On 01/16/2018 03:07 PM, Róbert Čerňanský wrote: > I think generated reports are typical use of webkit in GnuCash. Are > attack vectors so severe also in this case?
Yes, as it would hinder upgrade / keep the vulnerable libraries on the system that can possibly be used by other packages. That said, I agree with the overall premise of discussion, and stability guarantees for the stable keywords, have anyone been in contact with upstream and discussed the issue of getting a stable release branch not based on the old webkit? -- Kristian Fiskerstrand OpenPGP keyblock reachable at hkp://pool.sks-keyservers.net fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3
signature.asc
Description: OpenPGP digital signature