webkit-1.2.3 (security fixes)

[ken@…]

According to today's lwn.net (subscribers only for the next 2 weeks), open suse have reported a string of vulnerabilities in webkit, fixed in 1.2.3. ​http://lwn.net/Alerts/398445/

The links to the "original" post/thread are broken. Claims to fix CVE-2010-1386 CVE-2010-1392 CVE-2010-1405 CVE-2010-1407 CVE-2010-1416 CVE-2010-1417 CVE-2010-1418 CVE-2010-1421 CVE-2010-1422 CVE-2010-1501 CVE-2010-1664 CVE-2010-1665 CVE-2010-1758 CVE-2010-1759 CVE-2010-1760 CVE-2010-1761 CVE-2010-1762 CVE-2010-1767 CVE-2010-1770 CVE-2010-1771 CVE-2010-1772 CVE-2010-1773 CVE-2010-1774

Some of those are "reserved" numbers, the rest are labelled as 'apple', but it's the same webkit!

The gtk webkit-1.1 series is not maintained. Fedora have moved to webkit-1.2 for older releases with gnome-2.28. Works for me with both epiphany-2.28.2 and 2.30.2 on LFS-6.6 (and with midori). On early gnome-2.28 it required libsoup >= 2.28.2, but that version is already in the book.

[ken@…]

Also, I note that gail isrequired, curl is no longer used, and MathML is an optional dependency.

[ken@…]

Note that SharedWorkers and filters are now turned on automatically in my build.

[ken@…]

fixed in r8476 et seq.

[bdubbs@…]

Milestone renamed