Disable JIT (CVE-2023-32435, CVE-2023-32439)

This commit is contained in:
Andrew Lukoshko 2023-07-18 20:02:58 +00:00
parent c7630c0be3
commit f4a4460d0f
1 changed files with 5 additions and 1 deletions

View File

@ -7,7 +7,7 @@
Name: webkit2gtk3
Version: 2.38.5
Release: 1%{?dist}.4
Release: 1%{?dist}.5.alma
Summary: GTK Web content engine library
License: LGPLv2
@ -201,6 +201,7 @@ pushd %{_target_platform}
-DPORT=GTK \
-DCMAKE_BUILD_TYPE=Release \
-DENABLE_BUBBLEWRAP_SANDBOX=OFF \
-DENABLE_JIT=OFF \
-DUSE_SOUP2=ON \
-DENABLE_DOCUMENTATION=OFF \
-DENABLE_GAMEPAD=OFF \
@ -280,6 +281,9 @@ export NINJA_STATUS="[%f/%t][%e] "
%{_datadir}/gir-1.0/JavaScriptCore-4.0.gir
%changelog
* Tue Jul 18 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 2.38.5-1.5.alma
- Disable JIT (CVE-2023-32435, CVE-2023-32439)
* Thu May 25 2023 Michael Catanzaro <mcatanzaro@redhat.com> - 2.38.5-1.4
- Add patch for CVE-2023-28204
Resolves: #2209744