From: Yann E. MORIN <yann.morin.1998@free.fr>
To: buildroot@busybox.net
Subject: [Buildroot] [PATCH 1/1] package/wpewebkit: security bump to version 2.28.2
Date: Sun, 26 Apr 2020 21:56:15 +0200 [thread overview]
Message-ID: <20200426195615.GA2831@scaer> (raw)
In-Reply-To: <20200426195021.2625617-1-aperez@igalia.com>
Adrian, All,
On 2020-04-26 22:50 +0300, Adrian Perez de Castro spake thusly:
> This is a minor release which provides fixes for CVE-2020-11793,
> CVE-2020-3887, CVE-2020-3894, and CVE-2020-3899.
>
> Updating from 2.28.0 also brings a few rendering fixes, a build fix
> on MIPS64, a build fix for GStreamer 1.12, and solves a couple of
> crashes. The full release notes covering 2.28.1 and 2.28.2 can be
> found at:
>
> https://wpewebkit.org/release/wpewebkit-2.28.1.html
> https://wpewebkit.org/release/wpewebkit-2.28.2.html
>
> A detailed security advisory can be found at:
>
> https://wpewebkit.org/security/WSA-2020-0004.html
>
> Note that the above does not cover all the CVEs, and a new advisory
> including them is expected to be published in the next days.
>
> Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Applied to master, thanks.
Regards,
Yann E. MORIN.
> ---
> package/wpewebkit/wpewebkit.hash | 8 ++++----
> package/wpewebkit/wpewebkit.mk | 2 +-
> 2 files changed, 5 insertions(+), 5 deletions(-)
>
> diff --git a/package/wpewebkit/wpewebkit.hash b/package/wpewebkit/wpewebkit.hash
> index 2e7016fe38..8c660d3003 100644
> --- a/package/wpewebkit/wpewebkit.hash
> +++ b/package/wpewebkit/wpewebkit.hash
> @@ -1,7 +1,7 @@
> -# From https://wpewebkit.org/releases/wpewebkit-2.28.0.tar.xz.sums
> -md5 4298b9d38b4f05f92995422ea9979893 wpewebkit-2.28.0.tar.xz
> -sha1 9e791b6112cca8cda51ae7e991b545f4bf0bb46c wpewebkit-2.28.0.tar.xz
> -sha256 a85cd3cb46206a4929a9562d53379a7e7e2ec1a3224b34e2dcf5da30bb906722 wpewebkit-2.28.0.tar.xz
> +# From https://wpewebkit.org/releases/wpewebkit-2.28.2.tar.xz.sums
> +md5 c1f17d4b031e9462692443e3c089789c wpewebkit-2.28.2.tar.xz
> +sha1 b109cfec921eb466227ab3b8d21c5f5717311c8e wpewebkit-2.28.2.tar.xz
> +sha256 6929d28744702ead3574484ca02645c457a6fdcd6b43ccc9766d98dc3664e8dc wpewebkit-2.28.2.tar.xz
>
> # Hashes for license files:
> sha256 0b5d3a7cc325942567373b0ecd757d07c132e0ebd7c97bfc63f7e1a76094edb4 Source/WebCore/LICENSE-APPLE
> diff --git a/package/wpewebkit/wpewebkit.mk b/package/wpewebkit/wpewebkit.mk
> index 9c969cae5a..a6124d3529 100644
> --- a/package/wpewebkit/wpewebkit.mk
> +++ b/package/wpewebkit/wpewebkit.mk
> @@ -4,7 +4,7 @@
> #
> ################################################################################
>
> -WPEWEBKIT_VERSION = 2.28.0
> +WPEWEBKIT_VERSION = 2.28.2
> WPEWEBKIT_SITE = http://www.wpewebkit.org/releases
> WPEWEBKIT_SOURCE = wpewebkit-$(WPEWEBKIT_VERSION).tar.xz
> WPEWEBKIT_INSTALL_STAGING = YES
> --
> 2.26.2
>
> _______________________________________________
> buildroot mailing list
> buildroot at busybox.net
> http://lists.busybox.net/mailman/listinfo/buildroot
--
.-----------------.--------------------.------------------.--------------------.
| Yann E. MORIN | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software Designer | \ / CAMPAIGN | ___ |
| +33 561 099 427 `------------.-------: X AGAINST | \e/ There is no |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL | v conspiracy. |
'------------------------------^-------^------------------^--------------------'
next prev parent reply other threads:[~2020-04-26 19:56 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-04-26 19:50 [Buildroot] [PATCH 1/1] package/wpewebkit: security bump to version 2.28.2 Adrian Perez de Castro
2020-04-26 19:56 ` Yann E. MORIN [this message]
2020-05-09 7:14 ` Peter Korsgaard
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20200426195615.GA2831@scaer \
--to=yann.morin.1998@free.fr \
--cc=buildroot@busybox.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.