NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
16ea3ee784
kumquat-buildroot/package/wpewebkit/wpewebkit.hash

9 lines
538 B
Plaintext
Raw Normal View History

package/wpewebkit: security bump to version 2.28.2 This is a minor release which provides fixes for CVE-2020-11793, CVE-2020-3887, CVE-2020-3894, and CVE-2020-3899. Updating from 2.28.0 also brings a few rendering fixes, a build fix on MIPS64, a build fix for GStreamer 1.12, and solves a couple of crashes. The full release notes covering 2.28.1 and 2.28.2 can be found at: https://wpewebkit.org/release/wpewebkit-2.28.1.html https://wpewebkit.org/release/wpewebkit-2.28.2.html A detailed security advisory can be found at: https://wpewebkit.org/security/WSA-2020-0004.html Note that the above does not cover all the CVEs, and a new advisory including them is expected to be published in the next days. Signed-off-by: Adrian Perez de Castro <aperez@igalia.com> [yann.morin.1998@free.fr: two spaces in hash file] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-04-26 21:50:21 +02:00
# From https://wpewebkit.org/releases/wpewebkit-2.28.2.tar.xz.sums
md5 c1f17d4b031e9462692443e3c089789c wpewebkit-2.28.2.tar.xz
sha1 b109cfec921eb466227ab3b8d21c5f5717311c8e wpewebkit-2.28.2.tar.xz
sha256 6929d28744702ead3574484ca02645c457a6fdcd6b43ccc9766d98dc3664e8dc wpewebkit-2.28.2.tar.xz
package/wpewebkit: new package Signed-off-by: Francois Perrad <francois.perrad@gadz.org> Reviewed-by: Adrian Perez de Castro <aperez@igalia.com> [Thomas: - add missing depends on BR2_HOST_GCC_AT_LEAST_4_8 - improve comments on depends on - add missing "comment" for toolchain dependencies - add missing "depends on BR2_PACKAGE_WPEWEBKIT_ARCH_SUPPORTS" on the Config.in comment - add missing "select BR2_PACKAGE_WAYLAND", which is needed to select BR2_PACKAGE_WAYLAND_PROTOCOLS - fix typoes in the JIT enabling code that was using WEBKITGTK_CONF_OPTS instead of WPEWEBKIT_CONF_OPTS] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2019-02-05 21:41:51 +01:00
# Hashes for license files:
package/wpewebkit: security bump to version 2.26.4 Fixes the following security issues: - CVE-2020-3862: Impact: A malicious website may be able to cause a denial of service. Description: A denial of service issue was addressed with improved memory handling. - CVE-2020-3864: Impact: A DOM object context may not have had a unique security origin. Description: A logic issue was addressed with improved validation. - CVE-2020-3865: Impact: A top-level DOM object context may have incorrectly been considered secure. Description: A logic issue was addressed with improved validation. - CVE-2020-3867: Impact: Processing maliciously crafted web content may lead to universal cross site scripting. Description: A logic issue was addressed with improved state management. - CVE-2020-3868: Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling. For more details, see the advisory: https://wpewebkit.org/security/WSA-2020-0002.html While we are at it, adjust the white space in the .hash function to match the new agreements. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-02-15 16:09:28 +01:00
sha256 0b5d3a7cc325942567373b0ecd757d07c132e0ebd7c97bfc63f7e1a76094edb4 Source/WebCore/LICENSE-APPLE
sha256 f2b3bd09663381deb99721109d22b47af1213bb43007a8b56a06c6375c8050ce Source/WebCore/LICENSE-LGPL-2.1
Reference in New Issue Copy Permalink