------------------------------------------------------------------- Wed Feb 9 18:14:24 UTC 2022 - Michael Gorse - Update to version 2.34.5 (boo#1195735): + Improve VP8 codec selection when using GStreamer 1.20. + Fix connecting to the accessiblity bus when using the Bubblewrap sandbox. + Fix links being incorrectly activated when starting a pinch zoom gesture. + Fix touch-based scrolling. + Fix the build with recent toolchains based on GCC 12 and on older ones as included e.g. in Ubuntu 18.04. + Fix the build with ICU 60, version 61 is no longer required. + Fix several crashes and rendering issues. + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,. - Rebase webkit2gtk3-old-cmake.patch, webkit2gtk3-old-gstreamer.patch, and webkit2gtk3-icu52.patch. ------------------------------------------------------------------- Mon Jan 24 19:16:23 UTC 2022 - Michael Gorse - Update to version 2.34.4 (boo#1195064): + Fix several crashes and rendering issues. + This release fixes numerous security issues, including an especially severe issue that allowed websites to read the names of IndexedDB databases created by other websites. + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951, CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984, CVE_2022-22594. ------------------------------------------------------------------- Mon Jan 3 20:12:17 UTC 2022 - Michael Gorse - Update to version 2.34.3 (boo#1194019): + Make audio tools (like mixers) display the actual name of the application producing sound, instead of a generic one. + Fix several crashes and rendering issues. + Security fixes: CVE-2021-30887, CVE-2021-30890. ------------------------------------------------------------------- Thu Nov 18 22:35:12 UTC 2021 - Michael Gorse - Update to version 2.34.1 (boo#1191937): + Update user agent browser versions. + Fix a crash with GTK >= 3.24.30. + Fix a crash when loading videos on reddit. + Fix file type detection when application calls g_desktop_app_info_set_as_default_for_extension() passing html. + Security fixes: CVE-2021-42762. + Changes in version 2.34.0 (boo#1192063): + Add support for CSS Scroll Snap. + Add support for date and datetime-local input elements. + Add support for display capture. + Add support for ICC color management. * Add support color-schemes CSS property. + Add multi-track support to MSE media backend. + Add new API to handle web process unresponsiveness. + Add API to disable CORS on a web view for particular domains. + Add new API to access/modify capture devices states. + Add new API to configure the memory pressure handler. + Security fixes: CVE-2021-30846, CVE-2021-30851, CVE-2021-30818, CVE-2021-30823, CVE-2021-30884, CVE-2021-30888, CVE-2021-30889, CVE-2021-30897, CVE-2021-45481, CVE-2021-45483. - Rebase webkit2gtk3-restore-npapi.patch, old-wayland-scanner.patch, webkit2gtk3-old-cmake.patch, webkit2gtk3-old-gstreamer.patch, webkit2gtk3-old-gtk.patch, and webkit2gtk3-icu52.patch. - Add fix-warnings.patch: silence return-type warnings. - Add webkit2gtk3-link-fix.patch: fix the build. - Drop webkit2gtk3-CVE-2021-42762.patch: fixed upstream. - Add pkgconfig(lcms2) BuildRequires: new dependency. - Compile with gcc 9. No longer builds with g++ 7. - Pass -DUSE_SOUP2=ON to cmake. - Spec file clean-up. - No longer pass -DENABLE_PLUGIN_PROCESS_GTK2=OFF to cmake: it now has no effect. ------------------------------------------------------------------- Fri Oct 22 20:55:40 UTC 2021 - Michael Gorse - Add webkit2gtk3-CVE-2021-42762.patch: update seccomp rules with latest changes from flatpak (boo#1191937 CVE-2021-42762). ------------------------------------------------------------------- Tue Sep 21 17:05:38 UTC 2021 - Michael Gorse - Update to version 2.32.4 (boo#1190701): + Do not append .asc extension to downloaded text/plain files. + Fix several crashes and rendering issues. + Security fixes: CVE-2021-30848, CVE-2021-30849, CVE-2021-30858, CVE-2021-30809, CVE-2021-30836, CVE-2021-45482. - Enable LTO; disabling it is no longer necessary. ------------------------------------------------------------------- Thu Aug 26 15:07:22 UTC 2021 - Michael Gorse - Increase mem_per_process: attempt to fix intermittent build failure. ------------------------------------------------------------------- Mon Jul 26 15:38:26 UTC 2021 - Michael Gorse - Update to version 2.32.3 (boo#1188697): + Properly set the cookies settings after a network process crash. + Fix accessibility tree after a cross site navigation with PSON enabled. + Ensure WebKitScriptWorld::window-object-cleared signal is always emitted. + Fix several crashes and rendering issues. + Security fixes: CVE-2021-21775, CVE-2021-21779, CVE-2021-30663, CVE-2021-30665, CVE-2021-30689, CVE-2021-30720, CVE-2021-30734, CVE-2021-30744, CVE-2021-30749, CVE-2021-30795, CVE-2021-30797, CVE-2021-30799. + Changes in version 2.32.2: + Improve calculation of initial WebKitWebView size. + Fix kinetic scrolling on touchpad with async scrolling off. + Fix a crash on empty drag operation in X11. + Fix rendering on HiDPI /4k screen and scaling. + Handle null native surface for for surfaceless rendering. + Fix JavaScriptCore crash on 32-bit big endian systems. + Fix several crashes and rendering issues. + Security fixes: CVE-2021-30758. ------------------------------------------------------------------- Sun May 30 02:56:25 UTC 2021 - Michael Gorse - Update to version 2.32.1: + Support building against the Musl C library. + Support building against ICU version 69 or newer. + Improve handling of Media Capture devices. + Improve WebAudio playback. + Improve video orientation handling. + Improve seeking support for MSE playback. + Improve flush support in EME decryptors. + Fix HTTP status codes for requests done through a custom URI handler. + Fix the Bubblewrap sandbox in certain 32-bit systems. + Fix inconsistencies between the WebKitWebView.is-muted property state and values returned by webkit_web_view_is_playing_audio(). + Fix the build with ENABLE_VIDEO=OFF. + Fix wrong timestamps for long-lived cookies. + Fix UI process crash when failing to load favicons. + Fix several crashes and rendering issues. + Updated translations. + Changes in version 2.32.0 (boo#1184155): + Fix the authentication request port when URL omits the port. + Fix iframe scrolling when main frame is scrolled in async scrolling mode. + Stop using g_memdup. + Show a warning message when overriding signal handler for threading suspension. - Fix the build on RISC-V with GCC 11. - Fix several crashes and rendering issues. + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871, CVE-2021-30682. + Changes in version 2.30.6 (boo#1184262): + Update user agent quirks again for Google Docs and Google Drive. + Fix several crashes and rendering issues. + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765, CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870, CVE-2021-21806. + Changes in version 2.30.5 (boo#1182286): + Bring back the WebKitPluginProcess installation that was removed by mistake. + Fix RunLoop objects leaked in worker threads. + Fix aarch64 llint build with JIT disabled. + Use Internet Explorer quirk for Google Docs. + Security fixes: CVE-2020-13558. + Changes in version 2.30.4: + Fix text data sent with WebSockets when using libsoup < 2.68. + Fix the rendering on Raspberry Pi 3 using the proprietary video driver. + Fix clipping of descedant layers of a mask layer. + Fix the build with ICU 68.1. + Changes in version 2.30.3 (boo#1179122 boo#1179451): + Add new build option USE(64KB_PAGE_BLOCK). + Fix backdrop filters with rounded borders. + Fix scrolling iframes when async scrolling is enabled. + Allow applications to handle drag and drop on the web view again. + Update Outlook user agent quirk. + Fix the build with video support disabled. + Fix several crashes and rendering issues. + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543. + Changes in version 2.30.2: + Fix scrolling when smooth scrolling is enabled in async scrolling mode. + Fix WebSocket requests with same-site cookies. + Fix TLS certificate information for service workers. + Handle chassis type when its value is quoted. + Fix the build with ENABLE_MEDIA_STREAM enabled and ENABLE_WEB_RTC_DISABLED. + Fix the build with ENABLE_GAMEPAD enabled. + Fix several crashes and rendering issues. + Changes in version 2.30.1: + Bring back the environment variable to force single process mode when PSON is disabled. + Fix downloads started by an ephemeral web context. + Changes in version 2.30.0: + Fix NTLM authentication. + Don't try to use SHM on wayland with older wpebackend-fdo. + Fix the build due to seccomp.h header not found. + Security fixes: CVE-2020-9947, CVE-2020-9948, CVE-2020-9951, CVE-2021-1817, CVE-2021-1820, CVE-2021-1825, CVE-2021-1826, CVE-2021-30661. - Drop webkit2gtk3-fdo-soname.patch: fixed upstream. - Add old-wayland-scanner.patch: support older wayland-scanner. - Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin support. Reverts webkit#215503. - Rebase webkit-process.patch. - Revise webkit2gtk3-icu52.patch to back out some new javascript features requiring a newer ICU. Similarly rebase webkit2gtk3-old-cmake.patch, webkit2gtk3-old-gstreamer.patch, and webkit2gtk3-old-gtk.patch. - Build without systemd: our version is not new enough. - Pass ENABLE_GAMEPAD=OFF: we don't have manette. - Enable c_loop on aarch64: currently needed for compilation to succeed with JIT disabled. Also disable sampling profiler, since it conflicts with c_loop (boo#1177087). - Increase disk size in _constraints: fix build failure on x86_64. ------------------------------------------------------------------- Wed Jul 29 15:18:24 UTC 2020 - Michael Gorse - Update to version 2.28.4 (boo#1174662): + Fix several crashes and rendering issues. + Security fixes: CVE-2020-9862, CVE-2020-9893, CVE-2020-9894, CVE-2020-9895, CVE-2020-9915, CVE-2020-9925. ------------------------------------------------------------------- Fri Jul 17 13:56:47 UTC 2020 - Michael Gorse - Update webkit2gtk3-old-gtk.patch to fix the build. - Add webkit2gtk3-s390-build-fix.patch: fix the build on s390. ------------------------------------------------------------------- Mon Jul 13 15:25:48 UTC 2020 - Michael Gorse - Update to version 2.28.3 (boo#1173998): + Enable kinetic scrolling with async scrolling. + Fix web process hangs on large GitHub pages. + Bubblewrap sandbox should not attempt to bind empty paths. + Fix threading issues in the media player. + Fix several crashes and rendering issues. + Security fixes: CVE-2020-9802, CVE-2020-9803, CVE-2020-9805, CVE-2020-9806, CVE-2020-9807, CVE-2020-9843, CVE-2020-9850, CVE-2020-13753, CVE-2020-9952. - Rebase webkit2gtk3-old-gtk.patch. ------------------------------------------------------------------- Mon Apr 27 15:27:49 UTC 2020 - Bjørn Lie - Update to version 2.28.2 (boo#1170643): + Fix excessive CPU usage due to GdkFrameClock not being stopped. + Fix UI process crash when EGL_WL_bind_wayland_display extension is not available. + Fix position of select popup menus in X11. + Fix playing of Youtube 'live stream'/H264 URLs. + Fix a crash under X11 when cairo uses xcb. + Fix the build in MIPS64. + Fix several crashes and rendering issues. + Security fixes: CVE-2020-3899. ------------------------------------------------------------------- Thu Apr 16 21:47:10 UTC 2020 - Michael Gorse - Update to version 2.28.1 (boo#1169658): + Fix position of default option element popup windows under Wayland. + Fix rendering after a cross site navigation with PSON enabled and hardware acceleration forced. + Fix a crash in nested wayland compositor when closing a tab with PSON enabled. + Update Chrome and Firefox versions in user agent quirks. + Fix a crash with bubblewrap sandbox enabled. + Fix a crash in JavaScriptCore in ppc64el. + Fix the build with GStreamer 1.12. + Fix several crashes and rendering issues. + Security fixes: CVE-2020-11793. ------------------------------------------------------------------- Tue Apr 7 00:19:55 UTC 2020 - Michael Gorse - Update to version 2.28.0 (boo#1165528): + Add API to enable Process Swap on (Cross-site) Navigation. + Add user messages API for the communication with the web extension. + Add support for same-site cookies. + Service workers are enabled by default. + Add support for Pointer Lock API. + Add flatpak sandbox support. + Make ondemand hardware acceleration policy never leave accelerated compositing mode. + Always use a light theme for rendering form controls. + Add about:gpu to show information about the graphics stack. + Security fixes: CVE-2020-10018, CVE-2020-3885, CVE-2020-3894, CVE-2020-3895, CVE-2020-3897, CVE-2020-3900, CVE-2020-3901, CVE-2020-3902, CVE-2021-30762. + Changes in version 2.26.4 (boo#1163809): + Fix the build with WPE renderer disabled. + Fix the build with OpenGL disabled. + Fix the build with GCC 10. + Fix several crashes and rendering issues. + Security fixes: CVE-2020-3862, CVE-2020-3864, CVE-2020-3865, CVE-2020-3867, CVE-2020-3868. + Changes in version 2.26.3 (boo#1161719): + Fix issues while trying to play a video on NextCloud. + Make sure the GL video sink uses a valid WebKit shared GL context. + Fix vertical alignment of text containing arabic diacritics. + Fix build with icu 65.1. + Fix page loading errors with websites using HSTS. + Fix web process crash when displaying a KaTeX formula. + Fix several crashes and rendering issues. + Security fixes: CVE-2019-8835, CVE-2019-8844, CVE-2019-8846. + Changes in version 2.26.2 (boo#1156318): + Improve performance of querying system fallback fonts. + Don't use prgname in dbus-proxy socket path. + Fix thread-safety issues in image decoders. + Fix the build with WebDriver disabled. + Disable accelerated compositing when we fail to initialize the EGL dispaly under Wayland. + Fill the objects category in emoji picker. + Fix several crashes and rendering issues. + Security fixes: CVE-2019-8812, CVE-2019-8814. + Changes in version 2.26.1: + Fix MSE media player with GStreamer 1.14. + Fix HTML alternate loads never finishing. + Fix web view initialization delay on fisrt load. + Validate user agent string set via API. + Fix a crash when a web view is destroyed with accelerated compositing mode enabled. + Fix EGL initialization with newer versions of Mesa. + Do not enable the sandbox inside docker. + Fix several crashes and rendering issues. ++ Security fixes: CVE-2019-8783, CVE-2019-8811, CVE-2019-8813, CVE-2019-8816, CVE-2019-8819, CVE-2019-8820, CVE-2019-8823. + Changes in version 2.26.0 (boo#1155321): + Add support for subprocess sandboxing. + Add support for HSTS (HTTP Strict Transport Security). + Use libwpe with fdo backend to implement accelerated compositing under wayland. + Remove support for GTK2 NPAPI plugins. + Add support for datalist element in text input fields. + Show the emoji chooser popover for editable content. + Improve rendering of form controls when GTK theme is dark. + Fix rendering artifacts in youtube volume button and github comment box. + Single process model has been deprecated for security reasons. + Security fixes: CVE-2019-8625, CVE-2019-8720, CVE-2019-8769, CVE-2019-8771, CVE-2019-8710, CVE-2019-8743, CVE-2019-8764, CVE-2019-8766, CVE-2019-8782, CVE-2019-8808, CVE-2019-8815, CVE-2021-30666, CVE-2021-30761. - Add libseccomp to BuildRequires. - Pass ENABLE_DATALIST_ELEMENT=OFF: needs gtk+ 3.22. - Disable bubblewrap and wpe. - Use WebKit defaults for ENABLE_JIT and USE_SYSTEM_MALLOC, except for aarch64. WebKit now sets reasonable defaults based on architecture. Disable on aarch64 in case a user is still using the kernel-64kb package. - Increase mem_per_process; otherwise fails on SLE/Leap. - Add webkit2gtk3-old-cmake.patch: revert cmake version bump. - Add webkit2gtk3-old-gtk.patch: support gtk 3.20. - Add webkit2gtk3-old-gstreamer.patch: support gstreamer 1.8.x again. - Add webkit2gtk3-process.patch: use single-process model for geary and evolution. - Add webkit2gtk3-icu52.patch: fix an incompatibility with icu 52. - Add webkit-process.patch: use single web process for evolution and geary on 15.0 (boo#1159329 glgo#GNOME/evolution#587). - Add webkit2gtk3-fdo-soname.patch: don't try to open WPE backend with an unversioned soname. ------------------------------------------------------------------- Wed Aug 28 12:40:21 UTC 2019 - Bjørn Lie - Update to version 2.24.4 (boo#1148931): + Updated the user agent string to make happy certain websites which would claim that the browser being used was unsupported. + Improve loading of multimedia streams to avoid memory exhaustion due to excessive caching. + Fix display of documents with MIME type application/xml in the Web Inspector, when loaded using XmlHttpRequest. + Fix a hang while scrolling certain websites which include HLS video content (Twitter, for example). + Fix rounding artifacts in volume levels for media playback. + Fix several crashes and rendering issues. + Fix the build with video track support disabled. + Fix the build with OpenGL support disabled. + Fix build issue which would cause media controls to disappear when Python 3.x was used during the build process. + Security fixes: CVE-2019-8644, CVE-2019-8649, CVE-2019-8658, CVE-2019-8669, CVE-2019-8678, CVE-2019-8680, CVE-2019-8683, CVE-2019-8684, CVE-2019-8688, CVE-2019-8674, CVE-2019-8707, CVE-2019-8719, CVE-2019-8733, CVE-2019-8763, CVE-2019-8765, CVE-2019-8821, CVE-2019-8822. - Drop webkit2gtk3-bwo197558-hang.patch: Fixed upstream. ------------------------------------------------------------------- Sun Jul 14 14:21:58 UTC 2019 - Rich Coe - Add webkit2gtk3-bwo197558-hang.patch for hang (bwo#197558) ------------------------------------------------------------------- Mon Jul 8 16:50:58 UTC 2019 - mgorse@suse.com - Drop webkit2gtk3-boo1088932-a11y-state-set.patch: fixed upstream. ------------------------------------------------------------------- Tue Jul 2 11:17:11 UTC 2019 - Bjørn Lie - Update to version 2.24.3: + Deprecate WebSQL APIs. + Make Previous/Next gesture work in RTL mode. + Fix content disappearing when using CSS transforms. + Fix rendering artifacts in youtube volume button. + Fix trapezoid artifact in github comment box. + Fix video pause that sometimes caused to skip to finish. + Fix volume level changes when playing a video. + Fix HLS streams being slow to start. + Fix some radio streams that could not be played. + Fix the build with older versions of GStreamer. + Fix the build with video and audio disabled. + Fix several crashes and rendering issues. + Security fixes: CVE-2019-8666, CVE-2019-8673, CVE-2019-8676, CVE-2019-8681, CVE-2019-8687, CVE-2019-8689, CVE-2019-8690, CVE-2019-8726. - Drop upstream fixed patches: + webkit2gtk3-bug196440-build-fix.patch. + webkit2gtk3-bug198080-build-fix.patch. ------------------------------------------------------------------- Sat Jun 22 18:34:57 UTC 2019 - mgorse@suse.com - Add webkit2gtk3-bug196440-build-fix.patch and webkit2gtk3-bug198080-build-fix.patch: fix build failures on SLE/Leap 15 and SLE 12. ------------------------------------------------------------------- Wed Jun 19 14:37:58 UTC 2019 - mgorse@suse.com - Update to version 2.24.2 (boo#1135715): + Fix rendering of emojis copy-pasted from GTK emoji chooser. + Fix space characters not being rendered with some CJK fonts. + Fix adaptive streaming playback with older GStreamer versions. + Set a maximum zoom level for pinch zooming gesture. + Fix navigation gesture to not interfere with scrolling. + Fix SSE2 detection at compile time, ensuring the right flags are passed to the compiler. + Fix several crashes and rendering issues. + Security fixes: CVE-2019-8595, CVE-2019-8607, CVE-2019-8615, CVE-2019-8671, CVE-2019-8672, CVE-2019-8677, CVE-2019-8679, CVE-2019-8686. + Updated translations. - Drop webkit2gtk3-fix-i586-build.patch: Fixed upstream. - Define GST_USE_UNSTABLE_API on SLE/Leap 15 to fix build (webkit#198080). ------------------------------------------------------------------- Wed Apr 24 17:45:53 UTC 2019 - Martin Liška - Disable LTO (boo#1133291). ------------------------------------------------------------------- Mon Apr 15 11:06:10 UTC 2019 - Dominique Leuenberger - Add webkit2gtk3-fix-i586-build.patch: Fix build on i586. ------------------------------------------------------------------- Wed Apr 10 21:50:50 UTC 2019 - Bjørn Lie - Update to version 2.24.1 (boo#1132256): + Do not allow changes in active URI before provisional load starts for non-API requests. + Stop the threaded compositor when the page is not visible or layer tree state is frozen. + Use WebKit HTTP source element again for adaptive streaming fragments downloading. + Properly handle empty resources in webkit_web_resource_get_data(). + Add quirk to ensure outlook.live.com uses the modern UI. + Fix methods returing GObject or boxed types in JavaScriptCore GLib API. + Ensure callback data is passed to functions and constructors with no parameters in JavaScriptCore GLib API. + Fix rendering of complex text when the font uses x,y origins. + Fix sound loop with Google Hangouts and WhatsApp notifications. + Fix the build with GStreamer 1.12.5 and GST GL enabled. + Detect SSE2 at compile time. + Fix several crashes and rendering issues. + Security fixes: CVE-2019-6251, CVE-2019-11070. - Drop webkitgtk-gstreamer-gl-build-fix.patch: Fixed upstream. ------------------------------------------------------------------- Tue Mar 26 22:39:18 UTC 2019 - mgorse@suse.com - Add webkitgtk-gstreamer-gl-build-fix.patch: fix build on SLE/Leap 15 (webkit#196178). ------------------------------------------------------------------- Tue Mar 19 20:18:19 UTC 2019 - mgorse@suse.com - Update to version 2.24.0: + Added support fot content filtering. + Variation fonts support. + Fully emoji rendering support. + Added navigation and pinch zoom gestures for touchpads. + Support for JPEG2000 images. + Script dialogs are now modal to the current web view only. + New API to convert URI to format for display. + Security fixes: CVE-2019-8375 (boo#1126768), CVE-2019-8506, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544, CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563, CVE-2019-8768, CVE-2018-8518, CVE-2018-8523. - Add openjpeg2 and openjpeg2-devel BuildRequires on SLE 15: New dependencies. - Drop webkit2gtk3-python3.patch: Not needed anymore. - Stop passing -DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, follow upstream default. ------------------------------------------------------------------- Wed Feb 13 17:16:52 UTC 2019 - mgorse@suse.com - Replace webkit2gtk3-boo1088932-a11y-state-set.patch with a patch proposed for webkit#188599. The original patch didn't always prevent crashes. - Delete webkitgtk-typelib-sharelib-link.patch: was dropped in an earlier update. ------------------------------------------------------------------- Sat Feb 9 15:44:38 UTC 2019 - bjorn.lie@gmail.com - Update to version 2.22.6 (boo#1124937): + Make kinetic scrolling slow down smoothly when reaching the ends of pages, instead of abruptly, to better match the GTK+ behaviour. + Fix Web inspector magnifier under Wayland. + Fix garbled rendering of some websites (e.g. YouTube) while scrolling under X11. + Fix several crashes, race conditions, and rendering issues. - CVE identifiers fixed: CVE-2019-6212, CVE-2019-6215, CVE-2019-6216, CVE-2019-6217, CVE-2019-6226, CVE-2019-6227, CVE-2019-6229, CVE-2019-6233, CVE-2019-6234, CVE-2019-6201, CVE-2019-7285, CVE-2019-7292, CVE-2019-8503, CVE-2019-8515. ------------------------------------------------------------------- Wed Dec 26 19:21:01 UTC 2018 - bjorn.lie@gmail.com - Pass DENABLE_ACCELERATED_2D_CANVAS=ON to cmake, build accelerated 2d canvas support, we already build the needed support in cairo. - Switch to Ninja build, add ninja BuildRequires and pass GNinja to cmake and use ninja_build and ninja_make macros. ------------------------------------------------------------------- Wed Dec 26 16:54:29 UTC 2018 - schwab@suse.de - Don't use gold on ppc. ------------------------------------------------------------------- Mon Dec 17 10:12:07 UTC 2018 - bjorn.lie@gmail.com - Update to version 2.22.5: + Improved the logic to determine for which architectures to enable the JIT compiler support and USE_SYSTEM_MALLOC at build time. + Fix the build with ENABLE_VIDEO=OFF and ENABLE_OPENGL=OFF. + Fix several crashes. + Security fixes: CVE-2018-4437 (boo#1119553), CVE-2018-4438 (boo#1119554), CVE-2018-4441 (boo#1119555), CVE-2018-4442 (boo#1119556), CVE-2018-4443 (boo#1119557), CVE-2018-4464 (boo#1119558). ------------------------------------------------------------------- Fri Dec 7 22:34:19 UTC 2018 - mgorse@suse.com - Disable media source extension on SLE/Leap 15 and earlier, since it requires gstreamer 1.14.0. ------------------------------------------------------------------- Wed Nov 28 10:47:03 UTC 2018 - schwab@suse.de - Reduce memory constraints for riscv64 ------------------------------------------------------------------- Thu Nov 22 12:02:43 UTC 2018 - bjorn.lie@gmail.com - Update to version 2.22.4 (boo#1116998): + Expose ENABLE_MEDIA_SOURCE as a public build option. + Fix a crash when using Cairo versions between 1.15 and 1.16.0 + Fix the build with -DLOG_DISABLED=0. + Fix the build with ENABLE_VIDEO=OFF and ENABLE_WEB_AUDIO=OFF. + Fix debug builds of JavaScriptCore. + Fix several crashes and rendering issues. + Security fixes: CVE-2018-4372. ------------------------------------------------------------------- Mon Nov 12 10:32:01 UTC 2018 - Guillaume GARDET - Update _constraints to latest values to avoid OOM erros ------------------------------------------------------------------- Mon Oct 29 11:04:26 UTC 2018 - bjorn.lie@gmail.com - Update to version 2.22.3: + Many improvements and fixes for video playback with media source extensions (MSE), which improve the user experience across the board, and in particular for playback of WebM videos. + Fix a memory leak during media playback when using playbin3. + Fix portions of Web views not being rendered after resizing. + Fix Resource Timing reporting for