On Monday 13 July 2015 21.08:50 Yamaban wrote:
On Mon, 13 Jul 2015 21:00, Richard Brown wrote:
On 13 July 2015 at 16:51, David Disseldorp wrote:
Considering the seemingly endless stream of CVEs[1], as well as the recent uptake of HTML5 video, I propose that flash-player be removed from the default package install list in future openSUSE releases.
Any thoughts?
Cheers, David
I think it's a great idea. We probably want to keep it as an option for those who can't live without, but I think you should opt-in to a package that constantly exploited.
+1 for removal from pattern-packages and please check the browser packages for stray "Recomments" and or "Suggests", too.
This makes the install of the flash-player packages a deliberate, and intentional action by the user.
Idea: a "Obsoletes" to the older than actual version of flash-player into the pattern that wants a web browser, lets catch the oldies!
- Yamaban.
+1 there's enough alternatives now outside, and if the flash-player can be installed alone it make perfect sense -- Bruno Friedmann Ioda-Net Sàrl www.ioda-net.ch openSUSE Member & Board, fsfe fellowship GPG KEY : D5C9B751C4653227 irc: tigerfoot -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org