[Dev] GNU Cash broken and gone from repositories?

[Marcel Röthke]

On 21.12.2017 11:10, bill-auger wrote:
> 
> On 12/19/2017 07:20 AM, Marcel Röthke wrote:
>> gnucash was removed from the arch repos because in depends on the
>> unmaintained and therefore unsafe webkitgtk2 package.
> to be clear - i think what you meant to say was that archlinux does not
> build 'webkitgtk' anymore - it is not at all correct to say that
> webkitgtk is un-maintained nor would that imply that it is necessarily
> "un-safe" - webkitgtk is an actively maintained project and there was a
> new release just 2 days ago - also, 'webkitgtk' is still an available
> parabola package in the non-prism repos so it matters not what the
> status of that package is in archlinux - parabola will continue to build
> it for as long as it is useful
> 
> https://webkitgtk.org/2017/12/19/webkitgtk2.18.4-released.html
> 
> https://www.parabola.nu/packages/nonprism/x86_64/webkitgtk/

I was referring to the archlinux package webkitgtk{,2} which provided
the old api, the last release branch with that api available was 2.4.x.
There seem to be numerous security problems in that version as explained
on arch-dev-public[0] and the gnome blog[1].

The current stable of gnucash depends on the old api, which is not
available in the repos anymore and quite frankly should be be available.


[0]
https://lists.archlinux.org/pipermail/arch-dev-public/2017-January/028634.html
[1]
https://blogs.gnome.org/mcatanzaro/2016/02/01/on-webkit-security-updates/