[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Packages that need to be rebuilt agaisnt libssl0.9.8



Andreas Barth schrieb:
> * Frank Küster (frank@debian.org) [051006 17:13]:
> 
>>sean finney <seanius@debian.org> wrote:
>>
>>
>>>and furthermore, there are some of us who have been quietly waiting for
>>>things to settle down from the previous major transitions before doing
>>>our own, at the request of the release team.
>>
>>I'm only following d-d-a, -private, and -devel, but that only partly,
>>and *I* have not yet read anywhere that transitions are allowed again at
>>all.  If they are and I had known, it would have saved me quite some
>>work... 
> 
> You are right - as so often.
> 
> People are still required to speak with the release team first. But some
> people prefer to make all of our life harder then necessary.
> 
> Please again: If someone wants to make any transition, please speak
> *first* with the release team. Do not just assume you can upload just
> anything. We really want to finish the c++-abi-transition first.

Sorry for that. I missed the message about not doing library
transitions. My fault. But I also do not really understand why so many
packages need to be rebuild since libssl0.9.7 will be in the archive
too. We had the same scheme with libssl0.9.6 and libssl0.9.7. Sarge
released with some packages still linked against libssl0.9.6. Only the
new to build packages link against the new library.

I however understand the problem with different libraries linked against
different versions of openssl. But I don't think that versioning the
symbols in Debian alone would be such a good idea. Than we would be
incompatible with other distributions. All LSB connected distros should
do it the same way.

Release team: If you think it would be the right thing to remove openssl
0.9.8 from sid, feel free to do it. I did the update, because a lot of
people bugged me about the new version and upstream only recommends this
version. It also closes a grave security bug.

Christoph



-- 
============================================================================
Christoph Martin, EDV der Verwaltung, Uni-Mainz, Germany
 Internet-Mail:  Christoph.Martin@Uni-Mainz.DE
  Telefon: +49-6131-3926337

Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: