Gentoo Archives: gentoo-dev

From: Kent Fredric <kentnl@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Last rites: www-client/phantomjs and dev-ruby/poltergeist
Date: Mon, 05 Jun 2017 17:50:39
Message-Id: 20170606054708.1f811680@katipo2.lan
In Reply to: Re: [gentoo-dev] Last rites: www-client/phantomjs and dev-ruby/poltergeist by Michael Orlitzky
1 On Mon, 5 Jun 2017 13:42:50 -0400
2 Michael Orlitzky <mjo@g.o> wrote:
3
4 > Hans was
5 > attempting to fix it, but now that upstream is dead, it will remain
6 > insecure forever.
7
8 IME, as long as that's clear from the pmask, and its clear what those
9 security vectors are, as long as an end user makes sure those vectors
10 can't happen, having an insecure-in-theory-but-not-in-practice
11 phantomjs is better than having no phantomjs.