webkit2gtk (2.18.4-1) unstable; urgency=high

webkit2gtk (2.18.4-1) unstable; urgency=high

  [ Alberto Garcia ]
  * New upstream release.
    + This fixes CVE-2017-13866, CVE-2017-13870, CVE-2017-7156 and
      CVE-2017-13856.
  * Refresh all patches.
  * debian/control:
    + Request native version of the Ruby package (thanks, Helmut Grohne)
      (Closes: #881637).
  * Instead of passing -DUSE_GSTREAMER_GL=OFF explicitly, let CMake do it
    if libgstreamer-plugins-bad1.0-dev is not installed.
    + debian/patches/detect-gstreamer-gl.patch:
      - Disable USE_GSTREAMER_GL if GStreamerGL is not found.
    + debian/rules:
      - Remove the list of architectures that are not using GStreamerGL.
  * debian/control:
    + Don't require libgstreamer-plugins-bad1.0-dev in hppa, m68k,
      powerpcspe, sh4 or x32.

  [ Jeremy Bicha ]
  * debian/control: Update Vcs-Git to point to correct branch.
  * Allow setting the distributor name in the User Agent string. Ubuntu
    wants this patch, but since it makes it easier to identify the user
    let's leave it disabled in Debian (Closes: #883712).
    + debian/patches/user-agent-branding.patch:
      - Patch to support updating the User-Agent string.
    + debian/rules:
      - Pass -DUSER_AGENT_GTK_DISTRIBUTOR_NAME when building for Ubuntu.

[dgit import unpatched webkit2gtk 2.18.4-1]