Re: libgtop2 fixed packages available (solves applet mess).

[Sven Luther <sven.luther@wanadoo.fr>]

On Sun, Jun 08, 2003 at 03:48:52PM +0200, Christian Marillat wrote:
> Sven Luther <sven.luther@wanadoo.fr> writes:
> 
> > Hello, ...
> 
> Hi,
> 
> [...]
> 
> > There you will also find fixed hardware-monitor and netspeed packages,
> > all other broken applets would need a rebuild against these libgtop2
> > packages. The affected packages are, as far as i know :
> 
> [...]
> 
> >
> > I cannot yet upload these packages to unstable, since their build system
> > is broken (they use the installed libraries, not the ones currently
> > building), and would need a name change because of the soname bump.
> 
> Don't upload these broken packages.

Ok, nice to know, as said, i am no upstream of those, i knew nothing
about soname and such, but learned a lot this morning. Nobody was caring
about this breakage though, and it has been more than a week, i was sick
of it, and took action as i could. The packages i posted are good
workarounds for people to look at it.

> 1) The soname change isn't necessary and should be reverted by upstream
> because the only changes beatween 2.0.1 and 2.0.2 are 5 lines in
> src/daemon/gnuserv.c to fix a buffer overflow vulnerability.

A, ok. Now the doubt i have is if the soname is the correction of a
mistake that did happen earlier on, where the soname should have changed
and did not (from 1.99.x to 2.0.0 or something such). I am waiting
response from whoever did the soname change before concluding.

Note also that my hardware-monitor broke 3 times during the past month
or so, some were identified but some not, so it is well possible that a
previous binary incompatibility without soname change was responsible
for this.

And anyway, even if we keep the same soname, this does not fix the
broken build system, which link the libgtop2.so against the older
installed libgtop2-sysdeps.so and libgtop2-common.so

> 2) You are doing the wrong fix in debian/libgtop2.files This file should be
> removed otherwise the next soname change this package will be broken again.

First a quick hack to make the libraries be included again, then fixing
all the rest of the mess, and then we can do cosmetic improvement. Also,
remember, i am not the upstream author, i don't really think it is my
place to do extensive changes in the libgtop2 packaging.

Friendly,

Sven Luther