Package: libquantlib0 Version: 0.3.9-1 Severity: serious Hi Dirk,
Reviewing the changes in quantlib 0.3.9-2 has brought this fact to my attention: $ dpkg -c q/quantlib/libquantlib0_0.2.1.cvs20020322-1_i386.deb |grep libQuantLib -rw-r--r-- root/root 2815996 2002-03-23 14:49:03 ./usr/lib/libQuantLib.so.0.0.0 lrwxrwxrwx root/root 0 2002-03-23 14:48:43 ./usr/lib/libQuantLib.so.0 -> libQuantLib.so.0.0.0 $ dpkg -c q/quantlib/libquantlib0_0.3.9-1_i386.deb |grep libQuantLib -rw-r--r-- root/root 5192416 2005-05-02 22:22:23 ./usr/lib/libQuantLib-0.3.9.so -rw-r--r-- root/root 208464 2005-05-02 22:22:23 ./usr/lib/libQuantLibFunctions-0.3.9.so lrwxrwxrwx root/root 0 2005-05-02 22:21:47 ./usr/lib/libQuantLib.so -> libQuantLib-0.3.9.so lrwxrwxrwx root/root 0 2005-05-02 22:21:57 ./usr/lib/libQuantLibFunctions.so -> libQuantLibFunctions-0.3.9.so The soname of the quantlib library has been changed, but the package name has not. Since there are packages in woody which have a Depends: libquantlib0, this is a release-critical bug because it invalidates the shlibs from libquantlib0 in woody and breaks partial upgrades between stable releases. E.g., consider a user who has quantlib and quantlib-python installed on woody, begins transitioning to sarge, and pulls in quantlib-ruby -- the quantlib-python package will be silently broken by the new libquantlib0 package that is pulled in. Please rename libquantlib0 so that the package name reflects the soname of the library it contains (e.g., libquantlib-0.3.9). Thanks, -- Steve Langasek postmodern programmer
signature.asc
Description: Digital signature