Re: [gentoo-user] skype package changes I don't understand

[Mark Knecht <markknecht@gmail.com>]

On Mon, May 21, 2012 at 8:04 AM, Markos Chandras <hwoarang@gentoo.org> wrote:
> On Mon, May 21, 2012 at 3:46 PM, Mark Knecht <markknecht@gmail.com> wrote:
>> I love my Gentoo-devs, but what is the train of thought here?
>> skype-2.2.0.35-r1 was ~amd64 yesterday. It's installed and working
>> fine. Today 2.2.0.35-r99 is ~amd64, which is perfectly fine, but
>> they've completely removed -r1 and now I'm required to unmask
>> emulation packages that only came out today? That doesn't seem quite
>> right...
>>
>> Why did they completely get rid of -r1? That should stick around for a
>> little while after -r99 becomes ~amd64, shouldn't it?
>>
>> - Mark
<SNIP>
>
> -r1 had a security problem. You should unmask the emulation packages
> and continue the update process. Look at the ChangeLog so see what
> changed. Both versions are ~amd64 so I don't understand your complain
> about keeping -r1 in the tree for a while.
>
> Markos
>

Thanks Markos. That's likely what I'll do, although the alternative
I'm looking at for now is possibly getting -r1 from an overlay.

I didn't think I was _complaining_. I was just asking what the train
of thought was that leads them to do this sort of thing. Everything in
the world has a security problem. We know they are either found or not
found. Unmasking 8 emulation libraries that have _yesterdays_ date in
their names, and therefore makes them quite new, may:

1) Create more security problems

2) Create issues with other programs that use the libraries.

Anyway, thanks for the response. I'll either unmask or use an overlay.

Cheers,
Mark