Package: netatalk
Version: 2.0.3-11+lenny1
Severity: important
Tags: patch

Netatalk store metadata in BerkeleyDB databases per fileshare. These
databases are specific to the version of BerkeleyDB used and netatalk
does not automatically upgrade databases when newer version of the
BerkeleyDB library is used.

Netatalk build-depend on libdb-dev, which on Etch pulls in libdb4.2-dev
but on recent Lenny instead pulls in libdb4.6-dev.

When users update to the recently released security update, all file
shares will appear empty  until the metadata databases are either
manually updated or the databases removed to have new metadata be
recreated from scratch.

Build-depending on libdb4.2-dev instead of libdb-dev fixes this issue.

Will it be ok for the Security team that I prepare a security update
2.0.3-11+lenny2 with above one-line fix?

Etch is not affected.


Regards,

 - Jonas



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to