Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[20.09] webkitgtk: 2.28.4 -> 2.30.3 #104820

Merged
merged 6 commits into from Nov 25, 2020

Commits on Nov 24, 2020

  1. Configuration menu
    Copy the full SHA
    5bd3722 View commit details
    Browse the repository at this point in the history
  2. webkitgtk: add separateDebugInfo, add platforms.darwin

    Very strange that stdenv.isDarwin is in this expression but without
    platforms including darwin.
    
    (cherry picked from commit af2465a)
    worldofpeace authored and mweinelt committed Nov 24, 2020
    Configuration menu
    Copy the full SHA
    4522aba View commit details
    Browse the repository at this point in the history
  3. webkitgtk: 2.30.0 → 2.30.1

    (cherry picked from commit 297bac6)
    jtojnar authored and mweinelt committed Nov 24, 2020
    Configuration menu
    Copy the full SHA
    4fa9bfa View commit details
    Browse the repository at this point in the history
  4. webkitgtk: clean up

    Remove gtk2 flag, which is no longer supported.
    
    (cherry picked from commit 8ccd765)
    jtojnar authored and mweinelt committed Nov 24, 2020
    Configuration menu
    Copy the full SHA
    c945e45 View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    9fa1223 View commit details
    Browse the repository at this point in the history
  6. webkitgtk: 2.30.2 -> 2.30.3

    Fixes processing of malicousliy crafted web content which could lead to
    - CVE-2020-13584: arbitrary code execution due to a use after free issue
    - CVE-2020-9983: code execution due to an out-of-bounds write issue
    
    Advisory at https://webkitgtk.org/security/WSA-2020-0008.html
    
    Fixes: CVE-2090-13584, CVE-2020-9983
    (cherry picked from commit 48ba279)
    mweinelt committed Nov 24, 2020
    Configuration menu
    Copy the full SHA
    689d06b View commit details
    Browse the repository at this point in the history