UbuntuUpdates.org

Package "webkit2gtk"

Name: webkit2gtk

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • JavaScript engine library from WebKitGTK+ - GObject introspection data
  • Web content engine library for GTK+ - GObject introspection data
  • JavaScript engine library from WebKitGTK+
  • JavaScript engine library from WebKitGTK+ - development files

Latest version: 2.24.1-0ubuntu0.18.04.1
Release: bionic (18.04)
Level: security
Repository: main

Links

Save this URL for the latest version of "webkit2gtk": https://www.ubuntuupdates.org/webkit2gtk



Other versions of "webkit2gtk" in Bionic

Repository Area Version
base main 2.20.1-1
base universe 2.20.1-1
security universe 2.24.1-0ubuntu0.18.04.1
updates main 2.24.1-0ubuntu0.18.04.1
updates universe 2.24.1-0ubuntu0.18.04.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.24.1-0ubuntu0.18.04.1 2019-04-16 15:06:36 UTC

  webkit2gtk (2.24.1-0ubuntu0.18.04.1) bionic-security; urgency=medium

  * Updated to 2.24.1 to fix security issues.
    - CVE-2019-6251, CVE-2019-8375, CVE-2019-8506, CVE-2019-8518,
      CVE-2019-8523, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536,
      CVE-2019-8544, CVE-2019-8551, CVE-2019-8558, CVE-2019-8559,
      CVE-2019-8563, CVE-2019-11070
  * debian/patches/*.patch: refreshed.
  * debian/rules: don't build with openjpeg (in universe).
  * debian/rules: build i386 with SSE2.
  * debian/rules: build armhf with -O1.
  * debian/libwebkit2gtk-4.0-37.symbols: updated for new version.

 -- Marc Deslauriers <email address hidden> Mon, 15 Apr 2019 13:23:30 -0400

Source diff to previous version
CVE-2019-6251 embed/ephy-web-view.c in GNOME Web (aka Epiphany) through 3.31.4 allows address bar spoofing because a page load triggered by JavaScript leads to upd
CVE-2019-8375 The UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2.22.6 and other products, does not prevent the script
CVE-2019-11070 WebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy settings when downloading livestream video (HLS, DASH

Version: 2.22.6-0ubuntu0.18.04.1 2019-02-13 15:07:05 UTC

  webkit2gtk (2.22.6-0ubuntu0.18.04.1) bionic-security; urgency=medium

  * Updated to 2.22.6 to fix security issues.
    - CVE-2019-6212
    - CVE-2019-6215

 -- Marc Deslauriers <email address hidden> Tue, 12 Feb 2019 11:25:10 -0500

Source diff to previous version

Version: 2.22.5-0ubuntu0.18.04.1 2019-01-10 21:06:32 UTC

  webkit2gtk (2.22.5-0ubuntu0.18.04.1) bionic-security; urgency=medium

  * Updated to 2.22.5 to fix security issues.
    - CVE-2018-4437
  * Removed patches no longer needed:
    - debian/patches/detect-jit.patch

 -- Marc Deslauriers <email address hidden> Wed, 09 Jan 2019 14:37:50 -0500

Source diff to previous version

Version: 2.22.4-0ubuntu0.18.04.1 2018-11-27 19:06:36 UTC

  webkit2gtk (2.22.4-0ubuntu0.18.04.1) bionic-security; urgency=medium

  * Updated to 2.22.4 to fix security issues.
    - CVE-2018-4345, CVE-2018-4372, CVE-2018-4386

 -- Marc Deslauriers <email address hidden> Fri, 23 Nov 2018 07:36:07 -0500

Source diff to previous version

Version: 2.22.2-0ubuntu0.18.04.2 2018-10-10 13:06:27 UTC

  webkit2gtk (2.22.2-0ubuntu0.18.04.2) bionic-security; urgency=medium

  * Install missing headers (LP: #1795901)
    - debian/libjavascriptcoregtk-4.0-dev.install: install headers from
      usr/include/webkitgtk-4.0/jsc/.
  * Install missing documentation
    - debian/libwebkit2gtk-4.0-doc.doc-base.*
    - debian/libwebkit2gtk-4.0-doc.install
    - debian/libwebkit2gtk-4.0-doc.links
    - debian/rules: use dh_missing --fail-missing

 -- Marc Deslauriers <email address hidden> Tue, 09 Oct 2018 07:13:22 -0400

1795901 libjavascriptcoregtk-4.0-dev: missing jsc/jsc.h



About   -   Send Feedback to @ubuntu_updates