[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [backport request] proftpd 1.3.3a-3 from squeeze to lenny



On Thu, Oct 14, 2010 at 04:33:13PM +0200, Salvatore Bonaccorso wrote:
> Hi
> 
> I have a request on backporting proftpd from squeeze to stable if this
> is possible.
> 
> I can try to do it myself, but would like to have a feedback from
> Francesco if possible. 
> 
> I have uploaded a first try here: 
> 
> 	http://people.ee.ethz.ch/~bonaccos/debian/proftpd/
> 
>  Build-Depends: libmysqlclient-dev, libpam-dev, debhelper (>= 7), zlib1g-dev,
> - libpq-dev, libldap2-dev, libssl-dev (>= 0.9.8l), libwrap0-dev, libcap-dev [linux-any],
> + libpq-dev, libldap2-dev, libssl-dev, libwrap0-dev, libcap2-dev,
>   autotools-dev, libncurses5-dev, dpatch, libacl1-dev, libattr1-dev, unixodbc-dev, libsqlite3-dev
>  Homepage: http://www.proftpd.org/
> 
> diff -u proftpd-dfsg-1.3.3a/debian/changelog proftpd-dfsg-1.3.3a/debian/changelog
> --- proftpd-dfsg-1.3.3a/debian/changelog
> +++ proftpd-dfsg-1.3.3a/debian/changelog
> @@ -1,3 +1,12 @@
> +proftpd-dfsg (1.3.3a-3~bpo50+1) lenny-backports; urgency=low
> +
> +  * Rebuild for lenny-backports.
> +  * debian/control:
> +    - Make versioned Build-Depends on libssl-dev unversioned.

The versioned dependencies has been introduced as follows:

  * Now requires openssl >= 0.9.8l-1 to have a working 
    AllowClientRenegotiations.  Renegotiations is disabled in >=
    0.9.8k-6, but proftpd assumes it works in all versions before 0.9.8l.

This is due to patching introduced in debian 0.9.8k version of the
library.
Specifically, you have also to ensure that the version in use onto the
target system is the same used for building, else shit could happen
as in https://bugs.launchpad.net/ubuntu/+source/proftpd-dfsg/+bug/580512

IMHO the safest thing is using a backported squeeze openssl version.


-- 
Francesco P. Lovergine


Reply to: