Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 608610 - games-rpg/runescape-launcher needs webkit-gtk:2
Summary: games-rpg/runescape-launcher needs webkit-gtk:2
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Jack Coulter
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: CVE-2016-1723, CVE-2016-1724, CVE-2016-1725, CVE-2016-1726, CVE-2016-1727, CVE-2016-1728
  Show dependency tree
 
Reported: 2017-02-08 10:04 UTC by Pacho Ramos
Modified: 2017-12-03 14:42 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Pacho Ramos gentoo-dev 2017-02-08 10:04:18 UTC
That is a big issue as we are trying to kill the old versions because they are dead and vulnerable for ages.

Reading:
https://aur.archlinux.org/packages/runescape-launcher/?comments=all

it seems it could be used for render ads :/

Is upstream aware of the issue? What happens when webkit-gtk:2 is not present?
Comment 1 Jack Coulter 2017-02-09 21:08:52 UTC
I believe you're correct, in that webkit-gtk is only used for rendering ads for players without a paid subscription to the game. In the past, there used to be a clause in the game's ToS that implied blocking the ads could result in an account ban, but I can't see any such item in the current ToS nor EULA.

I'll test it this evening after work and see what the behaviour is when webkit-gtk:2 is not present.
Comment 2 Jack Coulter 2017-02-10 07:36:05 UTC
Unfortunately upstream's binary fails to launch if webkit-gtk:2 is not installed, as it is linked against libwebkitgtk-1.0.so.0. It seems also that the equivalent library installed by webkit-gtk:4 is not ABI compatible, as symlinking it as libwebkitgtk-1.0.so.0 simply to test results in a segfault.

For what it's worth, this isn't the only package on my system that requires webkit-gtk:2, app-office/gnucash requires it too.

How do you want to proceed here?
Comment 3 Pacho Ramos gentoo-dev 2017-02-10 19:17:34 UTC
For now we will wait until all the other reverse deps are migrated (most of them are in progress, also gnucash), but you should try to let upstream know the issue as we will treeclean the old webkit-gtk soon. You can tell them that also Fedora (that is more widely used) is doing the same for their next major version)
Comment 4 Pacho Ramos gentoo-dev 2017-06-02 08:10:17 UTC
Some people in https://aur.archlinux.org/packages/runescape-launcher/?comments=all has posted more recent comments suggesting that the dependency could no longer be needed (comments are from April) :/
Comment 5 Pacho Ramos gentoo-dev 2017-07-21 10:48:21 UTC
[master ec9b40b1cb8] games-rpg/runescape-launcher: Looks to work without webkit-gtk:2 as also commented by ArchLinux users (#608610)
 1 file changed, 83 insertions(+)
 create mode 100644 games-rpg/runescape-launcher/runescape-launcher-2.2.4-r1.ebuild

It seems to open and work for me