[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [core-updates] webkitgtk-2.4 and webkitgtk/gtk+-2 no longer needed?
From: |
Mark H Weaver |
Subject: |
Re: [core-updates] webkitgtk-2.4 and webkitgtk/gtk+-2 no longer needed? |
Date: |
Tue, 17 Apr 2018 02:22:16 -0400 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/25.3 (gnu/linux) |
Ricardo Wurmus <address@hidden> writes:
>> address@hidden (Ricardo Wurmus) writes:
>>
>>> rekado pushed a commit to branch core-updates
>>> in repository guix.
>>>
>>> commit 53e66fbceb275262184ad44f60a5a8d4e7061fcb
>>> Author: Ricardo Wurmus <address@hidden>
>>> Date: Thu Apr 12 20:37:54 2018 +0200
>>>
>>> gnu: gnucash: Update to 3.0.
>>
>> This commit removes the last reference to 'webkitgtk/gtk+-2', which in
>> turn contains the only reference to 'webkitgtk-2.4'. So, we could now
>> delete both of those packages from the 'core-updates' branch.
>>
>> I would advocate removing them, since these old versions of webkitgtk
>> are no longer maintained and contain a large number of known remote code
>> execution vulnerabilities.
>>
>> Are there any objections to removing them?
>
> No objections from me; please go ahead and remove them. Thanks!
Done in commit 38039b4fa917c7516535167fb082ea63850ee578 on core-updates.
Thanks,
Mark