[gentoo-dev] exploits and portage snapshots

[gentoo-dev] exploits and portage snapshots

[Jason Stubbs]

Hello all,

There's a person on gentoo-user questioning where he can get a portage 
snapshot later than portage-20030914.tar.bz2 as he wants to update openssh 
but can't emerge sync due to his firewall.

How are the snapshots generated? Automatically once a week? Maybe a snapshot 
should be manually generated whenever a security fix is added to portage to 
cater for this situation?

Regards,
Jason

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] exploits and portage snapshots

[Jason Stubbs]

That's what another user recommended but looking at the script shows that it 
just finds the latest snapshot (portage-20030914.tar.bz2 in this case), 
extracts it locally at then rsyncs against the local copy. That latest copy 
is now 6 days old.

On Saturday 20 September 2003 06:35, Chris Gianelloni wrote:
> emerge webrsync should fix him right up.
>
> On Fri, 2003-09-19 at 11:15, Jason Stubbs wrote:
> > Hello all,
> >
> > There's a person on gentoo-user questioning where he can get a portage
> > snapshot later than portage-20030914.tar.bz2 as he wants to update
> > openssh but can't emerge sync due to his firewall.
> >
> > How are the snapshots generated? Automatically once a week? Maybe a
> > snapshot should be manually generated whenever a security fix is added to
> > portage to cater for this situation?
> >
> > Regards,
> > Jason
> >
> > --
> > gentoo-dev@gentoo.org mailing list

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] exploits and portage snapshots

[Jason Stubbs]

Found the answer of #gentoo-bugs but would have preferred to find it here...

I was told that somebody broke the script that automatically creates the 
nightly (not weekly as I guessed - should have researched first) and that it 
should be fixed soon.

I've given the original enquirer a copy of the net-misc/openssh subtree for 
the time being...

On Saturday 20 September 2003 09:02, Jason Stubbs wrote:
> That's what another user recommended but looking at the script shows that
> it just finds the latest snapshot (portage-20030914.tar.bz2 in this case),
> extracts it locally at then rsyncs against the local copy. That latest copy
> is now 6 days old.
>
> On Saturday 20 September 2003 06:35, Chris Gianelloni wrote:
> > emerge webrsync should fix him right up.
> >
> > On Fri, 2003-09-19 at 11:15, Jason Stubbs wrote:
> > > Hello all,
> > >
> > > There's a person on gentoo-user questioning where he can get a portage
> > > snapshot later than portage-20030914.tar.bz2 as he wants to update
> > > openssh but can't emerge sync due to his firewall.
> > >
> > > How are the snapshots generated? Automatically once a week? Maybe a
> > > snapshot should be manually generated whenever a security fix is added
> > > to portage to cater for this situation?
> > >
> > > Regards,
> > > Jason
> > >
> > > --
> > > gentoo-dev@gentoo.org mailing list
>
> --
> gentoo-dev@gentoo.org mailing list

--
gentoo-dev@gentoo.org mailing list