Gentoo Archives: gentoo-commits

From: Mart Raudsepp <leio@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] repo/gentoo:master commit in: profiles/
Date: Fri, 23 Feb 2018 05:10:43
Message-Id: 1519362618.655684521c2d999f598dfcc8914c39527d7f4208.leio@gentoo
1 commit: 655684521c2d999f598dfcc8914c39527d7f4208
2 Author: Mart Raudsepp <leio <AT> gentoo <DOT> org>
3 AuthorDate: Fri Feb 23 05:05:53 2018 +0000
4 Commit: Mart Raudsepp <leio <AT> gentoo <DOT> org>
5 CommitDate: Fri Feb 23 05:10:18 2018 +0000
6 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=65568452
7
8 profiles: p.mask old gnucash for now instead of outright removing them
9
10 I don't want to remove gnucash-2.6 without an explicit ack from
11 titanofold, but I do want to proceed with p.masking the vulnerable
12 webkit-gtk SLOTs. So put gnucash-2.6 in p.mask for now, until Aaron
13 removed it himself completely, hopefully soon. gnucash-docs is left
14 unmask for users that had it to still have it and upgrade to 3.0 docs
15 later on automatically (there don't appear to be any explicit gnucash
16 deps in gnucash-docs itself).
17
18 Bug: https://bugs.gentoo.org/629114
19
20 profiles/package.mask | 6 ++++++
21 1 file changed, 6 insertions(+)
22
23 diff --git a/profiles/package.mask b/profiles/package.mask
24 index 6510d3ebda1..b434750712e 100644
25 --- a/profiles/package.mask
26 +++ b/profiles/package.mask
27 @@ -29,6 +29,12 @@
28
29 #--- END OF EXAMPLES ---
30
31 +# Mart Raudsepp <leio@g.o> (23 Feb 2018)
32 +# Older versions of GnuCash use security vulnerable old webkit-gtk slot.
33 +# Use gnucash-2.7.4 or newer instead, but pay attention to the news item:
34 +# https://www.gentoo.org/support/news-items/2018-01-14-gnucash.html
35 +<app-office/gnucash-2.7
36 +
37 # Steve Dibb <beandog@g.o> (22 Feb 2018)
38 # Very old project of mine, hasn't worked in years, no plans to
39 # support, and mpv can provide resume playback by default.