[gnome-boxes] flatpak: libarchive and openssh are now part of the runtime



commit 1b9addb119acd4e8236ad0e59375714131289f71
Author: Felipe Borges <felipeborges gnome org>
Date:   Mon Oct 7 14:03:18 2019 +0200

    flatpak: libarchive and openssh are now part of the runtime
    
    Drop these two dependencies.
    
    Bundled openssh was vulnerable to multiple CVE: 
https://nvd.nist.gov/vuln/search/results?form_type=Advanced&cves=on&cpe_version=cpe%3a%2fa%3aopenbsd%3aopenssh%3a7.9%3ap1

 build-aux/flatpak/org.gnome.Boxes.json | 20 --------------------
 1 file changed, 20 deletions(-)
---
diff --git a/build-aux/flatpak/org.gnome.Boxes.json b/build-aux/flatpak/org.gnome.Boxes.json
index 0c1ac5a1..521087cd 100644
--- a/build-aux/flatpak/org.gnome.Boxes.json
+++ b/build-aux/flatpak/org.gnome.Boxes.json
@@ -31,16 +31,6 @@
         }
     },
     "modules" : [
-        {   "name" : "libarchive",
-            "buildsystem" : "autotools",
-            "sources" : [
-                {
-                    "type" : "archive",
-                    "url" : "https://www.libarchive.org/downloads/libarchive-3.3.3.tar.gz";,
-                    "sha256" : "ba7eb1781c9fbbae178c4c6bad1c6eb08edab9a1496c64833d1715d022b30e2e"
-                }
-            ]
-        },
         {
             "name" : "check",
             "sources" : [
@@ -453,16 +443,6 @@
                 }
             ]
         },
-        {
-            "name" : "openssh",
-            "sources" : [
-                {
-                    "type" : "archive",
-                    "url" : "http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-7.9p1.tar.gz";,
-                    "sha256" : "6b4b3ba2253d84ed3771c8050728d597c91cfce898713beb7b64a305b6f11aad"
-                }
-            ]
-        },
         {
             "name" : "cdrkit",
             "buildsystem" : "cmake",


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]