Andy Wingo <wi...@igalia.com> writes: > On Sun 03 Apr 2016 18:54, Efraim Flashner <efr...@flashner.co.il> writes: > >> On Thu, Mar 31, 2016 at 11:20:19PM +0200, Ludovic Courtès wrote: >>> Efraim Flashner <efr...@flashner.co.il> skribis: >>> >>> > On Thu, 31 Mar 2016 11:29:52 +0200 >>> > Ricardo Wurmus <rek...@elephly.net> wrote: >>> >> store item total >>> >> self >>> >> /gnu/store/js2mqmm3llc1ispcqll08c9s7nyi1i40-wxwidgets-3.0.2 1108.5 >>> >> 33.8 3.0% >>> >> /gnu/store/yj7hx4r02g8nzgfna8pwsyqynxw0fkwy-webkitgtk-2.4.10 1053.5 >>> >> 137.3 12.4% >> >> This sounds like a LGTM to me, and then we'll work on cutting down on >> duplicates among the dependancies. > > WebKitGTK+ 2.4 is old and has security vulnerabilities; see > https://blogs.gnome.org/mcatanzaro/2016/03/30/positive-progress-on-webkitgtk-security-updates/. > Is there no upstream update that uses more recent WebKitGTK+?
Even the latest development version of wxwidgets (3.1.0) does not work with a later version of WebKitGTK+. The configure script looks for webkitgtk-3.0 and includes “webkit/webkit.h”. I don’t know how much work it would be to use the latest version of our “webkitgtk” package. ~~ Ricardo
