From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from re-prd-fep-047.btinternet.com (mailomta12-re.btinternet.com [213.120.69.105]) by sourceware.org (Postfix) with ESMTPS id 23D163858401 for ; Sun, 7 Nov 2021 11:39:23 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 23D163858401 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=dronecode.org.uk Authentication-Results: sourceware.org; spf=none smtp.mailfrom=dronecode.org.uk Received: from re-prd-rgout-001.btmx-prd.synchronoss.net ([10.2.54.4]) by re-prd-fep-047.btinternet.com with ESMTP id <20211107113922.PHTZ24878.re-prd-fep-047.btinternet.com@re-prd-rgout-001.btmx-prd.synchronoss.net> for ; Sun, 7 Nov 2021 11:39:22 +0000 Authentication-Results: btinternet.com; auth=pass (PLAIN) smtp.auth=jonturney@btinternet.com; bimi=skipped X-SNCR-Rigid: 613A8CC308320C20 X-Originating-IP: [81.129.146.209] X-OWM-Source-IP: 81.129.146.209 (GB) X-OWM-Env-Sender: jonturney@btinternet.com X-VadeSecure-score: verdict=clean score=0/300, class=clean X-RazorGate-Vade: gggruggvucftvghtrhhoucdtuddrgedvuddruddtgddvlecutefuodetggdotefrodftvfcurfhrohhfihhlvgemuceutffkvffkuffjvffgnffgvefqofdpqfgfvfenuceurghilhhouhhtmecufedtudenucenucfjughrpefkffggfgfuvfhfhfgjtgfgsehtjeertddtfeejnecuhfhrohhmpeflohhnucfvuhhrnhgvhicuoehjohhnrdhtuhhrnhgvhiesughrohhnvggtohguvgdrohhrghdruhhkqeenucggtffrrghtthgvrhhnpeffkeeigfdujeehteduiefgjeeltdelgeelteekudetfedtffefhfeufefgueettdenucfkphepkedurdduvdelrddugeeirddvtdelnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehhvghloheplgduledvrdduieekrddurddutdefngdpihhnvghtpeekuddruddvledrudegiedrvddtledpmhgrihhlfhhrohhmpehjohhnrdhtuhhrnhgvhiesughrohhnvggtohguvgdrohhrghdruhhkpdhrtghpthhtoheptgihghifihhnqdgrphhpshestgihghifihhnrdgtohhm X-RazorGate-Vade-Verdict: clean 0 X-RazorGate-Vade-Classification: clean Received: from [192.168.1.103] (81.129.146.209) by re-prd-rgout-001.btmx-prd.synchronoss.net (5.8.716.04) (authenticated as jonturney@btinternet.com) id 613A8CC308320C20 for cygwin-apps@cygwin.com; Sun, 7 Nov 2021 11:39:21 +0000 Message-ID: <248aae90-baa9-4115-2a05-b527e8480686@dronecode.org.uk> Date: Sun, 7 Nov 2021 11:39:14 +0000 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.3.0 Subject: Re: OpenSSL package updates Content-Language: en-GB To: "cygwin-apps@cygwin.com" References: <87mtmyqwbv.fsf@Rainer.invalid> <87y261l1i0.fsf@Rainer.invalid> <87mtmhkqbn.fsf@Rainer.invalid> <87ee7smhaw.fsf@Rainer.invalid> From: Jon Turney In-Reply-To: <87ee7smhaw.fsf@Rainer.invalid> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-1191.8 required=5.0 tests=BAYES_00, FORGED_SPF_HELO, KAM_DMARC_STATUS, KAM_LAZY_DOMAIN_SECURITY, NICE_REPLY_A, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H2, SPF_HELO_PASS, SPF_NONE, TXREP autolearn=no autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org X-BeenThere: cygwin-apps@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Cygwin package maintainer discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Nov 2021 11:39:25 -0000 On 07/11/2021 09:44, Achim Gratz wrote: > Corinna Vinschen via Cygwin-apps writes: > > I have no problem with that idea as long as the previous packages can be > reinstated for inspection if necessary. > >> In a second step the dependencies in the below packages could be changed >> to require the mingw-libopenssl100 package. At least that would be >> better for bookkeeping. Does that require manual intervention on the >> server? I'm not sure, Jon would know this better. > > Yes, all the hint files would need to get edited. Stop! We don't put the soversion into cross-package names. I don't think we are the only distro to do that. I don't think it makes any sense to do so, as there's no executables in other cross-packages which use that shared library. Any user cross-built executables will need to be rebuilt after this update (and the names of any shared libraries distributed with the cross-built executable updated) I get that this is trying to avoid having to rebuild all the dependent cross-packages right now, but they need to be rebuilt eventually, and making stuff more complex just for that temporarily state doesn't seem useful.