package/wpewebkit: security bump to version 2.26.2

This is a minor release which includes fixes for CVE-2019-8812 and
CVE-2019-8814.

This release also fixes the build with WebDriver disabled, making patch
"0002-WPE-GTK-Build-fails-with-ENABLE_WEBDRIVER-OFF.patch" unneeded
(and therefore removed). There is also a performance improvement for
a regression related to fallback font selection, and a couple of small
fixes. The full release notes are available at:

  https://wpewebkit.org/release/wpewebkit-2.26.2.html

The detailed security advisory can be found at:

  https://wpewebkit.org/security/WSA-2019-0006.html

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
This commit is contained in:
Adrian Perez de Castro 2019-11-10 18:25:03 +02:00 committed by Thomas Petazzoni
parent 3817b79869
commit f3546d4e7c
3 changed files with 5 additions and 61 deletions

View file

@ -1,56 +0,0 @@
From fb0f978af0dd3923a1d3bcb6dccf610861e284d3 Mon Sep 17 00:00:00 2001
From: Adrian Perez de Castro <aperez@igalia.com>
Date: Tue, 8 Oct 2019 11:06:56 +0300
Subject: [PATCH xserver 2/2] [WPE][GTK] Build fails with ENABLE_WEBDRIVER=OFF
https://bugs.webkit.org/show_bug.cgi?id=202658
Reviewed by NOBODY (OOPS!).
* UIProcess/Automation/gtk/WebAutomationSessionGtk.cpp: Add missing
ENABLE(WEBDRIVER_MOUSE_INTERACTIONS) and ENABLE(WEBDRIVER_KEYBOARD_INTERACTIONS)
preprocessor guards.
* UIProcess/Automation/wpe/WebAutomationSessionWPE.cpp: Ditto.
Fetch (and adapted) from: https://bugs.webkit.org/show_bug.cgi?id=202658
Upstream-Status: Pending
Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
---
Source/WebKit/ChangeLog | 12 ++++++++++++
.../Automation/gtk/WebAutomationSessionGtk.cpp | 4 ++++
.../Automation/wpe/WebAutomationSessionWPE.cpp | 4 ++++
3 files changed, 20 insertions(+)
diff --git a/Source/WebKit/UIProcess/Automation/wpe/WebAutomationSessionWPE.cpp b/Source/WebKit/UIProcess/Automation/wpe/WebAutomationSessionWPE.cpp
index d601f0e57ae..683f0b8eed4 100644
--- a/Source/WebKit/UIProcess/Automation/wpe/WebAutomationSessionWPE.cpp
+++ b/Source/WebKit/UIProcess/Automation/wpe/WebAutomationSessionWPE.cpp
@@ -32,6 +32,7 @@
namespace WebKit {
using namespace WebCore;
+#if ENABLE(WEBDRIVER_MOUSE_INTERACTIONS)
static uint32_t modifiersToEventState(OptionSet<WebEvent::Modifier> modifiers)
{
uint32_t state = 0;
@@ -121,7 +122,9 @@ void WebAutomationSession::platformSimulateMouseInteraction(WebPageProxy& page,
break;
}
}
+#endif // ENABLE(WEBDRIVER_MOUSE_INTERACTIONS)
+#if ENABLE(WEBDRIVER_KEYBOARD_INTERACTIONS)
static void doKeyStrokeEvent(struct wpe_view_backend* viewBackend, bool pressed, uint32_t keyCode, uint32_t modifiers, bool doReleaseAfterPress = false)
{
struct wpe_input_xkb_keymap_entry* entries;
@@ -309,6 +312,7 @@ void WebAutomationSession::platformSimulateKeySequence(WebPageProxy& page, const
p = g_utf8_next_char(p);
} while (*p);
}
+#endif // ENABLE(WEBDRIVER_KEYBOARD_INTERACTIONS)
} // namespace WebKit
--
2.23.0

View file

@ -1,7 +1,7 @@
# From https://wpewebkit.org/releases/wpewebkit-2.26.1.tar.xz.sums
md5 bec094fe878e03f42de751cbaf0b3e99 wpewebkit-2.26.1.tar.xz
sha1 53dfafab8d5ccb537e7330febb9504c390e3bf52 wpewebkit-2.26.1.tar.xz
sha256 d1ae85dffb5bfc106c5ac6d5e73a3dfe3cb2c1df1f18c16103e1dc744cd4ac14 wpewebkit-2.26.1.tar.xz
# From https://wpewebkit.org/releases/wpewebkit-2.26.2.tar.xz.sums
md5 057cc2647231e90c8197873df9a9f54c wpewebkit-2.26.2.tar.xz
sha1 eca4e35af2c2e70bd36a9bdef3bfbbfbd417210c wpewebkit-2.26.2.tar.xz
sha256 dd4fce390f1721d8d6d017fa712adb990f7230bde84a1b7d27327bd589053fdd wpewebkit-2.26.2.tar.xz
# Hashes for license files:
sha256 0b5d3a7cc325942567373b0ecd757d07c132e0ebd7c97bfc63f7e1a76094edb4 Source/WebCore/LICENSE-APPLE

View file

@ -4,7 +4,7 @@
#
################################################################################
WPEWEBKIT_VERSION = 2.26.1
WPEWEBKIT_VERSION = 2.26.2
WPEWEBKIT_SITE = http://www.wpewebkit.org/releases
WPEWEBKIT_SOURCE = wpewebkit-$(WPEWEBKIT_VERSION).tar.xz
WPEWEBKIT_INSTALL_STAGING = YES