Re: pkg/47518: security/libssh MUST be replaced by the real wip/libssh

[Noud de Brouwer <noud4%home.nl@localhost>]

okay, no need to double-check you, so pull-up can be done innt.
-- noud
On Thu, 2013-01-31 at 17:00 +0000, Thomas Klausner wrote:
> The following reply was made to PR pkg/47518; it has been noted by GNATS.
> 
> From: Thomas Klausner <wiz%NetBSD.org@localhost>
> To: NetBSD bugtracking <gnats-bugs%NetBSD.org@localhost>
> Cc: 
> Subject: Re: pkg/47518: security/libssh MUST be replaced by the real
>  wip/libssh
> Date: Thu, 31 Jan 2013 17:59:39 +0100
> 
>  On Thu, Jan 31, 2013 at 04:15:03PM +0000, Noud de Brouwer wrote:
>  >  furthermore: this _total_ unknown security/libssh
>  
>  The pkgsrc version is not a "total unknown" libssh. It is just a very
>  old version of the one that is now on libssh.org.
>  
>  If you don't believe me, check it out yourself:
>  # git clone git://git.libssh.org/projects/libssh.git libssh
>  # cd libssh
>  # git log -v | tail -7
>  commit c65f56aefa50a2e2a78a0e45564526ecc921d74f
>  Author: Aris Adamantiadis <aris%0xbadc0de.be@localhost>
>  Date:   Tue Jul 5 01:21:44 2005 +0000
>  
>      first import
>      
>      git-svn-id: svn+ssh://svn.berlios.de/svnroot/repos/libssh/trunk@1 
> 7dcaeef0-15fb-0310-b436-a5af3365683c
>  # cd ..
>  # tar xzf .../libssh-0.11.tgz
>  # diff -r libssh-0.11 libssh | less
>  Only in libssh: .git
>  Only in libssh: Doxyfile
>  diff -r libssh-0.11/Makefile.in libssh/Makefile.in
>  22c22
>  < VERSION=0.11
>  ---
>  > VERSION=0.12-dev
>  63a64,65
>  >       $(INSTALL) include/libssh/ssh2.h $(incldir)/libssh/
>  >       $(INSTALL) include/libssh/ssh1.h $(incldir)/libssh/
>  diff -r libssh-0.11/configure.in libssh/configure.in
>  5c5
>  < AC_INIT(libssh, 0.11 , aris%0xbadc0de.be@localhost)
>  ---
>  > AC_INIT(libssh, 0.2-dev , aris%0xbadc0de.be@localhost)
>  (here follow about 2000 lines of changes since 0.11 and 0.12-dev)
>  
>  Also compare the email with the HOMEPAGE of the libssh package:
>  HOMEPAGE=       http://0xbadc0de.be/
>  
>  So you can argue that we should have updated the package a long time
>  ago, but that's true of quite a number of packages.
>   Thomas
>