On Fri, Jan 20, 2017 at 05:12:46PM +0100, julien lepiller wrote: > How do you make php use gd-2.2.4, then? It needs to be updated too because > the security issues with gd are still present in our current php package.
It seems that gd-for-php gets replaced by gd-2.2.4 now: $ ./pre-inst-env guix build -e '(@@ (gnu packages php) gd-for-php)' /gnu/store/xg2r8hk5axfq7xk1aj9ql5ncgkpnh0vk-gd-2.2.4 But, building PHP with --dry-run implies that gd@2.2.3 will be used. I think that we need to set (replacement #f) in gd-for-php, so that PHP is built with gd@2.2.3, which will then be grafted to refer to gd-2.2.4 in the built output of PHP. I'm a little unsure. Does anyone have advice?