- webkit2gtk (2.24.2-1+rpi1) buster-staging; urgency=medium
++webkit2gtk (2.24.3-1+rpi1) bullseye-staging; urgency=medium
+
+ [changes brought forward from 2.6.2+dfsg1-3+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sun, 25 Jan 2015 02:14:50 +0000]
+ * Disable javascript JIT as it doesn't appear to be armv6 compatible
+ (at least I assume that is the cause of the assembler errors)
+
- -- Raspbian forward porter <root@raspbian.org> Thu, 08 Aug 2019 14:06:22 +0000
++ -- Raspbian forward porter <root@raspbian.org> Fri, 09 Aug 2019 02:42:49 +0000
++
+ webkit2gtk (2.24.3-1) unstable; urgency=medium
+
+ * New upstream release (Closes: #929749).
+ * debian/control:
+ + Recommend gstreamer1.0-libav. This package allows the user to play
+ most internet videos (Closes: #870814).
+
+ -- Alberto Garcia <berto@igalia.com> Tue, 02 Jul 2019 13:03:13 +0300
+
+ webkit2gtk (2.24.2-2) unstable; urgency=high
+
+ * The WebKitGTK security advisory WSA-2019-0003 lists the following
+ security fixes in the latest versions of WebKitGTK+:
+ + CVE-2019-8571, CVE-2019-8583, CVE-2019-8586, CVE-2019-8594,
+ CVE-2019-8609, CVE-2019-8611, CVE-2019-8622 and CVE-2019-8623
+ (fixed in 2.24.0).
+ + CVE-2019-6237, CVE-2019-8584, CVE-2019-8587, CVE-2019-8596,
+ CVE-2019-8597, CVE-2019-8601, CVE-2019-8608, CVE-2019-8610 and
+ CVE-2019-8619 (fixed in 2.24.1).
+ + CVE-2019-8595, CVE-2019-8607 and CVE-2019-8615 (fixed in 2.24.2).
+ * Use the CLoop Javascript interpreter in i386 and stop telling gcc to
+ use SSE2 instructions (Closes: #930935).
+ + debian/rules:
+ - Build with -DENABLE_JIT=OFF -DENABLE_C_LOOP=ON and stop using
+ -msse2 -mfpmath=sse.
+ + debian/patches/dont-detect-sse2.patch:
+ - Don't check for SSE2 support.
+ + debian/NEWS:
+ - Remove item about the requirement to have an SSE2-capable CPU.
+
+ -- Alberto Garcia <berto@igalia.com> Mon, 24 Jun 2019 16:34:09 +0300
webkit2gtk (2.24.2-1) unstable; urgency=medium