-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 1/6/2015 6:47 PM, William Hubbs wrote:
> All,
> 
> these packages have been masked in the tree for months - years with
> no signs of fixes.
> 
> I am particularly concerned about packages with known security 
> vulnerabilities staying in the main tree masked. If people want to
> keep using those packages, I don't want to stop them, but packages
> like this should not be in the main tree.

> # Sergey Popov <pinkb...@gentoo.org> (04 Sep 2014) # Security mask,
> wrt bugs #488212, #498164, #500260, # #507802 and #518718 
> <virtual/mysql-5.5 <dev-db/mysql-5.5.39 <dev-db/mariadb-5.5.39
> 

The mysql team keeps old upgrades around for several months on purpose
to give admins time to migrate between major/minor releases.

Thanks for the reminder to cleanup.  It is time to do so.

Brian Evans
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQEcBAEBAgAGBQJUrTaLAAoJEE4V4vFnx44dEQ0H/1gNWrI6DUPRKwrxnlwCjlrW
gVOS6p2LGVCxOx+qm98bvTYpt3HD3N4HB8IXnJRiPrOpQ/AW8VpyF+gQCN7jVsVP
vW1C/peuusERVvGfbIW8j86xl3ZQc3R8RDBlxRR11nxXRhrM5Bb8gpNWpHq5ni3R
zb6nT1+jYZ7Ix/UNWB2tnVW/H5Q/bBujVyjYrc94XKuEuHZORmS7/q+gD4oFF8+Q
B/TtK7ouJ+G8CX3WjM8pXRrg7mPukTQFgOEqZsZ8tqVyqGaE/KmR+jrFlVbrLMuD
xZvIkpvFUYwf/mdToUd1QNBblRdFs0wvGK06vkUDKJDJjz/mWhyWlVzJQQFjr2s=
=95aa
-----END PGP SIGNATURE-----

Reply via email to