Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 622682 - media-libs/phonon-gstreamer dependency
Summary: media-libs/phonon-gstreamer dependency
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo KDE team
URL:
Whiteboard:
Keywords:
: 624396 (view as bug list)
Depends on:
Blocks:
 
Reported: 2017-06-25 10:33 UTC by Marcin Szamotulski
Modified: 2017-07-10 16:51 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge --info (emerge_info.txt,6.24 KB, text/plain)
2017-06-25 10:33 UTC, Marcin Szamotulski
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Marcin Szamotulski 2017-06-25 10:33:13 UTC
Created attachment 477942 [details]
emerge --info

=media-libs/phonon-gstreamer-4.9.0-r1 (and 4.9.0, the only non live versions) hava a mask: !<dev-qt/qtwebkit-4.10.4:4[gstreamer]
but `dev-qt/qtwebkit-4.10.4` is masked in the profile.
Comment 1 Michael Palimaka (kensington) gentoo-dev 2017-06-25 10:35:39 UTC
It's blocking all versions *prior* to dev-qt/qtwebkit-4.10.4, which right now is 4.8.6-r1 and 4.8.7.
Comment 2 Mart Raudsepp gentoo-dev 2017-06-25 10:40:44 UTC
The blocker is satisfied by disabling USE=gstreamer per-package on dev-qt/qtwebkit:4 or not having qtwebkit:4 installed at all. qtwebkit:4 is vulnerable to many webkit security bugs, and its USE=gstreamer is using gstreamer:0.10 instead of gstreamer:1.0, where the former (0.10) also has various known vulnerabilities in the more specific plugins that make the gstreamer stack useful (gst-plugins-good:0.10 etc).
If you need qtwebkit:4 for some reason still, I suggest disabling USE=gstreamer on just qtwebkit:4 via /etc/portage/package.use

I don't know what the effect of qtwebkit:4[-gstreamer] would be to Amarok
Comment 3 Andreas Sturmlechner gentoo-dev 2017-06-25 10:44:37 UTC
Amarok certainly doesn't care, in the meantime there is an ~arch revbump disabling wikipedia widget to remove the only qtwebkit dependency.
Comment 4 Andreas Sturmlechner gentoo-dev 2017-06-25 16:05:38 UTC
So, closing as there is nothing to do here and the blocker doing its job, as seen in the linked bug.
Comment 5 Andreas Sturmlechner gentoo-dev 2017-07-10 06:00:37 UTC
*** Bug 624396 has been marked as a duplicate of this bug. ***
Comment 6 Andreas Sturmlechner gentoo-dev 2017-07-10 16:51:06 UTC
*** Bug 624396 has been marked as a duplicate of this bug. ***