1 |
As reported |
2 |
https://bugs.gentoo.org/show_bug.cgi?id=147800 gnutls-1.4.4 links itself |
3 |
against an existing gnutls-1.2* version if installed. I haven't been able to |
4 |
find the cause of this. |
5 |
|
6 |
After gnutls-1.4.4 is merged, this is evident by examining: |
7 |
readelf -d /usr/lib/libgnutls-extra.so |
8 |
- 0x00000001 (NEEDED) Shared library: [libgnutls.so.12] |
9 |
(means it linked to previous version 1.2*) |
10 |
- 0x00000001 (NEEDED) Shared library: [libgnutls.so.13] |
11 |
(means its good - this happens when a gnutls-1.4* is installed or no gnutls is |
12 |
previously installed.) |
13 |
|
14 |
gnutls-1.4.4 has an outstanding security bug |
15 |
https://bugs.gentoo.org/show_bug.cgi?id=147682 and bug 147800 needs to be |
16 |
fixed before it can be marked stable. |
17 |
|
18 |
I'm sure the current patch against gnutls-1.4.4 is not needed. |
19 |
|
20 |
I would appreciate it if anyone with a little time on their hands and a |
21 |
willingness to get intimate with the gnutls build process (standard |
22 |
autoconf/automake) would take the time to get it fixed. (note autoconf-2.60 |
23 |
will be required for autoconf changes) |
24 |
|
25 |
Please post any corrections attached to this bug report. |
26 |
|
27 |
If anyone missed my previous plea to do some preliminary testing with gnutls |
28 |
here it is again: |
29 |
------------------- |
30 |
To participate please: |
31 |
1. add |
32 |
~net-libs/gnutls-1.4.4 |
33 |
~dev-libs/libtasn1-0.3.5 |
34 |
to /etc/portage/package.unmask and /etc/portage/package.keywords files. |
35 |
|
36 |
2. emerge -1 ~net-libs/gnutls-1.4.4 |
37 |
|
38 |
3. run revdep-rebuild |
39 |
|
40 |
4. and report bugs on bugs.gentoo.org making them block bug 147682 |
41 |
|
42 |
revdep-rebuild may get the order of the rebuild incorrect so please watch out |
43 |
for this error. |
44 |
-------------------- |
45 |
|
46 |
|
47 |
-- |
48 |
Daniel Black <dragonheart@g.o> |
49 |
Gentoo Foundation |
50 |
-- |
51 |
gentoo-dev@g.o mailing list |