Removing packages from kinetic:
wpewebkit 2.36.6-1 in kinetic
libwpewebkit-1.0-doc 2.36.6-1 in kinetic amd64
libwpewebkit-1.0-doc 2.36.6-1 in kinetic arm64
libwpewebkit-1.0-doc 2.36.6-1 in kinetic armhf
libwpewebkit-1.0-doc 2.36.6-1 in kinetic i386
libwpewebkit-1.0-doc 2.36.6-1 in kinetic ppc64el
libwpewebkit-1.0-doc 2.36.6-1 in kinetic riscv64
libwpewebkit-1.0-doc 2.36.6-1 in kinetic s390x
libwpewebkit-1.1-0 2.36.6-1 in kinetic amd64
libwpewebkit-1.1-0 2.36.6-1 in kinetic arm64
libwpewebkit-1.1-0 2.36.6-1 in kinetic armhf
libwpewebkit-1.1-0 2.36.6-1 in kinetic ppc64el
libwpewebkit-1.1-0 2.36.6-1 in kinetic riscv64
libwpewebkit-1.1-0 2.36.6-1 in kinetic s390x
libwpewebkit-1.1-dev 2.36.6-1 in kinetic amd64
libwpewebkit-1.1-dev 2.36.6-1 in kinetic arm64
libwpewebkit-1.1-dev 2.36.6-1 in kinetic armhf
libwpewebkit-1.1-dev 2.36.6-1 in kinetic ppc64el
libwpewebkit-1.1-dev 2.36.6-1 in kinetic riscv64
libwpewebkit-1.1-dev 2.36.6-1 in kinetic s390x
wpewebkit-driver 2.36.6-1 in kinetic amd64
wpewebkit-driver 2.36.6-1 in kinetic arm64
wpewebkit-driver 2.36.6-1 in kinetic armhf
wpewebkit-driver 2.36.6-1 in kinetic ppc64el
wpewebkit-driver 2.36.6-1 in kinetic riscv64
wpewebkit-driver 2.36.6-1 in kinetic s390x
Comment: Unmaintained web engine, security concerns; LP: #1981592
1 package successfully removed.
** Changed in: wpewebkit (Ubuntu)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to gst-plugins-bad1.0 in
Ubuntu.
https://bugs.launchpad.net/bugs/1981592
Title:
Please remove wpewebkit and block syncs from Debian
Status in cog package in Ubuntu:
Fix Released
Status in gst-plugins-bad1.0 package in Ubuntu:
Fix Released
Status in wpewebkit package in Ubuntu:
Fix Released
Bug description:
The wpewebkit package contains a whole webkit browser engine. It is
currently not used by anything of substance in Ubuntu:
$ reverse-depends src:wpewebkit
Reverse-Depends
* cog (for libwpewebkit-1.1-0)
* gstreamer1.0-wpe (for libwpewebkit-1.1-0)
cog is a single-window browser for embedded devices that is not used by
anything else in the archive.
gstreamer1.0-wpe is a plugin based on wpewebkit that is not used by anything
else in the archive.
Using this browser engine on the Internet is very risky as it it not
currently maintained and contains hundreds of security flaws, and
maintaining it requires a tremendous amount of work.
As such, I don't believe this package is suitable for the Ubuntu
archive.
I recommend we disable the build in gstreamer and remove both cog and
wpewebkit, and put on block on syncs from Debian.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cog/+bug/1981592/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
