[Freewx-maint] Bug#876789: python-wxgtk-webview3.0: Depends on libwxgtk-webview3.0-0v5 which depends on webkit1

Olly Betts olly at survex.com
Tue Sep 26 00:13:33 UTC 2017


On Mon, Sep 25, 2017 at 05:47:36PM -0400, Jeremy Bicha wrote:
> python-wxgtk-webview3.0 depends on libwxgtk-webview3.0-0v5 which
> depends on libwxgtk-webview3.0-0v5 which depends on
> libwebkitgtk-1.0-0. libwebkitgtk-1.0-0 is the old webkitgtk library
> that suffers from many reported CVEs that have been fixed in
> libwebkit2gtk-4.0-37 (src: webkit2gtk ). We do not intend to release
> Debian 10 "Buster" with libwebkitgtk-1.0-0.
> 
> python-wxgtk-webview3.0 has no reverse dependencies in Debian or
> Ubuntu so it seems easy to just stop building this package for now.

Looks like this package was partly enabled to fix a problem with the
build without it:

https://bugs.debian.org/821934

So it might not actually be as easy as you might think to disable
webview here before we disable it in wxwidgets3.0...

I'll kick off a build and see.  If it doesn't just work, I'm inclined
to disable this at the same time as we do wxwidgets3.0.

Cheers,
    Olly



More information about the Freewx-maint mailing list