On Fri, Nov 8, 2013 at 5:22 AM, "Paweł Hajdan, Jr." <phajdan...@gentoo.org>wrote:
> Problem #1 is that sci-geosciences/osgearth-2.4 depends on > =dev-lang/v8-3.18.5.14 (see > <https://bugs.gentoo.org/show_bug.cgi?id=484786> for context). It > doesn't work with more recent v8, but it can be made to not depend on v8. > If "made not to depend" means "bundle", is the bundled version any safer than the ebuild there? If the answer is no, you're now increasing the security issue. Diego Elio Pettenò — Flameeyes flamee...@flameeyes.eu — http://blog.flameeyes.eu/