On Sat, Jan 16, 2016 at 4:41 PM, Ian Jackson <
ijack...@chiark.greenend.org.uk> wrote:
> Ben Hildred writes ("Bug#811216: chiark-utils-bin: old crypto dependency"):
> ...
> > >From the description:
> > summer and watershed require the installation of the Recommended
> crypto
> > libraries;
> >
> > the recommended crypto libraries are libgmp10 (which does not appear
> > th have any issues) and libnettle4 which is outdated and has known
> > issues. A binnmu may resolve the issues completely for the moment,
> > but the better long term solution would be to repackage summer and
> > watershed into a septate package with real dependencies.
>
> Thanks for the report.
>
> I don't think a package split is warranted. I would welcome a binnmu.
>
> You've tagged this bug `security'. Do you know that summer and/or
> watershed are affected by any of the `known issues' you refer to ?
>
> I do not know of any effect to the programs in this package but the
downgrade affects other packages which does expose problems..
> Thanks,
> Ian.
>
--
--
Ben Hildred
Automation Support Services
303 815 6721
