X-Original-To: alpine-aports@lists.alpinelinux.org Received: from mail-lf0-f67.google.com (mail-lf0-f67.google.com [209.85.215.67]) by lists.alpinelinux.org (Postfix) with ESMTP id A60B45C42A5 for ; Mon, 20 Feb 2017 13:17:19 +0000 (GMT) Received: by mail-lf0-f67.google.com with SMTP id z127so6578076lfa.2 for ; Mon, 20 Feb 2017 05:17:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id; bh=Vi5LgYQ8ll/az/oFk0yhLp5uZGsFfVdJkcOuBA558IE=; b=gLMUZm2iXtyy8HePVrJXyim21lce0loKSeBJYp94O7UiLVTgdq04j7mupptYwKpjBx R4mFS7Z/hxXgRMKpkfzC+ObPV8Q8nxAmh3dfuqJHqeR67auVaL248WcYV50RHxW6Kr6m jUfLwOzrBjIAbsKvKtHSlShXqd9i9XrmlS2TX5HdWvHnKfrKJGsEjr353ZGhIOWrmbwD fq+2ISy+HAhXHqendMxh3E6b6xwb70CsKlXStY/2iNvhkmUXS+15nEHdchAkLImO8OoZ YrT2pQleh0p2XJ4qWb0UfWcT5w3HhXwtNLCQdrHwcpZ3C3VfFjKPg/psfFn/sQjnj0HQ mZig== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id; bh=Vi5LgYQ8ll/az/oFk0yhLp5uZGsFfVdJkcOuBA558IE=; b=NpTILMmQcVjGPVzFrON0zYtnZyDIPzCuoOLgmv5CSoO/VEZhzWkofoiyjhTHRv9p3H WF+OKruIM5L7eLjGmpJHzEc4UlNfb8ECCdNekdJXd1xWf/HlqF+d0+5XDkFPUyYAW0+U 7oGMJIxcqrP3D/w2NGff6nLyidCTRsxdSL66dcmmWw+4ROi870o6wtBJFrN2qu0/OscM Cxzbxw1dt4hsf5dJTbNc1cA0DAouxZ2u0meouaHDoEyhxhEvV1kVJ6/ippJvxp8nm4lv JknXlbeOKz7/RsmXtuLLgmvS2GvIYF8wIH5Gq/NE0bPy2mLKFVO5v45q8TGkNwoFqFf7 yWiw== X-Gm-Message-State: AMke39kGoSag7g5CeQCCieXQ679h6cS96QE0YbyQ83u7y4/UBJoJ+bYYBZKbtRAt8Z6fEg== X-Received: by 10.46.84.84 with SMTP id y20mr4873097ljd.126.1487596638529; Mon, 20 Feb 2017 05:17:18 -0800 (PST) Received: from v3-5.util.wtbts.net ([83.145.235.199]) by smtp.gmail.com with ESMTPSA id y1sm5166635lja.68.2017.02.20.05.17.17 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 20 Feb 2017 05:17:17 -0800 (PST) From: Sergei Lukin To: alpine-aports@lists.alpinelinux.org Cc: Sergei Lukin Subject: [alpine-aports] [PATCH v3.5] community/webkit2gtk: security upgrade to 2.14.5 - fixes #6888 Date: Mon, 20 Feb 2017 13:17:10 +0000 Message-Id: <20170220131710.8772-1-sergej.lukin@gmail.com> X-Mailer: git-send-email 2.11.1 X-Mailinglist: alpine-aports Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: CVE-2017-2350 CVE-2017-2354 CVE-2017-2355 CVE-2017-2356 CVE-2017-2362 CVE-2017-2363 CVE-2017-2364 CVE-2017-2365 CVE-2017-2366 CVE-2017-2369 CVE-2017-2371 CVE-2017-2373 --- community/webkit2gtk/APKBUILD | 24 ++++++++++++++++++++---- 1 file changed, 20 insertions(+), 4 deletions(-) diff --git a/community/webkit2gtk/APKBUILD b/community/webkit2gtk/APKBUILD index bc1426a825..a76ed6add0 100644 --- a/community/webkit2gtk/APKBUILD +++ b/community/webkit2gtk/APKBUILD @@ -1,7 +1,8 @@ +# Contributor: Sergei Lukin # Contributor: Jiri Horner # Maintainer: Jiri Horner pkgname=webkit2gtk -pkgver=2.14.2 +pkgver=2.14.5 pkgrel=0 pkgdesc="portable web rendering engine WebKit for GTK+" url="http://webkitgtk.org/" @@ -45,6 +46,21 @@ source="http://webkitgtk.org/releases/webkitgtk-$pkgver.tar.xz musl-fixes.patch " +# secfixes: +# 2.14.4-r0: +# - CVE-2017-2350 +# - CVE-2017-2354 +# - CVE-2017-2355 +# - CVE-2017-2356 +# - CVE-2017-2362 +# - CVE-2017-2363 +# - CVE-2017-2364 +# - CVE-2017-2365 +# - CVE-2017-2366 +# - CVE-2017-2369 +# - CVE-2017-2371 +# - CVE-2017-2373 + _srcdir="${srcdir}/webkitgtk-${pkgver}" _builddir="${srcdir}/build" prepare() { @@ -84,9 +100,9 @@ package() { paxmark -m "$pkgdir"/usr/lib/webkit2gtk-4.0/WebKitWebProcess || return 1 } -md5sums="2fe3cadbc546d93ca68a13756c2be015 webkitgtk-2.14.2.tar.xz +md5sums="7fe3cb2699e64f969b285823c5ae2516 webkitgtk-2.14.5.tar.xz 4e74c88f7e9522c6a573f9d588da9bc4 musl-fixes.patch" -sha256sums="2edbcbd5105046aea55af9671c4de8deedb5b0e3567c618034d440a760675556 webkitgtk-2.14.2.tar.xz +sha256sums="3ca8f1c33a9b43d6c753dcac1c0788656930e06382b10fdf5c2805ea8f96369f webkitgtk-2.14.5.tar.xz 5cc1b9790056b4430b8a7b357f376ddcae43e38ab228d6a259c0abdc7ab4b892 musl-fixes.patch" -sha512sums="e1e344660c1aa38f2911aab334581b015bdbd6fa3bef6f1cd67560b86f1b183bf91cafb94bd4783f4660ecad94dc662ec4a342d5bb2420f284150adc21f79beb webkitgtk-2.14.2.tar.xz +sha512sums="3351d9b05458434835fa2db050c34906649c3b1222d7936d123306634a46e35e8cc3aa1bb7512b103af1996fce722254692826b6f695e32ae176032dc8c94e1c webkitgtk-2.14.5.tar.xz 95f88563cb83387e3f44781dd8b00c5adf53e352869ca1d217c6cfc0895e9b7680e24820b8df340316564dcbc4cb65eb502fb003089b4805b9ac9f583f454013 musl-fixes.patch" -- 2.11.1 --- Unsubscribe: alpine-aports+unsubscribe@lists.alpinelinux.org Help: alpine-aports+help@lists.alpinelinux.org ---