GNU bug report logs - #21288
Qt's bundled libraries must not be used

Previous Next

Package: guix;

Reported by: ludo <at> gnu.org (Ludovic Courtès)

Date: Tue, 18 Aug 2015 14:54:01 UTC

Severity: normal

Done: Efraim Flashner <efraim <at> flashner.co.il>

Bug is archived. No further changes may be made.

Full log


View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Efraim Flashner <efraim <at> flashner.co.il>
Cc: tracker <at> debbugs.gnu.org
Subject: bug#21288: closed (Qt's bundled libraries must not be used)
Date: Wed, 13 May 2020 19:16:02 +0000
[Message part 1 (text/plain, inline)]
Your message dated Wed, 13 May 2020 22:14:53 +0300
with message-id <20200513191453.GI918 <at> E5400>
and subject line Qt's bundled libraries must not be used
has caused the debbugs.gnu.org bug report #21288,
regarding Qt's bundled libraries must not be used
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs <at> gnu.org.)


-- 
21288: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=21288
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems
[Message part 2 (message/rfc822, inline)]
From: ludo <at> gnu.org (Ludovic Courtès)
To: bug-guix <at> gnu.org
Subject: Qt's bundled libraries must not be used
Date: Tue, 18 Aug 2015 16:53:21 +0200
The bundled libraries in Qt are an obvious security issues, among other
concerns.  This bug is to keep track of progress removing those bundled
libraries (esp. in Qt 5.)

For background, see:

  https://lists.gnu.org/archive/html/guix-devel/2015-06/msg00302.html
  https://lists.gnu.org/archive/html/guix-devel/2015-08/msg00018.html

Ludo’.


[Message part 3 (message/rfc822, inline)]
From: Efraim Flashner <efraim <at> flashner.co.il>
To: 21288-done <at> debbugs.gnu.org
Subject: Qt's bundled libraries must not be used
Date: Wed, 13 May 2020 22:14:53 +0300
[Message part 4 (text/plain, inline)]
I think in the intervening 4.5 years we've done a good job of removing
the bundled libraries from qt-4 and qt-5 and then qtbase. I'm going to
consider this bug a success. The note in the snippet says there are a
few more bundled libraries, like md5 and sha3 (and harfbuzz) but we've
otherwise done a great job on this one.

-- 
Efraim Flashner   <efraim <at> flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted
[signature.asc (application/pgp-signature, inline)]

This bug report was last modified 5 years and 64 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.