From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1SWVEb-00026j-9l for garchives@archives.gentoo.org; Mon, 21 May 2012 16:13:27 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 627C3E0BF9; Mon, 21 May 2012 16:12:31 +0000 (UTC) Received: from mail-yx0-f181.google.com (mail-yx0-f181.google.com [209.85.213.181]) by pigeon.gentoo.org (Postfix) with ESMTP id 9560FE07B7 for ; Mon, 21 May 2012 16:09:33 +0000 (UTC) Received: by yenl3 with SMTP id l3so5320708yen.40 for ; Mon, 21 May 2012 09:09:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:content-type; bh=DwHtanC6IshyjcCscJTdLYRiXtb5KzwEPFE7dCFAJYY=; b=KJu4bBs45Zcoz38QsMPC5MnBu6b8hocGOmvliOE93OKAz4mOHyw/N5f8FRWp2BgTtD batgg2IsBfCXbjHcUwqIBH0q1eaMHhCwOlF0zzJD/NdFtKB9koWfHn7aAZYEHXOtNUKO I7BZE6McSv9iNMliGz0wVVRQU6cJXBsAJjL2GnxSEVyS9DJzU3I27tWlnI6ju7O7p4Pf +5guNNrHByCmMRV5oqNvUfZ3ZB/j2BoLQuYxxic1Dwx67+TTOiTfoe6081uWyc+XjZnP tqz58yaKMJF2j+F3tM7lJR6noEierOhB1GYjdrdnfyLLet+Uk/c76gTuLwd9F7rmmHbr wjDw== Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Received: by 10.236.115.196 with SMTP id e44mr18842867yhh.90.1337616573131; Mon, 21 May 2012 09:09:33 -0700 (PDT) Sender: markos.chandras@gmail.com Received: by 10.236.146.73 with HTTP; Mon, 21 May 2012 09:09:33 -0700 (PDT) In-Reply-To: References: Date: Mon, 21 May 2012 17:09:33 +0100 X-Google-Sender-Auth: ghIsz0TUjlQbSzXph2MHPf-4HaY Message-ID: Subject: Re: [gentoo-user] skype package changes I don't understand From: Markos Chandras To: gentoo-user@lists.gentoo.org Content-Type: text/plain; charset=ISO-8859-1 X-Archives-Salt: a7bdb42d-d58f-4072-bfb1-23d46a499ae0 X-Archives-Hash: 281ab2d088661ecdaf665533ec2292a2 On Mon, May 21, 2012 at 4:55 PM, Mark Knecht wrote: > On Mon, May 21, 2012 at 8:04 AM, Markos Chandras wrote: >> On Mon, May 21, 2012 at 3:46 PM, Mark Knecht wrote: >>> I love my Gentoo-devs, but what is the train of thought here? >>> skype-2.2.0.35-r1 was ~amd64 yesterday. It's installed and working >>> fine. Today 2.2.0.35-r99 is ~amd64, which is perfectly fine, but >>> they've completely removed -r1 and now I'm required to unmask >>> emulation packages that only came out today? That doesn't seem quite >>> right... >>> >>> Why did they completely get rid of -r1? That should stick around for a >>> little while after -r99 becomes ~amd64, shouldn't it? >>> >>> - Mark > >> >> -r1 had a security problem. You should unmask the emulation packages >> and continue the update process. Look at the ChangeLog so see what >> changed. Both versions are ~amd64 so I don't understand your complain >> about keeping -r1 in the tree for a while. >> >> Markos >> > > Thanks Markos. That's likely what I'll do, although the alternative > I'm looking at for now is possibly getting -r1 from an overlay. > > I didn't think I was _complaining_. I was just asking what the train > of thought was that leads them to do this sort of thing. Everything in > the world has a security problem. We know they are either found or not > found. Unmasking 8 emulation libraries that have _yesterdays_ date in > their names, and therefore makes them quite new, may: > > 1) Create more security problems > > 2) Create issues with other programs that use the libraries. > > Anyway, thanks for the response. I'll either unmask or use an overlay. > > Cheers, > Mark > Well, based on my experience, the emul-* packages are rather safe to use so it should not be a problem to unmask them. Otherwise, you can always grab -r1 from http://sources.gentoo.org and keep it in a local overlay Markos