On Tue, 2018-11-20 at 10:28 -0500, Antoine Beaupré wrote: > On 2018-11-20 15:19:45, Ben Hutchings wrote: > > On Mon, 2018-11-19 at 15:48 -0500, Antoine Beaupré wrote: [...] > > > I think this is overengineered. I still haven't heard exactly what the > > > problem would be with upgrading those libraries. They are present in > > > jessie-backports and presumably well tested. > > [...] > > > > Those updated library packages are installed and used by people that > > specifically choose to use GnuPG 2.1 in jessie. I don't think we can > > assume they are well-tested in conjunction with GnuPG 1.4. > > My understanding is that GnuPG 1.4 does not use those libraries at all, > and from what I can tell, gpg 1.4 does not link against them either.
Oh! I don't know why I thought it did. Then this does seem like a reasonable approach. Ben. -- Ben Hutchings Time is nature's way of making sure that everything doesn't happen at once.
signature.asc
Description: This is a digitally signed message part
