955769 – net-libs/webkit-gtk-2.48.1 version bump

Bug 955769 - net-libs/webkit-gtk-2.48.1 version bump

Summary: net-libs/webkit-gtk-2.48.1 version bump

Status:	UNCONFIRMED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal
Assignee:	Gentoo Linux Gnome Desktop Team

URL:
Whiteboard:
Keywords:	PullRequest

Depends on:
Blocks:	951085 CVE-2024-44192, CVE-2024-54467, CVE-2024-54551, CVE-2025-24201, CVE-2025-24208, CVE-2025-24209, CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427, WSA-2025-0002, WSA-2025-0003
	Show dependency tree

Reported:	2025-05-10 10:44 UTC by Jason Lethbridge
Modified:	2025-05-19 21:27 UTC (History)
CC List:	4 users (show)

See Also:	https://github.com/gentoo/gentoo/pull/42099
Package list:
Runtime testing required:	---

Attachments
webkit-gtk-2.48.1.ebuild diff (file_955769.txt,657 bytes, patch) 2025-05-10 13:37 UTC, Jason Lethbridge	Details \| Diff
flite use flag (file_955769.txt,1.78 KB, patch) 2025-05-12 13:03 UTC, Jason Lethbridge	Details \| Diff
net-libs/webkit-gtk-2.46.5 > net-libs/webkit-gtk-2.48.1 patch (patch.patch,5.11 KB, patch) 2025-05-15 10:46 UTC, Jason Lethbridge	Details \| Diff
Show Obsolete (2) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Jason Lethbridge 2025-05-10 10:44:33 UTC

WebkitGTK 2.48.1 has been out for a while now yet the latest version in Gentoos main repository is 2.46.5.

This older version has had two security advisories against continued use of it
https://webkitgtk.org/security/WSA-2025-0002.html
https://webkitgtk.org/security/WSA-2025-0003.html

Reproducible: Always




app-accessibility/flite-2.2 is a new dependency for WebkitGTK 2.48.1

Comment 1 Jason Lethbridge 2025-05-10 13:37:30 UTC

Created attachment 928382 [details, diff]
webkit-gtk-2.48.1.ebuild diff

Some minor changes get it building and running on amd64

Comment 2 zyxhere 2025-05-12 10:41:50 UTC

(In reply to Jason Lethbridge from comment #1)
> Created attachment 928382 [details, diff] [details, diff]
> webkit-gtk-2.48.1.ebuild diff
> 
> Some minor changes get it building and running on amd64

You also need to add new use flag acessibility and change the RDEPEND to acessibility? ( app-accessibility/flite ), then add                 -DENABLE_SPEECH_SYNTHESIS=$(usex acessibility)
 to src_configure()

Comment 3 Jason Lethbridge 2025-05-12 13:03:24 UTC

Created attachment 928531 [details, diff]
flite use flag

(In reply to zyxhere from comment #2)
> (In reply to Jason Lethbridge from comment #1)
> > Created attachment 928382 [details, diff] [details, diff] [details, diff]
> > webkit-gtk-2.48.1.ebuild diff
> > 
> > Some minor changes get it building and running on amd64
> 
> You also need to add new use flag acessibility and change the RDEPEND to
> acessibility? ( app-accessibility/flite ), then add                
> -DENABLE_SPEECH_SYNTHESIS=$(usex acessibility)
>  to src_configure()

Thanks for pointing that out. It looks like `media-video/ffmpeg-6.1.2-r1` already has a `flite` use flag so I took the liberty of reusing that flag to make global configs easier.

Comment 4 Jason Lethbridge 2025-05-15 10:46:54 UTC

Created attachment 928845 [details, diff]
net-libs/webkit-gtk-2.46.5 > net-libs/webkit-gtk-2.48.1 patch

Installed and been using my modified ebuilds without any issue since I uploaded the first patch. Here are the other slots which I've also tested through normal daily use of Epiphany Web Browser and Evolution Mail.