From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:49880) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cwT3g-0000VB-CX for guix-patches@gnu.org; Fri, 07 Apr 2017 08:32:09 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cwT3a-00016X-Js for guix-patches@gnu.org; Fri, 07 Apr 2017 08:32:08 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:37619) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1cwT3a-00016S-GJ for guix-patches@gnu.org; Fri, 07 Apr 2017 08:32:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1cwT3a-0005oi-8a for guix-patches@gnu.org; Fri, 07 Apr 2017 08:32:02 -0400 Subject: bug#26390: Guitarix: Don't use webkitgtk-2.4 Resent-Message-ID: Received: from eggs.gnu.org ([2001:4830:134:3::10]:49689) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cwT2q-0000CE-IK for guix-patches@gnu.org; Fri, 07 Apr 2017 08:31:17 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cwT2n-0000nY-G0 for guix-patches@gnu.org; Fri, 07 Apr 2017 08:31:16 -0400 Received: from sender-of-o51.zoho.com ([135.84.80.216]:21012) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cwT2n-0000nQ-9i for guix-patches@gnu.org; Fri, 07 Apr 2017 08:31:13 -0400 References: <20170407115754.GA21115@jasmine> From: Ricardo Wurmus In-reply-to: <20170407115754.GA21115@jasmine> Date: Fri, 07 Apr 2017 14:31:06 +0200 Message-ID: <87fuhk1jsl.fsf@elephly.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Leo Famulari Cc: 26390@debbugs.gnu.org Leo Famulari writes: > Webkitgtk-2.4 is unmaintained upstream and contains a large number of > security vulnerabilities. The webkitgtk developers have asked > distributions to stop offering it. [0] > > This patch removes webkitgtk-2.4 from guitarix. Guitarix builds and > starts without; I don't know what features are disabled. > > Ricardo, what do you think? Sounds good to me! Webkitgtk was added only somewhat recently to the dependencies. When I added it some time ago it was not optional AFAIR. If you’ve built it successfully without webkitgtk that’s great. It was used for a built-in plugin browser, I think. -- Ricardo GPG: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC https://elephly.net