webkit2gtk (2.10.9-1ubuntu1) xenial; urgency=medium * Merge with Debian unstable. Remaining changes: + Build with GeoClue 1, which is what we still use in Ubuntu. -- Iain Lane Wed, 23 Mar 2016 18:09:37 +0000 webkit2gtk (2.10.9-1) unstable; urgency=medium * New upstream release. -- Alberto Garcia Fri, 18 Mar 2016 12:35:25 +0200 webkit2gtk (2.10.8-1ubuntu1) xenial; urgency=low * Build with GeoClue 1, which is what we still use in Ubuntu. -- Iain Lane Tue, 15 Mar 2016 10:59:14 +0000 webkit2gtk (2.10.8-1) unstable; urgency=high * New upstream release. This fixes CVE-2016-1726 (Closes: #802380). * Allow building the package with debhelper < 9.20151219. This won't produce any debug packages (since they are automatically generated now), but it can be useful for backports. + debian/control: - Revert build dependency on debhelper back to >= 9. + debian/rules: - Don't make dh_strip fail if it doesn't support --ddeb-migration. * debian/rules: + The list of architectures in which the debug packages are causing problems continues to grow, so let's try the opposite approach: we build by default using -g1 except in the cases where we know that -g works fine (amd64, ppc64, ppc64el). + Enable all hardening flags. * debian/patches/fix-ftbfs-m68k.patch: + Enclose the changes to the compile assertions inside an #ifdef block so they only apply to m68k. * debian/patches/fix-ftbfs-alpha.patch: + Fix FTBFS in alpha (Closes: #815124). * debian/patches/fix-ftbfs-sparc64.patch: + Add patch metadata. * debian/source/lintian-overrides: + Update overrides so the latest lintian doesn't give more source-is-missing false positives. * debian/control: + Bump Standards-Version to 3.9.7; no changes needed. + Use secure URIs for the Vcs-* fields. -- Alberto Garcia Sat, 12 Mar 2016 00:07:55 +0200 webkit2gtk (2.10.6-1ubuntu1) xenial; urgency=medium * Build with GeoClue 1, which is what we still use in Ubuntu. -- Iain Lane Fri, 12 Feb 2016 15:05:47 +0000 webkit2gtk (2.10.6-1) unstable; urgency=medium * New upstream release. -- Alberto Garcia Wed, 27 Jan 2016 16:48:08 +0200 webkit2gtk (2.10.5-1) unstable; urgency=high * New upstream release. Fixes CVE-2015-7096 and CVE-2015-7098. This release doesn't contain any non-DFSG files in the original tarball, so we can ship it as-is and remove the +dfsg suffix from the Debian version. + debian/watch: - Remove the 'dversionmangle' option. + debian/rules: - Remove the get-orig-source target. - Don't generate (and clean) jquery.min.js. + debian/control: - Remove build dependency on slimit. + debian/jquery-1.9.1.js: - Remove. * debian/patches/fix-ftbfs-sparc64.patch: + Fix FTBFS on sparc64 (Closes: #806816). * debian/rules: + Don't pass -DENABLE_YARR_JIT=0, passing -DENABLE_JIT=OFF already takes care of that. + Remove EXTRA_DH_ARGUMENTS, this is no longer being used. * debian/watch: + Only scan releases from the stable branches. * Migrate to automatic -dbgsym packages: + debian/control: - Remove the entries for libjavascriptcoregtk-4.0-18-dbg and libwebkit2gtk-4.0-37-dbg. - Require debhelper >= 9.20151219. + debian/rules: - Replace --dbg-package with --ddeb-migration in dh_strip. * debian/copyright: + Update copyright years. + Remove mentions to jquery (which is no longer included) and FontWithNoValidEncoding.fon, which is a regular font in the FON file format. -- Alberto Garcia Thu, 21 Jan 2016 14:26:30 +0200 webkit2gtk (2.10.4+dfsg1-1) unstable; urgency=medium * New upstream release. * debian/patches/install-minibrowser.patch: + Refresh. * webkit2gtk includes a binary called WebKitPluginProcess2 that allows loading plugins that depend on GTK+2, like Adobe Flash or Google Hangouts. This however has the side effect of requiring GTK+2 and all its dependencies. We're moving the WebKitPluginProcess2 to a separate package so users that don't need any of those plugins don't need to install GTK+2 (Closes: #804412). + debian/control: - Add the entry for the new libwebkit2gtk-4.0-37-gtk2 package. + debian/rules: - Run dh_strip on the new package as well. + debian/patches/hide-gtk2-plugins.patch: - Hide plugins if the plugin process is not available. + debian/libwebkit2gtk-4.0-37-gtk2.install: - Install WebKitPluginProcess2. + debian/libwebkit2gtk-4.0-37.install: - Remove WebKitPluginProcess2. + debian/NEWS: - Add news item about the new package. -- Alberto Garcia Thu, 12 Nov 2015 23:10:53 +0200 webkit2gtk (2.10.3+dfsg1-1) unstable; urgency=medium * New upstream release. * debian/rules: + The size of the webkit2gtk -dbg packages is huge and has been a source of headaches in many architectures that cannot build them or deal with them easily. Our current approach has been to disable them completely for those architectures. For this release we'll build them again but using -g1 instead, which produces _way_ smaller files that are still useful for backtraces. + Use -g1 for mips64el as well. + Build using -DG_DISABLE_CAST_CHECKS when not in debug mode. * debian/control: + Drop the gir1.2-gtk* and gir1.2-soup* build dependencies, they are already being pulled by libgtk*-dev and libsoup*-dev. + Make libegl1-mesa-dev an explicit requirement in all architectures, it's necessary for the Wayland target. -- Alberto Garcia Mon, 26 Oct 2015 14:41:33 +0200 Webkit2gtk (2.10.2+dfsg1-1) unstable; urgency=medium * New upstream release. * debian/rules: + Don't build debug packages in arm64, it kills the buildd. -- Alberto Garcia Thu, 15 Oct 2015 13:36:30 +0300 # For older changelog entries, run 'apt-get changelog gir1.2-javascriptcoregtk-4.0'