From f4a4460d0f1693698e80fb714776b793f887b53a Mon Sep 17 00:00:00 2001
From: Andrew Lukoshko <andrew.lukoshko@gmail.com>
Date: Tue, 18 Jul 2023 20:02:58 +0000
Subject: [PATCH] Disable JIT (CVE-2023-32435, CVE-2023-32439)

---
 SPECS/webkit2gtk3.spec | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/SPECS/webkit2gtk3.spec b/SPECS/webkit2gtk3.spec
index bfa5b7a..48e51ba 100644
--- a/SPECS/webkit2gtk3.spec
+++ b/SPECS/webkit2gtk3.spec
@@ -7,7 +7,7 @@
 
 Name:           webkit2gtk3
 Version:        2.38.5
-Release:        1%{?dist}.4
+Release:        1%{?dist}.5.alma
 Summary:        GTK Web content engine library
 
 License:        LGPLv2
@@ -201,6 +201,7 @@ pushd %{_target_platform}
   -DPORT=GTK \
   -DCMAKE_BUILD_TYPE=Release \
   -DENABLE_BUBBLEWRAP_SANDBOX=OFF \
+  -DENABLE_JIT=OFF \
   -DUSE_SOUP2=ON \
   -DENABLE_DOCUMENTATION=OFF \
   -DENABLE_GAMEPAD=OFF \
@@ -280,6 +281,9 @@ export NINJA_STATUS="[%f/%t][%e] "
 %{_datadir}/gir-1.0/JavaScriptCore-4.0.gir
 
 %changelog
+* Tue Jul 18 2023 Andrew Lukoshko <alukoshko@almalinux.org> - 2.38.5-1.5.alma
+- Disable JIT (CVE-2023-32435, CVE-2023-32439)
+
 * Thu May 25 2023 Michael Catanzaro <mcatanzaro@redhat.com> - 2.38.5-1.4
 - Add patch for CVE-2023-28204
   Resolves: #2209744