Re: Help needed with security updates for Qt

2015-06-21 Thread Ludovic Courtès
宋文武 skribis: > Ludovic Courtès writes: > >> [...] >> >>> I'd like to try re-package qt5 with submodules, and drop QtWebEngine. >>> As same as Debian and NixOS did. >> >> And Fedora. Ricardo found this insightful discussion: >> >> http://lists.qt-project.org/pipermail/development/2015-February

Re: Help needed with security updates for Qt

2015-06-20 Thread 宋文武
Ludovic Courtès writes: > [...] > >> I'd like to try re-package qt5 with submodules, and drop QtWebEngine. >> As same as Debian and NixOS did. > > And Fedora. Ricardo found this insightful discussion: > > http://lists.qt-project.org/pipermail/development/2015-February/019960.html > > +1 for re

Re: Help needed with security updates for Qt

2015-06-19 Thread Ludovic Courtès
宋文武 skribis: > Mark H Weaver writes: [...] >> Better yet, we should try to get it to use our system copies of >> libraries whenever possible. > Yes, as I know, the remains bundled libraries are: > pcre, need build with '--enable-pcre16' > jasper, not packaged yet, and need various security

Re: Help needed with security updates for Qt

2015-06-19 Thread 宋文武
Mark H Weaver writes: > Hi, > > Qt includes bundled copies of a *lot* of stuff. Among other things, it > bundles Chromium, which also bundles a lot of stuff. Someone who cares > about Qt needs to be on top of security updates for the things it > bundles. > > Better yet, we should try to get it

Re: Help needed with security updates for Qt

2015-06-18 Thread Ludovic Courtès
I’m not really taking the offer ;-), but I agree that it’s crucial to “do something about it.” Chromium may be the most difficult of those bundled dependencies, but there are probably others that are easier to get rid of, as a starter. I hope we can share work with Debian and other distros that c

Help needed with security updates for Qt

2015-06-16 Thread Mark H Weaver
Hi, Qt includes bundled copies of a *lot* of stuff. Among other things, it bundles Chromium, which also bundles a lot of stuff. Someone who cares about Qt needs to be on top of security updates for the things it bundles. Better yet, we should try to get it to use our system copies of libraries