[PKG-IRC-Maintainers] Bug#745948: inspircd: Direct gcrypt usage is gnutls-related

Peter Powell petpow at saberuk.com
Tue Jun 3 23:37:05 UTC 2014


Hi,

InspIRCd uses libgcrypt as a secure random number generator for
InspIRCd::GenRandom -- not for tuning GnuTLS. Please do not propose
modifications for code which you do not understand. This kind of behaviour
is what caused the May 2008 Debian security vulnerability in OpenSSL and is
a support nightmare for upstream developers as we have no idea if bugs are
caused by distribution modifications or not.

Instead of wasting time on this maybe you should consider updating your
packages which are almost three years out of date now and are missing a ton
of updates. It is becoming annoying having to tell people to build from
source every time they report a bug which was fixed years ago.

~SaberUK
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-irc-maintainers/attachments/20140604/badddc7c/attachment.html>


More information about the Pkg-irc-maintainers mailing list