guix-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[core-updates] webkitgtk-2.4 and webkitgtk/gtk+-2 no longer needed?


From: Mark H Weaver
Subject: [core-updates] webkitgtk-2.4 and webkitgtk/gtk+-2 no longer needed?
Date: Sat, 14 Apr 2018 23:26:55 -0400
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/25.3 (gnu/linux)

address@hidden (Ricardo Wurmus) writes:

> rekado pushed a commit to branch core-updates
> in repository guix.
>
> commit 53e66fbceb275262184ad44f60a5a8d4e7061fcb
> Author: Ricardo Wurmus <address@hidden>
> Date:   Thu Apr 12 20:37:54 2018 +0200
>
>     gnu: gnucash: Update to 3.0.

This commit removes the last reference to 'webkitgtk/gtk+-2', which in
turn contains the only reference to 'webkitgtk-2.4'.  So, we could now
delete both of those packages from the 'core-updates' branch.

I would advocate removing them, since these old versions of webkitgtk
are no longer maintained and contain a large number of known remote code
execution vulnerabilities.

Are there any objections to removing them?

      Mark



reply via email to

[Prev in Thread] Current Thread [Next in Thread]