Package: drbd Severity: serious Hi
You may also refer to #300683 for some more mails around this, but below are the most important informations. The way the package builts isnt acceptable for the modules. Please fix the build-system so that a single dpkg-buildpackage is enough, or please dont get the modules for different kernels in the archive, it isnt suupportable security-wise. Package needs to built everything with one call, and as such have everything in the "main" debian/control (and that SHOULD NOT be edited on the fly, just for the record). ----- Forwarded message from Martin Schulze <[EMAIL PROTECTED]> ----- Date: Wed, 19 Jan 2005 12:41:43 +0100 From: Martin Schulze <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Explanation Michael Banck: The package builds fine like that, it's just the additional kernel modules which need to be built by a different script, AIUI Steve Langasek: well, here's the thing. the source package does build if you run the normal debian/rules commands; but those binary packages that are built do *not* include the kernel-specific modules packages. So you have to go through an additional step to build the per-kernel module packages, which are not listed in debian/control but are present in the archive. me: We cannot support this security-wise. Apart from that the package apparently fails to build from source (FTBFS) if make -f debian/rules build sudo make -f debian/rules binary doesn't produce all required binary packages that should end up in the archive. This is surely release-critical. Regards, Joey ----- End forwarded message ----- -- bye Joerg <liw> I'm kinky and perverse, but my illness is laziness
pgpOw2DY9vZn6.pgp
Description: PGP signature