Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 941277 - net-libs/webkit-gtk-2.46.x: version bump
Summary: net-libs/webkit-gtk-2.46.x: version bump
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Michael Orlitzky
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: CVE-2024-40857, CVE-2024-40866, CVE-2024-44185, CVE-2024-44187, CVE-2024-44244, CVE-2024-44296
  Show dependency tree
 
Reported: 2024-10-11 13:29 UTC by Michael Orlitzky
Modified: 2024-11-16 15:24 UTC (History)
10 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Orlitzky gentoo-dev 2024-10-11 13:29:10 UTC
I've committed masked versions of these ebuilds, but things don't look great over here. I've got four machines, and none of them can build it:

* https://bugs.webkit.org/show_bug.cgi?id=281138
* https://bugs.webkit.org/show_bug.cgi?id=281218

As a result, I haven't looked at the subslot yet.

I'm also having second thoughts about the cairo -> skia switch. In the masked ebuilds, I've left cairo as a dependency, so the build system can choose between cairo and skia for you. Considering that this version fixes some security issues, that was less invasive than adding a USE=skia and asking the arches to re-keyword/use.mask. But if it's going to be a headache anyway...
Comment 1 Michael Orlitzky gentoo-dev 2024-11-04 01:15:17 UTC
This builds on amd64 now, but not riscv (they have a JIT that apparently is not completely disabled by -DENABLE_JIT=OFF, and not all arches are build-tested upstream).

As security issues are piling up, we should selectively unmask this on any arches where the -r600 builds and e.g. epiphany starts. I'm CC'ing the arches we'd need a thumbs up from.
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-11-11 08:30:20 UTC
It's a lot easier if we can do this via the usual procedure (unmask it, drop keywords on everything but ~amd64, file a rekeywording bug), as automation can handle it then and so on.
Comment 3 Larry the Git Cow gentoo-dev 2024-11-16 15:24:03 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=38866df37dbdfe4a854c2de4f8db20e1e5f7d123

commit 38866df37dbdfe4a854c2de4f8db20e1e5f7d123
Author:     Michael Orlitzky <mjo@gentoo.org>
AuthorDate: 2024-11-16 15:13:50 +0000
Commit:     Michael Orlitzky <mjo@gentoo.org>
CommitDate: 2024-11-16 15:23:29 +0000

    profiles: unmask >=net-libs/webkit-gtk-2.46.0
    
    I've dropped most keywords, so this should only affect amd64 until it
    can be re-keyworded.
    
    Closes: https://bugs.gentoo.org/941277
    Signed-off-by: Michael Orlitzky <mjo@gentoo.org>

 profiles/package.mask | 7 -------
 1 file changed, 7 deletions(-)

Additionally, it has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4554da48df277ab977788dfa001c0f55953183b5

commit 4554da48df277ab977788dfa001c0f55953183b5
Author:     Michael Orlitzky <mjo@gentoo.org>
AuthorDate: 2024-11-16 15:04:22 +0000
Commit:     Michael Orlitzky <mjo@gentoo.org>
CommitDate: 2024-11-16 15:23:28 +0000

    net-libs/webkit-gtk: drop non-amd64 keywords
    
    This now builds (and runs) on amd64, but the other arches are anyone's
    guess. I plan to drop the mask and ask the arch teams to re-keyword.
    
    Bug: https://bugs.gentoo.org/941277
    Signed-off-by: Michael Orlitzky <mjo@gentoo.org>

 net-libs/webkit-gtk/webkit-gtk-2.46.3-r410.ebuild | 2 +-
 net-libs/webkit-gtk/webkit-gtk-2.46.3-r600.ebuild | 2 +-
 net-libs/webkit-gtk/webkit-gtk-2.46.3.ebuild      | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)