[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#681717: unblock: openjpeg/1.3+dfsg-4.4



On Wed, Sep 26, 2012 at 2:50 PM, Julien Cristau wrote:
> On Wed, Sep 19, 2012 at 01:27:15 -0400, Michael Gilbert wrote:
>
>> On Thu, Aug 16, 2012 at 5:18 AM, Jon Severinsson wrote:
>> > Release note that this bug blocks sound from working in wine and other i386
>> > applications on amd64 in wheezy for many configurations (including mine).
>> >
>> > That is because libopenjpeg2 is required by libavcodec53 which is required by
>> > libasound2-plugins, which I need in both amd64 and i386 flavours to get sound
>> > to work in both 64 and 32 bit applications.
>>
>> Trying this one more time since I would really like the wine sound
>> situation to be of high quality with the wheezy release.
>>
>> Attached is a patch (diffed against testing) that reverts back to
>> debhelper 5 but otherwise retains the multiarch conversion, which is
>> needed to resolve said sound situation.
>>
>> I know this is late, and its been late, but multiarch openjpeg has
>> been in unstable for over 60 days without issue related to multiarch.
>> So, in my opinion its far less risky than it may seem.  But anyway I
>> certainly respect alternative viewpoints.
>>
>> Anyway, the patch attached is for review and I will not upload without
>> pre-approval.
>>
> This approach looks ok to me.  I'm guessing it needs an additional patch
> for CVE-2012-3535 though.  One thing I don't understand is the comment
> about the -dbg package in the changelog.  Care to explain what the
> problem is?

Apologies for the delay, I've been too busy lately.

So, the -dbg issue has to do with way in which debug files are
compared betwen different arch m-a:same packages.  At compat level 9
hashes of the paths are used vs. actual file contents at lower compt
levels.  Consequently, debug packages cannot be m-a:same at lower
compat levels.

Anyway, I'll look at applying the patch for CVE-2012-3535 and
uploading to unstable in the next couple days, if that is reasonable?

Best wishes,
Mike


Reply to: