Gentoo Archives: gentoo-security

From: Marius Mauch <genone@g.o>
To: gentoo-security@l.g.o
Subject: Re: [gentoo-security] Re: [gentoo-announce] Gentoo Linux Security Advisory 200403-03: Multiple OpenSSL Vulnerabilities
Date: Thu, 18 Mar 2004 11:15:24
Message-Id: 20040318121454.6ee29752@sven.genone.homeip.net
In Reply to: Re: [gentoo-security] Re: [gentoo-announce] Gentoo Linux Security Advisory 200403-03: Multiple OpenSSL Vulnerabilities by Calum
1 On 03/18/04 Calum wrote:
2
3 > Why is emerge dynamically linked to the ssl libs anyway? Why does it
4 > need ssl libs anyway? Why isn't the static use flag hardcoded into the
5 > portage ebuild?
6
7 emerge isn't "linked" to anything in any way. It's a python script, no
8 compiled binary, so there is no static vs. dynamic linking.
9
10 > I've often wondered with Gentoo how you would recover if you mashed up
11 > your glibc, gcc, or similar. With a package based distro, you could
12 > just mount and install the same package again, but it's a little more
13 > tricky in Gentoo.
14
15 Same with Gentoo, that's why we have the .tbz2 packages on GRP CD's and
16 on http://dev.gentoo.org/~avenj/bins/ and you can also build your own
17 with `emerge -b` (or FEATURES=buildpkg in make.conf).
18
19 Marius
20
21 --
22 Public Key at http://www.genone.de/info/gpg-key.pub
23
24 In the beginning, there was nothing. And God said, 'Let there be
25 Light.' And there was still nothing, but you could see a bit better.

Replies