On Sun, 03 Dec 2017 20:41:56 +0100 Andreas Sturmlechner <[email protected]> wrote:
> # Andreas Sturmlechner <[email protected]> (03 Dec 2017) > # Dead upstreams, depending on dead qt3support/qt4. > # Masked for removal in 30 days. Bug #631788 > ... > games-kids/crayon-physics This is a commercial game that I have played in the past and still have installed. I think you have to take special consideration over packages for things that people have paid money for. You can't so easily say "Oh just play another game then." You also can't expect "upstream" to address the issue. We have sometimes left vulnerable commercial games masked in the tree but in this case, the offender is the Qt4 dependency. I'm guessing that we won't be leaving Qt4 masked in the tree so I'm not sure what to suggest. The game does bundle some libraries but Qt4 isn't one of them, not that that would be a great idea anyway. I wondered if this would also affect Steam but Qt isn't in the Ubuntu-based runtime so any game using it would need to bundle it with the game itself. I haven't come across any other commercial games using Qt but this proves that there is at least one. -- James Le Cuirot (chewi) Gentoo Linux Developer
pgpFwMUAG9b_e.pgp
Description: OpenPGP digital signature
