On Wed, Mar 05, 2003 at 07:43:15AM -0600, Jacques A. Vidrine wrote:
> On Wed, Mar 05, 2003 at 09:54:13AM -0000, Subscriber wrote:
> > Having just done two rebuilds for recent OpenSSL and sendmail
> > vulnerabilities, I was surprised to discover that building the port
> > of apache13-modssl required the build of a port version of 
> > OpenSSL when I had the most updated (4.7) base system with
> > OpenSSL in it!. I hate having two versions installed; it makes me
> > fear that there will be problems caused by the wrong version being
> > used.
> 
> You are right to hate having two versions installed --- it is
> pointless in most cases.  Please complain to the apache+mod_ssl and
> openssl port maintainers.  It sounds to me like they are doing
> something very wrong.

At least in the case of net/net-snmp the problem is that the shared lib
version of the openssl port was bumped when the base wasn't which screws
up the dependencies. :-(

-- Brooks

-- 
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to