530810 – dev-libs/matrixssl should set SRC_URI to a versioned tarball

Bug 530810 - dev-libs/matrixssl should set SRC_URI to a versioned tarball

Summary: dev-libs/matrixssl should set SRC_URI to a versioned tarball

Status:	RESOLVED WONTFIX

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	[OLD] Library (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Embedded Gentoo Team

URL:
Whiteboard:
Keywords:

Depends on:	532040
Blocks:
	Show dependency tree

Reported:	2014-11-27 00:41 UTC by Mike Gelfand
Modified:	2020-09-10 20:08 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Mike Gelfand 2014-11-27 00:41:58 UTC

If one has GENTOO_MIRRORS="" in make.conf, version downloaded is currently 3.6.2 instead of 3.6.1 due to generic SRC_URI. Not only it fails manifest validation, but it would also fail to build because of changes made in Makefiles in 3.6.2 (yeah, who would've guessed that patch release could break things that much, not even talking about one of libraries being named "libcore"). 

Reproducible: Always

Steps to Reproduce:
1. add GENTOO_MIRRORS="" to make.conf
2. remove cached distfile, if any
3. emerge matrixssl
Actual Results:  
Emerge fails.

...
!!! Fetched file: matrixssl-3-6-1-open.tgz VERIFY FAILED!
!!! Reason: Filesize does not match recorded size
!!! Got:      4295435
!!! Expected: 4342141
Refetching... File renamed to '/var/tmp/distfiles/matrixssl-3-6-1-open.tgz._checksum_failure_.1ku3De'

!!! Couldn't download 'matrixssl-3-6-1-open.tgz'. Aborting.
...

Comment 1 Jonas Stein gentoo-dev

2020-09-10 20:08:06 UTC

# Aaron Bauman <bman@gentoo.org> (19 Mar 2016)
# Multiple unpatched security vulnerabilities
# per bug #523040. Masked for removal in 30 days.
dev-libs/matrixssl

Seems bman forgot to close this ticket. Closing now.