From 608ae624d01d91a01d986a12496645e1f89a972a Mon Sep 17 00:00:00 2001 From: Michael Catanzaro Date: Wed, 14 May 2025 15:54:47 -0500 Subject: [PATCH 01/12] Update to 2.48.2 --- denormal-disabler-build.patch | 12 ------------ sources | 4 ++-- webkitgtk.spec | 5 +---- 3 files changed, 3 insertions(+), 18 deletions(-) delete mode 100644 denormal-disabler-build.patch diff --git a/denormal-disabler-build.patch b/denormal-disabler-build.patch deleted file mode 100644 index 8660563..0000000 --- a/denormal-disabler-build.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff --git a/Source/WebCore/platform/audio/DenormalDisabler.cpp b/Source/WebCore/platform/audio/DenormalDisabler.cpp -index 35715e663ce7..44ba08a33d5d 100644 ---- a/Source/WebCore/platform/audio/DenormalDisabler.cpp -+++ b/Source/WebCore/platform/audio/DenormalDisabler.cpp -@@ -91,7 +91,7 @@ DenormalDisabler::~DenormalDisabler() - } - } - #else --DenormalDisabler::DenormalDisabler() = default -+DenormalDisabler::DenormalDisabler() = default; - DenormalDisabler::~DenormalDisabler() = default; - #endif diff --git a/sources b/sources index 013526c..23a8ca5 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (webkitgtk-2.48.1.tar.xz) = b78a2ae7e51942c4606e6f2f574e86f107e0c44fc685d9eda41d309457a340b9d9b6fae39cdbc3cc7c9210237b110647216eafc6b6e9b0e577106e477cd06d38 -SHA512 (webkitgtk-2.48.1.tar.xz.asc) = 072c1ed45c8f4f3d93ba79d1aa17decb2389a6535391fc6927f97f6404c4bdce4599b2e580397da1f163cc28c1c4c93efbf1eda16584ca18010b362824e35d31 +SHA512 (webkitgtk-2.48.2.tar.xz) = 712342e2f8bfaa479dc846d91ca1e02008286b438115789555bfff1dd3b07e0887d6a2a064afd1a5e85d7ae85d68e59daf8b81888c93c1a7b40cfa9048b3b2da +SHA512 (webkitgtk-2.48.2.tar.xz.asc) = f7e9f54e76e1ad7706c3817e6048eb118bcea30d88b9f7c20d7c69a06fb4a02108a468ff1175edae07ccb3bb4679c613c87c226eb352700dd1fbbcc12693b6d4 diff --git a/webkitgtk.spec b/webkitgtk.spec index e93b6c3..b775d09 100644 --- a/webkitgtk.spec +++ b/webkitgtk.spec @@ -19,7 +19,7 @@ %endif Name: webkitgtk -Version: 2.48.1 +Version: 2.48.2 Release: %autorelease Summary: GTK web content engine library @@ -57,9 +57,6 @@ Source1: https://webkitgtk.org/releases/webkitgtk-%{version}.tar.xz.asc # $ gpg --export --export-options export-minimal 013A0127AC9C65B34FFA62526C1009B693975393 5AA3BC334FD7E3369E7C77B291C559DBE4C9123B > webkitgtk-keys.gpg Source2: webkitgtk-keys.gpg -# https://bugs.webkit.org/show_bug.cgi?id=286694 -Patch: denormal-disabler-build.patch - BuildRequires: bison BuildRequires: bubblewrap BuildRequires: clang From abcf09af4eba724523ef2adf1b0156e11437320d Mon Sep 17 00:00:00 2001 From: Michael Catanzaro Date: Wed, 28 May 2025 12:52:52 -0500 Subject: [PATCH 02/12] Update to 2.48.3 --- sources | 4 ++-- webkitgtk.spec | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/sources b/sources index 23a8ca5..3b3b9af 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (webkitgtk-2.48.2.tar.xz) = 712342e2f8bfaa479dc846d91ca1e02008286b438115789555bfff1dd3b07e0887d6a2a064afd1a5e85d7ae85d68e59daf8b81888c93c1a7b40cfa9048b3b2da -SHA512 (webkitgtk-2.48.2.tar.xz.asc) = f7e9f54e76e1ad7706c3817e6048eb118bcea30d88b9f7c20d7c69a06fb4a02108a468ff1175edae07ccb3bb4679c613c87c226eb352700dd1fbbcc12693b6d4 +SHA512 (webkitgtk-2.48.3.tar.xz) = 0724e0d22403552409d0f621d9ed3a6404813ca63d445b9ac8f99682a544c95a3cf8108ac880cb3bcadc0ecd5a772db40e68f753c286700ffc7f2851bba12e84 +SHA512 (webkitgtk-2.48.3.tar.xz.asc) = 6f5d0b78fe0a3c7f56fbbcc99d63cbe22bc978cb52c8e04263c6c88a5063a6ebf68d87bdf9aca088f19ac21676ba3e37c5261ded6cf7fc17bdcc008592dc845b diff --git a/webkitgtk.spec b/webkitgtk.spec index b775d09..c8ad180 100644 --- a/webkitgtk.spec +++ b/webkitgtk.spec @@ -19,7 +19,7 @@ %endif Name: webkitgtk -Version: 2.48.2 +Version: 2.48.3 Release: %autorelease Summary: GTK web content engine library From a7b762e2764fcbb823c12b7b45d6cf18280919a5 Mon Sep 17 00:00:00 2001 From: Michael Catanzaro Date: Tue, 5 Aug 2025 11:59:24 -0500 Subject: [PATCH 03/12] Update to 2.48.5 --- sources | 4 ++-- webkitgtk.spec | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/sources b/sources index 3b3b9af..4c21536 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (webkitgtk-2.48.3.tar.xz) = 0724e0d22403552409d0f621d9ed3a6404813ca63d445b9ac8f99682a544c95a3cf8108ac880cb3bcadc0ecd5a772db40e68f753c286700ffc7f2851bba12e84 -SHA512 (webkitgtk-2.48.3.tar.xz.asc) = 6f5d0b78fe0a3c7f56fbbcc99d63cbe22bc978cb52c8e04263c6c88a5063a6ebf68d87bdf9aca088f19ac21676ba3e37c5261ded6cf7fc17bdcc008592dc845b +SHA512 (webkitgtk-2.48.5.tar.xz) = 70ee8f58a354cf6d0b1345954ed07c1e49d886f353d4fab945a3d2fc03116726af05454d4b5460f0fe4f5c3d042bb921fc5b43a85474624545afd9acc1c0fc8d +SHA512 (webkitgtk-2.48.5.tar.xz.asc) = bf499cb07d863adb6694030d29b8482db9986ce5fdb3426fd8497512ebd4583fbacc51c29b28631c00ee5089188733b94fbb475e06b69b400fdfb3b88b920377 diff --git a/webkitgtk.spec b/webkitgtk.spec index c8ad180..c722445 100644 --- a/webkitgtk.spec +++ b/webkitgtk.spec @@ -19,7 +19,7 @@ %endif Name: webkitgtk -Version: 2.48.3 +Version: 2.48.5 Release: %autorelease Summary: GTK web content engine library From 476fed11685b624b7615550642894a6b1c0854ce Mon Sep 17 00:00:00 2001 From: Michael Catanzaro Date: Wed, 17 Sep 2025 15:59:17 -0500 Subject: [PATCH 04/12] Update to 2.50.0 --- i686-build.patch | 18 ++++++++++++++++++ sources | 4 ++-- webkitgtk.spec | 5 ++++- 3 files changed, 24 insertions(+), 3 deletions(-) create mode 100644 i686-build.patch diff --git a/i686-build.patch b/i686-build.patch new file mode 100644 index 0000000..13f98bc --- /dev/null +++ b/i686-build.patch @@ -0,0 +1,18 @@ +diff --git a/Source/JavaScriptCore/llint/LowLevelInterpreter.asm b/Source/JavaScriptCore/llint/LowLevelInterpreter.asm +index af53fe269664..237fd6aab9c8 100644 +--- a/Source/JavaScriptCore/llint/LowLevelInterpreter.asm ++++ b/Source/JavaScriptCore/llint/LowLevelInterpreter.asm +@@ -2958,6 +2958,13 @@ _wasm_ipint_call_return_location_wide16: + _wasm_ipint_call_return_location_wide32: + crash() + ++if C_LOOP and not JSVALUE64 ++_op_instanceof_return_location: ++_op_instanceof_return_location_wide16: ++_op_instanceof_return_location_wide32: ++ crash() ++end ++ + end # WEBASSEMBLY + + include? LowLevelInterpreterAdditions diff --git a/sources b/sources index 4c21536..652580c 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (webkitgtk-2.48.5.tar.xz) = 70ee8f58a354cf6d0b1345954ed07c1e49d886f353d4fab945a3d2fc03116726af05454d4b5460f0fe4f5c3d042bb921fc5b43a85474624545afd9acc1c0fc8d -SHA512 (webkitgtk-2.48.5.tar.xz.asc) = bf499cb07d863adb6694030d29b8482db9986ce5fdb3426fd8497512ebd4583fbacc51c29b28631c00ee5089188733b94fbb475e06b69b400fdfb3b88b920377 +SHA512 (webkitgtk-2.50.0.tar.xz) = 7e3a7ecdd71e21566b3e364ccb7573bec4f86c7cf5fbe5ce6f3fcbb1ed8e5674d9ed239b48fe330afe8f7370bbb323f6500f78a25f4572d8e02d7d274ec843b4 +SHA512 (webkitgtk-2.50.0.tar.xz.asc) = 68c62bd077f28816c0177e93fa01deae85619f55b510f204d57b59f6ae2d9c1bd1255c2dae4214e43ed2ef6c76f4cd42433f47af4146fcd1f14f707c7a377a80 diff --git a/webkitgtk.spec b/webkitgtk.spec index c722445..2df6af7 100644 --- a/webkitgtk.spec +++ b/webkitgtk.spec @@ -19,7 +19,7 @@ %endif Name: webkitgtk -Version: 2.48.5 +Version: 2.50.0 Release: %autorelease Summary: GTK web content engine library @@ -57,6 +57,9 @@ Source1: https://webkitgtk.org/releases/webkitgtk-%{version}.tar.xz.asc # $ gpg --export --export-options export-minimal 013A0127AC9C65B34FFA62526C1009B693975393 5AA3BC334FD7E3369E7C77B291C559DBE4C9123B > webkitgtk-keys.gpg Source2: webkitgtk-keys.gpg +# https://bugs.webkit.org/show_bug.cgi?id=299018 +Patch: i686-build.patch + BuildRequires: bison BuildRequires: bubblewrap BuildRequires: clang From 9189760f94e84e3e7c7f731719d84a4f039d51d4 Mon Sep 17 00:00:00 2001 From: Michael Catanzaro Date: Fri, 10 Oct 2025 15:23:51 -0500 Subject: [PATCH 05/12] Update to 2.50.1 --- i686-build.patch | 18 ------------------ sources | 4 ++-- webkitgtk.spec | 5 +---- 3 files changed, 3 insertions(+), 24 deletions(-) delete mode 100644 i686-build.patch diff --git a/i686-build.patch b/i686-build.patch deleted file mode 100644 index 13f98bc..0000000 --- a/i686-build.patch +++ /dev/null @@ -1,18 +0,0 @@ -diff --git a/Source/JavaScriptCore/llint/LowLevelInterpreter.asm b/Source/JavaScriptCore/llint/LowLevelInterpreter.asm -index af53fe269664..237fd6aab9c8 100644 ---- a/Source/JavaScriptCore/llint/LowLevelInterpreter.asm -+++ b/Source/JavaScriptCore/llint/LowLevelInterpreter.asm -@@ -2958,6 +2958,13 @@ _wasm_ipint_call_return_location_wide16: - _wasm_ipint_call_return_location_wide32: - crash() - -+if C_LOOP and not JSVALUE64 -+_op_instanceof_return_location: -+_op_instanceof_return_location_wide16: -+_op_instanceof_return_location_wide32: -+ crash() -+end -+ - end # WEBASSEMBLY - - include? LowLevelInterpreterAdditions diff --git a/sources b/sources index 652580c..ff730c9 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (webkitgtk-2.50.0.tar.xz) = 7e3a7ecdd71e21566b3e364ccb7573bec4f86c7cf5fbe5ce6f3fcbb1ed8e5674d9ed239b48fe330afe8f7370bbb323f6500f78a25f4572d8e02d7d274ec843b4 -SHA512 (webkitgtk-2.50.0.tar.xz.asc) = 68c62bd077f28816c0177e93fa01deae85619f55b510f204d57b59f6ae2d9c1bd1255c2dae4214e43ed2ef6c76f4cd42433f47af4146fcd1f14f707c7a377a80 +SHA512 (webkitgtk-2.50.1.tar.xz) = 4b7b6c5ae02f1dbcff26e7af4ee4e3cdd4435c61dfaf17c2981422358dea01cfba0ffe8c6f12c7864b6f1ee6c9906dfa64248bc95effed526e9ade3ad1292888 +SHA512 (webkitgtk-2.50.1.tar.xz.asc) = c430677ec8e147750f3dc69f2b6252da9bc9b4df61c0976213dea535be8973dc746b22137d508899d28095f58197e52ffa003ab2033b2c20a6c03d1a1b327e2c diff --git a/webkitgtk.spec b/webkitgtk.spec index 2df6af7..a32a6c5 100644 --- a/webkitgtk.spec +++ b/webkitgtk.spec @@ -19,7 +19,7 @@ %endif Name: webkitgtk -Version: 2.50.0 +Version: 2.50.1 Release: %autorelease Summary: GTK web content engine library @@ -57,9 +57,6 @@ Source1: https://webkitgtk.org/releases/webkitgtk-%{version}.tar.xz.asc # $ gpg --export --export-options export-minimal 013A0127AC9C65B34FFA62526C1009B693975393 5AA3BC334FD7E3369E7C77B291C559DBE4C9123B > webkitgtk-keys.gpg Source2: webkitgtk-keys.gpg -# https://bugs.webkit.org/show_bug.cgi?id=299018 -Patch: i686-build.patch - BuildRequires: bison BuildRequires: bubblewrap BuildRequires: clang From 7be4009d9cee4c0e5e094636d1bb7c30214301cb Mon Sep 17 00:00:00 2001 From: Michael Catanzaro Date: Wed, 19 Nov 2025 10:15:14 -0600 Subject: [PATCH 06/12] Update to 2.50.2 --- CVE-2025-43421.patch | 26 ++++++++++++++++++++++++++ build.patch | 27 +++++++++++++++++++++++++++ sources | 4 ++-- webkitgtk.spec | 7 ++++++- 4 files changed, 61 insertions(+), 3 deletions(-) create mode 100644 CVE-2025-43421.patch create mode 100644 build.patch diff --git a/CVE-2025-43421.patch b/CVE-2025-43421.patch new file mode 100644 index 0000000..26e2361 --- /dev/null +++ b/CVE-2025-43421.patch @@ -0,0 +1,26 @@ +From 56f026944a16a4baf82ddd6bae954c577de79d03 Mon Sep 17 00:00:00 2001 +From: Michael Catanzaro +Date: Fri, 21 Nov 2025 12:42:01 -0600 +Subject: [PATCH] Disable array allocation sinking + https://bugs.webkit.org/show_bug.cgi?id=300718 + +Unreviewed stable branch commit. + +Canonical link: https://commits.webkit.org/298234.299@webkitglib/2.50 +--- + Source/JavaScriptCore/runtime/OptionsList.h | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/Source/JavaScriptCore/runtime/OptionsList.h b/Source/JavaScriptCore/runtime/OptionsList.h +index 3d65cb28ba8ed..5b0750dd25219 100644 +--- a/Source/JavaScriptCore/runtime/OptionsList.h ++++ b/Source/JavaScriptCore/runtime/OptionsList.h +@@ -629,7 +629,7 @@ bool hasCapacityToUseLargeGigacage(); + v(Bool, forceAllFunctionsToUseSIMD, false, Normal, "Force all functions to act conservatively w.r.t fp/vector registers for testing."_s) \ + v(Bool, useOMGInlining, true, Normal, "Use OMG inlining"_s) \ + v(Bool, freeRetiredWasmCode, true, Normal, "free BBQ/OMG-OSR wasm code once it's no longer reachable."_s) \ +- v(Bool, useArrayAllocationSinking, true, Normal, nullptr) \ ++ v(Bool, useArrayAllocationSinking, false, Normal, nullptr) \ + v(Bool, dumpFTLCodeSize, false, Normal, nullptr) \ + v(Bool, dumpOptimizationTracing, false, Normal, nullptr) \ + v(Unsigned, markedBlockDumpInfoCount, 0, Normal, nullptr) /* FIXME: rdar://139998916 */ \ diff --git a/build.patch b/build.patch new file mode 100644 index 0000000..12f9d09 --- /dev/null +++ b/build.patch @@ -0,0 +1,27 @@ +From 730bffd856d2a1e56dd3bd2a0702282f19c5242a Mon Sep 17 00:00:00 2001 +From: Adrian Perez de Castro +Date: Thu, 20 Nov 2025 00:52:19 +0200 +Subject: [PATCH] Unreviewed build fix after 298234.287@webkitglib/2.50 + +* Source/WebCore/Modules/credentialmanagement/BasicCredential.idl: +Remove the CustomToJSObject flag to avoid a link error due to an +undefined toJS() symbol, letting the binding generator write the +function is enough for the Google Accounts quirk to work. + +Canonical link: https://commits.webkit.org/298234.297@webkitglib/2.50 +--- + Source/WebCore/Modules/credentialmanagement/BasicCredential.idl | 1 - + 1 file changed, 1 deletion(-) + +diff --git a/Source/WebCore/Modules/credentialmanagement/BasicCredential.idl b/Source/WebCore/Modules/credentialmanagement/BasicCredential.idl +index 42114f65fff97..9643b59bf6909 100644 +--- a/Source/WebCore/Modules/credentialmanagement/BasicCredential.idl ++++ b/Source/WebCore/Modules/credentialmanagement/BasicCredential.idl +@@ -25,7 +25,6 @@ + + [ + InterfaceName=Credential, +- CustomToJSObject, + EnabledByQuirk=shouldExposeCredentialsContainer, + Exposed=Window, + SecureContext diff --git a/sources b/sources index ff730c9..777aa6f 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (webkitgtk-2.50.1.tar.xz) = 4b7b6c5ae02f1dbcff26e7af4ee4e3cdd4435c61dfaf17c2981422358dea01cfba0ffe8c6f12c7864b6f1ee6c9906dfa64248bc95effed526e9ade3ad1292888 -SHA512 (webkitgtk-2.50.1.tar.xz.asc) = c430677ec8e147750f3dc69f2b6252da9bc9b4df61c0976213dea535be8973dc746b22137d508899d28095f58197e52ffa003ab2033b2c20a6c03d1a1b327e2c +SHA512 (webkitgtk-2.50.2.tar.xz) = 1d4d61702c4e4a43ed3ec808e9a20d126032847a830377d7d4732304111845d06f1df49688ef042825475ecee17b3e457a3b31ce0406089f95230b64960f5129 +SHA512 (webkitgtk-2.50.2.tar.xz.asc) = 9783ea78b226cbcf51973b804cace90bb8e4ff82e714fb6bce3ffd08a8eb93c2bc237ad82e1914ce3f8ea33d0f52f361ed41d1ad0618a68f7a7ff29c2d0eb9b1 diff --git a/webkitgtk.spec b/webkitgtk.spec index a32a6c5..b7bc86f 100644 --- a/webkitgtk.spec +++ b/webkitgtk.spec @@ -19,7 +19,7 @@ %endif Name: webkitgtk -Version: 2.50.1 +Version: 2.50.2 Release: %autorelease Summary: GTK web content engine library @@ -57,6 +57,11 @@ Source1: https://webkitgtk.org/releases/webkitgtk-%{version}.tar.xz.asc # $ gpg --export --export-options export-minimal 013A0127AC9C65B34FFA62526C1009B693975393 5AA3BC334FD7E3369E7C77B291C559DBE4C9123B > webkitgtk-keys.gpg Source2: webkitgtk-keys.gpg +# https://github.com/WebKit/WebKit/commit/730bffd856d2a1e56dd3bd2a0702282f19c5242a +Patch: build.patch +# https://bugs.webkit.org/show_bug.cgi?id=300718 +Patch: CVE-2025-43421.patch + BuildRequires: bison BuildRequires: bubblewrap BuildRequires: clang From 11145dfc312c892552995c493fba0f472954c072 Mon Sep 17 00:00:00 2001 From: Michael Catanzaro Date: Thu, 4 Dec 2025 14:40:02 -0600 Subject: [PATCH 07/12] Update to 2.50.3 --- CVE-2025-43421.patch | 26 -------------------------- build.patch | 27 --------------------------- sources | 4 ++-- webkitgtk.spec | 7 +------ 4 files changed, 3 insertions(+), 61 deletions(-) delete mode 100644 CVE-2025-43421.patch delete mode 100644 build.patch diff --git a/CVE-2025-43421.patch b/CVE-2025-43421.patch deleted file mode 100644 index 26e2361..0000000 --- a/CVE-2025-43421.patch +++ /dev/null @@ -1,26 +0,0 @@ -From 56f026944a16a4baf82ddd6bae954c577de79d03 Mon Sep 17 00:00:00 2001 -From: Michael Catanzaro -Date: Fri, 21 Nov 2025 12:42:01 -0600 -Subject: [PATCH] Disable array allocation sinking - https://bugs.webkit.org/show_bug.cgi?id=300718 - -Unreviewed stable branch commit. - -Canonical link: https://commits.webkit.org/298234.299@webkitglib/2.50 ---- - Source/JavaScriptCore/runtime/OptionsList.h | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/Source/JavaScriptCore/runtime/OptionsList.h b/Source/JavaScriptCore/runtime/OptionsList.h -index 3d65cb28ba8ed..5b0750dd25219 100644 ---- a/Source/JavaScriptCore/runtime/OptionsList.h -+++ b/Source/JavaScriptCore/runtime/OptionsList.h -@@ -629,7 +629,7 @@ bool hasCapacityToUseLargeGigacage(); - v(Bool, forceAllFunctionsToUseSIMD, false, Normal, "Force all functions to act conservatively w.r.t fp/vector registers for testing."_s) \ - v(Bool, useOMGInlining, true, Normal, "Use OMG inlining"_s) \ - v(Bool, freeRetiredWasmCode, true, Normal, "free BBQ/OMG-OSR wasm code once it's no longer reachable."_s) \ -- v(Bool, useArrayAllocationSinking, true, Normal, nullptr) \ -+ v(Bool, useArrayAllocationSinking, false, Normal, nullptr) \ - v(Bool, dumpFTLCodeSize, false, Normal, nullptr) \ - v(Bool, dumpOptimizationTracing, false, Normal, nullptr) \ - v(Unsigned, markedBlockDumpInfoCount, 0, Normal, nullptr) /* FIXME: rdar://139998916 */ \ diff --git a/build.patch b/build.patch deleted file mode 100644 index 12f9d09..0000000 --- a/build.patch +++ /dev/null @@ -1,27 +0,0 @@ -From 730bffd856d2a1e56dd3bd2a0702282f19c5242a Mon Sep 17 00:00:00 2001 -From: Adrian Perez de Castro -Date: Thu, 20 Nov 2025 00:52:19 +0200 -Subject: [PATCH] Unreviewed build fix after 298234.287@webkitglib/2.50 - -* Source/WebCore/Modules/credentialmanagement/BasicCredential.idl: -Remove the CustomToJSObject flag to avoid a link error due to an -undefined toJS() symbol, letting the binding generator write the -function is enough for the Google Accounts quirk to work. - -Canonical link: https://commits.webkit.org/298234.297@webkitglib/2.50 ---- - Source/WebCore/Modules/credentialmanagement/BasicCredential.idl | 1 - - 1 file changed, 1 deletion(-) - -diff --git a/Source/WebCore/Modules/credentialmanagement/BasicCredential.idl b/Source/WebCore/Modules/credentialmanagement/BasicCredential.idl -index 42114f65fff97..9643b59bf6909 100644 ---- a/Source/WebCore/Modules/credentialmanagement/BasicCredential.idl -+++ b/Source/WebCore/Modules/credentialmanagement/BasicCredential.idl -@@ -25,7 +25,6 @@ - - [ - InterfaceName=Credential, -- CustomToJSObject, - EnabledByQuirk=shouldExposeCredentialsContainer, - Exposed=Window, - SecureContext diff --git a/sources b/sources index 777aa6f..baf5d91 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (webkitgtk-2.50.2.tar.xz) = 1d4d61702c4e4a43ed3ec808e9a20d126032847a830377d7d4732304111845d06f1df49688ef042825475ecee17b3e457a3b31ce0406089f95230b64960f5129 -SHA512 (webkitgtk-2.50.2.tar.xz.asc) = 9783ea78b226cbcf51973b804cace90bb8e4ff82e714fb6bce3ffd08a8eb93c2bc237ad82e1914ce3f8ea33d0f52f361ed41d1ad0618a68f7a7ff29c2d0eb9b1 +SHA512 (webkitgtk-2.50.3.tar.xz) = 32bebcb99464490ce36116c19e1da40269a7d22bed499056d80a0ad49843defc938203cf3450c122d7ee7aaa87203b265437db400e938e96af30d71f36cef2cf +SHA512 (webkitgtk-2.50.3.tar.xz.asc) = 635998799265ae125ad5ba6e45f939a33f465719756397d125f340818bf35b31d6924dbf91a762201f1f06741c92d2599515f1e28e5d4bdc2a3f16ae678b7aff diff --git a/webkitgtk.spec b/webkitgtk.spec index b7bc86f..66bc241 100644 --- a/webkitgtk.spec +++ b/webkitgtk.spec @@ -19,7 +19,7 @@ %endif Name: webkitgtk -Version: 2.50.2 +Version: 2.50.3 Release: %autorelease Summary: GTK web content engine library @@ -57,11 +57,6 @@ Source1: https://webkitgtk.org/releases/webkitgtk-%{version}.tar.xz.asc # $ gpg --export --export-options export-minimal 013A0127AC9C65B34FFA62526C1009B693975393 5AA3BC334FD7E3369E7C77B291C559DBE4C9123B > webkitgtk-keys.gpg Source2: webkitgtk-keys.gpg -# https://github.com/WebKit/WebKit/commit/730bffd856d2a1e56dd3bd2a0702282f19c5242a -Patch: build.patch -# https://bugs.webkit.org/show_bug.cgi?id=300718 -Patch: CVE-2025-43421.patch - BuildRequires: bison BuildRequires: bubblewrap BuildRequires: clang From 8f948373e5991f4222e79564abe5c29b23943293 Mon Sep 17 00:00:00 2001 From: Tomas Popela Date: Tue, 16 Dec 2025 14:49:33 +0100 Subject: [PATCH 08/12] Update to 2.50.4 --- sources | 4 ++-- webkitgtk.spec | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/sources b/sources index baf5d91..7475e78 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (webkitgtk-2.50.3.tar.xz) = 32bebcb99464490ce36116c19e1da40269a7d22bed499056d80a0ad49843defc938203cf3450c122d7ee7aaa87203b265437db400e938e96af30d71f36cef2cf -SHA512 (webkitgtk-2.50.3.tar.xz.asc) = 635998799265ae125ad5ba6e45f939a33f465719756397d125f340818bf35b31d6924dbf91a762201f1f06741c92d2599515f1e28e5d4bdc2a3f16ae678b7aff +SHA512 (webkitgtk-2.50.4.tar.xz) = e7b8a6d93f91cd63f00567c886f21853b3fd8e9e48ac21a61b4a841a096b472c3ad0ef0aea45d3c6b8a6bf13790683bdeb3c57f1ba4c949861e9599af4a0051c +SHA512 (webkitgtk-2.50.4.tar.xz.asc) = 2315affcf0c5f49bc0ff53301ecd625d4d46bf4ca3732af847594be34d85e2ca364233e22295b6a19c6f02aaa7adb6620e82aa0916a101c6c0ce5af270ca06bf diff --git a/webkitgtk.spec b/webkitgtk.spec index 66bc241..533856b 100644 --- a/webkitgtk.spec +++ b/webkitgtk.spec @@ -19,7 +19,7 @@ %endif Name: webkitgtk -Version: 2.50.3 +Version: 2.50.4 Release: %autorelease Summary: GTK web content engine library From ef2e2225d9e49a2ba7a43a8f6d3a9ac5ba012d0d Mon Sep 17 00:00:00 2001 From: Michael Catanzaro Date: Tue, 10 Feb 2026 14:29:35 -0600 Subject: [PATCH 09/12] Update to 2.50.5 --- sources | 4 ++-- webkitgtk.spec | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/sources b/sources index 7475e78..45af052 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (webkitgtk-2.50.4.tar.xz) = e7b8a6d93f91cd63f00567c886f21853b3fd8e9e48ac21a61b4a841a096b472c3ad0ef0aea45d3c6b8a6bf13790683bdeb3c57f1ba4c949861e9599af4a0051c -SHA512 (webkitgtk-2.50.4.tar.xz.asc) = 2315affcf0c5f49bc0ff53301ecd625d4d46bf4ca3732af847594be34d85e2ca364233e22295b6a19c6f02aaa7adb6620e82aa0916a101c6c0ce5af270ca06bf +SHA512 (webkitgtk-2.50.5.tar.xz) = 4ee6370dce688987876c67314263a9ea556eee5a4cb4a73454d1d1a940e62a49770082a2e29671496b1a88e14537538935b5c078fc3ac393a49d0c149dce2e7b +SHA512 (webkitgtk-2.50.5.tar.xz.asc) = 742aad9718975258b6786296231edad59e97e802e077563fe4816eb6fa006e76dc613d73996c20689ad8d63b03acfdfb21dd137ba0da38e155e49253a6f43ca5 diff --git a/webkitgtk.spec b/webkitgtk.spec index 533856b..eabe8e6 100644 --- a/webkitgtk.spec +++ b/webkitgtk.spec @@ -19,7 +19,7 @@ %endif Name: webkitgtk -Version: 2.50.4 +Version: 2.50.5 Release: %autorelease Summary: GTK web content engine library From 3cf3cfa0e8c0dda4116d490297604ec79afe5eea Mon Sep 17 00:00:00 2001 From: Michael Catanzaro Date: Sat, 21 Mar 2026 12:56:51 -0500 Subject: [PATCH 10/12] Update to 2.52.0 --- sources | 4 ++-- webkitgtk.spec | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/sources b/sources index 45af052..3150e13 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (webkitgtk-2.50.5.tar.xz) = 4ee6370dce688987876c67314263a9ea556eee5a4cb4a73454d1d1a940e62a49770082a2e29671496b1a88e14537538935b5c078fc3ac393a49d0c149dce2e7b -SHA512 (webkitgtk-2.50.5.tar.xz.asc) = 742aad9718975258b6786296231edad59e97e802e077563fe4816eb6fa006e76dc613d73996c20689ad8d63b03acfdfb21dd137ba0da38e155e49253a6f43ca5 +SHA512 (webkitgtk-2.52.0.tar.xz) = acb9cb5748b7b7e3a28076116cfd5acc5136e14e416bbac5d318d21af7b20471a91fd4341a39cc8cd2dc04c997e5ab122ea8a2306bea9e66472445ac268aa28c +SHA512 (webkitgtk-2.52.0.tar.xz.asc) = f671823ea00f68558c6d57a1d3a5650ff47bcad0f50ad3f97844b267cad7cb5ce3046f0ad3dd62d0fdc994dbde1e01cda8bcd0d3b85bef9d3c053aa11b95d4bf diff --git a/webkitgtk.spec b/webkitgtk.spec index eabe8e6..8c1f990 100644 --- a/webkitgtk.spec +++ b/webkitgtk.spec @@ -19,7 +19,7 @@ %endif Name: webkitgtk -Version: 2.50.5 +Version: 2.52.0 Release: %autorelease Summary: GTK web content engine library From 1cdba9b66d1254173abeaac1f3cb2ca629f5450d Mon Sep 17 00:00:00 2001 From: Michael Catanzaro Date: Sat, 28 Mar 2026 08:25:15 -0500 Subject: [PATCH 11/12] Update to 2.52.1 --- build.patch | 73 ++++++++++++++++++++++++++++++++++++++++++++++++++ sources | 4 +-- webkitgtk.spec | 5 +++- 3 files changed, 79 insertions(+), 3 deletions(-) create mode 100644 build.patch diff --git a/build.patch b/build.patch new file mode 100644 index 0000000..843ab9d --- /dev/null +++ b/build.patch @@ -0,0 +1,73 @@ +From fae54da171d3fdee238c33418c4779bccc9d5ecb Mon Sep 17 00:00:00 2001 +From: Claudio Saavedra +Date: Fri, 27 Mar 2026 22:09:02 +0200 +Subject: [PATCH] [GTK3] Fix the dom bindings build + https://bugs.webkit.org/show_bug.cgi?id=310915 + +Reviewed by NOBODY (OOPS!). + +305877.279@webkitglib/2.52 changed the signature of +UserMessageHandler::postMessage. Fix that so that +webkit_dom_dom_window_webkit_message_handlers_post_message() continues +to work as usual. + +* Source/WebCore/page/UserMessageHandler.cpp: +(WebCore::UserMessageHandler::postMessage): +* Source/WebCore/page/UserMessageHandler.h: +--- + Source/WebCore/page/UserMessageHandler.cpp | 16 +++++++++++----- + Source/WebCore/page/UserMessageHandler.h | 2 +- + 2 files changed, 12 insertions(+), 6 deletions(-) + +diff --git a/Source/WebCore/page/UserMessageHandler.cpp b/Source/WebCore/page/UserMessageHandler.cpp +index a82c2d47b263..1fa69a2e145f 100644 +--- a/Source/WebCore/page/UserMessageHandler.cpp ++++ b/Source/WebCore/page/UserMessageHandler.cpp +@@ -63,16 +63,20 @@ static bool passesSameOriginCheck(JSC::JSGlobalObject& globalObject, RefPtrisSameOriginAs(frameSecurityOrigin); + } + +-void UserMessageHandler::postMessage(JSC::JSGlobalObject& globalObject, JSC::JSValue value, Ref&& promise) ++ExceptionOr UserMessageHandler::postMessage(JSC::JSGlobalObject& globalObject, JSC::JSValue value, Ref&& promise) + { + // Check to see if the descriptor has been removed. This can happen if the host application has + // removed the named message handler at the WebKit2 API level. + RefPtr descriptor = m_descriptor; +- if (!descriptor) +- return promise->reject(Exception { ExceptionCode::InvalidAccessError }); ++ if (!descriptor) { ++ promise->reject(Exception { ExceptionCode::InvalidAccessError }); ++ return Exception { ExceptionCode::InvalidAccessError }; ++ } + +- if (!passesSameOriginCheck(globalObject, m_frame.get())) +- return promise->reject(Exception { ExceptionCode::InvalidAccessError, "Failed same-origin check."_s }); ++ if (!passesSameOriginCheck(globalObject, m_frame.get())) { ++ promise->reject(Exception { ExceptionCode::InvalidAccessError, "Failed same-origin check."_s }); ++ return Exception { ExceptionCode::InvalidAccessError }; ++ } + + descriptor->didPostMessage(*this, globalObject, value, [promise = WTF::move(promise)](JSC::JSValue result, const String& errorMessage) { + if (errorMessage.isNull()) +@@ -84,6 +88,8 @@ void UserMessageHandler::postMessage(JSC::JSGlobalObject& globalObject, JSC::JSV + JSC::JSLockHolder lock(globalObject); + promise->reject(JSC::createError(globalObject, errorMessage)); + }); ++ ++ return { }; + } + + ExceptionOr UserMessageHandler::postLegacySynchronousMessage(JSC::JSGlobalObject& globalObject, JSC::JSValue value) +diff --git a/Source/WebCore/page/UserMessageHandler.h b/Source/WebCore/page/UserMessageHandler.h +index ae49b223c2d6..4f59318abb25 100644 +--- a/Source/WebCore/page/UserMessageHandler.h ++++ b/Source/WebCore/page/UserMessageHandler.h +@@ -52,7 +52,7 @@ class UserMessageHandler : public RefCounted, public FrameDe + void ref() const final { RefCounted::ref(); } + void deref() const final { RefCounted::deref(); } + +- void postMessage(JSC::JSGlobalObject&, JSC::JSValue, Ref&&); ++ ExceptionOr postMessage(JSC::JSGlobalObject&, JSC::JSValue, Ref&&); + ExceptionOr postLegacySynchronousMessage(JSC::JSGlobalObject&, JSC::JSValue); + + const UserMessageHandlerDescriptor* descriptor() const { return m_descriptor.get(); } diff --git a/sources b/sources index 3150e13..6acc457 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (webkitgtk-2.52.0.tar.xz) = acb9cb5748b7b7e3a28076116cfd5acc5136e14e416bbac5d318d21af7b20471a91fd4341a39cc8cd2dc04c997e5ab122ea8a2306bea9e66472445ac268aa28c -SHA512 (webkitgtk-2.52.0.tar.xz.asc) = f671823ea00f68558c6d57a1d3a5650ff47bcad0f50ad3f97844b267cad7cb5ce3046f0ad3dd62d0fdc994dbde1e01cda8bcd0d3b85bef9d3c053aa11b95d4bf +SHA512 (webkitgtk-2.52.1.tar.xz) = 2798e2d94bcdde954e5cacfbae68219918dc2f9fae357ae8289e54db9d2ae6553b98819f073d8421d207ac55b07ec3838211602b4aeda2de248d6861ba1b3421 +SHA512 (webkitgtk-2.52.1.tar.xz.asc) = 92e94dff4321b1879a8d7933d4cec7487771262a4e5b5b76db23d94fcb75d6b02ba64478479d74372ac71ba0e17022f9535bb4cf7639dba8aefc1c9942e97b36 diff --git a/webkitgtk.spec b/webkitgtk.spec index 8c1f990..c0ecd87 100644 --- a/webkitgtk.spec +++ b/webkitgtk.spec @@ -19,7 +19,7 @@ %endif Name: webkitgtk -Version: 2.52.0 +Version: 2.52.1 Release: %autorelease Summary: GTK web content engine library @@ -57,6 +57,9 @@ Source1: https://webkitgtk.org/releases/webkitgtk-%{version}.tar.xz.asc # $ gpg --export --export-options export-minimal 013A0127AC9C65B34FFA62526C1009B693975393 5AA3BC334FD7E3369E7C77B291C559DBE4C9123B > webkitgtk-keys.gpg Source2: webkitgtk-keys.gpg +# https://bugs.webkit.org/show_bug.cgi?id=310915 +Patch: build.patch + BuildRequires: bison BuildRequires: bubblewrap BuildRequires: clang From 32861ea25a0f0b1f2452e27f3dce87d973623bea Mon Sep 17 00:00:00 2001 From: Michael Catanzaro Date: Fri, 17 Apr 2026 10:32:58 -0500 Subject: [PATCH 12/12] Update to 2.52.3 --- build.patch | 73 -------------------------------------------------- sources | 4 +-- webkitgtk.spec | 5 +--- 3 files changed, 3 insertions(+), 79 deletions(-) delete mode 100644 build.patch diff --git a/build.patch b/build.patch deleted file mode 100644 index 843ab9d..0000000 --- a/build.patch +++ /dev/null @@ -1,73 +0,0 @@ -From fae54da171d3fdee238c33418c4779bccc9d5ecb Mon Sep 17 00:00:00 2001 -From: Claudio Saavedra -Date: Fri, 27 Mar 2026 22:09:02 +0200 -Subject: [PATCH] [GTK3] Fix the dom bindings build - https://bugs.webkit.org/show_bug.cgi?id=310915 - -Reviewed by NOBODY (OOPS!). - -305877.279@webkitglib/2.52 changed the signature of -UserMessageHandler::postMessage. Fix that so that -webkit_dom_dom_window_webkit_message_handlers_post_message() continues -to work as usual. - -* Source/WebCore/page/UserMessageHandler.cpp: -(WebCore::UserMessageHandler::postMessage): -* Source/WebCore/page/UserMessageHandler.h: ---- - Source/WebCore/page/UserMessageHandler.cpp | 16 +++++++++++----- - Source/WebCore/page/UserMessageHandler.h | 2 +- - 2 files changed, 12 insertions(+), 6 deletions(-) - -diff --git a/Source/WebCore/page/UserMessageHandler.cpp b/Source/WebCore/page/UserMessageHandler.cpp -index a82c2d47b263..1fa69a2e145f 100644 ---- a/Source/WebCore/page/UserMessageHandler.cpp -+++ b/Source/WebCore/page/UserMessageHandler.cpp -@@ -63,16 +63,20 @@ static bool passesSameOriginCheck(JSC::JSGlobalObject& globalObject, RefPtrisSameOriginAs(frameSecurityOrigin); - } - --void UserMessageHandler::postMessage(JSC::JSGlobalObject& globalObject, JSC::JSValue value, Ref&& promise) -+ExceptionOr UserMessageHandler::postMessage(JSC::JSGlobalObject& globalObject, JSC::JSValue value, Ref&& promise) - { - // Check to see if the descriptor has been removed. This can happen if the host application has - // removed the named message handler at the WebKit2 API level. - RefPtr descriptor = m_descriptor; -- if (!descriptor) -- return promise->reject(Exception { ExceptionCode::InvalidAccessError }); -+ if (!descriptor) { -+ promise->reject(Exception { ExceptionCode::InvalidAccessError }); -+ return Exception { ExceptionCode::InvalidAccessError }; -+ } - -- if (!passesSameOriginCheck(globalObject, m_frame.get())) -- return promise->reject(Exception { ExceptionCode::InvalidAccessError, "Failed same-origin check."_s }); -+ if (!passesSameOriginCheck(globalObject, m_frame.get())) { -+ promise->reject(Exception { ExceptionCode::InvalidAccessError, "Failed same-origin check."_s }); -+ return Exception { ExceptionCode::InvalidAccessError }; -+ } - - descriptor->didPostMessage(*this, globalObject, value, [promise = WTF::move(promise)](JSC::JSValue result, const String& errorMessage) { - if (errorMessage.isNull()) -@@ -84,6 +88,8 @@ void UserMessageHandler::postMessage(JSC::JSGlobalObject& globalObject, JSC::JSV - JSC::JSLockHolder lock(globalObject); - promise->reject(JSC::createError(globalObject, errorMessage)); - }); -+ -+ return { }; - } - - ExceptionOr UserMessageHandler::postLegacySynchronousMessage(JSC::JSGlobalObject& globalObject, JSC::JSValue value) -diff --git a/Source/WebCore/page/UserMessageHandler.h b/Source/WebCore/page/UserMessageHandler.h -index ae49b223c2d6..4f59318abb25 100644 ---- a/Source/WebCore/page/UserMessageHandler.h -+++ b/Source/WebCore/page/UserMessageHandler.h -@@ -52,7 +52,7 @@ class UserMessageHandler : public RefCounted, public FrameDe - void ref() const final { RefCounted::ref(); } - void deref() const final { RefCounted::deref(); } - -- void postMessage(JSC::JSGlobalObject&, JSC::JSValue, Ref&&); -+ ExceptionOr postMessage(JSC::JSGlobalObject&, JSC::JSValue, Ref&&); - ExceptionOr postLegacySynchronousMessage(JSC::JSGlobalObject&, JSC::JSValue); - - const UserMessageHandlerDescriptor* descriptor() const { return m_descriptor.get(); } diff --git a/sources b/sources index 6acc457..5d2ff95 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (webkitgtk-2.52.1.tar.xz) = 2798e2d94bcdde954e5cacfbae68219918dc2f9fae357ae8289e54db9d2ae6553b98819f073d8421d207ac55b07ec3838211602b4aeda2de248d6861ba1b3421 -SHA512 (webkitgtk-2.52.1.tar.xz.asc) = 92e94dff4321b1879a8d7933d4cec7487771262a4e5b5b76db23d94fcb75d6b02ba64478479d74372ac71ba0e17022f9535bb4cf7639dba8aefc1c9942e97b36 +SHA512 (webkitgtk-2.52.3.tar.xz.asc) = cb7f6dc0e2d65c763988e9a18c48ee6810d60a8d2351912bdd33358dcd2d46b994ba34f85c6f8315a34d5b5cb78bd2f0dcb78d076af58e657d1817fdd56f005d +SHA512 (webkitgtk-2.52.3.tar.xz) = 8007688e4eb5b465a6f50e05e89858f970f7bbaed45844b8f97175de1fb24e41e6d88f4f6b6299d5ae2ad4e19483da371ac16257d787626da29de7551fbd2a3c diff --git a/webkitgtk.spec b/webkitgtk.spec index c0ecd87..8b66b7c 100644 --- a/webkitgtk.spec +++ b/webkitgtk.spec @@ -19,7 +19,7 @@ %endif Name: webkitgtk -Version: 2.52.1 +Version: 2.52.3 Release: %autorelease Summary: GTK web content engine library @@ -57,9 +57,6 @@ Source1: https://webkitgtk.org/releases/webkitgtk-%{version}.tar.xz.asc # $ gpg --export --export-options export-minimal 013A0127AC9C65B34FFA62526C1009B693975393 5AA3BC334FD7E3369E7C77B291C559DBE4C9123B > webkitgtk-keys.gpg Source2: webkitgtk-keys.gpg -# https://bugs.webkit.org/show_bug.cgi?id=310915 -Patch: build.patch - BuildRequires: bison BuildRequires: bubblewrap BuildRequires: clang