From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1GLnFT-0006jN-Mr for garchives@archives.gentoo.org; Fri, 08 Sep 2006 20:46:52 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.8/8.13.6) with SMTP id k88KjF4Q015825; Fri, 8 Sep 2006 20:45:15 GMT Received: from nz-out-0102.google.com (nz-out-0102.google.com [64.233.162.195]) by robin.gentoo.org (8.13.8/8.13.6) with ESMTP id k88KavW3023042 for ; Fri, 8 Sep 2006 20:36:58 GMT Received: by nz-out-0102.google.com with SMTP id n1so379345nzf for ; Fri, 08 Sep 2006 13:36:57 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=K5JIObAY6mAU6ix0Bu+6gRZP3JCcdSeiVw3RoG2PHBKE3cy39Pom9+h+FcT26BpGOKKcNv8zNTkaWX63leestl5Eaf4H+Y7P11ekLHauo0g76SZXr9yfxLYKBwpW+io2ekl+mtNxOAKqONpE5G+C/tCucrPh7a7AGPapU5+0KSY= Received: by 10.64.204.19 with SMTP id b19mr2822963qbg; Fri, 08 Sep 2006 13:36:57 -0700 (PDT) Received: by 10.65.156.16 with HTTP; Fri, 8 Sep 2006 13:36:57 -0700 (PDT) Message-ID: <5bdc1c8b0609081336r703d1000qac338bd48261e087@mail.gmail.com> Date: Fri, 8 Sep 2006 13:36:57 -0700 From: "Mark Knecht" To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] package removed from portage question In-Reply-To: <7573e9640609081311j509c88a6sae8ad81ad3be4663@mail.gmail.com> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <5bdc1c8b0609081002u396e043n3183687029bd543f@mail.gmail.com> <4501A9D0.4000907@badapple.net> <5bdc1c8b0609081227n56c4402fh7a85d05c62c39fb8@mail.gmail.com> <7573e9640609081311j509c88a6sae8ad81ad3be4663@mail.gmail.com> X-Archives-Salt: 8b568a5c-c12e-45a8-9e82-9f4f18c69b96 X-Archives-Hash: bd99c3d07a9aec2af619c4a5f50045c2 On 9/8/06, Richard Fish wrote: > On 9/8/06, Mark Knecht wrote: > > I sort of have a problem with this. Maybe the info is in the change > > logs? > > Yes, you really should read the ChangeLog if you want anwers to such > questions. Looks like 4.1.21 was stabilized to solve a security bug > [1] [2]. > > > up with 4.1.20 I think it must have been marked stable. Why did folks > > mark it stable and then completely remove it when 4.1.21 came along, > > but we continue to have older versions like 4.0.27? > > Versions older than 4.1 are not affected by the security bug, so there > was no need to remove them. > > [1] http://www.gentoo.org/security/en/glsa/glsa-200608-09.xml > [2] http://bugs.gentoo.org/show_bug.cgi?id=142429 > > -Richard Thanks Richard. I know the Gentoo security focus is important. However it still seems to me that there must be a better way to do this than essentially ripping it out of my system by deleting the ebuild. Making a worldwide security decision seems quite draconian when it's just me, my wife and son watching MythTV. Why can't the ebuild be left on my machine in some location so that the machine remains unaltered until I decide it's worth dealing with? Anyway, thanks for the info. Cheers, Mark -- gentoo-user@gentoo.org mailing list