From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: bug#26176: What to do about unmaintained frameworks like webkitgtk@2.4 in Guix? Date: Fri, 7 Apr 2017 08:02:42 -0400 Message-ID: <20170407120242.GA21304@jasmine> References: <20170319204414.GA23467@jasmine> <20170319221738.rjmsoak3y5otq5vu@abyayala> <20170320065054.GE19779@macbook42.flashner.co.il> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="Kj7319i9nmIyA2yE" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:43501) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cwSbb-0003kJ-5Z for bug-guix@gnu.org; Fri, 07 Apr 2017 08:03:11 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cwSbW-0008Cl-8H for bug-guix@gnu.org; Fri, 07 Apr 2017 08:03:07 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:37611) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1cwSbW-0008Cc-5a for bug-guix@gnu.org; Fri, 07 Apr 2017 08:03:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1cwSbV-00058t-UZ for bug-guix@gnu.org; Fri, 07 Apr 2017 08:03:01 -0400 Sender: "Debbugs-submit" Resent-Message-ID: Content-Disposition: inline In-Reply-To: <20170320065054.GE19779@macbook42.flashner.co.il> List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Efraim Flashner Cc: 26176@debbugs.gnu.org --Kj7319i9nmIyA2yE Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Mon, Mar 20, 2017 at 08:50:54AM +0200, Efraim Flashner wrote: > kicad uses wxwidgets built with gtk+-2, and the one that didn't show up > at all, gnucash, uses webkitgtk/gtk+-2, which is the gtk+@2 version of > webkit@2.4. Good news: the GnuCash developers are actively working make GnuCash compatible with the latest version of webkitgtk (or to completely remove the dependency): https://bugzilla.gnome.org/show_bug.cgi?id=751635 The other good news is that, apparently, GnuCash's use of webkit is relatively insulated from security issues: "GnuCash isn't affected by WebKit vulnerabilities, WebKit is used exclusively to render HTML and interpret Javascript both created by GnuCash itself." https://bugzilla.gnome.org/show_bug.cgi?id=751635#c4 --Kj7319i9nmIyA2yE Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAljnf+IACgkQJkb6MLrK fwh0hw//YAWut8x3xxMUxWoKKTPFVj0Te9uHmbqRSpUGWeFG+Et1QdAdmifyPh+C fUMqfg7T2w/74awFCGjpbaZ5zTU0ha9PIpVbO0HXUaUc/DV6si/3+PyfG0ZKOm07 dHXQC2Yor1ilBT4aa8lw5N+A4+L4DQ7wvaMMGrNyJxYqG/RgGubKk+2B91+RMNmV YOyw0pW5NztXNt8lOKMaluPsTSf+mJLhgtj7K/3z/zv1Wp31X6JJZA1Wjn7zYySb fJac29kMiuKPRrnSwV27fh22GN7MicZ47o39ItcXeSl+UwYbbhGrgSShqk9a/zQd UYErWYHT+7+vz1n0vMv3JK9ETvCvosGGxcPGdV6ci8vFCGgk6lK0CHbl+0TNGGLE tSyOl+PWrir/ASuTNJl+tJa7D/68L8knEl7LkzRyy9vSOtl3gaOhmdhtaVHfjjne 0NSVyYC20ncyn1jrrKs+veUtm09b7+zfIurUV+4MYVFQM4pQNj6H0ClVinOIxaD0 4HDJoxWpRqkMJyC0sCGGi1IPQpjaaq0QNjumUz/CKj7bbEqzTIs7vsUfBo9hSGWc B67/3e8acbjI9AabVQCO8Uu/XCJuZvJqrnL8tBxAdDOPlhdRN7vfPc4fmWZXRTgd x/tZOBLhrqRJjzBXuBY+TSulLNa0+Tusdce3Uy7182JJhuRiS0Q= =Yu04 -----END PGP SIGNATURE----- --Kj7319i9nmIyA2yE--