On Tue, Oct 10, 2017 at 04:34:35PM -0400, Eric Blau wrote: > On Tue, Oct 10, 2017 at 3:57 PM, Morten Linderud <morten@xxxxxxxxxxx> wrote: > > On Tue, Oct 10, 2017 at 03:49:27PM -0400, Ido Rosen wrote: > >> Gnucash has 44 votes on AUR. It's useful (and very old, stable) > >> accounting/bookkeeping software. Would any TUs be willing to migrate it > >> from AUR to [community]? > >> > >> https://aur.archlinux.org/packages/gnucash/ > > > > It was moved from [extra] on the 30th of june because it still depends on > > webkitgtk2, which is flawed and has multiple security issues. > > > > While it is true that webkitgtk2 has security vulnerabilities and > should not be used for web browsing, web apps, etc., gnucash merely > uses it to generate reports based on your own data. As such, it's > likely not vulnerable to the same security issues as other web > applications based on it. > > I know the developers are in the process of migrating away from it, > but until that time, I think it should be supported and not dropped > for the above reason. > webkitgtk2 would have do be added back to the repos for this to happen, and that won't happen. It was a big deal to remove it in the first place. https://www.archlinux.org/todo/phasing-out-webkitgtk2/ -- Morten Linderud PGP: 9C02FF419FECBE16
Attachment:
signature.asc
Description: PGP signature
