From: Mart Raudsepp Date: Fri, 23 Feb 2018 05:32:58 +0000 (+0200) Subject: profiles: p.mask net-lib/webkit-gtk SLOT=2 and SLOT=3 for security X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=a880818f9d0e1f8ae97cd3f94208a48709c032b5;p=gentoo.git profiles: p.mask net-lib/webkit-gtk SLOT=2 and SLOT=3 for security Bug: https://bugs.gentoo.org/577068 --- diff --git a/profiles/package.mask b/profiles/package.mask index b434750712e5..0d29da6bc95e 100644 --- a/profiles/package.mask +++ b/profiles/package.mask @@ -29,6 +29,16 @@ #--- END OF EXAMPLES --- +# Mart Raudsepp (23 Feb 2018) +# Old net-libs/webkit-gtk SLOTs have hundreds of known security issues. +# Use the security safe net-libs webkit-gtk SLOT=4 instead via +# libraries and applications ported to gtk3 and webkit2gtk API. +# Masked for removal in 30 days. Bug #577068. +# Please keep this package.mask entry until at least 25th May 2018 for +# extra notification of the security vulnerabilities. +net-libs/webkit-gtk:2 +net-libs/webkit-gtk:3 + # Mart Raudsepp (23 Feb 2018) # Older versions of GnuCash use security vulnerable old webkit-gtk slot. # Use gnucash-2.7.4 or newer instead, but pay attention to the news item: