From f1deb8b4ac88efed89ae5027bb5e8c57063268fa Mon Sep 17 00:00:00 2001
From: Bobby Rong <rjl931189261@126.com>
Date: Fri, 1 Aug 2025 23:33:40 +0800
Subject: [PATCH] =?UTF-8?q?webkitgtk=5F6=5F0:=202.48.3=20=E2=86=92=202.48.?=
 =?UTF-8?q?5?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

https://github.com/WebKit/WebKit/compare/webkitgtk-2.48.3...webkitgtk-2.48.5
https://webkitgtk.org/security/WSA-2025-0005.html
https://webkitgtk.org/2025/07/30/webkitgtk2.48.4-released.html
https://webkitgtk.org/2025/08/01/webkitgtk2.48.5-released.html

CVE-2025-31273 CVE-2025-31278 CVE-2025-43211 CVE-2025-43212
CVE-2025-43216 CVE-2025-43227 CVE-2025-43228 CVE-2025-43240
CVE-2025-43265 CVE-2025-6558
---
 pkgs/development/libraries/webkitgtk/default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/libraries/webkitgtk/default.nix b/pkgs/development/libraries/webkitgtk/default.nix
index 5638e03f187c..9cf22fd7544c 100644
--- a/pkgs/development/libraries/webkitgtk/default.nix
+++ b/pkgs/development/libraries/webkitgtk/default.nix
@@ -80,7 +80,7 @@
 # https://webkitgtk.org/2024/10/04/webkitgtk-2.46.html recommends building with clang.
 clangStdenv.mkDerivation (finalAttrs: {
   pname = "webkitgtk";
-  version = "2.48.3";
+  version = "2.48.5";
   name = "${finalAttrs.pname}-${finalAttrs.version}+abi=${
     if lib.versionAtLeast gtk3.version "4.0" then
       "6.0"
@@ -100,7 +100,7 @@ clangStdenv.mkDerivation (finalAttrs: {
 
   src = fetchurl {
     url = "https://webkitgtk.org/releases/webkitgtk-${finalAttrs.version}.tar.xz";
-    hash = "sha256-1NxZcPD8alKf9/1nvL+rK7tekb54my6SeWQLMhengsM=";
+    hash = "sha256-u2TtnRz9WOi16JzK1x3TGt/tVjNrrXaVAxrQtmjhmHw=";
   };
 
   patches = lib.optionals clangStdenv.hostPlatform.isLinux [