From 655684521c2d999f598dfcc8914c39527d7f4208 Mon Sep 17 00:00:00 2001 From: Mart Raudsepp Date: Fri, 23 Feb 2018 07:05:53 +0200 Subject: [PATCH] profiles: p.mask old gnucash for now instead of outright removing them I don't want to remove gnucash-2.6 without an explicit ack from titanofold, but I do want to proceed with p.masking the vulnerable webkit-gtk SLOTs. So put gnucash-2.6 in p.mask for now, until Aaron removed it himself completely, hopefully soon. gnucash-docs is left unmask for users that had it to still have it and upgrade to 3.0 docs later on automatically (there don't appear to be any explicit gnucash deps in gnucash-docs itself). Bug: https://bugs.gentoo.org/629114 --- profiles/package.mask | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/profiles/package.mask b/profiles/package.mask index 6510d3ebda1d..b434750712e5 100644 --- a/profiles/package.mask +++ b/profiles/package.mask @@ -29,6 +29,12 @@ #--- END OF EXAMPLES --- +# Mart Raudsepp (23 Feb 2018) +# Older versions of GnuCash use security vulnerable old webkit-gtk slot. +# Use gnucash-2.7.4 or newer instead, but pay attention to the news item: +# https://www.gentoo.org/support/news-items/2018-01-14-gnucash.html + (22 Feb 2018) # Very old project of mine, hasn't worked in years, no plans to # support, and mpv can provide resume playback by default. -- 2.26.2