Gentoo Archives: gentoo-dev

From: Brandon Low <lostlogic@g.o>
To: murphy@g.o
Cc: Donny Davies <woodchip@g.o>, gentoo-dev@g.o, gentoo-sparc@g.o
Subject: Re: [gentoo-dev] Re: Openssl 0.9.6c on sparc
Date: Fri, 05 Jul 2002 11:45:18
Message-Id: 20020705114514.A1153@lostlogicx.com
In Reply to: Re: [gentoo-dev] Re: Openssl 0.9.6c on sparc by murphy@gentoo.org
1 Yeah, if it works with 0.9.6c, I do not know of specific hacks against
2 openssl-0.9.6c at this time so that should be fine... I wonder why that
3 dep is set specifically... I'll investigate later.
4
5 --Brandon
6
7 On Fri, 07/05/02 at 18:10:53 +0200, murphy@g.o wrote:
8 > Hi,
9 >
10 > > That deletion was due to the fact that there are known security holes
11 > > in all versions of ssh prior to 3.4, I discussed with several older wiser
12 >
13 > This is in SSH not SSL right? So can we change the ebuild to use openssl
14 > 0.9.6c instead of 0.9.6d for Sparc?
15 >
16 > > devs before removing, if you need it back, use cvs to restore it, but
17 > > keeping things with known security holes in the portage tree doesn't seem
18 > > like good policy to me :-( Sorry for the inconvenience.
19 >
20 > In general, please don't delete any ebuilds unless you're sure they're not
21 > being used by any platform. There is no need to physically delete an
22 > ebuild to make people upgrade... Portage takes care of this already. Can
23 > you just mask it out in the future?
24 >
25 > thanks!
26 > maarten
27 >
28 > _______________________________________________
29 > gentoo-dev mailing list
30 > gentoo-dev@g.o
31 > http://lists.gentoo.org/mailman/listinfo/gentoo-dev