SEO

#1 (**permalink**) 02-21-2008, 11:26 AM

Today, I see xorg-x11-6.8.2-r7 is stable and ready for emerging in an
update. I don't want to emerge it.

IS there a way, using package mask to do the following:

mask >xorg-x11-6.8.2-r6 AND
allow >=xorg-x11-6.8.3 AND
mask >=xorg-x11-7.0

In general terms, how can you mask any revusion, minor version or dot
version selectively, but allow one conditionally?

I've tried this a couple of times, and emerge wanted to downgrade! In
the past, I used package.provided to fool emerge, but I don't think
that's so good an idea???

Ideas? Thx

#2 (**permalink**) 02-21-2008, 11:27 AM

Peter wrote:

> Today, I see xorg-x11-6.8.2-r7 is stable and ready for emerging in an
> update. I don't want to emerge it.
>
> IS there a way, using package mask to do the following:
>
> mask >xorg-x11-6.8.2-r6 AND
> allow >=xorg-x11-6.8.3 AND
> mask >=xorg-x11-7.0
>
> In general terms, how can you mask any revusion, minor version or dot
> version selectively, but allow one conditionally?
>
> I've tried this a couple of times, and emerge wanted to downgrade! In
> the past, I used package.provided to fool emerge, but I don't think
> that's so good an idea???
>
> Ideas? Thx
You really need to upgrade this as the problem is a critical security flaw.
The nice thing about it is that you can do the emerge in an x-console while
working on other stuff. On my system, it actually took very little time to
perform, just a couple of hours, shutdown kde and restarted it to use the
new version. Didn't even have to reboot the system and security flaw that
was found is now fixed and yes I don't update my system often, 6 month
minimum unless it's a critical bug and show stopper.

What this upgrade does is fix a local privilege escalation to ROOT through
X11. Very critical and needs updating for this version. For those still
running 4.3, forget it as that version ain't affected by this problem

Now in regards to masking a specific package, the best way is to
create /etc/portage/package.mask. Forget using /usr/portage/package.mask as
it gets overwritten when portage is updated.

The syntax is identical to package.unmask except you CAN use the version
restriction <=xorg-x11/x11-xorg-6.8.2-r6 or even lower but beware that
masking updated versions is not a good idea unless absolutely necessary as
it can quickly create future problems.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

SEO

Masking a package by only a dot version or -r? version