On Fri, Jun 16, 2017 at 08:59:38AM +0900, Mike Hommey wrote:
> This makes sense, but firefox-esr hasn't been tested against gtk+-2.0
> ever, neither on Debian nor on Mozilla end. AFAIK RedHat do such builds,
> but I don't know if they carry extra patches.
>
> What does the security team think here? We had this discussion in the
> past, but IIRC back then it wasn't a given that building against
> gtk+-2.0 might be a possibility.
We should definitely follow testing/sid here and continue to use GTK3,
even the low level tool chain changes caused unexpected problems in
jessie compared to stretch, also diverging with a UI toolkit which
is not used by upstream would open a whole new can of worms.
Cheers,
Moritz
