[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#922727: CVE-2019-7443



Hey,

> Shall we cherrypick/backport the patch on our own, then or rather ignore it
> given the vast majority of applications uses kf5 now?

I would recommend to cherrypick/backport. I think the base hasn't changed a 
lot, so it will be easy to backport. Unfortunately we sill have several 
applications that are using kde4libs.

> > as kdelibs is EOL so not security support by KDE
> > anymore.
> 
> Ok, then let's remove the whole KDE4/Qt4 stack for bullseye (I suppose
> that's the maintainer's plan anyway?)

Yeah this was the plan for Buster already:

https://wiki.debian.org/Qt4Removal

at least we hardy reached a sub goal for Buster:

https://wiki.debian.org/Qt4WebKitRemoval

hefee


Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: