Update to 2.12.3

Signed-off-by: Igor Gnatenko <ignatenko@redhat.com>
(cherry picked from commit ba96064eaf)

.gitignore

@@ -0,0 +1,48 @@
+/webkitgtk-2.5.3.tar.xz
+/webkitgtk-2.5.90.tar.xz
+/webkitgtk-2.6.0.tar.xz
+/webkitgtk-2.6.1.tar.xz
+/webkitgtk-2.6.2.tar.xz
+/webkitgtk-2.7.1.tar.xz
+/webkitgtk-2.7.2.tar.xz
+/webkitgtk-2.7.3.tar.xz
+/webkitgtk-2.7.4.tar.xz
+/webkitgtk-2.7.90.tar.xz
+/webkitgtk-2.7.91.tar.xz
+/webkitgtk-2.7.92.tar.xz
+/webkitgtk-2.8.0.tar.xz
+/webkitgtk-2.8.1.tar.xz
+/webkitgtk-2.8.2.tar.xz
+/webkitgtk-2.8.3.tar.xz
+/webkitgtk-2.8.4.tar.xz
+/webkitgtk-2.8.5.tar.xz
+/webkitgtk-2.10.4.tar.xz
+/webkitgtk-2.10.5.tar.xz
+/webkitgtk-2.10.6.tar.xz
+/webkitgtk-2.10.7.tar.xz
+/webkitgtk-2.10.8.tar.xz
+/webkitgtk-2.10.9.tar.xz
+/webkitgtk-2.9.1.tar.xz
+/webkitgtk-2.9.2.tar.xz
+/webkitgtk-2.9.3.tar.xz
+/webkitgtk-2.9.4.tar.xz
+/webkitgtk-2.9.5.tar.xz
+/webkitgtk-2.9.90.tar.xz
+/webkitgtk-2.9.91.tar.xz
+/webkitgtk-2.9.92.tar.xz
+/webkitgtk-2.10.0.tar.xz
+/webkitgtk-2.10.1.tar.xz
+/webkitgtk-2.10.2.tar.xz
+/webkitgtk-2.10.3.tar.xz
+/webkitgtk-2.11.1.tar.xz
+/webkitgtk-2.11.2.tar.xz
+/webkitgtk-2.11.3.tar.xz
+/webkitgtk-2.11.4.tar.xz
+/webkitgtk-2.11.5.tar.xz
+/webkitgtk-2.11.90.tar.xz
+/webkitgtk-2.11.91.tar.xz
+/webkitgtk-2.11.92.tar.xz
+/webkitgtk-2.12.0.tar.xz
+/webkitgtk-2.12.1.tar.xz
+/webkitgtk-2.12.2.tar.xz
+/webkitgtk-2.12.3.tar.xz

dead.package

@@ -1 +0,0 @@
-Package was renamed to webkit2gtk3

sources

@@ -0,0 +1 @@
+aebb4029c09dd81664aa830e4a584c85  webkitgtk-2.12.3.tar.xz

webkitgtk-2.10.4-nspluginwrapper.patch

@@ -0,0 +1,13 @@
+diff -up webkitgtk-2.10.4/Source/WebKit2/Shared/Plugins/unix/PluginSearchPath.cpp.nspluginwrapper webkitgtk-2.10.4/Source/WebKit2/Shared/Plugins/unix/PluginSearchPath.cpp
+--- webkitgtk-2.10.4/Source/WebKit2/Shared/Plugins/unix/PluginSearchPath.cpp.nspluginwrapper	2015-11-11 11:46:43.848699104 +0100
++++ webkitgtk-2.10.4/Source/WebKit2/Shared/Plugins/unix/PluginSearchPath.cpp	2015-11-11 11:47:44.450490935 +0100
+@@ -68,6 +68,9 @@ Vector<String> pluginsDirectories()
+     result.append("/usr/lib64/mozilla/plugins");
+     result.append("/usr/lib/nsbrowser/plugins");
+     result.append("/usr/lib64/nsbrowser/plugins");
++    /* nspluginwrapper plugins */
++    result.append("/usr/lib64/mozilla/plugins-wrapped");
++    result.append("/usr/lib/mozilla/plugins-wrapped");
+ #endif
+ 
+     return result;

webkitgtk-2.7.90-user-agent-branding.patch

@@ -0,0 +1,27 @@
+From 050232bc122d6785fea01d39121c2f93e8dd16f1 Mon Sep 17 00:00:00 2001
+From: Michael Catanzaro <mcatanzaro@igalia.com>
+Date: Thu, 26 Feb 2015 16:06:36 -0600
+Subject: [PATCH] Allow branding the user agent
+
+---
+ Source/WebCore/platform/gtk/UserAgentGtk.cpp | 4 +++-
+ 1 file changed, 3 insertions(+), 1 deletion(-)
+
+diff --git a/Source/WebCore/platform/gtk/UserAgentGtk.cpp b/Source/WebCore/platform/gtk/UserAgentGtk.cpp
+index 91641dc..727fbaf 100644
+--- a/Source/WebCore/platform/gtk/UserAgentGtk.cpp
++++ b/Source/WebCore/platform/gtk/UserAgentGtk.cpp
+@@ -84,7 +84,9 @@ static const char* cpuDescriptionForUAString()
+ 
+ static const char* platformForUAString()
+ {
+-#if PLATFORM(X11)
++#if defined USER_AGENT_GTK_DISTRIBUTOR_NAME
++    return USER_AGENT_GTK_DISTRIBUTOR_NAME;
++#elif PLATFORM(X11)
+     return "X11";
+ #elif OS(WINDOWS)
+     return "";
+-- 
+2.1.0
+

webkitgtk-2.8.0-gcc5_fix.patch

@@ -0,0 +1,14 @@
+diff -up webkitgtk-2.8.0/Source/JavaScriptCore/runtime/JSObject.cpp.s390_fixes webkitgtk-2.8.0/Source/JavaScriptCore/runtime/JSObject.cpp
+--- webkitgtk-2.8.0/Source/JavaScriptCore/runtime/JSObject.cpp.s390_fixes	2015-03-23 09:08:04.000000000 +0100
++++ webkitgtk-2.8.0/Source/JavaScriptCore/runtime/JSObject.cpp	2015-03-27 10:59:40.245010499 +0100
+@@ -1965,6 +1965,10 @@ void JSObject::putByIndexBeyondVectorLen
+     }
+ }
+ 
++template void JSObject::putByIndexBeyondVectorLengthWithoutAttributes<ContiguousShape>(ExecState* exec, unsigned i, JSValue value);
++template void JSObject::putByIndexBeyondVectorLengthWithoutAttributes<DoubleShape>(ExecState* exec, unsigned i, JSValue value);
++template void JSObject::putByIndexBeyondVectorLengthWithoutAttributes<Int32Shape>(ExecState* exec, unsigned i, JSValue value);
++
+ void JSObject::putByIndexBeyondVectorLengthWithArrayStorage(ExecState* exec, unsigned i, JSValue value, bool shouldThrow, ArrayStorage* storage)
+ {
+     VM& vm = exec->vm();

webkitgtk-2.8.0-s390_fixes.patch

@@ -0,0 +1,24 @@
+diff -up webkitgtk-2.8.0/Source/bmalloc/bmalloc/Algorithm.h.s390_fixes webkitgtk-2.8.0/Source/bmalloc/bmalloc/Algorithm.h
+--- webkitgtk-2.8.0/Source/bmalloc/bmalloc/Algorithm.h.s390_fixes	2015-03-04 15:25:17.000000000 +0100
++++ webkitgtk-2.8.0/Source/bmalloc/bmalloc/Algorithm.h	2015-03-27 10:59:40.245010499 +0100
+@@ -66,7 +66,7 @@ inline constexpr bool isPowerOfTwo(size_
+ template<typename T> inline T roundUpToMultipleOf(size_t divisor, T x)
+ {
+     BASSERT(isPowerOfTwo(divisor));
+-    return reinterpret_cast<T>((reinterpret_cast<uintptr_t>(x) + (divisor - 1)) & ~(divisor - 1));
++    return reinterpret_cast<T>((reinterpret_cast<size_t>(x) + (divisor - 1)) & ~(divisor - 1));
+ }
+ 
+ template<size_t divisor, typename T> inline constexpr T roundUpToMultipleOf(T x)
+diff -up webkitgtk-2.8.0/Source/bmalloc/bmalloc/Sizes.h.s390_fixes webkitgtk-2.8.0/Source/bmalloc/bmalloc/Sizes.h
+--- webkitgtk-2.8.0/Source/bmalloc/bmalloc/Sizes.h.s390_fixes	2015-03-04 15:25:17.000000000 +0100
++++ webkitgtk-2.8.0/Source/bmalloc/bmalloc/Sizes.h	2015-03-27 10:59:40.245010499 +0100
+@@ -99,7 +99,7 @@ namespace Sizes {
+     inline size_t sizeClass(size_t size)
+     {
+         static const size_t sizeClassMask = (mediumMax / alignment) - 1;
+-        return mask((size - 1) / alignment, sizeClassMask);
++        return mask(static_cast<uintptr_t>((size - 1) / alignment), sizeClassMask);
+     }
+ 
+     inline size_t objectSize(size_t sizeClass)

webkitgtk-2.8.4-youtube.patch

@@ -0,0 +1,34 @@
+diff --git a/Source/WebCore/platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp b/Source/WebCore/platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp
+index 8929f2e..419330d 100644
+--- a/Source/WebCore/platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp
++++ b/Source/WebCore/platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp
+@@ -1767,7 +1767,7 @@ static HashSet<String> mimeTypeCache()
+         "video/flv",
+         "video/mj2",
+         "video/mp2t",
+-        "video/mp4",
++//        "video/mp4",
+         "video/mpeg",
+         "video/mpegts",
+         "video/ogg",
+@@ -1794,6 +1794,20 @@ static HashSet<String> mimeTypeCache()
+     for (unsigned i = 0; i < (sizeof(mimeTypes) / sizeof(*mimeTypes)); ++i)
+         cache.add(String(mimeTypes[i]));
+ 
++    // Hack to make YouTube work, https://bugs.webkit.org/show_bug.cgi?id=135972
++    gint exit_status = 1;
++    GUniqueOutPtr<GError> error;
++    GUniqueOutPtr<char> stdout_to_discard;
++    GUniqueOutPtr<char> stderr_to_discard;
++    gboolean success = g_spawn_command_line_sync(
++        "rpm -qi gstreamer1-libav",
++        &stdout_to_discard.outPtr(),
++        &stderr_to_discard.outPtr(),
++        &exit_status,
++        &error.outPtr());
++    if (success && !error && !exit_status)
++        cache.add(String::fromUTF8("video/mp4"));
++
+     typeListInitialized = true;
+     return cache;
+ }

webkitgtk4.spec

@@ -0,0 +1,489 @@
+## NOTE: Lots of files in various subdirectories have the same name (such as
+## "LICENSE") so this short macro allows us to distinguish them by using their
+## directory names (from the source tree) as prefixes for the files.
+%global add_to_license_files() \
+        mkdir -p _license_files ; \
+        cp -p %1 _license_files/$(echo '%1' | sed -e 's!/!.!g')
+
+Name:           webkitgtk4
+Version:        2.12.3
+Release:        1%{?dist}
+Summary:        GTK+ Web content engine library
+
+License:        LGPLv2
+URL:            http://www.webkitgtk.org/
+Source0:        http://webkitgtk.org/releases/webkitgtk-%{version}.tar.xz
+
+# https://bugs.webkit.org/show_bug.cgi?id=142074
+Patch0:         webkitgtk-2.7.90-user-agent-branding.patch
+
+BuildRequires:  at-spi2-core-devel
+BuildRequires:  bison
+BuildRequires:  cairo-devel
+BuildRequires:  cmake
+BuildRequires:  enchant-devel
+BuildRequires:  flex
+BuildRequires:  fontconfig-devel
+BuildRequires:  freetype-devel
+BuildRequires:  geoclue2-devel
+BuildRequires:  gettext
+BuildRequires:  glib2-devel
+BuildRequires:  gobject-introspection-devel
+BuildRequires:  gperf
+BuildRequires:  gstreamer1-devel
+BuildRequires:  gstreamer1-plugins-base-devel
+BuildRequires:  gtk2-devel
+BuildRequires:  gtk3-devel
+BuildRequires:  gtk-doc
+BuildRequires:  harfbuzz-devel
+BuildRequires:  hyphen-devel
+BuildRequires:  libicu-devel
+BuildRequires:  libjpeg-devel
+BuildRequires:  libnotify-devel
+BuildRequires:  libpng-devel
+BuildRequires:  libsecret-devel
+BuildRequires:  libsoup-devel
+BuildRequires:  libwebp-devel
+BuildRequires:  libxslt-devel
+BuildRequires:  libXt-devel
+BuildRequires:  libwayland-client-devel
+BuildRequires:  libwayland-egl-devel
+BuildRequires:  libwayland-server-devel
+BuildRequires:  mesa-libGL-devel
+BuildRequires:  pcre-devel
+BuildRequires:  perl-Switch
+BuildRequires:  ruby rubypick rubygems
+BuildRequires:  sqlite-devel
+BuildRequires:  hyphen-devel
+%ifarch ppc
+BuildRequires:  libatomic
+%endif
+
+Requires:       geoclue2
+
+# Obsolete libwebkit2gtk from the webkitgtk3 package
+Obsoletes:      libwebkit2gtk < 2.5.0
+Provides:       libwebkit2gtk = %{version}-%{release}
+
+# We're supposed to specify a version here, but this is pointless because ANGLE
+# doesn't do normal releases. WebKit uses git snapshots.
+Provides:	bundled(angle)
+
+# Require the jsc subpackage
+Requires:       %{name}-jsc%{?_isa} = %{version}-%{release}
+
+# Recommend the support for the GTK+ 2 based NPAPI plugins
+Recommends:     %{name}-plugin-process-gtk2%{?_isa} = %{version}-%{release}
+Obsoletes:      %{name} < 2.12.0-3
+
+# Filter out provides for private libraries
+%global __provides_exclude_from ^%{_libdir}/webkit2gtk-4\\.0/.*\\.so$
+
+%description
+WebKitGTK+ is the port of the portable web rendering engine WebKit to the
+GTK+ platform.
+
+This package contains WebKitGTK+ for GTK+ 3.
+
+%package        devel
+Summary:        Development files for %{name}
+Requires:       %{name}%{?_isa} = %{version}-%{release}
+Requires:       %{name}-jsc-devel%{?_isa} = %{version}-%{release}
+
+%description    devel
+The %{name}-devel package contains libraries, build data, and header
+files for developing applications that use %{name}.
+
+%package        doc
+Summary:        Documentation files for %{name}
+BuildArch:      noarch
+Requires:       %{name} = %{version}-%{release}
+
+%description    doc
+This package contains developer documentation for %{name}.
+
+%package        jsc
+Summary:        JavaScript engine from %{name}
+
+%description    jsc
+This package contains JavaScript engine from %{name}.
+
+%package        jsc-devel
+Summary:        Development files for JavaScript engine from %{name}
+Requires:       %{name}-jsc%{?_isa} = %{version}-%{release}
+
+%description    jsc-devel
+The %{name}-jsc-devel package contains libraries, build data, and header
+files for developing applications that use JavaScript engine from %{name}.
+
+%package        plugin-process-gtk2
+Summary:        GTK+ 2 based NPAPI plugins support for %{name}
+Obsoletes:      %{name} < 2.12.0-3
+
+%description    plugin-process-gtk2
+Support for the GTK+ 2 based NPAPI plugins (such as Adobe Flash) for %{name}.
+
+%prep
+%autosetup -p1 -n webkitgtk-%{version}
+
+# Remove bundled libraries
+rm -rf Source/ThirdParty/gtest/
+rm -rf Source/ThirdParty/qunit/
+
+%build
+%ifarch s390 aarch64
+# Use linker flags to reduce memory consumption - on other arches the ld.gold is
+# used and also it doesn't have the --reduce-memory-overheads option
+%global optflags %{optflags} -Wl,--no-keep-memory -Wl,--reduce-memory-overheads
+%endif
+
+# Decrease debuginfo even on ix86 because of:
+# https://bugs.webkit.org/show_bug.cgi?id=140176
+%ifarch s390 s390x %{arm} %{ix86} ppc %{power64} %{mips}
+# Decrease debuginfo verbosity to reduce memory consumption even more
+%global optflags %(echo %{optflags} | sed 's/-g /-g1 /')
+%endif
+
+%ifarch ppc
+# Use linker flag -relax to get WebKit build under ppc(32) with JIT disabled
+%global optflags %{optflags} -Wl,-relax
+%endif
+
+%if 0%{?fedora}
+%global optflags %{optflags} -DUSER_AGENT_GTK_DISTRIBUTOR_NAME=\'\\"Fedora\\"\'
+%endif
+
+# Disable ld.gold on s390 as it does not have it.
+# Also for aarch64 as the support is in upstream, but not packaged in Fedora.
+mkdir -p %{_target_platform}
+pushd %{_target_platform}
+%cmake \
+  -DPORT=GTK \
+  -DCMAKE_BUILD_TYPE=Release \
+  -DENABLE_GTKDOC=ON \
+  -DENABLE_MINIBROWSER=ON \
+%ifarch s390 aarch64
+  -DUSE_LD_GOLD=OFF \
+%endif
+%ifarch s390 s390x ppc %{power64} aarch64 %{mips}
+  -DENABLE_JIT=OFF \
+%endif
+%ifarch s390 s390x ppc %{power64} %{arm} aarch64 %{mips}
+  -DUSE_SYSTEM_MALLOC=ON \
+%endif
+  ..
+popd
+
+make %{?_smp_mflags} -C %{_target_platform}
+
+%install
+%make_install -C %{_target_platform}
+
+%find_lang WebKit2GTK-4.0
+
+# Finally, copy over and rename various files for %%license inclusion
+%add_to_license_files Source/JavaScriptCore/COPYING.LIB
+%add_to_license_files Source/JavaScriptCore/icu/LICENSE
+%add_to_license_files Source/ThirdParty/ANGLE/LICENSE
+%add_to_license_files Source/ThirdParty/ANGLE/src/third_party/compiler/LICENSE
+%add_to_license_files Source/ThirdParty/ANGLE/src/third_party/murmurhash/LICENSE
+%add_to_license_files Source/WebCore/icu/LICENSE
+%add_to_license_files Source/WebCore/LICENSE-APPLE
+%add_to_license_files Source/WebCore/LICENSE-LGPL-2
+%add_to_license_files Source/WebCore/LICENSE-LGPL-2.1
+%add_to_license_files Source/WebInspectorUI/UserInterface/External/CodeMirror/LICENSE
+%add_to_license_files Source/WebInspectorUI/UserInterface/External/Esprima/LICENSE
+%add_to_license_files Source/WTF/icu/LICENSE
+%add_to_license_files Source/WTF/wtf/dtoa/COPYING
+%add_to_license_files Source/WTF/wtf/dtoa/LICENSE
+
+%post -p /sbin/ldconfig
+%postun -p /sbin/ldconfig
+%post jsc -p /sbin/ldconfig
+%postun jsc -p /sbin/ldconfig
+
+%files -f WebKit2GTK-4.0.lang
+%license _license_files/*ThirdParty*
+%license _license_files/*WebCore*
+%license _license_files/*WebInspectorUI*
+%license _license_files/*WTF*
+%{_libdir}/libwebkit2gtk-4.0.so.*
+%{_libdir}/girepository-1.0/WebKit2-4.0.typelib
+%{_libdir}/girepository-1.0/WebKit2WebExtension-4.0.typelib
+%{_libdir}/webkit2gtk-4.0/
+%{_libexecdir}/webkit2gtk-4.0/
+%exclude %{_libexecdir}/webkit2gtk-4.0/WebKitPluginProcess2
+
+%files devel
+%{_bindir}/MiniBrowser
+%{_includedir}/webkitgtk-4.0/
+%exclude %{_includedir}/webkitgtk-4.0/JavaScriptCore
+%{_libdir}/libwebkit2gtk-4.0.so
+%{_libdir}/pkgconfig/webkit2gtk-4.0.pc
+%{_libdir}/pkgconfig/webkit2gtk-web-extension-4.0.pc
+%{_datadir}/gir-1.0/WebKit2-4.0.gir
+%{_datadir}/gir-1.0/WebKit2WebExtension-4.0.gir
+
+%files jsc
+%license _license_files/*JavaScriptCore*
+%{_libdir}/libjavascriptcoregtk-4.0.so.*
+%{_libdir}/girepository-1.0/JavaScriptCore-4.0.typelib
+
+%files jsc-devel
+%{_bindir}/jsc
+%dir %{_includedir}/webkitgtk-4.0
+%{_includedir}/webkitgtk-4.0/JavaScriptCore/
+%{_libdir}/libjavascriptcoregtk-4.0.so
+%{_libdir}/pkgconfig/javascriptcoregtk-4.0.pc
+%{_datadir}/gir-1.0/JavaScriptCore-4.0.gir
+
+%files plugin-process-gtk2
+%{_libexecdir}/webkit2gtk-4.0/WebKitPluginProcess2
+
+%files doc
+%dir %{_datadir}/gtk-doc
+%dir %{_datadir}/gtk-doc/html
+%{_datadir}/gtk-doc/html/webkit2gtk-4.0/
+%{_datadir}/gtk-doc/html/webkitdomgtk-4.0/
+
+%changelog
+* Tue May 24 2016 Tomas Popela <tpopela@redhat.com> - 2.12.3-1
+- Update to 2.12.3
+
+* Fri Apr 29 2016 Igor Gnatenko <ignatenko@redhat.com> - 2.12.2-2
+- Remove typelib from jsc-devel because it is in jsc
+
+* Thu Apr 28 2016 Tomas Popela <tpopela@redhat.com> - 2.12.2-1
+- Update to 2.12.2
+
+* Tue Apr 26 2016 Tomas Popela <tpopela@redhat.com> - 2.12.1-2
+- Fix the build on aarch64 - disable bmalloc as it's crashing when generating
+  the documentation
+
+* Thu Apr 14 2016 Tomas Popela <tpopela@redhat.com> - 2.12.1-1
+- Update to 2.12.1
+
+* Thu Apr 07 2016 Michael Catanzaro <mcatanzaro@igalia.com> - 2.12.0-3
+- Attempt harder to ensure plugin-process-gtk2 is installed on upgrade
+
+* Wed Apr 06 2016 Michael Catanzaro <mcatanzaro@igalia.com> - 2.12.0-2
+- Attempt to ensure plugin-process-gtk2 is installed on upgrade
+- Add patch for WebKit#155885
+
+* Wed Mar 23 2016 Michael Catanzaro <mcatanzaro@igalia.com> - 2.12.0-1
+- Update to 2.12.0
+
+* Thu Mar 17 2016 Tomas Popela <tpopela@redhat.com> - 2.10.9-1
+- Update to 2.10.9
+
+* Fri Mar 11 2016 Michael Catanzaro <mcatanzaro@igalia.com> - 2.10.8-1
+- Update to 2.10.8
+- Fixes CVE-2016-1726
+
+* Mon Feb 01 2016 Tomas Popela <tpopela@redhat.com> - 2.10.7-1
+- Update to 2.10.7
+
+* Thu Jan 28 2016 Tomas Popela <tpopela@redhat.com> - 2.10.6-1
+- Update to 2.10.6
+
+* Wed Jan 20 2016 Tomas Popela <tpopela@redhat.com> - 2.10.5-1
+- Update to 2.10.5
+- Fixes CVE-2015-7096, CVE-2015-7098
+
+* Wed Jan 13 2016 Michael Catanzaro <mcatanzaro@igalia.com> - 2.10.4-1
+- Update to 2.10.4. This update addresses the following vulnerabilities:
+   CVE-2015-1122, CVE-2015-1152, CVE-2015-1155, CVE-2015-3660, CVE-2015-3730,
+   CVE-2015-3738, CVE-2015-3740, CVE-2015-3742, CVE-2015-3744, CVE-2015-3746,
+   CVE-2015-3750, CVE-2015-3751, CVE-2015-3754, CVE-2015-3755, CVE-2015-5804,
+   CVE-2015-5805, CVE-2015-5807, CVE-2015-5810, CVE-2015-5813, CVE-2015-5814,
+   CVE-2015-5815, CVE-2015-5817, CVE-2015-5818, CVE-2015-5825, CVE-2015-5827,
+   CVE-2015-5828, CVE-2015-5929, CVE-2015-5930, CVE-2015-5931, CVE-2015-7002,
+   CVE-2015-7013, CVE-2015-7014, CVE-2015-7048, CVE-2015-7095, CVE-2015-7097,
+   CVE-2015-7099, CVE-2015-7100, CVE-2015-7102, CVE-2015-7103, CVE-2015-7104
+
+* Mon Aug 24 2015 Michael Catanzaro <mcatanzaro@igalia.com> - 2.8.5-2
+- Remove the address space limit patch: it was causing too many problems.
+- (Warning! This means Red Hat Bugzilla can hang your computer again.)
+- Improve the YouTube patch to avoid spamming the journal with rpm output.
+
+* Thu Aug 06 2015 Tomas Popela <tpopela@redhat.com> - 2.8.5-1
+- Update to 2.8.5
+
+* Sat Aug 01 2015 Michael Catanzaro <mcatanzaro@igalia.com> - 2.8.4-4
+- Make YouTube work.
+
+* Tue Jul 28 2015 Michael Catanzaro <mcatanzaro@igalia.com> - 2.8.4-3
+- Exempt the plugin process from the address space limit.
+
+* Thu Jul 09 2015 Michael Catanzaro <mcatanzaro@igalia.com> - 2.8.4-2
+- Prevent runaway web processes from using unlimited memory.
+
+* Wed Jul 08 2015 Tomas Popela <tpopela@redhat.com> - 2.8.4-1
+- Update to 2.8.4
+
+* Thu Jul 02 2015 Michael Catanzaro <mcatanzaro@igalia.com> - 2.8.3-5
+- Build i686 with -fno-tree-rsa, #1225733
+
+* Mon Jun 15 2015 Michael Catanzaro <mcatanzaro@igalia.com> - 2.8.3-4
+- Remove sqlite crash patch; didn't help
+
+* Thu Jun 11 2015 Michael Catanzaro <mcatanzaro@igalia.com> - 2.8.3-3
+- Add speculative fix for sqlite crashes
+
+* Thu May 28 2015 Tomas Popela <tpopela@redhat.com> - 2.8.3-2
+- Backport bmalloc fix (rhbz#1225733)
+
+* Fri May 15 2015 Tomas Popela <tpopela@redhat.com> - 2.8.3-1
+- Update to 2.8.3
+
+* Tue May 12 2015 Tomas Popela <tpopela@redhat.com> - 2.8.2-1
+- Update to 2.8.2
+
+* Tue Apr 21 2015 Michael Catanzaro <mcatanzaro@igalia.com> - 2.8.1-2
+- Reenable fast matrix multiplication on x86_64
+
+* Tue Apr 14 2015 Tomas Popela <tpopela@redhat.com> - 2.8.1-1
+- Update to 2.8.1
+
+* Wed Apr 08 2015 Michael Catanzaro <mcatanzaro@igalia.com> - 2.8.0-4
+- Build with support for HTML5 desktop notifications
+
+* Wed Apr 08 2015 Tomas Popela <tpopela@redhat.com> - 2.8.0-3
+- Fix CLoop on secondary arches
+
+* Fri Mar 27 2015 Than Ngo <than@redhat.com> - 2.8.0-2
+- Fix build failures on s390
+- Fix build failures with gcc 5
+- Decrease the debuginfo verbosity on ppc and others
+
+* Mon Mar 23 2015 Tomas Popela <tpopela@redhat.com> - 2.8.0-1
+- Update to 2.8.0
+
+* Tue Mar 17 2015 Tomas Popela <tpopela@redhat.com> - 2.7.92-1
+- Update to 2.7.92
+- Re-enable parallel build
+- Compile and ship MiniBrowser
+
+* Mon Mar 16 2015 Michael Catanzaro <mcatanzaro@gnome.org> 2.7.91-3
+- Add a couple patches to fix more crashes
+
+* Wed Mar 04 2015 Michael Catanzaro <mcatanzaro@gnome.org> 2.7.91-2
+- Add patch to make gnome-online-accounts 3.15.91 not crash
+
+* Tue Mar 03 2015 Tomas Popela <tpopela@redhat.com> - 2.7.91-1
+- Update to 2.7.91
+
+* Thu Feb 26 2015 Michael Catanzaro <mcatanzaro@gnome.org> - 2.7.90-10
+- Add Fedora branding to the user agent
+
+* Thu Feb 19 2015 Tomas Popela <tpopela@redhat.com> - 2.7.90-9
+- Fix the build with cmake 3.2.x
+
+* Thu Feb 19 2015 Tomas Popela <tpopela@redhat.com> - 2.7.90-8
+- Fix crash in CLoop
+- Forgot to reset the release number so continuing with 8
+- Decrease the debuginfo verbosity on s390x
+
+* Wed Feb 18 2015 Tomas Popela <tpopela@redhat.com> - 2.7.90-7
+- Update to 2.7.90
+- Add JIT and CLoop fixes
+
+* Mon Feb 16 2015 Michael Catanzaro <mcatanzaro@gnome.org> - 2.7.4-7
+- Remove disable codec installer patch, not needed in GNOME 3.15.90
+
+* Tue Feb 10 2015 Michael Catanzaro <mcatanzaro@gnome.org> - 2.7.4-6
+- Temporarily disable cloop patch since it breaks js
+- Add patch for gmutexlocker namespace collision with glib 2.43.4
+
+* Fri Feb 06 2015 Michael Catanzaro <mcatanzaro@gnome.org> - 2.7.4-5
+- Revert yesterday's changes since they don't help.
+
+* Thu Feb 05 2015 Michael Catanzaro <mcatanzaro@gnome.org> - 2.7.4-4
+- Disable JIT to see if it fixes js.
+
+* Thu Feb 05 2015 Michael Catanzaro <mcatanzaro@gnome.org> - 2.7.4-3
+- Disable hardened build to see if it fixes js
+
+* Mon Jan 26 2015 David Tardon <dtardon@redhat.com> - 2.7.4-2
+- rebuild for ICU 54.1
+
+* Tue Jan 20 2015 Tomas Popela <tpopela@redhat.com> - 2.7.4-1
+- Update to 2.7.4
+
+* Mon Jan 19 2015 Tomas Popela <tpopela@redhat.com> - 2.7.3-3
+- Fix compilation on secondary arches
+
+* Thu Jan 08 2015 Tomas Popela <tpopela@redhat.com> - 2.7.3-2
+- Decrease debuginfo verbosity on ix86 to let it build
+
+* Tue Dec 16 2014 Tomas Popela <tpopela@redhat.com> - 2.7.3-1
+- Update to 2.7.3
+
+* Tue Dec 09 2014 Michael Catanzaro <mcatanzaro@gnome.org> - 2.7.2-3
+- Disable the PackageKit codec installer
+
+* Sun Dec 07 2014 Michael Catanzaro <mcatanzaro@gnome.org> - 2.7.2-2
+- Enable hardened build
+
+* Mon Nov 24 2014 Tomas Popela <tpopela@redhat.com> - 2.7.2-1
+- Update to 2.7.2
+- Don't use ld.gold on s390 and aarch64
+
+* Wed Nov 12 2014 Tomas Popela <tpopela@redhat.com> - 2.7.1-5
+- Enable JIT where possible (accidentally turned off when updating to 2.5.90)
+
+* Fri Nov 07 2014 Kalev Lember <kalevlember@gmail.com> - 2.7.1-4
+- Build developer documentation
+
+* Fri Oct 31 2014 Michael Catanzaro <mcatanzaro@gnome.org> - 2.7.1-3
+- Obsolete libwebkit2gtk < 2.5.0 to be future-proof
+
+* Fri Oct 31 2014 Kalev Lember <kalevlember@gmail.com> - 2.7.1-2
+- Bump libwebkit2gtk obsoletes version
+
+* Wed Oct 29 2014 Tomas Popela <tpopela@redhat.com> - 2.7.1-1
+- Update to 2.7.1
+
+* Wed Oct 22 2014 Tomas Popela <tpopela@redhat.com> - 2.6.2-1
+- Update to 2.6.2
+
+* Tue Oct 21 2014 Tomas Popela <tpopela@redhat.com> - 2.6.1-2
+- Disable the SSLv3 to address the POODLE vulnerability
+
+* Tue Oct 14 2014 Tomas Popela <tpopela@redhat.com> - 2.6.1-1
+- Update to 2.6.1
+
+* Thu Sep 25 2014 Tomas Popela <tpopela@redhat.com> - 2.6.0-1
+- Add the wrongly removed CLoop patch and remove the one that was upstreamed
+
+* Wed Sep 24 2014 Kalev Lember <kalevlember@gmail.com> - 2.6.0-1
+- Update to 2.6.0
+
+* Mon Sep 22 2014 Tomas Popela <tpopela@redhat.com> - 2.5.90-1
+- Update to 2.5.90
+
+* Tue Aug 26 2014 Kalev Lember <kalevlember@gmail.com> - 2.5.3-7
+- Obsolete libwebkit2gtk from the webkitgtk3 package
+
+* Tue Aug 26 2014 David Tardon <dtardon@redhat.com> - 2.5.3-6
+- rebuild for ICU 53.1
+
+* Mon Aug 25 2014 Tomas Popela <tpopela@redhat.com> - 2.5.3-5
+- Add support for secondary arches
+
+* Fri Aug 22 2014 Michael Catanzaro <mcatanzaro@gnome.org> - 2.5.3-4
+- Add webkitgtk-2.5.3-toggle-buttons.patch
+
+* Thu Aug 21 2014 Kalev Lember <kalevlember@gmail.com> - 2.5.3-3
+- More package review fixes (#1131284)
+- Correct the license tag to read LGPLv2
+- Filter out provides for private libraries
+
+* Tue Aug 19 2014 Kalev Lember <kalevlember@gmail.com> - 2.5.3-2
+- Remove bundled leveldb, gtest, qunit in %%prep (#1131284)
+
+* Fri Aug 15 2014 Kalev Lember <kalevlember@gmail.com> - 2.5.3-1
+- Update to 2.5.3
+
+* Fri Aug 01 2014 Kalev Lember <kalevlember@gmail.com> - 2.5.1-1
+- Initial Fedora packaging, based on the webkitgtk3 package