From mboxrd@z Thu Jan 1 00:00:00 1970 From: Christopher Allan Webber Subject: Re: Staying on top of Qt security Date: Sun, 21 Feb 2016 09:42:43 -0800 Message-ID: <87ziuuarix.fsf@dustycloud.org> References: <20160214200143.GA19744@jasmine> <20160218204349.GA4179@solar> <87egc9pr2p.fsf@dustycloud.org> <20160218225938.GA29487@solar> <8760xjw81o.fsf@dustycloud.org> <20160221072837.GA16855@jasmine> Mime-Version: 1.0 Content-Type: text/plain Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:58360) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aXY2D-0007iA-M4 for guix-devel@gnu.org; Sun, 21 Feb 2016 12:43:06 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aXY2C-0008HU-QP for guix-devel@gnu.org; Sun, 21 Feb 2016 12:43:05 -0500 Received: from dustycloud.org ([2600:3c02::f03c:91ff:feae:cb51]:52600) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aXY2C-0008HO-Ic for guix-devel@gnu.org; Sun, 21 Feb 2016 12:43:04 -0500 In-reply-to: <20160221072837.GA16855@jasmine> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: Leo Famulari Cc: guix-devel@gnu.org Leo Famulari writes: > On Sat, Feb 20, 2016 at 10:27:52AM -0800, Christopher Allan Webber wrote: >> Andreas Enge writes: >> >> > On Thu, Feb 18, 2016 at 02:53:40PM -0800, Christopher Allan Webber wrote: >> >> I'm assuming this was directed at me (though I don't work on Pumpa, but >> >> I could ask the author things... I do *use* it every day though). What >> >> am I being asked here... I'm not sure? Whether Pumpa could be updated >> >> to QT 5? >> > >> > I think so :-) >> > >> > The alternative question would have been whether we could remove it, >> > but I already knew the answer... >> > >> > Andreas >> >> From Sazius: >> >> Hi! Pumpa already works with Qt 5, I'm running it on Qt 5.3.2 in Debian >> jessie myself. If you have any problems (e.g. with a newer version of >> Qt) I would consider it a bug and try to fix it :-) >> >> So it looks like we just need to update the pacakge? > > The blocker is the Pumpa dependency QJson, which has a hard dependency > on Qt-4. QJson is also used by libdbusmenu-qt. > > Apparently QJson's master branch has supported Qt-5 for some time, so I > asked the maintainers if that is true, and if they plan to issue a new > release [0]. We could try packaging from git. > > [0] > https://github.com/flavio/qjson/issues/49 Sounds good. If they don't make a new release, I think packaging from git is the best option.