profiles: p.mask net-lib/webkit-gtk SLOT=2 and SLOT=3 for security

Bug: https://bugs.gentoo.org/577068
johu · Feb 23, 2018 · a880818 · a880818
1 parent ab6047e
commit a880818
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/profiles/package.mask b/profiles/package.mask
@@ -29,6 +29,16 @@
 
 #--- END OF EXAMPLES ---
 
+# Mart Raudsepp <[email protected]> (23 Feb 2018)
+# Old net-libs/webkit-gtk SLOTs have hundreds of known security issues.
+# Use the security safe net-libs webkit-gtk SLOT=4 instead via
+# libraries and applications ported to gtk3 and webkit2gtk API.
+# Masked for removal in 30 days. Bug #577068.
+# Please keep this package.mask entry until at least 25th May 2018 for
+# extra notification of the security vulnerabilities.
+net-libs/webkit-gtk:2
+net-libs/webkit-gtk:3
+
 # Mart Raudsepp <[email protected]> (23 Feb 2018)
 # Older versions of GnuCash use security vulnerable old webkit-gtk slot.
 # Use gnucash-2.7.4 or newer instead, but pay attention to the news item: