Re: Help needed with security updates for Qt

2015-06-21 Thread Ludovic Courtès
宋文武 iyzs...@gmail.com skribis: Ludovic Courtès l...@gnu.org writes: [...] I'd like to try re-package qt5 with submodules, and drop QtWebEngine. As same as Debian and NixOS did. And Fedora. Ricardo found this insightful discussion:

Re: Help needed with security updates for Qt

2015-06-20 Thread 宋文武
Ludovic Courtès l...@gnu.org writes: [...] I'd like to try re-package qt5 with submodules, and drop QtWebEngine. As same as Debian and NixOS did. And Fedora. Ricardo found this insightful discussion: http://lists.qt-project.org/pipermail/development/2015-February/019960.html +1 for

Re: Help needed with security updates for Qt

2015-06-19 Thread Ludovic Courtès
宋文武 iyzs...@gmail.com skribis: Mark H Weaver m...@netris.org writes: [...] Better yet, we should try to get it to use our system copies of libraries whenever possible. Yes, as I know, the remains bundled libraries are: pcre, need build with '--enable-pcre16' jasper, not packaged yet,

Re: Help needed with security updates for Qt

2015-06-19 Thread 宋文武
Mark H Weaver m...@netris.org writes: Hi, Qt includes bundled copies of a *lot* of stuff. Among other things, it bundles Chromium, which also bundles a lot of stuff. Someone who cares about Qt needs to be on top of security updates for the things it bundles. Better yet, we should try to

Re: Help needed with security updates for Qt

2015-06-18 Thread Ludovic Courtès
I’m not really taking the offer ;-), but I agree that it’s crucial to “do something about it.” Chromium may be the most difficult of those bundled dependencies, but there are probably others that are easier to get rid of, as a starter. I hope we can share work with Debian and other distros that

Help needed with security updates for Qt

2015-06-16 Thread Mark H Weaver
Hi, Qt includes bundled copies of a *lot* of stuff. Among other things, it bundles Chromium, which also bundles a lot of stuff. Someone who cares about Qt needs to be on top of security updates for the things it bundles. Better yet, we should try to get it to use our system copies of libraries