[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#863473: unblock: openssl1.0/1.0.2l-1



Niels Thykier <niels@thykier.net> (2017-06-03):
> Kurt Roeckx:
> > Package: release.debian.org
> > User: release.debian.org@packages.debian.org
> > Usertags: unblock
> > Severity: normal
> > 
> > Hi,
> > 
> > I've uploaded a new upstream version of openssl1.0 that contains bug
> > fixes. The Debian changelog says:
> >    * New upstream release
> >      - Properly detect features on the AMD Ryzen processor
> >        (Closes: #861145)
> >    * Refresh valgrind.patch
> > 
> > 
> > Kurt
> > 
> 
> Hi,
> 
> Fine by me.  CC'ing KiBi for a d-i ack assuming he is ok with this last
> minute change.

No symbols change here but see my reply to the openssl unblock
request.

FWIW, reverse dependencies for libcrypto1.0.2-udeb are:
  libdns-export162-udeb
  libirs-export141-udeb
  libssl1.0.2-udeb
  openssh-client-udeb
  openssh-server-udeb
  wpasupplicant-udeb

while libssl1.0.2-udeb seems to have no rev-deps.

The first two are bind udebs mainly used for non-Linux ports,
openssh-* are less in the middle of the way for a casual installation
than wget would be, but wpasupplicant-udeb is rather important to keep
functional. Therefore I'd suggest fixing the issue in src:openssl1.0
as well as in src:openssl, so that further updates of openssl1.0 seem
less risky…



For completeness, the 1.1 situation has fewer ramifications:

Rev-deps for libcrypto1.1-udeb:
  libssl1.1-udeb
  wget-udeb

Rev-deps for wget-udeb:
  libssl1.1-udeb



As for the d-i ACK for this package, I'd prefer waiting a bit until
I've made sure wpasupplicant-udeb still works fine with an updated
libcrypto1.0.2-udeb, with a few bare metal tests.


KiBi.

Attachment: signature.asc
Description: Digital signature


Reply to: