From patchwork Mon Feb 16 12:06:42 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Gyorgy Sarvari X-Patchwork-Id: 81149 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4BFADE7BDAA for ; Mon, 16 Feb 2026 12:06:52 +0000 (UTC) Received: from mail-wm1-f52.google.com (mail-wm1-f52.google.com [209.85.128.52]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.18113.1771243606257228078 for ; Mon, 16 Feb 2026 04:06:46 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=bROYcloj; spf=pass (domain: gmail.com, ip: 209.85.128.52, mailfrom: skandigraun@gmail.com) Received: by mail-wm1-f52.google.com with SMTP id 5b1f17b1804b1-4836e3288cdso18870765e9.0 for ; Mon, 16 Feb 2026 04:06:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1771243604; x=1771848404; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:from:to:cc:subject:date:message-id:reply-to; bh=82tzUwMZx7gGC7Kp7xlQMy87tYMuSBTN30Tk8Z2Achs=; b=bROYclojRK0HuwBIz+pQV94L1Nw7bTl4kYmmLmjRzg0JJh9PGpYYS1FSFTtD8GPxNH 8q2C1KDqd91NKTjqveJtuHrjNyzk99BuAbHBUCIgNdBau1w4S8izqfL3aOLdeMGuV/2p syrireeo6ZsHzuDKQoVtbGT9QJ5+9sTbW2HFn6l2t/+crcPNj4/Ddf74G/2+FUjpQI6z xMLz6T/MQHszGuRrJSxPwlCOULk5l7MxKlFGcU0FaXJa5R2DTBEaUF60ACnqBxocS+YO pXXmK5IYxg7bkIvdNGergdiuY5g904e7U7p123a7HCo7mG3a9jOlV9RpPLoDK90qCmE+ PE+A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771243604; x=1771848404; h=content-transfer-encoding:mime-version:message-id:date:subject:to :from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=82tzUwMZx7gGC7Kp7xlQMy87tYMuSBTN30Tk8Z2Achs=; b=W+9wxSumwKk5tj2vSLhwToRH+Ya1RcFdZZQYYuh6QD6Fz4pMDV9CUzrTrUCd6vyq/J oNP2a4VGGz7i+/k0l/vLP3x4d2g4XoRz6zSeFzsq9S0Zzong7TZ8i6HKeC0DkjTb9FOj fNSpAcnNk1/t6tFWGJCiteOctsf5SLTqaReiRipgmxL+otHtL0G8pKle3MHP/OP+j9wV 4LGah57Kv9RJpSJ2v8e2onLwMrGiu0UK7e1j/+/WWTQSST5FRsbfGqSDwvh9yV7gUbN2 YCeFTdIHRFqeD9+fCgIkDsiYHMjr7643IhmoUr/OjpcSTPi4Y3jw5n2zwywTo/DdGMmM ZXsA== X-Gm-Message-State: AOJu0YxZFe9yGbwY9D4SeUmo5XNEGj2QVySUeeeSf2t4wdH6qXG65ceK XUzrbM0VN24R8jPB/pAKwy2u9o8TPuuKa+OnesV7a366sHikURyLw5nk3Qd/3g== X-Gm-Gg: AZuq6aK61NXadc3q4/e1XmbiQDz2wRh5bxJiEDwAmaCwwtguDy34yTKrVM6qwnSmiLw fHnYlOO1HgjokVbxZXd3/xJ87zmmOWGxUhZSOIvVIADIh964a9+0OuR5Q74q2sDh9MZSQEzzsaI 6Uoe3ERWkt8c7aykG5zgd60y67K7atTr2xs9byTtts2lFxE8D89GbwTVZsxA7bncHyUkmeYmJKC MaZ6JDM/B4c/NV4cP/evNHqSg3Ze/uHeFZSmSw7ho1CaBrgBWZapAxeMJohidUn9WNpkdXQvCi4 YAykcxiBBx7l0Mt2FedntNvdaCPpQrHE30SFBUnwu5cw7tDucmy7q7eaKjULbNSm0xyNxQuJkCb hkcRDYDjNKkzy5TLNHd/TmOpVxV7pxahXS0CzlGvRe1kr/Z65bcbSsEtEX41ofpOcq5H1H1uKg5 Rfa3G+iXgXP8JtBvFilnz/ X-Received: by 2002:a05:600c:1d10:b0:483:29f4:26b3 with SMTP id 5b1f17b1804b1-48378d58838mr137388045e9.1.1771243604280; Mon, 16 Feb 2026 04:06:44 -0800 (PST) Received: from desktop ([51.154.145.205]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-483719b8e71sm244683885e9.2.2026.02.16.04.06.43 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 16 Feb 2026 04:06:43 -0800 (PST) From: Gyorgy Sarvari To: openembedded-devel@lists.openembedded.org Subject: [meta-oe][PATCH v3] webkitgtk3: upgrade 2.48.7 -> 2.50.5 Date: Mon, 16 Feb 2026 13:06:42 +0100 Message-ID: <20260216120642.2322833-1-skandigraun@gmail.com> X-Mailer: git-send-email 2.53.0 MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 16 Feb 2026 12:06:52 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/124417 Includes fixes for CVE-2025-13502, CVE-2025-13947, CVE-2025-43421, CVE-2025-43458 and CVE-2025-66287. Drop libsoup2 support. Even though this particular version still supports it, this is the last major version that is not libsoup3-only. Starting with version 2.52 (which is only 3-4 weeks away at the time of writing this message) upstream is dropping libsoup2 support completely[1]. This is a proactive removal of this feature, the sooner users start the migration, the better. Made opengl a mandatory DISTRO_FEATURE: libepoxy requires it, which is both a direct dependency, and an indirect one from gtk+3. Changelogs: https://webkitgtk.org/2026/02/09/webkitgtk2.50.5-released.html https://webkitgtk.org/2025/12/16/webkitgtk2.50.4-released.html https://webkitgtk.org/2025/12/04/webkitgtk2.50.3-released.html https://webkitgtk.org/2025/11/19/webkitgtk2.50.2-released.html https://webkitgtk.org/2025/10/10/webkitgtk2.50.1-released.html https://webkitgtk.org/2025/09/17/webkitgtk2.50.0-released.html [1]: https://webkitgtk.org/2025/10/07/webkitgtk-soup2-deprecation.html Signed-off-by: Gyorgy Sarvari --- v2: add libepoxy as an explicit build dependency (it was a dependency previously also, but it was pulled in by gtk+3 usually). This makes it clear that the recipe depends on it directly. v3: updated commit message to indicate that libepoxy is also a direct dependency. .../webkitgtk/webkitgtk3/no-musttail-arm.patch | 12 ++++++------ ...ebkitgtk3_2.48.7.bb => webkitgtk3_2.50.5.bb} | 17 +++++++++-------- 2 files changed, 15 insertions(+), 14 deletions(-) rename meta-oe/recipes-support/webkitgtk/{webkitgtk3_2.48.7.bb => webkitgtk3_2.50.5.bb} (94%) diff --git a/meta-oe/recipes-support/webkitgtk/webkitgtk3/no-musttail-arm.patch b/meta-oe/recipes-support/webkitgtk/webkitgtk3/no-musttail-arm.patch index 367e6b8342..411164433a 100644 --- a/meta-oe/recipes-support/webkitgtk/webkitgtk3/no-musttail-arm.patch +++ b/meta-oe/recipes-support/webkitgtk/webkitgtk3/no-musttail-arm.patch @@ -23,12 +23,12 @@ diff --git a/Source/WTF/wtf/Compiler.h b/Source/WTF/wtf/Compiler.h index 16e416d..68dd9a0 100644 --- a/Source/WTF/wtf/Compiler.h +++ b/Source/WTF/wtf/Compiler.h -@@ -293,7 +293,7 @@ - #if COMPILER(CLANG) - #if __SIZEOF_POINTER__ == 8 - #if !defined(MUST_TAIL_CALL) && defined(__cplusplus) && defined(__has_cpp_attribute) --#if __has_cpp_attribute(clang::musttail) && !defined(__powerpc__) && !defined(_WIN32) -+#if __has_cpp_attribute(clang::musttail) && !defined(__powerpc__) && !defined(_WIN32) && !defined(__arm__) +@@ -290,7 +290,7 @@ + // written for 64-bit may fail to tail call on 32-bit. + // It also doesn't work on ppc64le: https://github.com/llvm/llvm-project/issues/98859 + // and on Windows: https://github.com/llvm/llvm-project/issues/116568 +-#if !defined(MUST_TAIL_CALL) && COMPILER(CLANG) && __SIZEOF_POINTER__ == 8 && defined(__cplusplus) && COMPILER_HAS_CPP_ATTRIBUTE(clang::musttail) && !defined(__powerpc__) && !defined(_WIN32) ++#if !defined(MUST_TAIL_CALL) && COMPILER(CLANG) && __SIZEOF_POINTER__ == 8 && defined(__cplusplus) && COMPILER_HAS_CPP_ATTRIBUTE(clang::musttail) && !defined(__powerpc__) && !defined(_WIN32) && !defined(__arm__) #define MUST_TAIL_CALL [[clang::musttail]] #define HAVE_MUST_TAIL_CALL 1 #endif diff --git a/meta-oe/recipes-support/webkitgtk/webkitgtk3_2.48.7.bb b/meta-oe/recipes-support/webkitgtk/webkitgtk3_2.50.5.bb similarity index 94% rename from meta-oe/recipes-support/webkitgtk/webkitgtk3_2.48.7.bb rename to meta-oe/recipes-support/webkitgtk/webkitgtk3_2.50.5.bb index 118592d42b..9be30506d6 100644 --- a/meta-oe/recipes-support/webkitgtk/webkitgtk3_2.48.7.bb +++ b/meta-oe/recipes-support/webkitgtk/webkitgtk3_2.50.5.bb @@ -23,14 +23,14 @@ SRC_URI = "https://www.webkitgtk.org/releases/webkitgtk-${PV}.tar.xz \ file://0001-CMake-Add-a-variable-to-control-macro-__PAS_ALWAYS_I.patch \ file://0001-Fix-32bit-arm.patch \ " -SRC_URI[sha256sum] = "2c62aebb608e09f930a539f3623a5cc8023b5068029f42a208f45f9124da6e30" +SRC_URI[sha256sum] = "8737631bac3e9c7ad3e5208f9370e076c09d9c45b39980021ce54edadcc6f94f" inherit cmake pkgconfig gobject-introspection perlnative features_check upstream-version-is-even gi-docgen S = "${UNPACKDIR}/webkitgtk-${PV}" ANY_OF_DISTRO_FEATURES = "${GTK3DISTROFEATURES}" -REQUIRED_DISTRO_FEATURES = "${@bb.utils.contains('DISTRO_FEATURES', 'wayland', 'opengl', '', d)}" +REQUIRED_DISTRO_FEATURES = "opengl" CVE_PRODUCT = "webkitgtk webkitgtk\+" @@ -51,11 +51,10 @@ DEPENDS += " \ gstreamer1.0-plugins-base \ glib-2.0-native \ gettext-native \ + libsoup \ + libepoxy \ " -# using soup2 builds (JavaScript) API version 4.0 -# using soup3 builds (JavaScript) API version 4.1 -PACKAGECONFIG_SOUP ?= "soup3" PACKAGECONFIG ??= " \ ${@bb.utils.filter('DISTRO_FEATURES', 'systemd wayland x11', d)} \ ${@bb.utils.contains('DISTRO_FEATURES', 'x11 opengl', 'webgl opengl', '', d)} \ @@ -63,7 +62,6 @@ PACKAGECONFIG ??= " \ ${@bb.utils.contains('DISTRO_FEATURES', 'opengl', 'opengl-or-es', '', d)} \ enchant \ libsecret \ - ${PACKAGECONFIG_SOUP} \ " PACKAGECONFIG[wayland] = "-DENABLE_WAYLAND_TARGET=ON,-DENABLE_WAYLAND_TARGET=OFF,wayland libwpe wpebackend-fdo wayland-native" @@ -83,8 +81,6 @@ PACKAGECONFIG[openjpeg] = "-DUSE_OPENJPEG=ON,-DUSE_OPENJPEG=OFF,openjpeg" PACKAGECONFIG[systemd] = "-DUSE_SYSTEMD=ON,-DUSE_SYSTEMD=off,systemd" PACKAGECONFIG[reduce-size] = "-DCMAKE_BUILD_TYPE=MinSizeRel,-DCMAKE_BUILD_TYPE=Release,," PACKAGECONFIG[lcms] = "-DUSE_LCMS=ON,-DUSE_LCMS=OFF,lcms" -PACKAGECONFIG[soup2] = "-DUSE_SOUP2=ON,-DUSE_SOUP2=OFF,libsoup-2.4,,,soup3" -PACKAGECONFIG[soup3] = ",,libsoup,,,soup2" PACKAGECONFIG[journald] = "-DENABLE_JOURNALD_LOG=ON,-DENABLE_JOURNALD_LOG=OFF,systemd" PACKAGECONFIG[avif] = "-DUSE_AVIF_LOG=ON,-DUSE_AVIF=OFF,libavif" PACKAGECONFIG[media-recorder] = "-DENABLE_MEDIA_RECORDER=ON,-DENABLE_MEDIA_RECORDER=OFF,gstreamer1.0-plugins-bad" @@ -103,6 +99,7 @@ EXTRA_OECMAKE = " \ ${@oe.utils.vartrue('DEBUG_BUILD', '-DWEBKIT_NO_INLINE_HINTS=ON', '-DWEBKIT_NO_INLINE_HINTS=OFF', d)} \ -DENABLE_MINIBROWSER=ON \ -DCMAKE_EXPORT_COMPILE_COMMANDS=OFF \ + -DUSE_SOUP2=OFF \ " # pass -g1 to massively reduce the size of the debug symbols (4.3GB to 700M at time of writing) DEBUG_LEVELFLAG = "-g1" @@ -181,3 +178,7 @@ src_package_preprocess () { ${B}/WebKitGTK/DerivedSources/webkit/*.cpp } + +# complation fails with Clang-21 issue - https://github.com/llvm/llvm-project/issues/132322 +# Can be removed when clang is updated to v22 +TOOLCHAIN:arm = "gcc"