{install,links}, debian/libwebkitgtk-doc.{install,links}: debian/rules: - Don't install the documentation in the -dev packages and do it in libwebkitgtk-doc instead. + debian/libwebkitgtk-doc.doc-base: - Add doc-base control file. + debian/control: - Add package entry. * Migrate to automatic -dbgsym packages: + debian/control: - Remove the entries for all -dbg packages. + debian/rules: - Replace --dbg-package with --ddeb-migration in dh_strip, but don't make it fail if debhelper < 9.20151219. webkitgtk (2.4.9-3) unstable; urgency=medium * debian/patches/disable-jit-nonsse2.patch: + Disable JIT on x86 CPUs without SSE2 (Closes: #783293). * debian/patches/fix-cloop.patch: + Refresh. * debian/source/lintian-overrides: + lintian gives false positives with many of the javascript files in the source tarball, thinking that they are minified (see #798900). * Remove the webkit2 packages completely: + debian/control: - Remove entries for gir1.2-webkit2-3.0 and libwebkit2gtk-* + debian/rules: - Remove the ENABLE_WEBKIT2 variable and all references to the webkit2 packages. + debian/gir1.2-webkit2-3.0.install, debian/libwebkit2gtk-3.0-25.{install,symbols}, debian/libwebkit2gtk-3.0-dev.{install,links}: - Remove these files. * debian/copyright: + Update copyright years. * debian/rules: + Build with -DNDEBUG and -DG_DISABLE_CAST_CHECKS. + The size of the webkitgtk -dbg packages is huge and has been a source of headaches in many architectures that cannot build them or deal with them easily. Our current approach has been to disable them completely for those architectures. For this release we'll build them again but using -g1 instead, which produces _way_ smaller files that are still useful for backtraces. + Do not run dh_builddeb in parallel, it is very I/O intensive for some buildds. ** Affects: webkitgtk (Ubuntu) Importance: Undecided Assignee: Jeremy Bicha (jbicha) Status: In Progress ** Changed in: webkitgtk (Ubuntu) Assignee: (unassigned) => Jeremy Bicha (jbicha) ** Changed in: webkitgtk (Ubuntu) Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1588037 Title: Sync webkitgtk 2.4.11-1 (universe) from Debian unstable (main) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/webkitgtk/+bug/1588037/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs