diff --git a/SOURCES/CVE-2021-30858.patch b/SOURCES/CVE-2021-30858.patch new file mode 100644 index 0000000..230f788 --- /dev/null +++ b/SOURCES/CVE-2021-30858.patch @@ -0,0 +1,30 @@ +Index: /Source/WTF/wtf/CrossThreadTask.h +=================================================================== +--- /Source/WTF/wtf/CrossThreadTask.h (revision 281383) ++++ /Source/WTF/wtf/CrossThreadTask.h (revision 281384) +@@ -88,5 +88,5 @@ + } + +-template, T>::value, int>::type = 0, typename... Parameters, typename... Arguments> ++template::value, int>::type = 0, typename... Parameters, typename... Arguments> + CrossThreadTask createCrossThreadTask(T& callee, void (T::*method)(Parameters...), const Arguments&... arguments) + { +@@ -96,5 +96,5 @@ + } + +-template, T>::value, int>::type = 0, typename... Parameters, typename... Arguments> ++template::value, int>::type = 0, typename... Parameters, typename... Arguments> + CrossThreadTask createCrossThreadTask(T& callee, void (T::*method)(Parameters...), const Arguments&... arguments) + { +Index: /Source/WebCore/Modules/indexeddb/IDBRequest.cpp +=================================================================== +--- /Source/WebCore/Modules/indexeddb/IDBRequest.cpp (revision 281383) ++++ /Source/WebCore/Modules/indexeddb/IDBRequest.cpp (revision 281384) +@@ -309,5 +309,6 @@ + targets = { this, m_transaction.get(), &m_transaction->database() }; + +- m_hasPendingActivity = false; ++ if (event.isTrusted()) ++ m_hasPendingActivity = false; + + { diff --git a/SOURCES/aarch64-page-size.patch b/SOURCES/aarch64-page-size.patch new file mode 100644 index 0000000..ec720cc --- /dev/null +++ b/SOURCES/aarch64-page-size.patch @@ -0,0 +1,9 @@ +Index: trunk/Source/cmake/WebKitFeatures.cmake +=================================================================== +--- trunk/Source/cmake/WebKitFeatures.cmake (revision 277012) ++++ trunk/Source/cmake/WebKitFeatures.cmake (revision 277015) +@@ -452,2 +452,4 @@ + option(ENABLE_EXPERIMENTAL_FEATURES "Enable experimental features" OFF) + SET_AND_EXPOSE_TO_BUILD(ENABLE_EXPERIMENTAL_FEATURES ${ENABLE_EXPERIMENTAL_FEATURES}) ++ ++SET_AND_EXPOSE_TO_BUILD(USE_64KB_PAGE_BLOCK ${USE_64KB_PAGE_BLOCK}) diff --git a/SPECS/webkit2gtk3.spec b/SPECS/webkit2gtk3.spec index 9cbafb3..8fa9fe9 100644 --- a/SPECS/webkit2gtk3.spec +++ b/SPECS/webkit2gtk3.spec @@ -12,7 +12,7 @@ Name: webkit2gtk3 Version: 2.30.4 -Release: 1%{?dist} +Release: 3%{?dist} Summary: GTK Web content engine library License: LGPLv2 @@ -25,6 +25,12 @@ Patch0: evolution-shared-secondary-process.patch # https://bugs.webkit.org/show_bug.cgi?id=219288 Patch1: aarch64-build.patch +# https://bugs.webkit.org/show_bug.cgi?id=225393 +Patch2: aarch64-page-size.patch + +# https://bugs.webkit.org/show_bug.cgi?id=229375 +Patch3: CVE-2021-30858.patch + BuildRequires: bison BuildRequires: bubblewrap BuildRequires: cmake @@ -298,6 +304,14 @@ export NINJA_STATUS="[%f/%t][%e] " %endif %changelog +* Tue Oct 05 2021 Michael Catanzaro - 2.30.4-3 +- Fix crashing on aarch64 +- Resolves: #2010825 + +* Tue Sep 28 2021 Michael Catanzaro - 2.30.4-2 +- Fix CVE-2021-30858 +- Resolves: #2006427 + * Tue Dec 15 2020 Michael Catanzaro - 2.30.4-1 - Update to 2.30.4 - Related: #1883304