From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtpout2.vodafonemail.de (smtpout2.vodafonemail.de [145.253.239.133]) by sourceware.org (Postfix) with ESMTPS id 66F043858D28 for ; Sat, 23 Oct 2021 17:44:28 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 66F043858D28 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=nexgo.de Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=nexgo.de Received: from smtp.vodafone.de (unknown [10.2.0.36]) by smtpout2.vodafonemail.de (Postfix) with ESMTP id 85EB2120A9B for ; Sat, 23 Oct 2021 19:44:26 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nexgo.de; s=vfde-smtpout-mb-15sep; t=1635011066; bh=Xy5achpuTEGMwwCvQSwN+yoe8RcZJ3nawLBfvkUDHzA=; h=From:To:Subject:Date; b=lOKPZwTPOhJ5Pp53xotPY7BOFJCrGZB3acG6YIeqh6TMZBKYrqYoHpA3jZlJcnhNh ocvjDWzfhoM60X+2Sl407Xm0moJQg0LhbX46k65OXGuQFUKlOF2re5uVZl0/g1mHxd CzO9i2Iv38KE8u51ESl/WF8a3McpifzLmLnqAnpI= Received: from Gertrud (p54a0cb96.dip0.t-ipconnect.de [84.160.203.150]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by smtp.vodafone.de (Postfix) with ESMTPSA id 4Hc7rV0spwz9sB2 for ; Sat, 23 Oct 2021 17:44:25 +0000 (UTC) From: Achim Gratz To: cygwin-apps@cygwin.com Subject: [ATTN MAINTAINERS] OpenSSL 1.0 dependencies Date: Sat, 23 Oct 2021 19:44:25 +0200 Message-ID: <87tuh7iqkm.fsf@Rainer.invalid> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-purgate-type: clean X-purgate-Ad: Categorized by eleven eXpurgate (R) http://www.eleven.de X-purgate: This mail is considered clean (visit http://www.eleven.de for further information) X-purgate: clean X-purgate-size: 2244 X-purgate-ID: 155817::1635011066-00004EF9-07FD29DD/0/0 X-Spam-Status: No, score=-3030.3 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, RCVD_IN_BARRACUDACENTRAL, RCVD_IN_DNSWL_LOW, RCVD_IN_MSPIKE_H2, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=no autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org X-BeenThere: cygwin-apps@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Cygwin package maintainer discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Oct 2021 17:44:31 -0000 We should get rid of dependencies to the obsolete OpensSSL 1.0 library that is no longer maintained upstream and has several critical bugs. Current and previous versions of the following packages depend on the outdated libopenssl100 (a lot of these have many packages depending on them in turn and/or are orphaned): c3270 cgit clamav ctorrent email exim fossil glib2.0-openssl gq gstreamer1.0-plugins-bad-free gwenhywfar hexchat httperf httping kdebase3 krb5-k5tls krb5-pkinit lftp libbotan1.10_1 libclamav7 libdns165 libdns166 libdns169 libesmtp6 libevent2.0_5 libfreerdp1.0 libfreerdp1.2 libfreerdp2_2 libgda5.0_4 libgdal20 libgit2_23 libgit2_24 libgit2_25 libgnomevfs2_0 libisc160 libisc166 libkdecore4 libkdecore5 libKF5KDELibs4Support5 liblrdf2 libmysqlclient18 libmysqld18 libneon27 liboauth0 libopenrawgnome7 libopusfile0 libpoco31 libpoco43 libpoco45 libpoco47 libpoco48 libpoco49 libpoco50 libpoco51 libpoco60 libpodofo0.9.3 libpodofo0.9.4 libpodofo0.9.5 libqca-qt5_2 libqca2 libQt5Core5 libQtNetwork4 libserf1_0 libshout3 libspice-client-glib2.0_8 libspice-server1 libsqlcipher0 libssh4 libssl1.0 libtorrent18 libtorrent19 libwinpr1.1 libwinpr2_2 libxmlsec1-openssl1 libzip5 links lua-crypto lynx mysql mysql-server mysql-test nginx nmh odbc-psql pl podofo postfix pr3287 pure-ftpd python2-cryptography python35 qupzilla remmina ruby s3270 sendmail slrn snownews squid ssmtp suck syslog-ng tcl3270 tnftp transmission transmission-gtk transmission-qt unbound uw-imap-imapd uw-imap-util w3m x11vnc x3270 Previous versions of the following packages depend on libopenssl100: httpd-mod_http2 httpd-mod_ssl httpd-tools libsasl2_3 libssh2_1 net-snmp-libs net-snmp-utils nginx-mod_mail perl-Crypt-OpenSSL-Bignum perl-Crypt-OpenSSL-ECDSA perl-Crypt-OpenSSL-Random ruby-puma The three Perl distribution packages belong to an older Perl version I think, so I'd suggest to unceremoniously remove them. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ SD adaptation for Waldorf Blofeld V1.15B11: http://Synth.Stromeko.net/Downloads.html#WaldorfSDada