Re: havege in polarssl not enabled and maintainer refuses to enable it (#1069394)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Oct 01, 2014 at 08:52:03AM +0300, Jonathan Dieter wrote:
> The havege functions in the polarssl package are currently disabled
> in the Fedora package.  Newer releases of dolphin-emu, which are in
> a popular external repository, require these functions.
> 
> According to https://bugzilla.redhat.com/show_bug.cgi?id=1069394#c1,
> the HAVEGE feature is disabled because it's "controversial" and
> "would lead to security problems", but the maintainer hasn't given
> any more explanation than that in the bug report.
> 
> Is there any way we can get a second opinion on this?  The external

Yes there is. Since the objection is potentially security related, it would
be good to get the input of the Fedora Security Team (probably on the
security@ mailing list). Second, having had that conversation, if it still
goes nowhere, file a ticket with FESCo.


-- 
Matthew Miller
<mattdm@xxxxxxxxxxxxxxxxx>
Fedora Project Leader
-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct





[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux