Gentoo Archives: gentoo-user

From: Urs Schutz <u.schutz@×××××××.ch>
To: gentoo-user@l.g.o
Subject: [gentoo-user] GLSA «201110-01 / openssl» and acroread-9.4.2
Date: Mon, 16 Jan 2012 23:02:36
Message-Id: 20120116202928.03c058ad@bluewin.ch
1 Today I see the following:
2
3 I uninstalled dev-libs/openssl-0.9.8s-r1 because there is
4 a GLSA (201110-01 / openssl) against it.
5
6 But acroread-9.4.2 wants the installation of
7 openssl-0.9.8s-r1:
8
9 > # emerge -uDpvtN world
10
11 These are the packages that would be merged, in reverse
12 order:
13
14 Calculating dependencies... done!
15 [nomerge ] app-text/acroread-9.4.2 USE="cups ldap
16 nsplugin -minimal" LINGUAS="de en -fr -ja" [ebuild NS
17 ] dev-libs/openssl-0.9.8s-r1 [1.0.0f-r1] USE="gmp sse2
18 zlib -bindist -kerberos -test" 0 kB
19
20 Total: 1 package (1 in new slot), Size of downloads: 0 kB
21
22 The last stable openssl is already installed:
23 > # eix -I openssl
24 [I] dev-libs/openssl
25 Available versions:
26 (0.9.8) 0.9.8r ~0.9.8s 0.9.8s-r1
27 (0) 1.0.0d 1.0.0e ~1.0.0e-r1 ~1.0.0f 1.0.0f-r1
28 {bindist gmp kerberos rfc3779 sse2 static-libs test
29 zlib}
30 Installed versions: 1.0.0f-r1(07:52:58 PM
31 01/16/2012)(gmp sse2 zlib -bindist -kerberos -rfc3779
32 -static-libs -test)
33 Homepage: http://www.openssl.org/
34 Description:
35
36 As far as I know acroread is not unmasked in this
37 installation, nor is openssl
38 > # grep -i acro /etc/portage/*
39 > # grep -i ssl /etc/portage/*
40 shows nothing, so acroread and ssl is «stable».
41
42 For now I just uninstalled acroread to prevent the
43 installation of a buggy openssl version, but this seems
44 wrong for a mostly stable installation...
45
46 Any hints how to proceed? Is there any danger to have an
47 old (and apparently buggy) openssl lib installed in parallel
48 with the recent one?
49
50 Urs

Replies

Subject Author
Re: [gentoo-user] GLSA «201110-01 / openssl» and acroread-9.4.2 Alan McKinnon <alan.mckinnon@×××××.com>