Bug#846232: [pkg-gnupg-maint] Bug#846232: libgpgme-dev: Provides: libgpgme11-dev must be versioned

[SZ Lin (林上智)]

Hi all,

openvas related packages had been flagged for removal from testing due
to buggy deps.

Raphael opened the issue #846569 [1] few days ago, but without any reply.

I have tried to recompile libssh with libssl 1.1 but failed with some
API change issues [2].

Do you have any ideas on how we could solve this issue?


greenbone-security-assistant: buggy deps openvas-libraries, flagged for
> removal in 36.3 days
> openvas-cli: buggy deps openvas-libraries, flagged for removal in 36.3 days
> openvas-libraries: flagged for removal in 36.3 days
> openvas-manager: buggy deps openvas-libraries, flagged for removal in 36.3
> days
> openvas-scanner: buggy deps openvas-libraries, flagged for removal in 36.3
> days


ref:
[1]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=846569
[2]: https://wiki.openssl.org/index.php/1.1_API_Changes

--
Sun-Ze Lin  (林上智)


2016-12-02 17:45 GMT+08:00 Raphael Hertzog <hertzog at debian.org>:

> On Thu, 01 Dec 2016, Daniel Kahn Gillmor wrote:
> > > With one rdep your patch is as good at fixing this problem as my
> > > suggestion (but I am not involved in maintaining either package).
> >
> > I plan on NMUing this change to openvas unless i hear otherwise from the
> > openvas maintainers (cc'ed here).
>
> I wanted to upload this changes but openvas fails to build in sid due to
> the openssl transition. It build-depends on libssh-dev which requires
> libssl1.0-dev and also on libsnmp-dev which requires libssl-dev.
>
> So we must first solve this, possibly by letting libsnmp-dev depend on
> either
> version of the -dev package (opened #846569 about this).
>
> report:
>  -
>   package: sbuild-build-depends-openvas-libraries-dummy
>   version: 0.invalid.0
>   architecture: amd64
>   status: broken
>   reasons:
>    -
>     conflict:
>      pkg1:
>       package: libssl1.0-dev
>       version: 1.0.2j-4
>       architecture: amd64
>       unsat-conflict: libssl-dev:amd64
>      pkg2:
>       package: libssl-dev
>       version: 1.1.0c-2
>       architecture: amd64
>      depchain1:
>       -
>        depchain:
>         -
>          package: sbuild-build-depends-openvas-libraries-dummy
>          version: 0.invalid.0
>          architecture: amd64
>          depends: libssh-dev:amd64 (>= 0.5.0)
>         -
>          package: libssh-dev
>          version: 0.7.3-2
>          architecture: amd64
>          depends: libssl1.0-dev:amd64
>      depchain2:
>       -
>        depchain:
>         -
>          package: sbuild-build-depends-openvas-libraries-dummy
>          version: 0.invalid.0
>          architecture: amd64
>          depends: libsnmp-dev:amd64
>         -
>          package: libsnmp-dev
>          version: 5.7.3+dfsg-1.5+b1
>          architecture: amd64
>          depends: libssl-dev:amd64
>
> Cheers,
> --
> Raphaël Hertzog ◈ Debian Developer
>
> Support Debian LTS: http://www.freexian.com/services/debian-lts.html
> Learn to master Debian: http://debian-handbook.info/get/
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-security-team/attachments/20161207/6199241a/attachment.html>