webkit2gtk (2.50.4-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * Update to 2.50.4 to fix security issues.
    - CVE-2025-14174, CVE-2025-43501, CVE-2025-43529, CVE-2025-43531,
      CVE-2025-43535, CVE-2025-43536, CVE-2025-43541

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 06 Jan 2026 08:15:42 -0500

webkit2gtk (2.50.3-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * Update to 2.50.3 to fix security issues.
    - Dropped patches no longer needed:
      + debian/patches/fix-link-error.patch
      + debian/patches/fix-crash.patch
    - CVE-2025-13947
    - CVE-2025-43421
    - CVE-2025-43458
    - CVE-2025-66287

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 09 Dec 2025 08:40:46 -0500

webkit2gtk (2.50.2-0ubuntu0.22.04.2) jammy-security; urgency=medium

  * Update to 2.50.2 to fix security issues.
    - Add patches from resolute package:
      + debian/patches/fix-link-error.patch:
      + debian/patches/fix-crash.patch:
    - CVE-2025-43392, CVE-2025-43425, CVE-2025-43427, CVE-2025-43429,
      CVE-2025-43430, CVE-2025-43431, CVE-2025-43432, CVE-2025-43434,
      CVE-2025-43440, CVE-2025-43443

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 01 Dec 2025 07:32:52 -0500

webkit2gtk (2.50.1-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * Update to 2.50.1 to fix security issues.
    - CVE-2025-43343
  * debian/patches, debian/source/lintian-overrides, debian/copyright,
    debian/gbp.conf, debian/*symbols, debian/upstream/*: sync with resolute
    package.
  * debian/control*, debian/rules: build with gcc-12 since gcc-11 which is
    the default on Jammy is no longer supported.
  * Attempt to limit virtual memory exhaustion on 32-bit platforms when
    building
    - debian/rules: limit parallel builds on i386 and armhf.
    - debian/rules: build with -O1 and -g0 on 32-bit platforms.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 29 Oct 2025 09:40:19 -0400

webkit2gtk (2.48.7-0ubuntu0.22.04.2) jammy-security; urgency=medium

  * Update to 2.48.7 to fix security issues.
    - CVE-2025-43272, CVE-2025-43342, CVE-2025-43356, CVE-2025-43368
  * debian/patches/fix-ftbfs-armv7.patch: removed, included in new version.
  * debian/patches/fix-ftbfs-op_instanceof_return_location.patch: fix new
    op_instanceof_return_location build issue.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 02 Oct 2025 08:41:44 -0400

webkit2gtk (2.48.5-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * Update to 2.48.5 to fix security issues.
    - CVE-2025-6558, CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
      CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
      CVE-2025-43240, CVE-2025-43265
  * debian/patches/fix-ftbfs-armv7.patch:
    - Fix arm build.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 13 Aug 2025 14:23:52 -0400

webkit2gtk (2.48.3-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * Update to 2.48.3 to fix security issues.
    - CVE-2025-24223
    - CVE-2025-31204
    - CVE-2025-31205
    - CVE-2025-31206
    - CVE-2025-31215
    - CVE-2025-31257
  * d/p/fix-typo-denormaldisabler.patch: dropped, no longer needed.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 04 Jun 2025 15:28:17 -0400

webkit2gtk (2.48.1-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * Update to 2.48.1 to fix security issues.
    - d/p/fix-typo-denormaldisabler.patch: fix build failure in i386 and
      others due to missing semicolon.
    - CVE-2024-54551
    - CVE-2025-24208
    - CVE-2025-24209
    - CVE-2025-24213
    - CVE-2025-24216
    - CVE-2025-24264
    - CVE-2025-30427

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 07 Apr 2025 11:14:55 -0400

webkit2gtk (2.48.0-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * Update to 2.48.0 to fix security issues.
    - d/p/fix-ftbfs-hurd.patch: removed, not needed in Ubuntu.
    - d/p/disable-nvidia-dmabuf.patch, d/p/fix-bmalloc-armhf.patch: synced
      from plucky package.
    - debian/rules: build with -DENABLE_SPEECH_SYNTHESIS=OFF.
    - debian/libwebkit2gtk-4.0-37.symbols: added new symbols.
    - CVE-2024-44192
    - CVE-2024-54467
    - CVE-2025-24201

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 24 Mar 2025 07:16:35 -0400

webkit2gtk (2.46.6-0ubuntu0.22.04.1) jammy-security; urgency=medium

  * Update to 2.46.6 to fix security issues.
    - debian/patches/disable-nvidia-dmabuf.patch: updated for new version
    - CVE-2025-24143
    - CVE-2025-24150
    - CVE-2025-24158
    - CVE-2025-24162

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 11 Feb 2025 10:49:09 -0500

# For older changelog entries, run 'apt-get changelog libjavascriptcoregtk-6.0-1'
