* [core-updates] webkitgtk-2.4 and webkitgtk/gtk+-2 no longer needed?
[not found] ` <20180413074125.3773F20619@vcs0.savannah.gnu.org>
@ 2018-04-15 3:26 ` Mark H Weaver
2018-04-15 8:58 ` Ricardo Wurmus
0 siblings, 1 reply; 3+ messages in thread
From: Mark H Weaver @ 2018-04-15 3:26 UTC (permalink / raw)
To: Ricardo Wurmus; +Cc: guix-devel
rekado@elephly.net (Ricardo Wurmus) writes:
> rekado pushed a commit to branch core-updates
> in repository guix.
>
> commit 53e66fbceb275262184ad44f60a5a8d4e7061fcb
> Author: Ricardo Wurmus <rekado@elephly.net>
> Date: Thu Apr 12 20:37:54 2018 +0200
>
> gnu: gnucash: Update to 3.0.
This commit removes the last reference to 'webkitgtk/gtk+-2', which in
turn contains the only reference to 'webkitgtk-2.4'. So, we could now
delete both of those packages from the 'core-updates' branch.
I would advocate removing them, since these old versions of webkitgtk
are no longer maintained and contain a large number of known remote code
execution vulnerabilities.
Are there any objections to removing them?
Mark
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [core-updates] webkitgtk-2.4 and webkitgtk/gtk+-2 no longer needed?
2018-04-15 3:26 ` [core-updates] webkitgtk-2.4 and webkitgtk/gtk+-2 no longer needed? Mark H Weaver
@ 2018-04-15 8:58 ` Ricardo Wurmus
2018-04-17 6:22 ` Mark H Weaver
0 siblings, 1 reply; 3+ messages in thread
From: Ricardo Wurmus @ 2018-04-15 8:58 UTC (permalink / raw)
To: Mark H Weaver; +Cc: guix-devel
Hi Mark,
> rekado@elephly.net (Ricardo Wurmus) writes:
>
>> rekado pushed a commit to branch core-updates
>> in repository guix.
>>
>> commit 53e66fbceb275262184ad44f60a5a8d4e7061fcb
>> Author: Ricardo Wurmus <rekado@elephly.net>
>> Date: Thu Apr 12 20:37:54 2018 +0200
>>
>> gnu: gnucash: Update to 3.0.
>
> This commit removes the last reference to 'webkitgtk/gtk+-2', which in
> turn contains the only reference to 'webkitgtk-2.4'. So, we could now
> delete both of those packages from the 'core-updates' branch.
>
> I would advocate removing them, since these old versions of webkitgtk
> are no longer maintained and contain a large number of known remote code
> execution vulnerabilities.
>
> Are there any objections to removing them?
No objections from me; please go ahead and remove them. Thanks!
--
Ricardo
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [core-updates] webkitgtk-2.4 and webkitgtk/gtk+-2 no longer needed?
2018-04-15 8:58 ` Ricardo Wurmus
@ 2018-04-17 6:22 ` Mark H Weaver
0 siblings, 0 replies; 3+ messages in thread
From: Mark H Weaver @ 2018-04-17 6:22 UTC (permalink / raw)
To: Ricardo Wurmus; +Cc: guix-devel
Ricardo Wurmus <rekado@elephly.net> writes:
>> rekado@elephly.net (Ricardo Wurmus) writes:
>>
>>> rekado pushed a commit to branch core-updates
>>> in repository guix.
>>>
>>> commit 53e66fbceb275262184ad44f60a5a8d4e7061fcb
>>> Author: Ricardo Wurmus <rekado@elephly.net>
>>> Date: Thu Apr 12 20:37:54 2018 +0200
>>>
>>> gnu: gnucash: Update to 3.0.
>>
>> This commit removes the last reference to 'webkitgtk/gtk+-2', which in
>> turn contains the only reference to 'webkitgtk-2.4'. So, we could now
>> delete both of those packages from the 'core-updates' branch.
>>
>> I would advocate removing them, since these old versions of webkitgtk
>> are no longer maintained and contain a large number of known remote code
>> execution vulnerabilities.
>>
>> Are there any objections to removing them?
>
> No objections from me; please go ahead and remove them. Thanks!
Done in commit 38039b4fa917c7516535167fb082ea63850ee578 on core-updates.
Thanks,
Mark
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2018-04-17 6:23 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
[not found] <20180413074123.17337.31376@vcs0.savannah.gnu.org>
[not found] ` <20180413074125.3773F20619@vcs0.savannah.gnu.org>
2018-04-15 3:26 ` [core-updates] webkitgtk-2.4 and webkitgtk/gtk+-2 no longer needed? Mark H Weaver
2018-04-15 8:58 ` Ricardo Wurmus
2018-04-17 6:22 ` Mark H Weaver
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/guix.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).