Summary: | =gnome-extra/yelp-2.30.2*: Use net-libs/webkit-gtk:2 instead of net-libs/xulrunner | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | Samuli Suominen (RETIRED) <ssuominen> |
Component: | Current packages | Assignee: | Gentoo Linux Gnome Desktop Team <gnome> |
Status: | RESOLVED FIXED | ||
Severity: | normal | ||
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | All | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | |||
Bug Blocks: | 403415 |
Description
Samuli Suominen (RETIRED)
2012-05-21 05:43:44 UTC
To clarify: gnome-extra/yelp is the *only* reason the severaly vulnerable package, net-libs/xulrunner, is not masked yet. mozilla upstream discontinued security support for Firefox 3.6 and thus, xulrunner.1.9/2.0. gentoo hasn't maintained xulrunner for a while, and bugs are not getting fixed. in fact, it doesn't even build currently, see the blockers from bug 403415. The only packages pulling in the old gnome-extra/yelp are now: =gnome-base/gnome-2.32.1-r1 =gnome-base/gnome-2.32.1-r2 =gnome-base/gnome-light-2.32.1-r1 =gnome-base/gnome-light-2.32.1-r2 So removing the dependency from the 2 meta packages is trivial if that is the way you prefer to go. I would still stabilize one of yelp-3.x versions, as it's still useful in a environment with Gnome 2.x installed. But yelp-3 won't work on Gnome2, if I remember correctly, a lot of locations for documentation changed completely. We would need to push yelp-2 with webkit support as debian and mandriva did long time ago: http://svn.mandriva.com/viewvc/packages/cooker/yelp/releases/2.30.2/6/ http://svnweb.mageia.org/packages/cauldron/yelp/releases/2.30.2/4.mga1/ http://patch-tracker.debian.org/package/yelp/2.30.1+webkit-1 But I cannot work on it just now :(, I guess yelp can't use net-misc/npapi-sdk but need full xulrunner, no? (In reply to comment #3) > But yelp-3 won't work on Gnome2, if I remember correctly, a lot of locations > for documentation changed completely. We would need to push yelp-2 with > webkit support as debian and mandriva did long time ago: > http://svn.mandriva.com/viewvc/packages/cooker/yelp/releases/2.30.2/6/ > http://svnweb.mageia.org/packages/cauldron/yelp/releases/2.30.2/4.mga1/ > http://patch-tracker.debian.org/package/yelp/2.30.1+webkit-1 That's cool. I can work on that. Will report back soon... Fixed in Portage by =gnome-extra/yelp-2.30.2-r200. This bug can be the Porting bug and I'll open new for stabilization. |