[debbugs-tracker] bug#26390: closed (Guitarix: Don't use webkitgtk-2.4)

[GNU bug Tracking System]

Your message dated Fri, 7 Apr 2017 09:38:18 -0400
with message-id <address@hidden>
and subject line Re: Guitarix: Don't use webkitgtk-2.4
has caused the debbugs.gnu.org bug report #26390,
regarding Guitarix: Don't use webkitgtk-2.4
to be marked as done.

(If you believe you have received this mail in error, please contact
address@hidden)


-- 
26390: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=26390
GNU Bug Tracking System
Contact address@hidden with problems

--- Begin Message --- Subject: Guitarix: Don't use webkitgtk-2.4 Date: Fri, 7 Apr 2017 07:57:54 -0400 User-agent: Mutt/1.8.0 (2017-02-23)

Webkitgtk-2.4 is unmaintained upstream and contains a large number of
security vulnerabilities. The webkitgtk developers have asked
distributions to stop offering it. [0]

This patch removes webkitgtk-2.4 from guitarix. Guitarix builds and
starts without; I don't know what features are disabled.

Ricardo, what do you think?

[0]
https://blogs.gnome.org/mcatanzaro/2016/02/01/on-webkit-security-updates/

0001-gnu-guitarix-Disable-webkit-features.patch
Description: Text document

signature.asc
Description: PGP signature

--- End Message ---

--- Begin Message --- Subject: Re: Guitarix: Don't use webkitgtk-2.4 Date: Fri, 7 Apr 2017 09:38:18 -0400 User-agent: Mutt/1.8.0 (2017-02-23)

On Fri, Apr 07, 2017 at 02:31:06PM +0200, Ricardo Wurmus wrote:
> Leo Famulari <address@hidden> writes:
> > This patch removes webkitgtk-2.4 from guitarix. Guitarix builds and
> > starts without; I don't know what features are disabled.
> 
> Sounds good to me!
> 
> Webkitgtk was added only somewhat recently to the dependencies.  When I
> added it some time ago it was not optional AFAIR.  If you’ve built it
> successfully without webkitgtk that’s great.

Okay, I've pushed the change.

> It was used for a built-in plugin browser, I think.

Let me know if you notice any breakage.

signature.asc
Description: PGP signature

--- End Message ---