1 |
Today I see the following: |
2 |
|
3 |
I uninstalled dev-libs/openssl-0.9.8s-r1 because there is |
4 |
a GLSA (201110-01 / openssl) against it. |
5 |
|
6 |
But acroread-9.4.2 wants the installation of |
7 |
openssl-0.9.8s-r1: |
8 |
|
9 |
> # emerge -uDpvtN world |
10 |
|
11 |
These are the packages that would be merged, in reverse |
12 |
order: |
13 |
|
14 |
Calculating dependencies... done! |
15 |
[nomerge ] app-text/acroread-9.4.2 USE="cups ldap |
16 |
nsplugin -minimal" LINGUAS="de en -fr -ja" [ebuild NS |
17 |
] dev-libs/openssl-0.9.8s-r1 [1.0.0f-r1] USE="gmp sse2 |
18 |
zlib -bindist -kerberos -test" 0 kB |
19 |
|
20 |
Total: 1 package (1 in new slot), Size of downloads: 0 kB |
21 |
|
22 |
The last stable openssl is already installed: |
23 |
> # eix -I openssl |
24 |
[I] dev-libs/openssl |
25 |
Available versions: |
26 |
(0.9.8) 0.9.8r ~0.9.8s 0.9.8s-r1 |
27 |
(0) 1.0.0d 1.0.0e ~1.0.0e-r1 ~1.0.0f 1.0.0f-r1 |
28 |
{bindist gmp kerberos rfc3779 sse2 static-libs test |
29 |
zlib} |
30 |
Installed versions: 1.0.0f-r1(07:52:58 PM |
31 |
01/16/2012)(gmp sse2 zlib -bindist -kerberos -rfc3779 |
32 |
-static-libs -test) |
33 |
Homepage: http://www.openssl.org/ |
34 |
Description: |
35 |
|
36 |
As far as I know acroread is not unmasked in this |
37 |
installation, nor is openssl |
38 |
> # grep -i acro /etc/portage/* |
39 |
> # grep -i ssl /etc/portage/* |
40 |
shows nothing, so acroread and ssl is «stable». |
41 |
|
42 |
For now I just uninstalled acroread to prevent the |
43 |
installation of a buggy openssl version, but this seems |
44 |
wrong for a mostly stable installation... |
45 |
|
46 |
Any hints how to proceed? Is there any danger to have an |
47 |
old (and apparently buggy) openssl lib installed in parallel |
48 |
with the recent one? |
49 |
|
50 |
Urs |