summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* net-libs/webkit-gtk: security cleanupMart Raudsepp2019-09-021-1/+0
| | | | | | Bug: https://bugs.gentoo.org/693122 Package-Manager: Portage-2.3.69, Repoman-2.3.12 Signed-off-by: Mart Raudsepp <leio@gentoo.org>
* net-libs/webkit-gtk: security bump to 2.24.4Mart Raudsepp2019-08-301-0/+1
| | | | | | Bug: https://bugs.gentoo.org/693122 Package-Manager: Portage-2.3.62, Repoman-2.3.12 Signed-off-by: Mart Raudsepp <leio@gentoo.org>
* net-libs/webkit-gtk: remove oldMart Raudsepp2019-08-301-2/+0
| | | | | Package-Manager: Portage-2.3.62, Repoman-2.3.12 Signed-off-by: Mart Raudsepp <leio@gentoo.org>
* net-libs/webkit-gtk: bump to 2.24.3Mart Raudsepp2019-07-051-0/+1
| | | | | Package-Manager: Portage-2.3.62, Repoman-2.3.12 Signed-off-by: Mart Raudsepp <leio@gentoo.org>
* net-libs/webkit-gtk: bump to 2.24.2Mart Raudsepp2019-05-181-0/+1
| | | | | | | | | | Hopefully handles SSE2 missing from CXXFLAGS better. Unknown what happens for machines that are actually without SSE2 runtime support. Closes: https://bugs.gentoo.org/684540 Package-Manager: Portage-2.3.62, Repoman-2.3.12 Signed-off-by: Mart Raudsepp <leio@gentoo.org>
* net-libs/webkit-gtk: security cleanupMart Raudsepp2019-04-251-3/+0
| | | | | | Bug: https://bugs.gentoo.org/683234 Package-Manager: Portage-2.3.52, Repoman-2.3.12 Signed-off-by: Mart Raudsepp <leio@gentoo.org>
* net-libs/webkit-gtk: security bump to 2.24.1, drop JIT controlMart Raudsepp2019-04-131-0/+1
| | | | | | | | | | | | | | JIT manual control is getting complicated for limited benefits, which mostly involve oneself shooting in the foot. Let upstream build system figure out whether it should do JIT or not and don't get in the way. May be revisited based on any fallout and relevant bug reports after discussions on such reports convince it's needed. Bug: https://bugs.gentoo.org/683234 Bug: https://bugs.gentoo.org/680580 Bug: https://bugs.gentoo.org/680464 Package-Manager: Portage-2.3.52, Repoman-2.3.12 Signed-off-by: Mart Raudsepp <leio@gentoo.org>
* net-libs/webkit-gtk: bump to 2.24.0Mart Raudsepp2019-03-141-0/+1
| | | | | Package-Manager: Portage-2.3.52, Repoman-2.3.12 Signed-off-by: Mart Raudsepp <leio@gentoo.org>
* net-libs/webkit-gtk: bump to 2.22.7Mart Raudsepp2019-03-061-0/+1
| | | | | Package-Manager: Portage-2.3.52, Repoman-2.3.12 Signed-off-by: Mart Raudsepp <leio@gentoo.org>
* net-libs/webkit-gtk: security cleanupMart Raudsepp2019-02-191-1/+0
| | | | | Package-Manager: Portage-2.3.52, Repoman-2.3.12 Signed-off-by: Mart Raudsepp <leio@gentoo.org>
* net-libs/webkit-gtk: security bump to 2.22.6Mart Raudsepp2019-02-191-0/+1
| | | | | Package-Manager: Portage-2.3.52, Repoman-2.3.12 Signed-off-by: Mart Raudsepp <leio@gentoo.org>
* net-libs/webkit-gtk: security cleanupMart Raudsepp2019-01-141-2/+0
| | | | | Package-Manager: Portage-2.3.52, Repoman-2.3.12 Signed-off-by: Mart Raudsepp <leio@gentoo.org>
* net-libs/webkit-gtk: security bump to 2.22.5Mart Raudsepp2019-01-061-0/+1
| | | | | | | | Allow building without opengl again, as the bugs are fixed, but this is a very bad idea to do, so added a fat warning if done. Package-Manager: Portage-2.3.52, Repoman-2.3.12 Signed-off-by: Mart Raudsepp <leio@gentoo.org>
* net-libs/webkit-gtk: sec bump to 2.22.4; require GLMart Raudsepp2018-11-271-0/+1
| | | | | | | | | | | | | | | | | | | | | * Security bump to 2.22.4 for WSA-2018-0008 * Builds without GL (opengl or gles2) are currently broken, thus REQUIRED_USE it. * Stop requiring gstreamer for introspection - seems to work fine without by now. * GstreamerGL requires EGL, so REQUIRED_USE it by requiring EGL if USE="gstreamer opengl" (USE="gstreamer gles2" is already covered by gles2 itself also requiring egl). * Raise gstreamer deps to ensure working MSE, as hopefully we can handle the stabilization of newer gst-plugins-opus for this security stabilization round. * Add references to upstream bugs above REQUIRED_USE - we should monitor them on bumps to relax the requirements when/if the upstream bugs are fixed. Closes: https://bugs.gentoo.org/671002 Signed-off-by: Mart Raudsepp <leio@gentoo.org> Package-Manager: Portage-2.3.52, Repoman-2.3.11
* net-libs/webkit-gtk: security cleanupMart Raudsepp2018-10-141-2/+0
| | | | | | Bug: https://bugs.gentoo.org/667892 Signed-off-by: Mart Raudsepp <leio@gentoo.org> Package-Manager: Portage-2.3.49, Repoman-2.3.11
* net-libs/webkit-gtk: bump to 2.22.2Mart Raudsepp2018-10-061-0/+1
| | | | | | Bug: https://bugs.gentoo.org/667892 Signed-off-by: Mart Raudsepp <leio@gentoo.org> Package-Manager: Portage-2.3.49, Repoman-2.3.11
* net-libs/webkit-gtk: security cleanupMart Raudsepp2018-08-171-1/+0
| | | | | Bug: https://bugs.gentoo.org/658168 Package-Manager: Portage-2.3.46, Repoman-2.3.10
* net-libs/webkit-gtk: bump to 2.20.5 for a rendering regression fixMart Raudsepp2018-08-131-0/+1
| | | | Package-Manager: Portage-2.3.46, Repoman-2.3.10
* net-libs/webkit-gtk: security cleanupMart Raudsepp2018-08-081-1/+0
| | | | Package-Manager: Portage-2.3.43, Repoman-2.3.10
* net-libs/webkit-gtk: security bump to 2.20.4Mart Raudsepp2018-08-061-0/+1
| | | | Package-Manager: Portage-2.3.43, Repoman-2.3.10
* net-libs/webkit-gtk: bump to 2.20.3Virgil Dupras2018-07-241-0/+1
| | | | | | | | | | | | | * New dependency on media-libs/woff2 require us to drop keywords * Drop redundant python dependency under tests * The ia64 patch is no longer needed: the fatal build error on unknown CPUs has been removed. * arm64 compilation is fixed upstream. Closes: https://bugs.gentoo.org/655550 Closes: https://bugs.gentoo.org/644284 Closes: https://github.com/gentoo/gentoo/pull/9271 Package-Manager: Portage-2.3.40, Repoman-2.3.9
* net-libs/webkit-gtk: Remove security vulnerable SLOT=2 and SLOT=3Mart Raudsepp2018-03-251-1/+0
| | | | | | | | | | | | | These slots are years old, unmaintained and vulnerable to hundreds of bugs with a CVE assigned. Additionally there are some known unfixed issues building against newer ICU. No interest in continued maintenance of known hugely security vulnerable versions, thus with no consumers remaining in main tree, this is going away now. Sorry. If you need this, please think seriously ten times before you make it available to yourself via an overlay, or use any software that requires this security riddled version still. Closes: https://bugs.gentoo.org/577068
* net-libs/webkit-gtk: security cleanupMart Raudsepp2018-01-281-1/+0
| | | | | | https://bugs.gentoo.org/645686 Package-Manager: Portage-2.3.19, Repoman-2.3.6
* net-libs/webkit-gtk: security bump to 2.18.6Mart Raudsepp2018-01-251-0/+1
| | | | | Bug: https://bugs.gentoo.org/645686 Package-Manager: Portage-2.3.19, Repoman-2.3.6
* net-libs/webkit-gtk: security cleanupMart Raudsepp2018-01-151-1/+0
| | | | | Bug: https://bugs.gentoo.org/644128 Package-Manager: Portage-2.3.19, Repoman-2.3.6
* net-libs/webkit-gtk: security bump to 2.18.5 for Spectre mitigationMart Raudsepp2018-01-111-0/+1
| | | | | Bug: https://bugs.gentoo.org/644128 Package-Manager: Portage-2.3.19, Repoman-2.3.6
* net-libs/webkit-gtk: security cleanupMart Raudsepp2017-12-271-1/+0
| | | | | Bug: https://bugs.gentoo.org/641752 Package-Manager: Portage-2.3.19, Repoman-2.3.6
* net-libs/webkit-gtk: security bump to 2.18.4Mart Raudsepp2017-12-201-0/+1
| | | | | Bug: https://bugs.gentoo.org/641752 Package-Manager: Portage-2.3.19, Repoman-2.3.6
* net-libs/webkit-gtk: Remove vulnerable 2.18.2 as requested by leioManuel Rüger2017-11-281-1/+0
| | | | | Bug: https://bugs.gentoo.org/637076 Package-Manager: Portage-2.3.16, Repoman-2.3.6
* net-libs/webkit-gtk: amd64 stable wrt bug #637076Agostino Sarubbo2017-11-241-3/+3
| | | | | | Package-Manager: Portage-2.3.13, Repoman-2.3.3 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* net-libs/webkit-gtk: bump to 2.18.3 for securityIan Stakenvicius2017-11-211-0/+1
| | | | | | Bug: https://bugs.gentoo.org/637076 Acked-by: Mart Raudsepp <leio@gentoo.org> Package-Manager: Portage-2.3.13, Repoman-2.3.3
* net-libs/webkit-gtk: security cleanupMart Raudsepp2017-10-301-2/+0
| | | | | Bug: https://bugs.gentoo.org/635134 Package-Manager: Portage-2.3.8, Repoman-2.3.2
* net-libs/webkit-gtk: bump to 2.18.2Mart Raudsepp2017-10-291-0/+1
| | | | Package-Manager: Portage-2.3.8, Repoman-2.3.2
* net-libs/webkit-gtk: bump to 2.18.1 for security; other package touchupsMart Raudsepp2017-10-231-0/+1
| | | | | | | | | | | | | | | | - reorder deps to cmake checks order - add missing zlib dep - move gtk platform USE checks to the main depstring, as that's requiring newer version anyway - remove unnecessary pango dep (not checked in cmake, minimal usage comes via gtk+ deps) - add WebCrypto deps, without giving optionality (it's a private option) - add missing cmake-utils_src_prepare call - remove ancient <glibc-2.18 code - fix jsc pax-mark - remove ruby21 support (gone from tree and repoman warning about the slot) - GL deps and conditions remain a mystery to me for now Closes: https://bugs.gentoo.org/626736 Package-Manager: Portage-2.3.8, Repoman-2.3.2
* net-libs/webkit-gtk: cleanup security vulnerable 2.16.5, bug #626142Gilles Dartiguelongue2017-09-221-1/+0
| | | | | Bug: https://bugs.gentoo.org/show_bug.cgi?id=626142 Package-Manager: Portage-2.3.8, Repoman-2.3.3
* net-libs/webkit-gtk: bump to 2.16.6 for security fixesMart Raudsepp2017-07-251-0/+1
| | | | | | | | | Fixes CVE-2017-7018, CVE-2017-7030, CVE-2017-7034, CVE-2017-7037, CVE-2017-7039, CVE-2017-7046, CVE-2017-7048, CVE-2017-7055, CVE-2017-7056, CVE-2017-7061 and CVE-2017-7064. Gentoo-bug: 626142 Package-Manager: Portage-2.3.6, Repoman-2.3.2
* net-libs/webkit-gtk: security cleanupMart Raudsepp2017-07-071-2/+0
| | | | Package-Manager: Portage-2.3.5, Repoman-2.3.2
* net-libs/webkit-gtk: bump to 2.16.5 for a crash and a wayland regression fixMart Raudsepp2017-06-271-0/+1
| | | | | | | | | | | Upstream changes: * Fix a web process crash when page finishes loading in several web sites. * Fix the menu of select elements not showing in some cases under Wayland. This is meant to be the security stabilization target for CVE-2017-2538 for a regression free upgrade Package-Manager: Portage-2.3.5, Repoman-2.3.2
* net-libs/webkit-gtk: bump to 2.16.4 for bug fixes, including a security fixMart Raudsepp2017-06-221-0/+1
| | | | | | Fixes CVE-2017-2538 among other bug fixes Package-Manager: Portage-2.3.5, Repoman-2.3.2
* net-libs/webkit-gtk: security cleanupMart Raudsepp2017-06-011-1/+0
| | | | | Gentoo-bug: 619788 Package-Manager: Portage-2.3.5, Repoman-2.3.2
* net-libs/webkit-gtk: bump to 2.16.3; includes 3 security bug fixesMart Raudsepp2017-05-271-0/+1
| | | | | Security fixes: CVE-2017-2496, CVE-2017-2539, CVE-2017-2510. Also other bug fixes.
* net-libs/webkit-gtk: remove oldMart Raudsepp2017-05-201-1/+0
| | | | Package-Manager: Portage-2.3.5, Repoman-2.3.2
* net-libs/webkit-gtk: bump to 2.16.2 for various fixes, including new Google ↵Mart Raudsepp2017-05-101-0/+1
| | | | | | login page Package-Manager: Portage-2.3.5, Repoman-2.3.2
* net-libs/webkit-gtk: security cleanupMart Raudsepp2017-04-171-1/+0
| | | | | Gentoo-bug: 614876 Package-Manager: Portage-2.3.5, Repoman-2.3.2
* net-libs/webkit-gtk: bump to 2.16.1 for 33+ security fixesMart Raudsepp2017-04-091-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVE-2016-9642, CVE-2016-9643, CVE-2017-2367, CVE-2017-2376, CVE-2017-2377, CVE-2017-2386, CVE-2017-2392, CVE-2017-2394, CVE-2017-2395, CVE-2017-2396, CVE-2017-2405, CVE-2017-2415, CVE-2017-2419, CVE-2017-2433, CVE-2017-2442, CVE-2017-2445, CVE-2017-2446, CVE-2017-2447, CVE-2017-2454, CVE-2017-2455, CVE-2017-2457, CVE-2017-2459, CVE-2017-2460, CVE-2017-2464, CVE-2017-2465, CVE-2017-2466, CVE-2017-2468, CVE-2017-2469, CVE-2017-2470, CVE-2017-2471, CVE-2017-2475, CVE-2017-2476, CVE-2017-2481 and further fixes for CVE-2017-2364. Upstream says 2.16.1 fixes more security bugs than these, over 2.16.0 release, but that they didn't have CVE numbers as of yet. Add some seemingly necessary perl build dependencies (which everyone probably had installed anyways). This perl build dep list is by no means complete. Includes preliminary patch from Kent to not start requiring perl[ithreads] for building (over perl with whatever ithreads choice), which would be disastrous for us. Upstream has replaced gnutls with libgcrypt. The experimental API unstable DOM stuff was dropped completely (but isn't used since epiphany-3.22), while the webkit2gtkinjectedbundle-j1.patch patch in earlier version modified lines that were there for it - so hopefully -j1 MAKEOPTS building still works with that patch dropped. CREDENTIAL_STORAGE option was renamed to LIBSECRET. flex build dep seems to have been dropped and gstreamer requirement upped to 1.2.3. harfbuzz 1.3.3 is useful for it for some optional fixes, so guarantee it. Gentoo-bug: 614876 Thanks-to: Kent Fredric <kentnl@gentoo.org>
* net-libs/webkit-gtk: remove old (security cleanup)Mart Raudsepp2017-02-161-2/+0
| | | | | Gentoo-bug: 608958 Package-Manager: Portage-2.3.3, Repoman-2.3.1
* net-libs/webkit-gtk: bump to 2.14.5 for serious HiDPI regression fixesMart Raudsepp2017-02-151-0/+1
| | | | | | | * Fix rendering of non-accelerated contents with HiDPI. * Revert the fix for rendering issues in long documents with transparent background because it caused issues in HiDPI. Package-Manager: Portage-2.3.3, Repoman-2.3.1
* net-libs/webkit-gtk: Drop oldPacho Ramos2017-02-111-2/+0
| | | | Package-Manager: Portage-2.3.3, Repoman-2.3.1
* net-libs/webkit-gtk: Version bumpPacho Ramos2017-02-111-0/+1
| | | | Package-Manager: Portage-2.3.3, Repoman-2.3.1
* net-libs/webkit-gtk: Version bumpPacho Ramos2017-01-211-0/+1
| | | | Package-Manager: Portage-2.3.3, Repoman-2.3.1