Removing packages from kinetic:
cog 0.14.0-1 in kinetic
cog 0.14.0-1 in kinetic amd64
cog 0.14.0-1 in kinetic arm64
cog 0.14.0-1 in kinetic armhf
cog 0.14.0-1 in kinetic ppc64el
cog 0.14.0-1 in kinetic riscv64
cog 0.14.0-1 in kinetic s390x
Comment: Depends on wpewebkit which is a security concern; no
reverse-dependencies. LP: #1981592
1 package successfully removed.
** Changed in: cog (Ubuntu)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to gst-plugins-bad1.0 in
Ubuntu.
https://bugs.launchpad.net/bugs/1981592
Title:
Please remove wpewebkit and block syncs from Debian
Status in cog package in Ubuntu:
Fix Released
Status in gst-plugins-bad1.0 package in Ubuntu:
Fix Released
Status in wpewebkit package in Ubuntu:
Fix Released
Bug description:
The wpewebkit package contains a whole webkit browser engine. It is
currently not used by anything of substance in Ubuntu:
$ reverse-depends src:wpewebkit
Reverse-Depends
* cog (for libwpewebkit-1.1-0)
* gstreamer1.0-wpe (for libwpewebkit-1.1-0)
cog is a single-window browser for embedded devices that is not used by
anything else in the archive.
gstreamer1.0-wpe is a plugin based on wpewebkit that is not used by anything
else in the archive.
Using this browser engine on the Internet is very risky as it it not
currently maintained and contains hundreds of security flaws, and
maintaining it requires a tremendous amount of work.
As such, I don't believe this package is suitable for the Ubuntu
archive.
I recommend we disable the build in gstreamer and remove both cog and
wpewebkit, and put on block on syncs from Debian.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cog/+bug/1981592/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
