Skip to content

d/control: Remove unused build-dependency on libcroco3-dev

Simon McVittie requested to merge smcv/cinnamon:wip/remove-system-croco into master

Since version 4.8.0, cinnamon bundles its own copy of libcroco, which gets linked statically and is used to parse trusted CSS-based themes. Dropping the now-unused build-dependency will let us remove the system copy of libcroco from Debian, avoiding the need to treat it as security-sensitive when it has bugs that can be triggered by untrusted CSS.

Closes: #967027

According to diffoscope, the only differences caused by this change are in the API documentation in cinnamon-doc (cross-references to the libcroco documentation disappear).

The last things that need to happen before we can remove libcroco are:

  • this change
  • get the new cinnamon into testing
  • fix missing builds of gettext on ppc64el and mipsel
  • get the new gettext into testing

I would like to not ship the separate libcroco in bullseye.

Merge request reports