Hello Ricardo,
Toggle quote (2 lines)
> Could you please send a new patch?
Sorry for taking so long to send the new patch. In the meantime, monerowas updated to 0.12.3.0 with a major difference, that using the system'sminiupnpc was disabled, and the project's own version of it (due tosecurity issues upstream) was added as a git submodule.
So, there were 3 options for us. Either build from git and use the gitsubmodule, disregard the security issue (that the folks at #monero-devon freenode advised against) and use our own miniupnpc, or use monero'sminiupnpc.
I opted for the third option, introducing a patch that reverts the gitcommit that does not allow to use external miniupnpc, as well aspackaging monero-project's miniupnpc as a non-public package infinance.scm. Is this the correct way to do this?
Also, I included a commit renaming monero-core to monero-gui, as theofficial project was renamed. Is this appropriate? The old url (usingmonero-core) still worked as it's an alias for monero-gui now, but Ifigured it would be better to rename nonetheless.
Lastly, I changed both packages to use git-fetch, as the githubauto-generated tarballs would change. What do you think?
I reply to this mail with the updated patch series.
-- Theodoros Foradis