On Mon, Sep 25, 2017 at 05:47:36PM -0400, Jeremy Bicha wrote: > python-wxgtk-webview3.0 depends on libwxgtk-webview3.0-0v5 which > depends on libwxgtk-webview3.0-0v5 which depends on > libwebkitgtk-1.0-0. libwebkitgtk-1.0-0 is the old webkitgtk library > that suffers from many reported CVEs that have been fixed in > libwebkit2gtk-4.0-37 (src: webkit2gtk ). We do not intend to release > Debian 10 "Buster" with libwebkitgtk-1.0-0. > > python-wxgtk-webview3.0 has no reverse dependencies in Debian or > Ubuntu so it seems easy to just stop building this package for now.
Looks like this package was partly enabled to fix a problem with the build without it: https://bugs.debian.org/821934 So it might not actually be as easy as you might think to disable webview here before we disable it in wxwidgets3.0... I'll kick off a build and see. If it doesn't just work, I'm inclined to disable this at the same time as we do wxwidgets3.0. Cheers, Olly