Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 573094 - dev-ruby/ruby-webkit2-gtk package needed
Summary: dev-ruby/ruby-webkit2-gtk package needed
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Ruby Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: CVE-2016-1723, CVE-2016-1724, CVE-2016-1725, CVE-2016-1726, CVE-2016-1727, CVE-2016-1728
  Show dependency tree
 
Reported: 2016-01-27 10:23 UTC by Pacho Ramos
Modified: 2016-12-15 05:55 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Pacho Ramos gentoo-dev 2016-01-27 10:23:14 UTC
We need to package this:
https://github.com/ruby-gnome2/ruby-gnome2/tree/master/webkit2-gtk

For compat with webkitgtk4, that is the webkit-gtk that should be used and, then, it would be nice if this could then let us to kill dev-ruby/ruby-webkit-gtk and dev-ruby/ruby-webkit-gtk2 that are relying on obsolete webkit-gtk slots, that have multiple security issues

Thanks
Comment 1 Hans de Graaff gentoo-dev Security 2016-01-27 18:43:52 UTC
Do I understand correctly that this should depend on net-libs/webkit:4 ?

I've now added dev-ruby/ruby-webkit2-gtk with that dependency.
Comment 2 Pacho Ramos gentoo-dev 2016-01-27 21:08:00 UTC
Yes, this are the bindings for :4 slot, while the others are for slots :2 and :3 that should be killed whenever we are able to ;)

Thanks for the fast fix!
Comment 3 Hans de Graaff gentoo-dev Security 2016-01-28 19:48:03 UTC
(In reply to Pacho Ramos from comment #2)
> Yes, this are the bindings for :4 slot, while the others are for slots :2
> and :3 that should be killed whenever we are able to ;)

I don't see any dependencies on the other versions other than ruby-gnome2 (which is a convenience dependency to get "all" packages). Should be no problem to update the dependency in ruby-gnome2 to ruby-webkit2-gtk only.
Comment 4 Hans de Graaff gentoo-dev Security 2016-12-15 05:55:27 UTC
dev-ruby/ruby-gnome2-3.0.8-r1 now only depends on ruby-webkit2-gtk (the webkit-gtk:4 binding). Once this is stable we can drop the obsolete webkit bindings of ruby-gnome2.