Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#52750 - [gnucash] depends on outdated webkitgtk2
Attached to Project:
Arch Linux
Opened by Stefan Haller (fgrsnau) - Saturday, 28 January 2017, 14:25 GMT
Last edited by Jan de Groot (JGC) - Saturday, 28 January 2017, 14:31 GMT
Opened by Stefan Haller (fgrsnau) - Saturday, 28 January 2017, 14:25 GMT
Last edited by Jan de Groot (JGC) - Saturday, 28 January 2017, 14:31 GMT
|
DetailsThe current version of gnucash (gnucash-2.6.15-1) depends on webkitgtk2. This results in the following information printed during installation of the package:
(1/2) installing webkitgtk2 > WARNING: WebKitGTK+ 2.4 is known to have many security vulnerabilities that will NOT be fixed. Avoid browsing with it. As far as I understand, it should be possible to let gnucash depend on the webkit2gtk package instead. Even though this might not necessarily be critical for gnucash, users don’t want to install libraries with well-known vulnerabilities on their system. |
This task depends upon
Comment by Jan de Groot (JGC) -
Saturday, 28 January 2017, 14:31 GMT
Upstream doesn't care about this, they don't support webkit2. There's nothing we can fix here.