Hello community, here is the log from the commit of package webkit2gtk3 for openSUSE:Factory checked in at 2019-05-03 22:19:54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/webkit2gtk3 (Old) and /work/SRC/openSUSE:Factory/.webkit2gtk3.new.5148 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "webkit2gtk3" Fri May 3 22:19:54 2019 rev:78 rq:699593 version:2.24.1 Changes: -------- --- /work/SRC/openSUSE:Factory/webkit2gtk3/webkit2gtk3.changes 2019-04-01 12:31:16.413762648 +0200 +++ /work/SRC/openSUSE:Factory/.webkit2gtk3.new.5148/webkit2gtk3.changes 2019-05-03 22:19:55.972406186 +0200 @@ -1,0 +2,35 @@ +Wed Apr 24 17:45:53 UTC 2019 - Martin Liška <mliska@suse.cz> + +- Disable LTO (boo#1133291). + +------------------------------------------------------------------- +Mon Apr 15 11:06:10 UTC 2019 - Dominique Leuenberger <dimstar@opensuse.org> + +- Add webkit2gtk3-fix-i586-build.patch: Fix build on i586. + +------------------------------------------------------------------- +Wed Apr 10 21:50:50 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com> + +- Update to version 2.24.1 (boo#1132256): + + Do not allow changes in active URI before provisional load + starts for non-API requests. + + Stop the threaded compositor when the page is not visible or + layer tree state is frozen. + + Use WebKit HTTP source element again for adaptive streaming + fragments downloading. + + Properly handle empty resources in + webkit_web_resource_get_data(). + + Add quirk to ensure outlook.live.com uses the modern UI. + + Fix methods returing GObject or boxed types in JavaScriptCore + GLib API. + + Ensure callback data is passed to functions and constructors + with no parameters in JavaScriptCore GLib API. + + Fix rendering of complex text when the font uses x,y origins. + + Fix sound loop with Google Hangouts and WhatsApp notifications. + + Fix the build with GStreamer 1.12.5 and GST GL enabled. + + Detect SSE2 at compile time. + + Fix several crashes and rendering issues. + + Security fixes: CVE-2019-6251, CVE-2019-11070. +- Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream. + +------------------------------------------------------------------- @@ -23 +58,3 @@ - + Security fixes: CVE-2019-8375 (boo#1126768). + + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506, + CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544, + CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563. @@ -118,0 +156 @@ + + Security fixes: CVE-2019-8518, CVE-2019-8523. @@ -140 +178,2 @@ - CVE-2019-6229, CVE-2019-6233, CVE-2019-6234. + CVE-2019-6229, CVE-2019-6233, CVE-2019-6234, CVE-2019-6201, + CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8515. Old: ---- webkitgtk-2.24.0.tar.xz webkitgtk-2.24.0.tar.xz.asc webkitgtk-gstreamer-gl-build-fix.patch New: ---- webkit2gtk3-fix-i586-build.patch webkitgtk-2.24.1.tar.xz webkitgtk-2.24.1.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ webkit2gtk3.spec ++++++ --- /var/tmp/diff_new_pack.8Jl1Q2/_old 2019-05-03 22:19:57.092408430 +0200 +++ /var/tmp/diff_new_pack.8Jl1Q2/_new 2019-05-03 22:19:57.100408447 +0200 @@ -42,7 +42,7 @@ %bcond_with python3 %endif Name: webkit2gtk3 -Version: 2.24.0 +Version: 2.24.1 Release: 0 Summary: Library for rendering web content, GTK+ Port License: LGPL-2.0-or-later AND BSD-3-Clause @@ -52,11 +52,10 @@ Source1: https://webkitgtk.org/releases/%{_name}-%{version}.tar.xz.asc Source98: baselibs.conf Source99: webkit2gtk3.keyring +# PATCH-FIX-UPSTREAM webkit2gtk3-fix-i586-build.patch dimstar@opensuse.org -- Fix build on i586, taken from upstream https://trac.webkit.org/changeset/244138/webkit +Patch0: webkit2gtk3-fix-i586-build.patch # PATCH-FIX-UPSTREAM webkit2gtk3-boo1088932-a11y-state-set.patch boo#1088932 webkit#184366 mgorse@suse.com -- fix crash when atk_object_ref_state_set is called on an AtkObject that's being destroyed Patch1: webkit2gtk3-boo1088932-a11y-state-set.patch -# PATCH-FIX-UPSTREAM webkitgtk-gstreamer-gl-build-fix.patch webkit#196178 mgorse@suse.com -- fix build on SLE/Leap 15. -Patch2: webkitgtk-gstreamer-gl-build-fix.patch - BuildRequires: Mesa-libEGL-devel BuildRequires: Mesa-libGL-devel BuildRequires: Mesa-libGLESv1_CM-devel @@ -66,21 +65,12 @@ #BuildRequires: bubblewrap BuildRequires: cmake BuildRequires: enchant-devel -%if 0%{?suse_version} == 1315 -BuildRequires: gcc7-c++ -%else -BuildRequires: gcc-c++ >= 4.9 -%endif BuildRequires: gobject-introspection-devel BuildRequires: gperf >= 3.0.1 BuildRequires: hyphen-devel BuildRequires: libicu-devel BuildRequires: libjpeg-devel BuildRequires: ninja -%if 0%{?suse_version} >= 1500 -BuildRequires: openjpeg2 -BuildRequires: openjpeg2-devel -%endif BuildRequires: perl >= 5.10.0 BuildRequires: pkgconfig BuildRequires: ruby >= 1.8.7 @@ -114,15 +104,24 @@ BuildRequires: pkgconfig(libsecret-1) BuildRequires: pkgconfig(libsoup-2.4) >= 2.61.90 BuildRequires: pkgconfig(libwebp) -%if 0%{?suse_version} > 1500 -BuildRequires: pkgconfig(libwoff2dec) -%endif BuildRequires: pkgconfig(libxml-2.0) >= 2.8.0 BuildRequires: pkgconfig(libxslt) >= 1.1.7 BuildRequires: pkgconfig(sqlite3) BuildRequires: pkgconfig(upower-glib) BuildRequires: pkgconfig(xt) BuildRequires: pkgconfig(zlib) +%if 0%{?suse_version} == 1315 +BuildRequires: gcc7-c++ +%else +BuildRequires: gcc-c++ >= 4.9 +%endif +%if 0%{?suse_version} >= 1500 +BuildRequires: openjpeg2 +BuildRequires: openjpeg2-devel +%endif +%if 0%{?suse_version} > 1500 +BuildRequires: pkgconfig(libwoff2dec) +%endif %if %{with python3} BuildRequires: python3 %else @@ -292,10 +291,11 @@ %prep %setup -q -n webkitgtk-%{version} +%patch0 -p2 %patch1 -p1 -%patch2 -p1 %build +%define _lto_cflags %{nil} # Here we must muzzle our dog so it doesn't eat all the memory max_link_jobs="%{?jobs:%{jobs}}" max_compile_jobs="%{?jobs:%{jobs}}" ++++++ webkit2gtk3-fix-i586-build.patch ++++++ Index: /trunk/CMakeLists.txt =================================================================== --- /trunk/CMakeLists.txt (revision 244137) +++ /trunk/CMakeLists.txt (revision 244138) @@ -115,14 +115,4 @@ endif () -#--------------------------- -# Make sure SSE2 is present. -#--------------------------- -if (WTF_CPU_X86) - include(FindSSE2) - if (NOT SSE2_SUPPORT_FOUND) - message(FATAL_ERROR "SSE2 support is required to compile WebKit") - endif () -endif () - # ----------------------------------------------------------------------------- # Determine the operating system Index: /trunk/Source/JavaScriptCore/assembler/MacroAssemblerX86Common.cpp =================================================================== --- /trunk/Source/JavaScriptCore/assembler/MacroAssemblerX86Common.cpp (revision 244137) +++ /trunk/Source/JavaScriptCore/assembler/MacroAssemblerX86Common.cpp (revision 244138) @@ -168,4 +168,9 @@ static_assert(sizeof(Probe::State) == PROBE_SIZE, "Probe::State::size's matches ctiMasmProbeTrampoline"); static_assert((PROBE_EXECUTOR_OFFSET + PTR_SIZE) <= (PROBE_SIZE + OUT_SIZE), "Must have room after ProbeContext to stash the probe handler"); + +#if CPU(X86) +// SSE2 is a hard requirement on x86. +static_assert(isSSE2Present(), "SSE2 support is required in JavaScriptCore"); +#endif #undef PROBE_OFFSETOF @@ -788,4 +793,5 @@ { CPUID cpuid = getCPUID(0x1); + s_sse2CheckState = (cpuid[3] & (1 << 26)) ? CPUIDCheckState::Set : CPUIDCheckState::Clear; s_sse4_1CheckState = (cpuid[2] & (1 << 19)) ? CPUIDCheckState::Set : CPUIDCheckState::Clear; s_sse4_2CheckState = (cpuid[2] & (1 << 20)) ? CPUIDCheckState::Set : CPUIDCheckState::Clear; @@ -804,4 +810,5 @@ } +MacroAssemblerX86Common::CPUIDCheckState MacroAssemblerX86Common::s_sse2CheckState = CPUIDCheckState::NotChecked; MacroAssemblerX86Common::CPUIDCheckState MacroAssemblerX86Common::s_sse4_1CheckState = CPUIDCheckState::NotChecked; MacroAssemblerX86Common::CPUIDCheckState MacroAssemblerX86Common::s_sse4_2CheckState = CPUIDCheckState::NotChecked; Index: /trunk/Source/JavaScriptCore/assembler/MacroAssemblerX86Common.h =================================================================== --- /trunk/Source/JavaScriptCore/assembler/MacroAssemblerX86Common.h (revision 244137) +++ /trunk/Source/JavaScriptCore/assembler/MacroAssemblerX86Common.h (revision 244138) @@ -4198,4 +4198,33 @@ #endif +#if CPU(X86) +#if OS(MAC_OS_X) + + // All X86 Macs are guaranteed to support at least SSE2, + static bool isSSE2Present() + { + return true; + } + +#else // OS(MAC_OS_X) + static bool isSSE2Present() + { + if (s_sse2CheckState == CPUIDCheckState::NotChecked) + collectCPUFeatures(); + return s_sse2CheckState == CPUIDCheckState::Set; + } + +#endif // OS(MAC_OS_X) +#elif !defined(NDEBUG) // CPU(X86) + + // On x86-64 we should never be checking for SSE2 in a non-debug build, + // but non debug add this method to keep the asserts above happy. + static bool isSSE2Present() + { + return true; + } + +#endif + using CPUID = std::array<unsigned, 4>; static CPUID getCPUID(unsigned level); @@ -4203,4 +4232,5 @@ JS_EXPORT_PRIVATE static void collectCPUFeatures(); + JS_EXPORT_PRIVATE static CPUIDCheckState s_sse2CheckState; JS_EXPORT_PRIVATE static CPUIDCheckState s_sse4_1CheckState; JS_EXPORT_PRIVATE static CPUIDCheckState s_sse4_2CheckState; ++++++ webkitgtk-2.24.0.tar.xz -> webkitgtk-2.24.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/webkit2gtk3/webkitgtk-2.24.0.tar.xz /work/SRC/openSUSE:Factory/.webkit2gtk3.new.5148/webkitgtk-2.24.1.tar.xz differ: char 27, line 1