[MacPorts] #16911: git-core requiring macports' ssh on leopard, openssh security concern

[MacPorts]

#16911: git-core requiring macports' ssh on leopard, openssh security concern
---------------------------------+------------------------------------------
  Reporter:  bcbarnes at gmail.com  |       Owner:  macports-tickets at lists.macosforge.org
      Type:  defect              |      Status:  new                                  
  Priority:  Normal              |   Milestone:  Port Bugs                            
 Component:  ports               |     Version:  1.6.0                                
Resolution:                      |    Keywords:                                       
      Port:                      |  
---------------------------------+------------------------------------------
Changes (by raimue at macports.org):

 * cc: maccheck at gmail.com, bryan at larsen.st (added)


Comment:

 How should using ssh as a client lead to intrusion into your network?

 I remember a comment by Bryan Larsen that openssh is used from MacPorts
 because it is needed at compile time for git, that means it is bundled to
 a specific version. Therefore we need to declare a dependency to be able
 to do upgrades when needed.

 gcc is a different case, because the gcc provided by Apple is highly
 patched, e.g. to support building for multiple architectures (-arch
 options). The use of Apple's gcc is preferred. Also there is the
 gcc_select port to choose from multiple installed versions.

-- 
Ticket URL: <http://trac.macports.org/ticket/16911#comment:2>
MacPorts <http://www.macports.org/>
Ports system for Mac OS