[Pkg-openssl-devel] Re: Accepted openssl 0.9.8-3 (source i386)

[Christoph Martin]

Hi Kurt,

Kurt Roeckx schrieb:
> 
> I was going to send you a mail about this.  I'm sorry that I
> didn't talk to you about it before I did this, but I felt it
> important to get those security fixes out.

I can understand that.

> I don't plan to do an other upload until you had time to atleast
> look at the at things.  

Ok.

> But I would like to get this symbol
> version patch uploaded during the weekend.

I wanted to get some reaction from upstream and the other distros and I
only got one reply until now. So I am not shure if it is wise to make
quick move here. On the other hand I see the problem which arises at the
moment in Debian with the growing number of packages linking against the
unversioned Openssl 0.9.8.

BTW: Do you think about symbol versioning of openssl097 in sid?

>>BTW: I am working on the symbol versioning.
> 
> Great, I didn't have time to look at it yet.
> 
> I do have 2 comment's about Steve's patch:
> - It should use version OPENSSL_0.9.8 (and not OPENSSL_0_9_8)

This is what I use in my patch.

Steve has a more sophisticated version-script. I have to look into it
more closely. There are some symbols hidden with his approach. I prefere
at the moment my patch, because it is only in Configure and one could
make it an option for the script like --with-symbol-versioning. Also
Steve missed the version script for the engines shared libraries.

> - The shlibs should get bumped.  (In theory this shouldn't be a
>   problem since 0.9.8 didn't make it to testing yet, and we have
>   an RC bug preventing it.)

I am not shure about this. We would have an incompatibility again.

Christoph

-- 
============================================================================
Christoph Martin, Leiter der EDV der Verwaltung, Uni-Mainz, Germany
 Internet-Mail:  Christoph.Martin at Uni-Mainz.DE
  Telefon: +49-6131-3926337
      Fax: +49-6131-3922856
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 256 bytes
Desc: OpenPGP digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-openssl-devel/attachments/20051014/c41d51cd/signature.pgp