Hello Michael, FYI, for Babel and Hypre (559834 and 559843), I noticed before uploading that the fixed ltdl.c and .h weren't automatically included. For that reason, babel uses libtoolize --force, and I verified that the new sources were there in the build tree. For hypre I had to actually copy in ltdl.c and .h to the build tree in debian/rules, because it doesn't use a standard autoconf system.
Rest assured both bugs are thoroughly dead in unstable. I'll open new bugs for stable and oldstable. BTW, on mips (and no other platform) something is wrong causing babel to FTBFS: it reports a version mismatch between libtool 2.2.6a-4 and LT_INIT from 2.2.6b. Are libtool and libltdl-dev out of sync on mips (or were they two days ago)? Thanks for following up on this. -Adam On Sat, 2009-12-12 at 18:07 -0500, Michael Gilbert wrote: > Hi all, > > It has come to my attention that a lot of maintainers are simply adding > a build-depends on libltdl3-dev to try to solve this problem. This is > not a sufficient solution since your package will still use the > embedded libtool code copy. You need to add '--without-included-ltdl' > to your configure arguments to do this right. > > A verification, but not really a sufficient proof, is that > 'ldd <your binaries>' shows that the system libtool is being used. > > On another note, if your package is affected in either stable or > oldstable, it also must be fixed. The security team has determined > that this issue is not sufficiently severe to warrant DSAs for the > embedding packages, so instead, you should coordinate a proposed-update > with the release team. > > Once you have fixed the problem in unstable (or even before that if > you desire), please open new bugs for stable/oldstable to track the > problem there (if your package is affected). > > Thank you for working on this issue. > > Mike -- GPG fingerprint: D54D 1AEE B11C CE9B A02B C5DD 526F 01E8 564E E4B6 Engineering consulting with open source tools http://www.opennovation.com/
signature.asc
Description: This is a digitally signed message part