Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 584190 - www-client/surf should depend on net-libs/webkit-gtk:4
Summary: www-client/surf should depend on net-libs/webkit-gtk:4
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Jeroen Roovers (RETIRED)
URL:
Whiteboard:
Keywords: UPSTREAM
Depends on:
Blocks: CVE-2016-1723, CVE-2016-1724, CVE-2016-1725, CVE-2016-1726, CVE-2016-1727, CVE-2016-1728
  Show dependency tree
 
Reported: 2016-05-26 11:05 UTC by Pacho Ramos
Modified: 2017-10-22 21:19 UTC (History)
5 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
surf-webkit2 branch (surf-webkit2-9999.ebuild,1.53 KB, text/plain)
2016-10-16 21:19 UTC, Adam
Details
surf-webkit2 patch (surf-webkit2-9999-gentoo.patch,4.18 KB, patch)
2016-10-16 21:21 UTC, Adam
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Pacho Ramos gentoo-dev 2016-05-26 11:05:40 UTC
Hello

I was looking to reverse deps of old webkit-gtk slots because they are obsolete and vulnerable. I noticed surf browser is still needing :2 slot, but I have found openbsd people are packaging a newer surf version that is ported to :4 slot. 

If I haven't failed, it seems to be generated from the webkit2 branch of upstream:
http://git.suckless.org/surf/log/?h=surf-webkit2

We have still some other packages to get ported, then, there is no hurry for now but, I open this for tracking purposes and also to notify you for the case you want to start "playing" with that port :)

See you
Comment 1 Jeroen Roovers (RETIRED) gentoo-dev 2016-05-27 05:45:27 UTC
Maybe you can explain what the net-libs/webkit-gtk SLOTs actually mean.
Comment 2 Pacho Ramos gentoo-dev 2016-05-28 09:53:49 UTC
:2 and :3 are for the old WebKit1, the first for gtk2, the second for gtk3
:4 is the only one that is maintained, it's based on Webkit2 and relies on gtk3
Comment 3 Adam 2016-10-16 21:19:52 UTC
Created attachment 450488 [details]
surf-webkit2 branch

It works on my arm (a20 olinuxino micro) box.

I called it surf-webkit2, i know it is a dirty solution, so rewrite it please.
It was just easier for me for the beginning.
Binary is still called surf.
Comment 4 Adam 2016-10-16 21:21:44 UTC
Created attachment 450490 [details, diff]
surf-webkit2 patch
Comment 5 Adam 2016-10-16 21:28:13 UTC
Just one thing more:

I have the dmenu-xyw-4.6.patch for opening urls, etc:
http://tools.suckless.org/dmenu/patches/xyw
Comment 6 Pacho Ramos gentoo-dev 2017-02-08 09:48:58 UTC
Also Fedora will kill the old webkit-gtk versions in the upcoming months... we should try to move to the new branch in the case you want to keep this
Comment 7 Jeroen Roovers (RETIRED) gentoo-dev 2017-02-08 21:32:21 UTC
surf-webkit2 is actually behind the master branch by a few months. So we can carry our own patches or hope that upstream will merge those (few) changes in.
Comment 8 Jeroen Roovers (RETIRED) gentoo-dev 2017-03-23 06:54:03 UTC
Good news, everyone!

"""
2017-03-22

surf will “officially” make the switch from webkit1 to webkit2 soon. Current master will be pushed to surf-webkit1, and surf-webkit2 to master. The move should be done during the coming weekend or sometime next week.
""" http://suckless.org/
Comment 9 hariskar 2017-03-28 17:18:48 UTC
It's out!
Comment 10 Jeroen Roovers (RETIRED) gentoo-dev 2017-03-29 03:53:32 UTC
(In reply to hariskar from comment #9)
> It's out!

You mean [1] states it's out. However, it refers to [2] which right now gives me a 404.


[1] http://surf.suckless.org/
[2] http://dl.suckless.org/surf/surf-2.0.tar.gz
Comment 11 Jeroen Roovers (RETIRED) gentoo-dev 2017-03-29 04:21:32 UTC
(In reply to Jeroen Roovers from comment #10)
> [2] http://dl.suckless.org/surf/surf-2.0.tar.gz

I did find [3] so 2.0 is in the tree now.


[3] http://git.suckless.org/surf/snapshot/surf-2.0.tar.gz
Comment 12 Mykyta Holubakha 2017-03-29 16:23:02 UTC
surf-2.0, seems to me, should depend on webkit-gtk:4 instead of webkit-gtk:3.
Comment 13 Jeroen Roovers (RETIRED) gentoo-dev 2017-03-30 07:43:23 UTC
(In reply to Mykyta Holubakha from comment #12)
> surf-2.0, seems to me, should depend on webkit-gtk:4 instead of webkit-gtk:3.

It should? Right, comment #2. That's why you shouldn't put factual statements in the Summary. :-/
Comment 14 Jeroen Roovers (RETIRED) gentoo-dev 2017-03-30 14:43:15 UTC
I can't say it's running very well. It seems it hangs on most URLs.
Comment 15 Pacho Ramos gentoo-dev 2017-07-21 11:09:52 UTC
9999 ebuild is still using the old webkit. Thanks
Comment 16 Christopher Díaz Riveros (RETIRED) gentoo-dev Security 2017-10-05 19:56:45 UTC
Reassigning to the maintainer.

Security is already tracking this issue in bug 577068.

Thank you,

Gentoo Security Padawan
ChrisADR
Comment 17 Mart Raudsepp gentoo-dev 2017-10-22 21:19:07 UTC
Seems fixed long ago since commits d4484c9b9811701ad253a19c0afa81414cf720a7 and 0a22ad5e10ecb7b4c739cc33febfa9f1b7bba983