[Buildroot] [PATCH 1/1] package/wpewebkit: security bump to version 2.38.3

[Buildroot] [PATCH 1/1] package/wpewebkit: security bump to version 2.38.3

[Adrian Perez de Castro]

Bugfix release, with security fixes for CVE-2022-42852, CVE-2022-42856,
CVE-2022-42867, CVE-2022-46691, CVE-2022-46692, CVE-2022-46698,
CVE-2022-46699, CVE-2022-46700, CVE-2022-42823, and CVE-2022-42799.

Release notes:

  https://wpewebkit.org/release/wpewebkit-2.38.3.html
  https://wpewebkit.org/release/wpewebkit-2.38.2.html
  https://wpewebkit.org/release/wpewebkit-2.38.1.html

Accompanying security advisories:

  https://wpewebkit.org/security/WSA-2022-0011.html
  https://wpewebkit.org/security/WSA-2022-0010.html

Additionally, the update brings in important bug fixes for the
Bubblewrap sandbox support, scrolling in certain web sites, multimedia
playback, and build fixes.

Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
---
 package/wpewebkit/wpewebkit.hash | 8 ++++----
 package/wpewebkit/wpewebkit.mk   | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package/wpewebkit/wpewebkit.hash b/package/wpewebkit/wpewebkit.hash
index 5dd64b34b7..ccd928b3df 100644
--- a/package/wpewebkit/wpewebkit.hash
+++ b/package/wpewebkit/wpewebkit.hash
@@ -1,7 +1,7 @@
-# From https://wpewebkit.org/releases/wpewebkit-2.38.0.tar.xz.sums
-md5  e0e6b98c86351c39e41da475afc50780  wpewebkit-2.38.0.tar.xz
-sha1  66e6dd1c285a21ce50370fb4d60332838d801663  wpewebkit-2.38.0.tar.xz
-sha256  e653e12eca63e6371c06d4cd9efcd5492db67f7d9ef324fd5d8668b1151e72b2  wpewebkit-2.38.0.tar.xz
+# From https://wpewebkit.org/releases/wpewebkit-2.38.3.tar.xz.sums
+md5  60f79ff8dc68280f756963af23b67d6d  wpewebkit-2.38.3.tar.xz
+sha1  de15119a0dc29776d3a11fca1df4238b471f960f  wpewebkit-2.38.3.tar.xz
+sha256  1dd9075eec7253a1b0d038a73f92ddbb9174394e6a7527ec07b4464fa6290498  wpewebkit-2.38.3.tar.xz
 
 # Hashes for license files:
 sha256  0b5d3a7cc325942567373b0ecd757d07c132e0ebd7c97bfc63f7e1a76094edb4  Source/WebCore/LICENSE-APPLE
diff --git a/package/wpewebkit/wpewebkit.mk b/package/wpewebkit/wpewebkit.mk
index 001c701ee9..b2bbc0301b 100644
--- a/package/wpewebkit/wpewebkit.mk
+++ b/package/wpewebkit/wpewebkit.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-WPEWEBKIT_VERSION = 2.38.0
+WPEWEBKIT_VERSION = 2.38.3
 WPEWEBKIT_SITE = http://www.wpewebkit.org/releases
 WPEWEBKIT_SOURCE = wpewebkit-$(WPEWEBKIT_VERSION).tar.xz
 WPEWEBKIT_INSTALL_STAGING = YES
-- 
2.39.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/wpewebkit: security bump to version 2.38.3

[Peter Korsgaard]

>>>>> "Adrian" == Adrian Perez de Castro <aperez@igalia.com> writes:

 > Bugfix release, with security fixes for CVE-2022-42852, CVE-2022-42856,
 > CVE-2022-42867, CVE-2022-46691, CVE-2022-46692, CVE-2022-46698,
 > CVE-2022-46699, CVE-2022-46700, CVE-2022-42823, and CVE-2022-42799.

 > Release notes:

 >   https://wpewebkit.org/release/wpewebkit-2.38.3.html
 >   https://wpewebkit.org/release/wpewebkit-2.38.2.html
 >   https://wpewebkit.org/release/wpewebkit-2.38.1.html

 > Accompanying security advisories:

 >   https://wpewebkit.org/security/WSA-2022-0011.html
 >   https://wpewebkit.org/security/WSA-2022-0010.html

 > Additionally, the update brings in important bug fixes for the
 > Bubblewrap sandbox support, scrolling in certain web sites, multimedia
 > playback, and build fixes.

 > Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>

Heh, I missed that you had already sent this - Committed, thanks!

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/wpewebkit: security bump to version 2.38.3

[Adrian Perez de Castro]

[-- Attachment #1.1: Type: text/plain, Size: 1131 bytes --]

Hi Peter,

On Fri, 20 Jan 2023 08:21:47 +0100 Peter Korsgaard <peter@korsgaard.com> wrote:
> >>>>> "Adrian" == Adrian Perez de Castro <aperez@igalia.com> writes:
> 
>  > Bugfix release, with security fixes for CVE-2022-42852, CVE-2022-42856,
>  > CVE-2022-42867, CVE-2022-46691, CVE-2022-46692, CVE-2022-46698,
>  > CVE-2022-46699, CVE-2022-46700, CVE-2022-42823, and CVE-2022-42799.
> 
>  > Release notes:
> 
>  >   https://wpewebkit.org/release/wpewebkit-2.38.3.html
>  >   https://wpewebkit.org/release/wpewebkit-2.38.2.html
>  >   https://wpewebkit.org/release/wpewebkit-2.38.1.html
> 
>  > Accompanying security advisories:
> 
>  >   https://wpewebkit.org/security/WSA-2022-0011.html
>  >   https://wpewebkit.org/security/WSA-2022-0010.html
> 
>  > Additionally, the update brings in important bug fixes for the
>  > Bubblewrap sandbox support, scrolling in certain web sites, multimedia
>  > playback, and build fixes.
> 
>  > Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>
> 
> Heh, I missed that you had already sent this - Committed, thanks!

No problem at all! Thanks for all the merges :)

Cheers,
—Adrián

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

[-- Attachment #2: Type: text/plain, Size: 150 bytes --]

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/wpewebkit: security bump to version 2.38.3

[Peter Korsgaard]

>>>>> "Adrian" == Adrian Perez de Castro <aperez@igalia.com> writes:

 > Bugfix release, with security fixes for CVE-2022-42852, CVE-2022-42856,
 > CVE-2022-42867, CVE-2022-46691, CVE-2022-46692, CVE-2022-46698,
 > CVE-2022-46699, CVE-2022-46700, CVE-2022-42823, and CVE-2022-42799.

 > Release notes:

 >   https://wpewebkit.org/release/wpewebkit-2.38.3.html
 >   https://wpewebkit.org/release/wpewebkit-2.38.2.html
 >   https://wpewebkit.org/release/wpewebkit-2.38.1.html

 > Accompanying security advisories:

 >   https://wpewebkit.org/security/WSA-2022-0011.html
 >   https://wpewebkit.org/security/WSA-2022-0010.html

 > Additionally, the update brings in important bug fixes for the
 > Bubblewrap sandbox support, scrolling in certain web sites, multimedia
 > playback, and build fixes.

 > Signed-off-by: Adrian Perez de Castro <aperez@igalia.com>

Committed to 2022.11.x, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot