On Tue, Jan 31, 2017 at 10:43:42AM +0100, Landry Breuil wrote:
> Hi,
> 
> so the following ports use www/webkit or www/webkit,gtk3:
> 
> cad/xtrkcad
> graphics/ebook-viewer
> mail/claws-mail
> mail/geary
> productivity/gnucash
> www/luakit
> www/midori
> www/surf
> www/vimb

I will have a look at graphics/ebook-viewer and productivity/gnucash.

> 
> www/webkit is the 2.4 branch, which is dead/abandoned/unmaintained
> upstream, cf
> https://blogs.gnome.org/mcatanzaro/2016/02/01/on-webkit-security-updates/
> and https://lists.webkit.org/pipermail/webkit-gtk/2016-September/002779.html
> 
> The security circus being what it is (OMG YOUR OS SHIPS AN INSECURE
> LIBRARY STOP THE PRESS IM GOING TO SHAME YOU ON TWITTER), it would be
> nice to get rid of this, so can the ones maintaining those ports try to
> reach the respective upstreams and see if there's a way to make those
> ports use www/webkitgtk4 (which is maintained, until upstream webkit
> becomes crazy again..) ? gmpc-wikipedia and py-webkitgtk have already
> been removed.
> 
> I'll have a look at what can be done for geary and midori. As for surf,
> there's surf2... ?
> 
> Thanks to Davide Gerhard for insisting on getting this fixed, one way
> or another...
> 
> Landry
> 

-- 
Antoine

Reply via email to