~ruther/guix-local

906f380f7cd0570e253bc7affc90077f62e98528 — Andre A. Gomes 2 years ago bd1cc64
gnu: webkitgtk: Update to 2.42.5 [security fixes].

Fixes CVE-2024-23222, CVE-2024-23206, CVE-2024-23213.

* gnu/packages/webkit.scm (webkitgtk): Update to 2.42.5.
[source]: Add snippet to fix build on some architectures.

Co-Authored-by: Efraim Flashner <efraim@flashner.co.il>
Signed-off-by: Efraim Flashner <efraim@flashner.co.il>
Change-Id: I6edbe89c0e15a237fab6d678bc656881d6628ffe
1 files changed, 9 insertions(+), 2 deletions(-)

M gnu/packages/webkit.scm
M gnu/packages/webkit.scm => gnu/packages/webkit.scm +9 -2
@@ 127,13 127,20 @@ engine that uses Wayland for graphics output.")
(define-public webkitgtk
  (package
    (name "webkitgtk")
    (version "2.42.4")
    (version "2.42.5")
    (source (origin
              (method url-fetch)
              (uri (string-append "https://www.webkitgtk.org/releases/"
                                  name "-" version ".tar.xz"))
              (sha256
               (base32 "11pdcwmdj3i9aarrf7wsfvadi6jnkaf6zf7c5i2768x2plq8na2j"))
               (base32 "0jg7c7z572afywwrnvdj3m5agaviv0vkqmzznnzzv30byb0phhmn"))
              (snippet
               #~(begin
                   (use-modules (guix build utils))
                   ;; https://bugs.webkit.org/show_bug.cgi?id=268739
                   ;; Fix a FTBFS on i686, powerpc64le.
                   (substitute* "Source/JavaScriptCore/llint/LowLevelInterpreter.cpp"
                     (("UNUSED_VARIABLE\\(t[67]\\);") ""))))
              (patches (search-patches
                        "webkitgtk-adjust-bubblewrap-paths.patch"))))
    (build-system cmake-build-system)