(address . bug-guix@gnu.org)
87a7kzs7eh.fsf@elephly.net
The Gstreamer framework generates a binary registry of discovered
plugins in ~/.cache/gstreamer-1.0/registry.ARCH.bin (where ARCH is the
CPU architecture).
This cache contains references to store items. Since the registry is
not under the control of Guix it may go stale, causing Gstreamer to use
old (and potentially vulnerable) plugins. A user may delete the
registry as it will be recreated automatically.
We should aim to build the registry in a profile hook. According to the
gst-launch man page, the GST_REGISTRY environment variable can be used
to override the defautl location of the registry file. When the
GST_REGISTRY_UPDATE variable is set to “no”, Gstreamer won’t attempt to
update the registry.
--
Ricardo
PS: IBus has the same problem. See bug 22707.