qtwebengine-opensource-src (5.9.5+dfsg-0ubuntu2+esm1) bionic-security; urgency=medium

  * SECURITY UPDATE: Out of bounds write when processing specially crafted
    TIFF files.
    - debian/patches/CVE-2025-9900.patch: Add img->height and img->width
      checks in pdfium/third_party/libtiff/tif_getimage.c
    - CVE-2025-9900

 -- Elise Hlady <elise.hlady@canonical.com>  Mon, 04 May 2026 15:42:48 -0700

qtwebengine-opensource-src (5.9.5+dfsg-0ubuntu2) bionic; urgency=medium

  * Forcefully disable make output synchronization introduced in debhelper
    11.1.5~alpha1. Ninja is a single process, and with synchronized output
    the buildds do not see any activity and think that the build is hung.

 -- Dmitry Shachnev <mitya57@ubuntu.com>  Sun, 15 Apr 2018 14:16:48 +0300

qtwebengine-opensource-src (5.9.5+dfsg-0ubuntu1) bionic; urgency=medium

  * New upstream release.

 -- Simon Quigley <tsimonq2@ubuntu.com>  Sat, 14 Apr 2018 13:14:07 -0500

qtwebengine-opensource-src (5.9.4+dfsg-0ubuntu1) bionic; urgency=medium

  * New upstream release.

 -- Simon Quigley <tsimonq2@ubuntu.com>  Mon, 26 Feb 2018 17:33:29 -0600

qtwebengine-opensource-src (5.9.3+dfsg-0ubuntu1) bionic; urgency=medium

  [ Dmitry Shachnev ]
  * Backport upstream patch to fix build with ICU 60.

  [ Simon Quigley ]
  * New upstream release.
  * Update symbols from build logs.

 -- Simon Quigley <tsimonq2@ubuntu.com>  Sat, 09 Dec 2017 22:16:48 -0600

qtwebengine-opensource-src (5.9.2+dfsg-2) unstable; urgency=medium

  * Update for Qt binaries location change in qtbase 5.9.2+dfsg-3.
    - Install qwebengine_convert_dict tool into the new location.
    - Provide a compatibility symlink for the old location.
    - Bump qtbase5-private-dev and qttools5-dev-tools build-dependencies.
  * Update libqt5webenginecore5.symbols from buildds’ logs.
  * Upload to unstable.

 -- Dmitry Shachnev <mitya57@debian.org>  Fri, 27 Oct 2017 21:39:36 +0300

qtwebengine-opensource-src (5.9.2+dfsg-1) experimental; urgency=medium

  * New upstream release.
  * Remove upstream applied patch: armhf-options.patch
  * Update patch hunks.
  * Update copyright for 5.9.2.
  * Add new Build-Dependency: qtquickcontrols2-5-dev
  * Bump Qt build-dependencies to 5.9.2.
  * Update symbols for libqt5webenginecore5 for 5.9.2 for amd64.
  * Synchronize missing-sources for 5.9.2.
  * Update lintian-overrides for source.
  * Update lintian-overrides for libqt5webenginecore5

 -- Sandro Knauß <hefee@debian.org>  Thu, 19 Oct 2017 14:33:00 +0200

qtwebengine-opensource-src (5.9.1+dfsg-5) unstable; urgency=medium

  * Drop add_mips_support.patch. Chromium cannot be built for big endian
    anyway, because of skia.
  * Limit Architecture field to architectures supported by upstream
    (closes: #864323, #864324, #864325, #864326).
  * Fix package name in dh_link command (closes: #876860).
  * Bump Standards-Version to 4.1.1, stop using deprecated Priority: extra.
  * Drop autotools-dev and dh-autoreconf build-dependencies, they are
    unnecessary with debhelper 10.

 -- Dmitry Shachnev <mitya57@debian.org>  Sat, 30 Sep 2017 20:25:06 +0300

qtwebengine-opensource-src (5.9.1+dfsg-4) unstable; urgency=medium

  * Disable gold on arm64, to workaround bug #869768.
  * Add the needed QML dependencies to qtwebengine5-examples package
    (closes: #857859).
  * Update debian/libqt5webenginecore5.symbols from buildds’ logs.

 -- Dmitry Shachnev <mitya57@debian.org>  Wed, 23 Aug 2017 21:29:52 +0300

qtwebengine-opensource-src (5.9.1+dfsg-3) unstable; urgency=medium

  * Team upload.
  * Release to unstable.

 -- Lisandro Damián Nicanor Pérez Meyer <lisandro@debian.org>  Wed, 16 Aug 2017 15:27:58 -0300

qtwebengine-opensource-src (5.9.1+dfsg-2) experimental; urgency=medium

  * Make qtwebengine5-dev depend on qtpositioning5-dev, as the built CMake
    files now include it as dependency.
  * Add a patch to print compiler commands when bootstrapping gn. This helps
    us discover wrong compiler flags, such as using -mfpu=neon on armhf.
  * Add a patch to apply ARM compiler options even on host builds, to make
    sure NEON is not used for gn bootstrap.
  * Update symbols files from buildds’ logs.
  * Add myself to Uploaders.

 -- Dmitry Shachnev <mitya57@debian.org>  Fri, 21 Jul 2017 00:05:59 +0300

qtwebengine-opensource-src (5.9.1+dfsg-1) experimental; urgency=medium

  [ Sandro Knauß ]
  * New upstream release.
  * Update copyright file.
  * Update patch hunks
  * Update sysmbols for amd64.
  * Remove version dependency from libre2-dev, because with the new stable all
    releases have the new enough version.
  * Add version dependency to libav*-dev packages, otherwise it fails on
    ubuntu xenial.
  * Bump Qt build-dependencies to 5.9.1.

  [ Dmitry Shachnev ]
  * Change qtlocation5-dev build-dependency to qtpositioning5-dev, this
    is what qtwebengine really uses for positioning support.
  * Drop unused libqt5xmlpatterns5-dev and qtscript5-private-dev
    build-dependencies.
  * Update libqt5webenginecore5.symbols from the arm64 build log.

  [ Jonathan Riddell ]
  * Build-dep on qttools5-dev to build Qt Designer plugin

 -- Sandro Knauß <hefee@debian.org>  Sun, 16 Jul 2017 19:49:50 +0200

qtwebengine-opensource-src (5.9.0+dfsg-1) experimental; urgency=medium

  [ Sandro Knauß ]
  * do not use gold linker for small archs
  * Bump Standards-Version:
    - add Recommends to doc package for dev package
    - MPL-1.0 and MPL-2.0 are now in common-licenses
  * replace mocha.js with a missing-source tarball
  * Check missing-source tarballs (one new occurrence found)
  * Update short desciption of packages to make them unique.
  * Update lintian-overrides
  * Update Excluded-File list
  * Clean qmake caches in clean step
  * Update copyright file.
  * Add patch system-lcms2.patch - use system lcms2
  * Add liblcms2-dev to Build-Deps

  [ Simon Quigley ]
  * New upstream release. (Closes: #865273)
  * Fix debian/watch so it isn't hardcoded to 5.7.1.
  * Refresh add_mips_support.patch.
  * Add patch disabling last_commit_position as our tarballs are not Git
    repositories.

  [ Jonathan Riddell ]
  * New package qtwebengine5-private-dev for private headers used by
    QtWebView

  [ Alexander Volkov ]
  * Add yasm to Build-Depends
  * New package qtwebengine5-dev-tools for tools used by examples

  [ Dmitry Shachnev ]
  * Temporarily drop libv8-dev build-dependency. It is currently unused,
    and cannot be used as long as our packaged v8 is ancient (see #785696).
  * Update symbols files from the current armhf and i386 build logs.

 -- Sandro Knauß <hefee@debian.org>  Sat, 01 Jul 2017 21:10:12 +0200

qtwebengine-opensource-src (5.7.1+dfsg-6.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Build with -g1 instead of -g on 32bit architectures.
    (Closes: #863927)

 -- Adrian Bunk <bunk@debian.org>  Mon, 05 Jun 2017 16:16:54 +0300

qtwebengine-opensource-src (5.7.1+dfsg-6) unstable; urgency=medium

  [ Sandro Knauß ]
  * Make it buildable on small archs again.

 -- Sandro Knauß <hefee@debian.org>  Wed, 18 Jan 2017 19:08:01 +0100

qtwebengine-opensource-src (5.7.1+dfsg-5) unstable; urgency=medium

  [ Sandro Knauß ]
  * Fix "h.264 video does not seem to work" (Closes: #851170)
    - Add use_proprietary_codecs to defines, to be able to use ffmpeg and h264
  * Add -Wl,-z,now to LFAGS, to make build full hardened
  * Add Build-Deps ninja-build
  * make build be less ram consuming on armhf and mipsel

 -- Sandro Knauß <hefee@debian.org>  Wed, 18 Jan 2017 13:04:01 +0100

qtwebengine-opensource-src (5.7.1+dfsg-4) unstable; urgency=medium

  [ Sandro Knauß ]
  * Move QtWebEngineProcess to libqt5webenginecore5
  * Make arch+indep build sucessfull too.
  * Mark gold compiler symbols as optional

 -- Sandro Knauß <hefee@debian.org>  Wed, 11 Jan 2017 13:16:55 +0100

qtwebengine-opensource-src (5.7.1+dfsg-3) unstable; urgency=medium

  * Make arch=all build successfully (Closes: #849794)
  * Release to unstable, to get bugs fixed.

 -- Sandro Knauß <hefee@debian.org>  Sun, 08 Jan 2017 20:53:35 +0100

qtwebengine-opensource-src (5.7.1+dfsg-2) experimental; urgency=medium

  * Fix "bad VCS links in debian/control" (Closes: #849301)
  * Fix "References to QtWebEngineWidgets is missing in dev package" (Closes: #849993)
  * Add patch to get mips support.
  * Do not build no debug symbols for any arch, because they use too much RAM on
    porterboxes.
  * Make ld not cache the symbol tables of input files in memory to
    avoid memory exhaustion during the linking phase.
  * Disable debug symbols build and push this info to gyp.
  * Bump symbols from pre 5.7.1 to 5.7.1.
  * Add symbols from i386.

 -- Sandro Knauß <hefee@debian.org>  Wed, 04 Jan 2017 15:36:09 +0100

qtwebengine-opensource-src (5.7.1+dfsg-1) unstable; urgency=medium

  [ Sandro Knauß ]
  * New upstream release.
  * Release to unstable, because all other Qt modules are now in unstable.
  * Change depends of qtwebengine5-dev to correct name of
    libqtwebchannel2-dev
  * Add patch to use current system re2 package.
  * Remove minified javascript files and replace them with self constucted
    files.
  * Update source/linitian-overrides
  * Update copyright file.

 -- Sandro Knauß <hefee@debian.org>  Sat, 24 Dec 2016 03:15:08 +0100

qtwebengine-opensource-src (5.7.1~20161021+dfsg-1) experimental; urgency=medium

  * Initial package (Closes: #832420)
  * Team upload.

 -- Sandro Knauß <hefee@debian.org>  Mon, 31 Oct 2016 16:35:20 +0100
