Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

gnome3.webkitgtk: 2.22.4 -> 2.22.5 #51991

Merged
merged 1 commit into from Dec 16, 2018

Conversation

r-ryantm
Copy link
Contributor

Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/webkitgtk/versions.

meta.description for gnome3.webkitgtk is: '"Web content rendering engine, GTK+ port"'.

Checks done (click to expand)
Rebuild report (if merged into master) (click to expand)

320 total rebuild path(s)

122 package rebuild(s)

122 x86_64-linux rebuild(s)
99 i686-linux rebuild(s)
6 x86_64-darwin rebuild(s)
93 aarch64-linux rebuild(s)

First fifty rebuilds by attrpath
adapta-gtk-theme
arc-theme
areca
astroid
azureus
balsa
bookworm
chrome-gnome-shell
deja-dup
eclipses.eclipse-cpp
eclipses.eclipse-cpp-37
eclipses.eclipse-cpp-47
eclipses.eclipse-java
eclipses.eclipse-java-49
eclipses.eclipse-modeling
eclipses.eclipse-modeling-36
eclipses.eclipse-modeling-47
eclipses.eclipse-platform
eclipses.eclipse-platform-47
eclipses.eclipse-platform-48
eclipses.eclipse-platform-49
eclipses.eclipse-scala-sdk
eclipses.eclipse-scala-sdk-441
eclipses.eclipse-sdk
eclipses.eclipse-sdk-37
eclipses.eclipse-sdk-47
eclipses.eclipse-sdk-48
eclipses.eclipse-sdk-49
eclipses.eclipse_cpp_37
eclipses.eclipse_modeling_36
eclipses.eclipse_sdk_37
ekiga
empathy
eolie
epiphany
evolution-data-server
feedreader
gnome-builder
gnome-recipes
gnome3.bijiben
gnome3.california
gnome3.cheese
gnome3.devhelp
gnome3.empathy
gnome3.epiphany
gnome3.evolution
gnome3.evolution-data-server
gnome3.evolution_data_server
gnome3.file-roller
gnome3.folks

Instructions to test this update (click to expand)

Either download from Cachix:

nix-store -r /nix/store/rhi2lnvqzs7ah98na24rx0zlbj9gacn9-webkitgtk-2.22.5 \
  --option binary-caches 'https://cache.nixos.org/ https://r-ryantm.cachix.org/' \
  --option trusted-public-keys '
  r-ryantm.cachix.org-1:gkUbLkouDAyvBdpBX0JOdIiD2/DP1ldF3Z3Y6Gqcc4c=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(r-ryantm's Cachix cache is only trusted for this store-path realization.)

Or, build yourself:

nix-build -A gnome3.webkitgtk https://github.com/r-ryantm/nixpkgs/archive/f9f2f951b6a38ea3acbc893a008f791beccfbadf.tar.gz

After you've downloaded or built it, look at the files and if there are any, run the binaries:

ls -la /nix/store/rhi2lnvqzs7ah98na24rx0zlbj9gacn9-webkitgtk-2.22.5
ls -la /nix/store/rhi2lnvqzs7ah98na24rx0zlbj9gacn9-webkitgtk-2.22.5/bin

Semi-automatic update generated by
https://github.com/ryantm/nixpkgs-update tools. This update was made
based on information from
https://repology.org/metapackage/webkitgtk/versions
@hedning
Copy link
Contributor

hedning commented Dec 14, 2018

Changelog https://webkitgtk.org/2018/12/13/webkitgtk2.22.5-released.html

Fixes a security issue https://webkitgtk.org/security/WSA-2018-0009.html:

Versions affected: WebKitGTK+ before 2.22.5 and WPE WebKit before 2.22.3.
Credit to HyungSeok Han, DongHyeon Oh, and Sang Kil Cha of KAIST Softsec Lab, Korea.
Processing maliciously crafted web content may lead to arbitrary code execution. Multiple memory corruption issues were addressed with improved memory handling.

This should probably go to master.

@jtojnar
Copy link
Contributor

jtojnar commented Dec 16, 2018

Yup, master.

@hedning hedning changed the base branch from staging to master December 16, 2018 11:17
@jtojnar jtojnar merged commit dba9200 into NixOS:master Dec 16, 2018
@r-ryantm r-ryantm deleted the auto-update/webkitgtk branch December 24, 2018 04:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants