Re: [gentoo-user] package removed from portage question

[Mark Knecht]

On 9/8/06, Richard Fish <bigfish@××××××××××.org> wrote:
> On 9/8/06, Mark Knecht <markknecht@×××××.com> wrote:
> > I sort of have a problem with this. Maybe the info is in the change
> > logs?
>
> Yes, you really should read the ChangeLog if you want anwers to such
> questions.  Looks like  4.1.21 was stabilized to solve a security bug
> [1] [2].
>
> > up with 4.1.20 I think it must have been marked stable. Why did folks
> > mark it stable and then completely remove it when 4.1.21 came along,
> > but we continue to have older versions like 4.0.27?
>
> Versions older than 4.1 are not affected by the security bug, so there
> was no need to remove them.
>
> [1] http://www.gentoo.org/security/en/glsa/glsa-200608-09.xml
> [2] http://bugs.gentoo.org/show_bug.cgi?id=142429
>
> -Richard

Thanks Richard.

I know the Gentoo security focus is important. However it still seems
to me that there must be a better way to do this than essentially
ripping it out of my system by deleting the ebuild.  Making a
worldwide security decision seems quite draconian when it's just me,
my wife and son watching MythTV. Why can't the ebuild be left on my
machine in some location so that the machine remains unaltered until I
decide it's worth dealing with?

Anyway, thanks for the info.

Cheers,
Mark
-- 
gentoo-user@g.o mailing list