Your message dated Mon, 19 Jun 2006 12:37:48 +0200
with message-id <[EMAIL PROTECTED]>
and subject line Bug#370387: building against libsoup might result in more 
gnutls libs being used
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: libsoup2.2-dev
Version: 2.2.93-1
Severity: normal

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi

While preparing update of mpdscribble, I was notified that resulting
binary is built against more libgnutls libraries. This is caused by two
facts in libsoup2.2-dev package:

1. -lgnutls is listed in pkgconfig file, is it really needed there?

2. libsoup2.2-dev depends on libgnutls-dev, however it libgnutls-dev is
also provided by libgnutls11-dev

For fixing this I suggest to make dependendy on libgnutls-dev stricter
(libgnutls-dev > 1.3.0 or something like that).

- -- 
    Michal Čihař | http://cihar.com | http://blog.cihar.com

- -- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16-raptor
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages libsoup2.2-dev depends on:
ii  libgcrypt11-dev            1.2.2-1       LGPL Crypto library - development 
ii  libglib2.0-dev             2.10.3-1      Development files for the GLib lib
ii  libgnutls-dev              1.3.5-1.1     the GNU TLS library - development 
ii  libgpg-error-dev           1.2-1         library for common error values an
ii  libsoup2.2-8               2.2.93-1      an HTTP library implementation in 
ii  libtasn1-2-dev             1:0.2.17-2    Manage ASN.1 structures (developme
ii  libxml2-dev                2.6.24.dfsg-1 Development files for the GNOME XM
ii  zlib1g-dev                 1:1.2.3-11    compression library - development

libsoup2.2-dev recommends no packages.

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFEg1pF3DVS6DbnVgQRApeQAJ4hAH+n4yEnGjS7YicQ+mtmXJLmagCgy8l1
7GvbFzMyEa+dKHkMh3REjZc=
=rWZ+
-----END PGP SIGNATURE-----


--- End Message ---
--- Begin Message ---
        Hi,

On Mon, Jun 05, 2006, Michal Cihar wrote:
> It's warning from linda that binary is linked against two version of
> same library.

 This is supposed to work, especially with libraries with versionned
 symbols such as libgnutls.

> IMO no because of libgnutls.so symlink in libgnutls11-dev which points
> to another version than libsoup is using. This will break static
> linkage and results in strange results in dynamic linkage.

 It's not supposed to break, and even it it would, libsoup only needs a
 bin NMU to fix it.

> I know that it is real package, however nothing forces me to upgrade
> and deps of libsoup2.2-dev are satisfied also with libgnutls11-dev what
> can lead to problems (I expect this is temporary until libgnutls11
> vanishes from archives).

 I think sbuild will pull libgnutls-dev, as virtual packages are not
 supported.

> So the dependency should be filled in on build time.

 This looks quite dangerous.

 I brought the discussion to [EMAIL PROTECTED], and Goswin von Brederlow
 supported my position:
    <http://lists.debian.org/debian-devel/2006/06/thrd2.html#00808>

 I am closing the bug for now, as I believe what I'm doing is regular
 and expected practice.

 If you think this is incorrect, please argument on debian-devel@ and
 reopen this bug if necessary.

   Bye,
-- 
Loïc Minier <[EMAIL PROTECTED]>

--- End Message ---

Reply via email to