commit: a880818f9d0e1f8ae97cd3f94208a48709c032b5 Author: Mart Raudsepp <leio <AT> gentoo <DOT> org> AuthorDate: Fri Feb 23 05:32:58 2018 +0000 Commit: Mart Raudsepp <leio <AT> gentoo <DOT> org> CommitDate: Fri Feb 23 05:32:58 2018 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a880818f
profiles: p.mask net-lib/webkit-gtk SLOT=2 and SLOT=3 for security Bug: https://bugs.gentoo.org/577068 profiles/package.mask | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/profiles/package.mask b/profiles/package.mask index b434750712e..0d29da6bc95 100644 --- a/profiles/package.mask +++ b/profiles/package.mask @@ -29,6 +29,16 @@ #--- END OF EXAMPLES --- +# Mart Raudsepp <l...@gentoo.org> (23 Feb 2018) +# Old net-libs/webkit-gtk SLOTs have hundreds of known security issues. +# Use the security safe net-libs webkit-gtk SLOT=4 instead via +# libraries and applications ported to gtk3 and webkit2gtk API. +# Masked for removal in 30 days. Bug #577068. +# Please keep this package.mask entry until at least 25th May 2018 for +# extra notification of the security vulnerabilities. +net-libs/webkit-gtk:2 +net-libs/webkit-gtk:3 + # Mart Raudsepp <l...@gentoo.org> (23 Feb 2018) # Older versions of GnuCash use security vulnerable old webkit-gtk slot. # Use gnucash-2.7.4 or newer instead, but pay attention to the news item:
