* [Buildroot] [PATCH 1/2] package/wpewebkit: add dependencies to fontconfig & freetype
@ 2026-02-18 19:58 Bernd Kuhls
2026-02-18 19:58 ` [Buildroot] [PATCH 2/2] package/wpewebkit: security bump to version 2.50.5 Bernd Kuhls
` (3 more replies)
0 siblings, 4 replies; 8+ messages in thread
From: Bernd Kuhls @ 2026-02-18 19:58 UTC (permalink / raw)
To: buildroot; +Cc: Adrian Perez de Castro, Julien Olivain
Buildroot commit 2882cf4ae649f7d5e9cee72f84e672328f550845 bumped the
package from 2.44.4 to 2.48.3. This bump includes upstream commit
https://github.com/WebKit/WebKit/commit/3b54e45d63b84f8ab8d70179184c45be78386622
which was added to wpewebkit 2.45.1:
https://wpewebkit.org/release/wpewebkit-2.45.1.html
"Use Skia by default instead of Cairo for rendering."
The upstream commit includes dependencies to fontconfig & freetype which
were not added to buildroot and cause build errors with this defconfig:
BR2_aarch64=y
BR2_TOOLCHAIN_EXTERNAL=y
BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
BR2_PER_PACKAGE_DIRECTORIES=y
BR2_PACKAGE_MESA3D=y
BR2_PACKAGE_MESA3D_GALLIUM_DRIVER_SOFTPIPE=y
BR2_PACKAGE_MESA3D_OPENGL_EGL=y
BR2_PACKAGE_MESA3D_OPENGL_ES=y
BR2_PACKAGE_WPEWEBKIT=y
BR2_PACKAGE_WPEWEBKIT_SANDBOX=y
BR2_PACKAGE_WPEWEBKIT_MULTIMEDIA=y
BR2_PACKAGE_WPEWEBKIT_MEDIA_STREAM=y
BR2_PACKAGE_WPEWEBKIT_WEBDRIVER=y
Reported-by: Julien Olivain <ju.o@free.fr>
[https://patchwork.ozlabs.org/project/buildroot/patch/20251017131035.224739-1-aperez@igalia.com/#3599999]
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
package/wpewebkit/Config.in | 2 ++
package/wpewebkit/wpewebkit.mk | 1 +
2 files changed, 3 insertions(+)
diff --git a/package/wpewebkit/Config.in b/package/wpewebkit/Config.in
index 73ba4e6bdf..c8602f1de6 100644
--- a/package/wpewebkit/Config.in
+++ b/package/wpewebkit/Config.in
@@ -44,6 +44,8 @@ config BR2_PACKAGE_WPEWEBKIT
select BR2_HOST_CMAKE_AT_LEAST_3_20
select BR2_PACKAGE_CAIRO if BR2_ENDIAN = "BIG"
select BR2_PACKAGE_CAIRO_PNG if BR2_ENDIAN = "BIG"
+ select BR2_PACKAGE_FONTCONFIG if BR2_ENDIAN = "LITTLE"
+ select BR2_PACKAGE_FREETYPE if BR2_ENDIAN = "LITTLE"
select BR2_PACKAGE_HARFBUZZ
select BR2_PACKAGE_ICU
select BR2_PACKAGE_JPEG
diff --git a/package/wpewebkit/wpewebkit.mk b/package/wpewebkit/wpewebkit.mk
index 15a2ea93e8..31aba2a0b9 100644
--- a/package/wpewebkit/wpewebkit.mk
+++ b/package/wpewebkit/wpewebkit.mk
@@ -40,6 +40,7 @@ ifeq ($(BR2_ENDIAN),"BIG")
WPEWEBKIT_DEPENDENCIES += cairo
WPEWEBKIT_CONF_OPTS += -DUSE_SKIA=OFF
else
+WPEWEBKIT_DEPENDENCIES += fontconfig freetype
WPEWEBKIT_CONF_OPTS += -DUSE_SKIA=ON
endif
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 8+ messages in thread
* [Buildroot] [PATCH 2/2] package/wpewebkit: security bump to version 2.50.5
2026-02-18 19:58 [Buildroot] [PATCH 1/2] package/wpewebkit: add dependencies to fontconfig & freetype Bernd Kuhls
@ 2026-02-18 19:58 ` Bernd Kuhls
2026-02-18 22:41 ` Adrian Perez de Castro
` (2 more replies)
2026-02-18 22:40 ` [Buildroot] [PATCH 1/2] package/wpewebkit: add dependencies to fontconfig & freetype Adrian Perez de Castro
` (2 subsequent siblings)
3 siblings, 3 replies; 8+ messages in thread
From: Bernd Kuhls @ 2026-02-18 19:58 UTC (permalink / raw)
To: buildroot; +Cc: Adrian Perez de Castro
From: Adrian Perez de Castro <aperez@igalia.com>
This updates WPE WebKit to the 2.50 stable series.
WPE WebKit 2.50 highlights and 2.50.[1-5] release notes:
- https://wpewebkit.org/release/wpewebkit-2.50.0.html
- https://wpewebkit.org/release/wpewebkit-2.50.1.html
- https://wpewebkit.org/release/wpewebkit-2.50.2.html
- https://wpewebkit.org/release/wpewebkit-2.50.3.html
- https://wpewebkit.org/release/wpewebkit-2.50.4.html
- https://wpewebkit.org/release/wpewebkit-2.50.5.html
Fixes the following security issues:
- From https://wpewebkit.org/security/WSA-2025-0007.html
CVE-2025-43343
- From https://wpewebkit.org/security/WSA-2025-0006.html
CVE-2025-43272, CVE-2025-43342, CVE-2025-43356, CVE-2025-43368
- From https://wpewebkit.org/security/WSA-2025-0005.html
CVE-2025-31273, CVE-2025-31278, CVE-2025-43211, CVE-2025-43212,
CVE-2025-43216, CVE-2025-43227, CVE-2025-43228, CVE-2025-43240,
CVE-2025-43265, CVE-2025-6558
Removed patch 0001 which is included in this release.
Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
[Bernd: bumped to 2.50.5, removed two patches originally added by Adrian
which were added to upstream version 2.50.2]
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
...d-with-USE_SKIA_OPENTYPE_SVG-ON-and-.patch | 44 -------------------
package/wpewebkit/wpewebkit.hash | 8 ++--
package/wpewebkit/wpewebkit.mk | 2 +-
3 files changed, 5 insertions(+), 49 deletions(-)
delete mode 100644 package/wpewebkit/0001-WPE-Fix-the-build-with-USE_SKIA_OPENTYPE_SVG-ON-and-.patch
diff --git a/package/wpewebkit/0001-WPE-Fix-the-build-with-USE_SKIA_OPENTYPE_SVG-ON-and-.patch b/package/wpewebkit/0001-WPE-Fix-the-build-with-USE_SKIA_OPENTYPE_SVG-ON-and-.patch
deleted file mode 100644
index 8432543e07..0000000000
--- a/package/wpewebkit/0001-WPE-Fix-the-build-with-USE_SKIA_OPENTYPE_SVG-ON-and-.patch
+++ /dev/null
@@ -1,44 +0,0 @@
-From 94acd1ce0ff2860b19f22ab2d386d7711c9699b7 Mon Sep 17 00:00:00 2001
-From: Adrian Perez de Castro <aperez@igalia.com>
-Date: Tue, 8 Jul 2025 21:46:44 +0300
-Subject: [PATCH] [WPE] Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
- USE_SYSPROF_CAPTURE=OFF
-
-Unreviewed build fix.
-
-When backporting 287859@main the #include for the needed Skia header
-slipped inside an USE(SYSPROF_CAPTURE) guard. This moves the guards
-and #include statements to their correct places.
-
-* Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp:
-
-Canonical link: https://commits.webkit.org/290945.273@webkitglib/2.48
-
-Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
-Upstream: https://github.com/WebKit/WebKit/commit/943d05f0c9b03c053a456c90c2a8817c1f679711
----
- Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp | 5 +++--
- 1 file changed, 3 insertions(+), 2 deletions(-)
-
-diff --git a/Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp b/Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp
-index a06e33fd04f8..5fb245ce0b66 100644
---- a/Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp
-+++ b/Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp
-@@ -43,11 +43,12 @@
- #include <skia/core/SkGraphics.h>
- #endif
-
--#if USE(SYSPROF_CAPTURE)
--#include <wtf/SystemTracing.h>
- #if USE(SKIA_OPENTYPE_SVG)
- #include <skia/modules/svg/SkSVGOpenTypeSVGDecoder.h>
- #endif
-+
-+#if USE(SYSPROF_CAPTURE)
-+#include <wtf/SystemTracing.h>
- #endif
-
- namespace WebKit {
---
-2.50.1
-
diff --git a/package/wpewebkit/wpewebkit.hash b/package/wpewebkit/wpewebkit.hash
index 332fd9deaa..60a51c3e49 100644
--- a/package/wpewebkit/wpewebkit.hash
+++ b/package/wpewebkit/wpewebkit.hash
@@ -1,7 +1,7 @@
-# From https://wpewebkit.org/releases/wpewebkit-2.48.3.tar.xz.sums
-md5 2d3b7fa3c62886546f918fcc289cabbe wpewebkit-2.48.3.tar.xz
-sha1 8a90b9ff8809c99c306defc1a08e50a31a09c590 wpewebkit-2.48.3.tar.xz
-sha256 807571f07e87823b8fb79564692c9b1ef81ee62edbf51345a15bd0e7e1f2e07b wpewebkit-2.48.3.tar.xz
+# From https://wpewebkit.org/releases/wpewebkit-2.50.5.tar.xz.sums
+md5 1d81485379005cca0236a278706f194f wpewebkit-2.50.5.tar.xz
+sha1 dd56b76eff8ba157a0291c0b61220666eed59313 wpewebkit-2.50.5.tar.xz
+sha256 de4bfd20bfc921cdfc77e839ee4da84e2674bcb58b2f916172978d62fa115fc2 wpewebkit-2.50.5.tar.xz
# Hashes for license files:
sha256 0b5d3a7cc325942567373b0ecd757d07c132e0ebd7c97bfc63f7e1a76094edb4 Source/WebCore/LICENSE-APPLE
diff --git a/package/wpewebkit/wpewebkit.mk b/package/wpewebkit/wpewebkit.mk
index 31aba2a0b9..03deb6e991 100644
--- a/package/wpewebkit/wpewebkit.mk
+++ b/package/wpewebkit/wpewebkit.mk
@@ -5,7 +5,7 @@
################################################################################
# The middle number is even for stable releases, odd for development ones.
-WPEWEBKIT_VERSION = 2.48.3
+WPEWEBKIT_VERSION = 2.50.5
WPEWEBKIT_SITE = https://wpewebkit.org/releases
WPEWEBKIT_SOURCE = wpewebkit-$(WPEWEBKIT_VERSION).tar.xz
WPEWEBKIT_INSTALL_STAGING = YES
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 8+ messages in thread
* Re: [Buildroot] [PATCH 1/2] package/wpewebkit: add dependencies to fontconfig & freetype
2026-02-18 19:58 [Buildroot] [PATCH 1/2] package/wpewebkit: add dependencies to fontconfig & freetype Bernd Kuhls
2026-02-18 19:58 ` [Buildroot] [PATCH 2/2] package/wpewebkit: security bump to version 2.50.5 Bernd Kuhls
@ 2026-02-18 22:40 ` Adrian Perez de Castro
2026-02-23 8:41 ` Peter Korsgaard
2026-03-06 19:52 ` Thomas Perale via buildroot
3 siblings, 0 replies; 8+ messages in thread
From: Adrian Perez de Castro @ 2026-02-18 22:40 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot, Julien Olivain
[-- Attachment #1.1: Type: text/plain, Size: 2609 bytes --]
On Wed, 18 Feb 2026 20:58:11 +0100 Bernd Kuhls <bernd@kuhls.net> wrote:
> Buildroot commit 2882cf4ae649f7d5e9cee72f84e672328f550845 bumped the
> package from 2.44.4 to 2.48.3. This bump includes upstream commit
> https://github.com/WebKit/WebKit/commit/3b54e45d63b84f8ab8d70179184c45be78386622
> which was added to wpewebkit 2.45.1:
> https://wpewebkit.org/release/wpewebkit-2.45.1.html
> "Use Skia by default instead of Cairo for rendering."
>
> The upstream commit includes dependencies to fontconfig & freetype which
> were not added to buildroot and cause build errors with this defconfig:
>
> BR2_aarch64=y
> BR2_TOOLCHAIN_EXTERNAL=y
> BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
> BR2_PER_PACKAGE_DIRECTORIES=y
> BR2_PACKAGE_MESA3D=y
> BR2_PACKAGE_MESA3D_GALLIUM_DRIVER_SOFTPIPE=y
> BR2_PACKAGE_MESA3D_OPENGL_EGL=y
> BR2_PACKAGE_MESA3D_OPENGL_ES=y
> BR2_PACKAGE_WPEWEBKIT=y
> BR2_PACKAGE_WPEWEBKIT_SANDBOX=y
> BR2_PACKAGE_WPEWEBKIT_MULTIMEDIA=y
> BR2_PACKAGE_WPEWEBKIT_MEDIA_STREAM=y
> BR2_PACKAGE_WPEWEBKIT_WEBDRIVER=y
>
> Reported-by: Julien Olivain <ju.o@free.fr>
> [https://patchwork.ozlabs.org/project/buildroot/patch/20251017131035.224739-1-aperez@igalia.com/#3599999]
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Acked-by: Adrian Perez de Castro <aperez@igalia.com>
> ---
> package/wpewebkit/Config.in | 2 ++
> package/wpewebkit/wpewebkit.mk | 1 +
> 2 files changed, 3 insertions(+)
>
> diff --git a/package/wpewebkit/Config.in b/package/wpewebkit/Config.in
> index 73ba4e6bdf..c8602f1de6 100644
> --- a/package/wpewebkit/Config.in
> +++ b/package/wpewebkit/Config.in
> @@ -44,6 +44,8 @@ config BR2_PACKAGE_WPEWEBKIT
> select BR2_HOST_CMAKE_AT_LEAST_3_20
> select BR2_PACKAGE_CAIRO if BR2_ENDIAN = "BIG"
> select BR2_PACKAGE_CAIRO_PNG if BR2_ENDIAN = "BIG"
> + select BR2_PACKAGE_FONTCONFIG if BR2_ENDIAN = "LITTLE"
> + select BR2_PACKAGE_FREETYPE if BR2_ENDIAN = "LITTLE"
> select BR2_PACKAGE_HARFBUZZ
> select BR2_PACKAGE_ICU
> select BR2_PACKAGE_JPEG
> diff --git a/package/wpewebkit/wpewebkit.mk b/package/wpewebkit/wpewebkit.mk
> index 15a2ea93e8..31aba2a0b9 100644
> --- a/package/wpewebkit/wpewebkit.mk
> +++ b/package/wpewebkit/wpewebkit.mk
> @@ -40,6 +40,7 @@ ifeq ($(BR2_ENDIAN),"BIG")
> WPEWEBKIT_DEPENDENCIES += cairo
> WPEWEBKIT_CONF_OPTS += -DUSE_SKIA=OFF
> else
> +WPEWEBKIT_DEPENDENCIES += fontconfig freetype
> WPEWEBKIT_CONF_OPTS += -DUSE_SKIA=ON
> endif
>
> --
> 2.47.3
>
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
>
Cheers,
—Adrián
[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]
[-- Attachment #2: Type: text/plain, Size: 150 bytes --]
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [Buildroot] [PATCH 2/2] package/wpewebkit: security bump to version 2.50.5
2026-02-18 19:58 ` [Buildroot] [PATCH 2/2] package/wpewebkit: security bump to version 2.50.5 Bernd Kuhls
@ 2026-02-18 22:41 ` Adrian Perez de Castro
2026-02-23 8:42 ` Peter Korsgaard
2026-03-06 19:53 ` Thomas Perale via buildroot
2 siblings, 0 replies; 8+ messages in thread
From: Adrian Perez de Castro @ 2026-02-18 22:41 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot
[-- Attachment #1.1: Type: text/plain, Size: 5472 bytes --]
On Wed, 18 Feb 2026 20:58:12 +0100 Bernd Kuhls <bernd@kuhls.net> wrote:
> From: Adrian Perez de Castro <aperez@igalia.com>
>
> This updates WPE WebKit to the 2.50 stable series.
> WPE WebKit 2.50 highlights and 2.50.[1-5] release notes:
>
> - https://wpewebkit.org/release/wpewebkit-2.50.0.html
> - https://wpewebkit.org/release/wpewebkit-2.50.1.html
> - https://wpewebkit.org/release/wpewebkit-2.50.2.html
> - https://wpewebkit.org/release/wpewebkit-2.50.3.html
> - https://wpewebkit.org/release/wpewebkit-2.50.4.html
> - https://wpewebkit.org/release/wpewebkit-2.50.5.html
>
> Fixes the following security issues:
>
> - From https://wpewebkit.org/security/WSA-2025-0007.html
> CVE-2025-43343
>
> - From https://wpewebkit.org/security/WSA-2025-0006.html
> CVE-2025-43272, CVE-2025-43342, CVE-2025-43356, CVE-2025-43368
>
> - From https://wpewebkit.org/security/WSA-2025-0005.html
> CVE-2025-31273, CVE-2025-31278, CVE-2025-43211, CVE-2025-43212,
> CVE-2025-43216, CVE-2025-43227, CVE-2025-43228, CVE-2025-43240,
> CVE-2025-43265, CVE-2025-6558
>
> Removed patch 0001 which is included in this release.
>
> Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
> [Bernd: bumped to 2.50.5, removed two patches originally added by Adrian
> which were added to upstream version 2.50.2]
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Acked-by: Adrian Perez de Castro <aperez@igalia.com>
> ---
> ...d-with-USE_SKIA_OPENTYPE_SVG-ON-and-.patch | 44 -------------------
> package/wpewebkit/wpewebkit.hash | 8 ++--
> package/wpewebkit/wpewebkit.mk | 2 +-
> 3 files changed, 5 insertions(+), 49 deletions(-)
> delete mode 100644 package/wpewebkit/0001-WPE-Fix-the-build-with-USE_SKIA_OPENTYPE_SVG-ON-and-.patch
>
> diff --git a/package/wpewebkit/0001-WPE-Fix-the-build-with-USE_SKIA_OPENTYPE_SVG-ON-and-.patch b/package/wpewebkit/0001-WPE-Fix-the-build-with-USE_SKIA_OPENTYPE_SVG-ON-and-.patch
> deleted file mode 100644
> index 8432543e07..0000000000
> --- a/package/wpewebkit/0001-WPE-Fix-the-build-with-USE_SKIA_OPENTYPE_SVG-ON-and-.patch
> +++ /dev/null
> @@ -1,44 +0,0 @@
> -From 94acd1ce0ff2860b19f22ab2d386d7711c9699b7 Mon Sep 17 00:00:00 2001
> -From: Adrian Perez de Castro <aperez@igalia.com>
> -Date: Tue, 8 Jul 2025 21:46:44 +0300
> -Subject: [PATCH] [WPE] Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
> - USE_SYSPROF_CAPTURE=OFF
> -
> -Unreviewed build fix.
> -
> -When backporting 287859@main the #include for the needed Skia header
> -slipped inside an USE(SYSPROF_CAPTURE) guard. This moves the guards
> -and #include statements to their correct places.
> -
> -* Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp:
> -
> -Canonical link: https://commits.webkit.org/290945.273@webkitglib/2.48
> -
> -Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
> -Upstream: https://github.com/WebKit/WebKit/commit/943d05f0c9b03c053a456c90c2a8817c1f679711
> ----
> - Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp | 5 +++--
> - 1 file changed, 3 insertions(+), 2 deletions(-)
> -
> -diff --git a/Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp b/Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp
> -index a06e33fd04f8..5fb245ce0b66 100644
> ---- a/Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp
> -+++ b/Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp
> -@@ -43,11 +43,12 @@
> - #include <skia/core/SkGraphics.h>
> - #endif
> -
> --#if USE(SYSPROF_CAPTURE)
> --#include <wtf/SystemTracing.h>
> - #if USE(SKIA_OPENTYPE_SVG)
> - #include <skia/modules/svg/SkSVGOpenTypeSVGDecoder.h>
> - #endif
> -+
> -+#if USE(SYSPROF_CAPTURE)
> -+#include <wtf/SystemTracing.h>
> - #endif
> -
> - namespace WebKit {
> ---
> -2.50.1
> -
> diff --git a/package/wpewebkit/wpewebkit.hash b/package/wpewebkit/wpewebkit.hash
> index 332fd9deaa..60a51c3e49 100644
> --- a/package/wpewebkit/wpewebkit.hash
> +++ b/package/wpewebkit/wpewebkit.hash
> @@ -1,7 +1,7 @@
> -# From https://wpewebkit.org/releases/wpewebkit-2.48.3.tar.xz.sums
> -md5 2d3b7fa3c62886546f918fcc289cabbe wpewebkit-2.48.3.tar.xz
> -sha1 8a90b9ff8809c99c306defc1a08e50a31a09c590 wpewebkit-2.48.3.tar.xz
> -sha256 807571f07e87823b8fb79564692c9b1ef81ee62edbf51345a15bd0e7e1f2e07b wpewebkit-2.48.3.tar.xz
> +# From https://wpewebkit.org/releases/wpewebkit-2.50.5.tar.xz.sums
> +md5 1d81485379005cca0236a278706f194f wpewebkit-2.50.5.tar.xz
> +sha1 dd56b76eff8ba157a0291c0b61220666eed59313 wpewebkit-2.50.5.tar.xz
> +sha256 de4bfd20bfc921cdfc77e839ee4da84e2674bcb58b2f916172978d62fa115fc2 wpewebkit-2.50.5.tar.xz
>
> # Hashes for license files:
> sha256 0b5d3a7cc325942567373b0ecd757d07c132e0ebd7c97bfc63f7e1a76094edb4 Source/WebCore/LICENSE-APPLE
> diff --git a/package/wpewebkit/wpewebkit.mk b/package/wpewebkit/wpewebkit.mk
> index 31aba2a0b9..03deb6e991 100644
> --- a/package/wpewebkit/wpewebkit.mk
> +++ b/package/wpewebkit/wpewebkit.mk
> @@ -5,7 +5,7 @@
> ################################################################################
>
> # The middle number is even for stable releases, odd for development ones.
> -WPEWEBKIT_VERSION = 2.48.3
> +WPEWEBKIT_VERSION = 2.50.5
> WPEWEBKIT_SITE = https://wpewebkit.org/releases
> WPEWEBKIT_SOURCE = wpewebkit-$(WPEWEBKIT_VERSION).tar.xz
> WPEWEBKIT_INSTALL_STAGING = YES
> --
> 2.47.3
>
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
>
Cheers,
—Adrián
[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]
[-- Attachment #2: Type: text/plain, Size: 150 bytes --]
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [Buildroot] [PATCH 1/2] package/wpewebkit: add dependencies to fontconfig & freetype
2026-02-18 19:58 [Buildroot] [PATCH 1/2] package/wpewebkit: add dependencies to fontconfig & freetype Bernd Kuhls
2026-02-18 19:58 ` [Buildroot] [PATCH 2/2] package/wpewebkit: security bump to version 2.50.5 Bernd Kuhls
2026-02-18 22:40 ` [Buildroot] [PATCH 1/2] package/wpewebkit: add dependencies to fontconfig & freetype Adrian Perez de Castro
@ 2026-02-23 8:41 ` Peter Korsgaard
2026-03-06 19:52 ` Thomas Perale via buildroot
3 siblings, 0 replies; 8+ messages in thread
From: Peter Korsgaard @ 2026-02-23 8:41 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot, Adrian Perez de Castro, Julien Olivain
>>>>> "Bernd" == Bernd Kuhls <bernd@kuhls.net> writes:
> Buildroot commit 2882cf4ae649f7d5e9cee72f84e672328f550845 bumped the
> package from 2.44.4 to 2.48.3. This bump includes upstream commit
> https://github.com/WebKit/WebKit/commit/3b54e45d63b84f8ab8d70179184c45be78386622
> which was added to wpewebkit 2.45.1:
> https://wpewebkit.org/release/wpewebkit-2.45.1.html
> "Use Skia by default instead of Cairo for rendering."
> The upstream commit includes dependencies to fontconfig & freetype which
> were not added to buildroot and cause build errors with this defconfig:
> BR2_aarch64=y
> BR2_TOOLCHAIN_EXTERNAL=y
> BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
> BR2_PER_PACKAGE_DIRECTORIES=y
> BR2_PACKAGE_MESA3D=y
> BR2_PACKAGE_MESA3D_GALLIUM_DRIVER_SOFTPIPE=y
> BR2_PACKAGE_MESA3D_OPENGL_EGL=y
> BR2_PACKAGE_MESA3D_OPENGL_ES=y
> BR2_PACKAGE_WPEWEBKIT=y
> BR2_PACKAGE_WPEWEBKIT_SANDBOX=y
> BR2_PACKAGE_WPEWEBKIT_MULTIMEDIA=y
> BR2_PACKAGE_WPEWEBKIT_MEDIA_STREAM=y
> BR2_PACKAGE_WPEWEBKIT_WEBDRIVER=y
> Reported-by: Julien Olivain <ju.o@free.fr>
> [https://patchwork.ozlabs.org/project/buildroot/patch/20251017131035.224739-1-aperez@igalia.com/#3599999]
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Committed, thanks.
--
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [Buildroot] [PATCH 2/2] package/wpewebkit: security bump to version 2.50.5
2026-02-18 19:58 ` [Buildroot] [PATCH 2/2] package/wpewebkit: security bump to version 2.50.5 Bernd Kuhls
2026-02-18 22:41 ` Adrian Perez de Castro
@ 2026-02-23 8:42 ` Peter Korsgaard
2026-03-06 19:53 ` Thomas Perale via buildroot
2 siblings, 0 replies; 8+ messages in thread
From: Peter Korsgaard @ 2026-02-23 8:42 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: buildroot, Adrian Perez de Castro
>>>>> "Bernd" == Bernd Kuhls <bernd@kuhls.net> writes:
> From: Adrian Perez de Castro <aperez@igalia.com>
> This updates WPE WebKit to the 2.50 stable series.
> WPE WebKit 2.50 highlights and 2.50.[1-5] release notes:
> - https://wpewebkit.org/release/wpewebkit-2.50.0.html
> - https://wpewebkit.org/release/wpewebkit-2.50.1.html
> - https://wpewebkit.org/release/wpewebkit-2.50.2.html
> - https://wpewebkit.org/release/wpewebkit-2.50.3.html
> - https://wpewebkit.org/release/wpewebkit-2.50.4.html
> - https://wpewebkit.org/release/wpewebkit-2.50.5.html
> Fixes the following security issues:
> - From https://wpewebkit.org/security/WSA-2025-0007.html
> CVE-2025-43343
> - From https://wpewebkit.org/security/WSA-2025-0006.html
> CVE-2025-43272, CVE-2025-43342, CVE-2025-43356, CVE-2025-43368
> - From https://wpewebkit.org/security/WSA-2025-0005.html
> CVE-2025-31273, CVE-2025-31278, CVE-2025-43211, CVE-2025-43212,
> CVE-2025-43216, CVE-2025-43227, CVE-2025-43228, CVE-2025-43240,
> CVE-2025-43265, CVE-2025-6558
> Removed patch 0001 which is included in this release.
> Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
> [Bernd: bumped to 2.50.5, removed two patches originally added by Adrian
> which were added to upstream version 2.50.2]
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Committed, thanks.
--
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [Buildroot] [PATCH 1/2] package/wpewebkit: add dependencies to fontconfig & freetype
2026-02-18 19:58 [Buildroot] [PATCH 1/2] package/wpewebkit: add dependencies to fontconfig & freetype Bernd Kuhls
` (2 preceding siblings ...)
2026-02-23 8:41 ` Peter Korsgaard
@ 2026-03-06 19:52 ` Thomas Perale via buildroot
3 siblings, 0 replies; 8+ messages in thread
From: Thomas Perale via buildroot @ 2026-03-06 19:52 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: Thomas Perale, buildroot
In reply of:
> Buildroot commit 2882cf4ae649f7d5e9cee72f84e672328f550845 bumped the
> package from 2.44.4 to 2.48.3. This bump includes upstream commit
> https://github.com/WebKit/WebKit/commit/3b54e45d63b84f8ab8d70179184c45be78386622
> which was added to wpewebkit 2.45.1:
> https://wpewebkit.org/release/wpewebkit-2.45.1.html
> "Use Skia by default instead of Cairo for rendering."
>
> The upstream commit includes dependencies to fontconfig & freetype which
> were not added to buildroot and cause build errors with this defconfig:
>
> BR2_aarch64=y
> BR2_TOOLCHAIN_EXTERNAL=y
> BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
> BR2_PER_PACKAGE_DIRECTORIES=y
> BR2_PACKAGE_MESA3D=y
> BR2_PACKAGE_MESA3D_GALLIUM_DRIVER_SOFTPIPE=y
> BR2_PACKAGE_MESA3D_OPENGL_EGL=y
> BR2_PACKAGE_MESA3D_OPENGL_ES=y
> BR2_PACKAGE_WPEWEBKIT=y
> BR2_PACKAGE_WPEWEBKIT_SANDBOX=y
> BR2_PACKAGE_WPEWEBKIT_MULTIMEDIA=y
> BR2_PACKAGE_WPEWEBKIT_MEDIA_STREAM=y
> BR2_PACKAGE_WPEWEBKIT_WEBDRIVER=y
>
> Reported-by: Julien Olivain <ju.o@free.fr>
> [https://patchwork.ozlabs.org/project/buildroot/patch/20251017131035.224739-1-aperez@igalia.com/#3599999]
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Applied to 2025.02.x & 2025.11.x. Thanks
> ---
> package/wpewebkit/Config.in | 2 ++
> package/wpewebkit/wpewebkit.mk | 1 +
> 2 files changed, 3 insertions(+)
>
> diff --git a/package/wpewebkit/Config.in b/package/wpewebkit/Config.in
> index 73ba4e6bdf..c8602f1de6 100644
> --- a/package/wpewebkit/Config.in
> +++ b/package/wpewebkit/Config.in
> @@ -44,6 +44,8 @@ config BR2_PACKAGE_WPEWEBKIT
> select BR2_HOST_CMAKE_AT_LEAST_3_20
> select BR2_PACKAGE_CAIRO if BR2_ENDIAN = "BIG"
> select BR2_PACKAGE_CAIRO_PNG if BR2_ENDIAN = "BIG"
> + select BR2_PACKAGE_FONTCONFIG if BR2_ENDIAN = "LITTLE"
> + select BR2_PACKAGE_FREETYPE if BR2_ENDIAN = "LITTLE"
> select BR2_PACKAGE_HARFBUZZ
> select BR2_PACKAGE_ICU
> select BR2_PACKAGE_JPEG
> diff --git a/package/wpewebkit/wpewebkit.mk b/package/wpewebkit/wpewebkit.mk
> index 15a2ea93e8..31aba2a0b9 100644
> --- a/package/wpewebkit/wpewebkit.mk
> +++ b/package/wpewebkit/wpewebkit.mk
> @@ -40,6 +40,7 @@ ifeq ($(BR2_ENDIAN),"BIG")
> WPEWEBKIT_DEPENDENCIES += cairo
> WPEWEBKIT_CONF_OPTS += -DUSE_SKIA=OFF
> else
> +WPEWEBKIT_DEPENDENCIES += fontconfig freetype
> WPEWEBKIT_CONF_OPTS += -DUSE_SKIA=ON
> endif
>
> --
> 2.47.3
>
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 8+ messages in thread
* Re: [Buildroot] [PATCH 2/2] package/wpewebkit: security bump to version 2.50.5
2026-02-18 19:58 ` [Buildroot] [PATCH 2/2] package/wpewebkit: security bump to version 2.50.5 Bernd Kuhls
2026-02-18 22:41 ` Adrian Perez de Castro
2026-02-23 8:42 ` Peter Korsgaard
@ 2026-03-06 19:53 ` Thomas Perale via buildroot
2 siblings, 0 replies; 8+ messages in thread
From: Thomas Perale via buildroot @ 2026-03-06 19:53 UTC (permalink / raw)
To: Bernd Kuhls; +Cc: Thomas Perale, buildroot
In reply of:
> This updates WPE WebKit to the 2.50 stable series.
> WPE WebKit 2.50 highlights and 2.50.[1-5] release notes:
>
> - https://wpewebkit.org/release/wpewebkit-2.50.0.html
> - https://wpewebkit.org/release/wpewebkit-2.50.1.html
> - https://wpewebkit.org/release/wpewebkit-2.50.2.html
> - https://wpewebkit.org/release/wpewebkit-2.50.3.html
> - https://wpewebkit.org/release/wpewebkit-2.50.4.html
> - https://wpewebkit.org/release/wpewebkit-2.50.5.html
>
> Fixes the following security issues:
>
> - From https://wpewebkit.org/security/WSA-2025-0007.html
> CVE-2025-43343
>
> - From https://wpewebkit.org/security/WSA-2025-0006.html
> CVE-2025-43272, CVE-2025-43342, CVE-2025-43356, CVE-2025-43368
>
> - From https://wpewebkit.org/security/WSA-2025-0005.html
> CVE-2025-31273, CVE-2025-31278, CVE-2025-43211, CVE-2025-43212,
> CVE-2025-43216, CVE-2025-43227, CVE-2025-43228, CVE-2025-43240,
> CVE-2025-43265, CVE-2025-6558
>
> Removed patch 0001 which is included in this release.
>
> Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
> [Bernd: bumped to 2.50.5, removed two patches originally added by Adrian
> which were added to upstream version 2.50.2]
> Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Applied to 2025.02.x & 2025.11.x. Thanks
> ---
> ...d-with-USE_SKIA_OPENTYPE_SVG-ON-and-.patch | 44 -------------------
> package/wpewebkit/wpewebkit.hash | 8 ++--
> package/wpewebkit/wpewebkit.mk | 2 +-
> 3 files changed, 5 insertions(+), 49 deletions(-)
> delete mode 100644 package/wpewebkit/0001-WPE-Fix-the-build-with-USE_SKIA_OPENTYPE_SVG-ON-and-.patch
>
> diff --git a/package/wpewebkit/0001-WPE-Fix-the-build-with-USE_SKIA_OPENTYPE_SVG-ON-and-.patch b/package/wpewebkit/0001-WPE-Fix-the-build-with-USE_SKIA_OPENTYPE_SVG-ON-and-.patch
> deleted file mode 100644
> index 8432543e07..0000000000
> --- a/package/wpewebkit/0001-WPE-Fix-the-build-with-USE_SKIA_OPENTYPE_SVG-ON-and-.patch
> +++ /dev/null
> @@ -1,44 +0,0 @@
> -From 94acd1ce0ff2860b19f22ab2d386d7711c9699b7 Mon Sep 17 00:00:00 2001
> -From: Adrian Perez de Castro <aperez@igalia.com>
> -Date: Tue, 8 Jul 2025 21:46:44 +0300
> -Subject: [PATCH] [WPE] Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
> - USE_SYSPROF_CAPTURE=OFF
> -
> -Unreviewed build fix.
> -
> -When backporting 287859@main the #include for the needed Skia header
> -slipped inside an USE(SYSPROF_CAPTURE) guard. This moves the guards
> -and #include statements to their correct places.
> -
> -* Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp:
> -
> -Canonical link: https://commits.webkit.org/290945.273@webkitglib/2.48
> -
> -Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
> -Upstream: https://github.com/WebKit/WebKit/commit/943d05f0c9b03c053a456c90c2a8817c1f679711
> ----
> - Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp | 5 +++--
> - 1 file changed, 3 insertions(+), 2 deletions(-)
> -
> -diff --git a/Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp b/Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp
> -index a06e33fd04f8..5fb245ce0b66 100644
> ---- a/Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp
> -+++ b/Source/WebKit/WebProcess/wpe/WebProcessMainWPE.cpp
> -@@ -43,11 +43,12 @@
> - #include <skia/core/SkGraphics.h>
> - #endif
> -
> --#if USE(SYSPROF_CAPTURE)
> --#include <wtf/SystemTracing.h>
> - #if USE(SKIA_OPENTYPE_SVG)
> - #include <skia/modules/svg/SkSVGOpenTypeSVGDecoder.h>
> - #endif
> -+
> -+#if USE(SYSPROF_CAPTURE)
> -+#include <wtf/SystemTracing.h>
> - #endif
> -
> - namespace WebKit {
> ---
> -2.50.1
> -
> diff --git a/package/wpewebkit/wpewebkit.hash b/package/wpewebkit/wpewebkit.hash
> index 332fd9deaa..60a51c3e49 100644
> --- a/package/wpewebkit/wpewebkit.hash
> +++ b/package/wpewebkit/wpewebkit.hash
> @@ -1,7 +1,7 @@
> -# From https://wpewebkit.org/releases/wpewebkit-2.48.3.tar.xz.sums
> -md5 2d3b7fa3c62886546f918fcc289cabbe wpewebkit-2.48.3.tar.xz
> -sha1 8a90b9ff8809c99c306defc1a08e50a31a09c590 wpewebkit-2.48.3.tar.xz
> -sha256 807571f07e87823b8fb79564692c9b1ef81ee62edbf51345a15bd0e7e1f2e07b wpewebkit-2.48.3.tar.xz
> +# From https://wpewebkit.org/releases/wpewebkit-2.50.5.tar.xz.sums
> +md5 1d81485379005cca0236a278706f194f wpewebkit-2.50.5.tar.xz
> +sha1 dd56b76eff8ba157a0291c0b61220666eed59313 wpewebkit-2.50.5.tar.xz
> +sha256 de4bfd20bfc921cdfc77e839ee4da84e2674bcb58b2f916172978d62fa115fc2 wpewebkit-2.50.5.tar.xz
>
> # Hashes for license files:
> sha256 0b5d3a7cc325942567373b0ecd757d07c132e0ebd7c97bfc63f7e1a76094edb4 Source/WebCore/LICENSE-APPLE
> diff --git a/package/wpewebkit/wpewebkit.mk b/package/wpewebkit/wpewebkit.mk
> index 31aba2a0b9..03deb6e991 100644
> --- a/package/wpewebkit/wpewebkit.mk
> +++ b/package/wpewebkit/wpewebkit.mk
> @@ -5,7 +5,7 @@
> ################################################################################
>
> # The middle number is even for stable releases, odd for development ones.
> -WPEWEBKIT_VERSION = 2.48.3
> +WPEWEBKIT_VERSION = 2.50.5
> WPEWEBKIT_SITE = https://wpewebkit.org/releases
> WPEWEBKIT_SOURCE = wpewebkit-$(WPEWEBKIT_VERSION).tar.xz
> WPEWEBKIT_INSTALL_STAGING = YES
> --
> 2.47.3
>
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 8+ messages in thread
end of thread, other threads:[~2026-03-06 19:53 UTC | newest]
Thread overview: 8+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-02-18 19:58 [Buildroot] [PATCH 1/2] package/wpewebkit: add dependencies to fontconfig & freetype Bernd Kuhls
2026-02-18 19:58 ` [Buildroot] [PATCH 2/2] package/wpewebkit: security bump to version 2.50.5 Bernd Kuhls
2026-02-18 22:41 ` Adrian Perez de Castro
2026-02-23 8:42 ` Peter Korsgaard
2026-03-06 19:53 ` Thomas Perale via buildroot
2026-02-18 22:40 ` [Buildroot] [PATCH 1/2] package/wpewebkit: add dependencies to fontconfig & freetype Adrian Perez de Castro
2026-02-23 8:41 ` Peter Korsgaard
2026-03-06 19:52 ` Thomas Perale via buildroot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox