Fwd: [Vm-dev] Squeak removed from Gentoo Linux

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Fwd: [Vm-dev] Squeak removed from Gentoo Linux

Stéphane Ducasse
Reading the complete thread is quite interesting.

Stef

Begin forwarded message:

> From: Bert Freudenberg <[hidden email]>
> Date: May 27, 2010 7:37:54 PM GMT+02:00
> To: Squeak Virtual Machine Development Discussion <[hidden email]>
> Subject: [Vm-dev] Squeak removed from Gentoo Linux
> Reply-To: Squeak Virtual Machine Development Discussion <[hidden email]>
>
>
> Squeak was recently removed from Gentoo Linux Ebuilds because of security issues in our bundled plugins:
>
> http://bugs.gentoo.org/show_bug.cgi?id=247363
>
> While it is convenient for us to bundle external library sources, package maintainers do not like that practice. Is there anything we can realistically do about it?
>
> - Bert -
>


_______________________________________________
Pharo-project mailing list
[hidden email]
http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
Reply | Threaded
Open this post in threaded view
|

Re: Fwd: [Vm-dev] Squeak removed from Gentoo Linux

SergeStinckwich
On Fri, May 28, 2010 at 1:07 AM, Stéphane Ducasse
<[hidden email]> wrote:
> Reading the complete thread is quite interesting.


Yes definitely. They do not all wrong. It is not necessary to
duplicate the external code.
If i read correctly, there is some security issues with the current
Squeak/Pharo VM.


> Stef
>
> Begin forwarded message:
>
>> From: Bert Freudenberg <[hidden email]>
>> Date: May 27, 2010 7:37:54 PM GMT+02:00
>> To: Squeak Virtual Machine Development Discussion <[hidden email]>
>> Subject: [Vm-dev] Squeak removed from Gentoo Linux
>> Reply-To: Squeak Virtual Machine Development Discussion <[hidden email]>
>>
>>
>> Squeak was recently removed from Gentoo Linux Ebuilds because of security issues in our bundled plugins:
>>
>>       http://bugs.gentoo.org/show_bug.cgi?id=247363
>>
>> While it is convenient for us to bundle external library sources, package maintainers do not like that practice. Is there anything we can realistically do about it?
>>
>> - Bert -
>>
>
>
> _______________________________________________
> Pharo-project mailing list
> [hidden email]
> http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
>



--
Serge Stinckwich
UMI UMMISCO 209 (IRD/UPMC), Hanoi, Vietnam
Every DSL ends up being Smalltalk
http://doesnotunderstand.org/

_______________________________________________
Pharo-project mailing list
[hidden email]
http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project
Reply | Threaded
Open this post in threaded view
|

Re: Fwd: [Vm-dev] Squeak removed from Gentoo Linux

Stéphane Ducasse

On May 28, 2010, at 4:51 AM, Serge Stinckwich wrote:

> On Fri, May 28, 2010 at 1:07 AM, Stéphane Ducasse
> <[hidden email]> wrote:
>> Reading the complete thread is quite interesting.
>
>
> Yes definitely. They do not all wrong. It is not necessary to
> duplicate the external code.
> If i read correctly, there is some security issues with the current
> Squeak/Pharo VM.

Exact!

Stef
_______________________________________________
Pharo-project mailing list
[hidden email]
http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-project