GNU bug report logs - #31531
Update monero to 0.12.0.0.

Previous Next

Full log

Message #34 received at 31531 <at> debbugs.gnu.org (full text, mbox):

From: Theodoros Foradis <theodoros <at> foradis.org>
To: Ricardo Wurmus <rekado <at> elephly.net>
Cc: Theodoros Foradis <theodoros <at> foradis.org>, 31531 <at> debbugs.gnu.org
Subject: Re: [bug#31531] [PATCH 1/3] gnu: Add cppzmq.
Date: Sun, 08 Jul 2018 20:35:46 +0300

Hello Ricardo,

> Could you please send a new patch?

Sorry for taking so long to send the new patch. In the meantime, monero
was updated to 0.12.3.0 with a major difference, that using the system's
miniupnpc was disabled, and the project's own version of it (due to
security issues upstream) was added as a git submodule.

So, there were 3 options for us. Either build from git and use the git
submodule, disregard the security issue (that the folks at #monero-dev
on freenode advised against) and use our own miniupnpc, or use monero's
miniupnpc.

I opted for the third option, introducing a patch that reverts the git
commit that does not allow to use external miniupnpc, as well as
packaging monero-project's miniupnpc as a non-public package in
finance.scm. Is this the correct way to do this?

Also, I included a commit renaming monero-core to monero-gui, as the
official project was renamed. Is this appropriate? The old url (using
monero-core) still worked as it's an alias for monero-gui now, but I
figured it would be better to rename nonetheless.

Lastly, I changed both packages to use git-fetch, as the github
auto-generated tarballs would change. What do you think?

I reply to this mail with the updated patch series.

-- 
Theodoros Foradis

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.