profiles: p.mask net-lib/webkit-gtk SLOT=2 and SLOT=3 for security

Bug: https://bugs.gentoo.org/577068

diff --git a/profiles/package.mask b/profiles/package.mask
index b434750712e5f2fa485754dd3ad4716b1559a6db..0d29da6bc95ecf9b3b5a6819ca9a585a45b9a30e 100644 (file)
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,16 @@
 
 #--- END OF EXAMPLES ---
 
+# Mart Raudsepp <leio@gentoo.org> (23 Feb 2018)
+# Old net-libs/webkit-gtk SLOTs have hundreds of known security issues.
+# Use the security safe net-libs webkit-gtk SLOT=4 instead via
+# libraries and applications ported to gtk3 and webkit2gtk API.
+# Masked for removal in 30 days. Bug #577068.
+# Please keep this package.mask entry until at least 25th May 2018 for
+# extra notification of the security vulnerabilities.
+net-libs/webkit-gtk:2
+net-libs/webkit-gtk:3
+
 # Mart Raudsepp <leio@gentoo.org> (23 Feb 2018)
 # Older versions of GnuCash use security vulnerable old webkit-gtk slot.
 # Use gnucash-2.7.4 or newer instead, but pay attention to the news item: