havege in polarssl not enabled and maintainer refuses to enable it (#1069394)

Jonathan Dieter jdieter at lesbg.com
Wed Oct 1 05:52:03 UTC 2014


The havege functions in the polarssl package are currently disabled in 
the Fedora package.  Newer releases of dolphin-emu, which are in a 
popular external repository, require these functions.

According to https://bugzilla.redhat.com/show_bug.cgi?id=1069394#c1, the 
HAVEGE feature is disabled because it's "controversial" and "would lead 
to security problems", but the maintainer hasn't given any more 
explanation than that in the bug report.

Is there any way we can get a second opinion on this?  The external 
repository follows Fedora's guidelines to the best of their ability, and 
this includes the prohibition on bundling, so we'd really like to get 
this fixed.

Jonathan


More information about the devel mailing list