[pkg-cryptsetup-devel] Bug#758755: libcryptsetup4-udeb: depends on libgcrypt20-udeb, which doesn't exist

[Jonas Meurer]

Hi Cyril,

Am 2014-08-21 01:10, schrieb Cyril Brulebois:
> Package: libcryptsetup4-udeb
> Version: 2:1.6.6-1
> Severity: grave
> Justification: renders package unusable
> 
> Hi,
> 
> your package is no longer installable, because it now depends on
> libgcrypt20-udeb, which is nowhere to be found.

now that you report the bugs I realize that I should have checked 
myself.

@GnuTLS-Maint: what's the reason for not shipping a libgcrypt20-udev 
yet?
Do you intend to fix #758756 soon?

> Likely a bug in libgcrypt20 (which builds no udeb but leads you to get 
> a
> dependency on it) which I'm about to file. I don't see it in the 
> archive
> or in NEW at least.
> 
> The switch to libgcrypt20 seems premature to me.

I see. Reason for the switch to gcrypt 1.6 was the recent Whirlpool 
cipher
bug in gcrypt 1.5.3:

http://lists.gnupg.org/pipermail/gcrypt-devel/2014-January/002889.html
http://www.saout.de/pipermail/dm-crypt/2014-January/003799.html
http://www.saout.de/pipermail/dm-crypt/2014-February/003956.html

Also see section '8.3 Gcrypt after 1.5.3 breaks Whirlpool' in cryptsetup 
FAQ:
https://code.google.com/p/cryptsetup/wiki/FrequentlyAskedQuestions#8._Issues_with_Specific_Versions_of_cryptsetup

Kind regards,
  jonas