X-Original-To: alpine-aports@lists.alpinelinux.org Received: from mail-lf0-f66.google.com (mail-lf0-f66.google.com [209.85.215.66]) by lists.alpinelinux.org (Postfix) with ESMTP id 2D0155C4327 for ; Mon, 20 Feb 2017 13:21:42 +0000 (GMT) Received: by mail-lf0-f66.google.com with SMTP id 86so2361356lfv.0 for ; Mon, 20 Feb 2017 05:21:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id; bh=rG8sFEufJ0P7pSKUCsblpYNWVnEEaQUO+UOa26JULU4=; b=TvsOnj6E10fjXDXZ3uHmTORqXeBhedNZkevhiDkv2YH1s66o/mcTBjXrDHb4dgxozi STdXqanZziXVU11ypz+u52uoT/zFHCmmpcMf4Jac9zknNNSD7E5JMoWQqZHLbN4z4Kz9 Vqfh52HezAQOQFdwn0eEGDSSluNssC923afQeafh4k1tH/1egP2LkUBzBJJd9x2mFZ2N /ekV1WOGrrdqJhzDocDgZeed8jPd78Ck/nAKeEZvFiYDuk6XNFyjiSdSF7ptAma8clYn 9RXIDoNsQ/cVAshuFJpePfQYMuREIlp6T/ZOKYTLQPBbjGuQ6hVCs7m3ix/BXoQm5eDQ KztQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id; bh=rG8sFEufJ0P7pSKUCsblpYNWVnEEaQUO+UOa26JULU4=; b=uI/jgugKpdzHPFr340LOvTj7WZ3ymNQQfQcSOlk3FXD6SLGRNPkIkjrd1qGiTNLl/8 WxCOLH/slSABiGD5LoNGBT6TCVKW2Q1WnZO8o4L+45znnAPIHKN6HxYIKtt9puAY0AbL +sVPEEU6y/GszJcr8o9Lzl0w+ZWuKXoqQ93FktzpSbU07h6WMBR6/ihcflyZLFzAryBm XG/BSg9T5LoIOvCNJ71v4ZdA5kKs0Fc80R5DrkL3AL/FyB9X2VY949nHGW5ij3aKlOck 07VjDGH5PBG+cy0rd2YdNBAWat3gn4N7ZOcz2GwKHkQE06NkWxwl8QybBHWvBZK4l3Az 6w9Q== X-Gm-Message-State: AMke39nS122Fpdn71pZlpUsxy8Wzh/OZxIppdXATAzNUvQEu0JKGgiyUpjrIGHXUjEtK+w== X-Received: by 10.25.157.65 with SMTP id g62mr1026900lfe.29.1487596901438; Mon, 20 Feb 2017 05:21:41 -0800 (PST) Received: from v3-5.util.wtbts.net ([83.145.235.199]) by smtp.gmail.com with ESMTPSA id g100sm5245615lji.67.2017.02.20.05.21.40 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 20 Feb 2017 05:21:40 -0800 (PST) From: Sergei Lukin To: alpine-aports@lists.alpinelinux.org Cc: Sergei Lukin Subject: [alpine-aports] [PATCH v3.5] community/webkit2gtk: security upgrade to 2.14.5 - fixes #6888 Date: Mon, 20 Feb 2017 13:21:34 +0000 Message-Id: <20170220132134.240-1-sergej.lukin@gmail.com> X-Mailer: git-send-email 2.11.1 X-Mailinglist: alpine-aports Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: CVE-2017-2350 CVE-2017-2354 CVE-2017-2355 CVE-2017-2356 CVE-2017-2362 CVE-2017-2363 CVE-2017-2364 CVE-2017-2365 CVE-2017-2366 CVE-2017-2369 CVE-2017-2371 CVE-2017-2373 --- community/webkit2gtk/APKBUILD | 24 ++++++++++++++++++++---- 1 file changed, 20 insertions(+), 4 deletions(-) diff --git a/community/webkit2gtk/APKBUILD b/community/webkit2gtk/APKBUILD index bc1426a825..049617d516 100644 --- a/community/webkit2gtk/APKBUILD +++ b/community/webkit2gtk/APKBUILD @@ -1,7 +1,8 @@ +# Contributor: Sergei Lukin # Contributor: Jiri Horner # Maintainer: Jiri Horner pkgname=webkit2gtk -pkgver=2.14.2 +pkgver=2.14.5 pkgrel=0 pkgdesc="portable web rendering engine WebKit for GTK+" url="http://webkitgtk.org/" @@ -45,6 +46,21 @@ source="http://webkitgtk.org/releases/webkitgtk-$pkgver.tar.xz musl-fixes.patch " +# secfixes: +# 2.14.5-r0: +# - CVE-2017-2350 +# - CVE-2017-2354 +# - CVE-2017-2355 +# - CVE-2017-2356 +# - CVE-2017-2362 +# - CVE-2017-2363 +# - CVE-2017-2364 +# - CVE-2017-2365 +# - CVE-2017-2366 +# - CVE-2017-2369 +# - CVE-2017-2371 +# - CVE-2017-2373 + _srcdir="${srcdir}/webkitgtk-${pkgver}" _builddir="${srcdir}/build" prepare() { @@ -84,9 +100,9 @@ package() { paxmark -m "$pkgdir"/usr/lib/webkit2gtk-4.0/WebKitWebProcess || return 1 } -md5sums="2fe3cadbc546d93ca68a13756c2be015 webkitgtk-2.14.2.tar.xz +md5sums="7fe3cb2699e64f969b285823c5ae2516 webkitgtk-2.14.5.tar.xz 4e74c88f7e9522c6a573f9d588da9bc4 musl-fixes.patch" -sha256sums="2edbcbd5105046aea55af9671c4de8deedb5b0e3567c618034d440a760675556 webkitgtk-2.14.2.tar.xz +sha256sums="3ca8f1c33a9b43d6c753dcac1c0788656930e06382b10fdf5c2805ea8f96369f webkitgtk-2.14.5.tar.xz 5cc1b9790056b4430b8a7b357f376ddcae43e38ab228d6a259c0abdc7ab4b892 musl-fixes.patch" -sha512sums="e1e344660c1aa38f2911aab334581b015bdbd6fa3bef6f1cd67560b86f1b183bf91cafb94bd4783f4660ecad94dc662ec4a342d5bb2420f284150adc21f79beb webkitgtk-2.14.2.tar.xz +sha512sums="3351d9b05458434835fa2db050c34906649c3b1222d7936d123306634a46e35e8cc3aa1bb7512b103af1996fce722254692826b6f695e32ae176032dc8c94e1c webkitgtk-2.14.5.tar.xz 95f88563cb83387e3f44781dd8b00c5adf53e352869ca1d217c6cfc0895e9b7680e24820b8df340316564dcbc4cb65eb502fb003089b4805b9ac9f583f454013 musl-fixes.patch" -- 2.11.1 --- Unsubscribe: alpine-aports+unsubscribe@lists.alpinelinux.org Help: alpine-aports+help@lists.alpinelinux.org ---