On Wed, Nov 30, 2016 at 07:43:36PM +0100, Sebastian Andrzej Siewior wrote: > On 2016-11-05 21:59:27 [+0100], Sebastian Andrzej Siewior wrote: > > I've been playing with ben. I tried a few things and this is the best I > > was able to achieve [0]: > > > > title = "openssl 1.0"; > > is_affected = .build-depends ~ /libssl1.0-dev/; > > is_good = .depends ~ /libssl1.0.2/; > > is_bad = .depends ~ /libssl1.1/; > > > > And > > > > title = "openssl 1.1"; > > is_affected = .build-depends ~ /libssl-dev/; > > is_good = .depends ~ /libssl1\.1/; > > is_bad = .depends ~ /libssl1\.0\.2/; > > This does not cover packages which link against 1.0.2 but do not depend > on libssl-dev (but inherit their dependencies). > So it is up to you what you setup but something should be done because > the auto tracker is gone.
Wouldn't "depends on libssl1.0.2 and does not build-depend on libssl1.0-dev" give a reasonably small superset of all packages that need a binNMU? > Sebastian cu Adrian -- "Is there not promise of rain?" Ling Tan asked suddenly out of the darkness. There had been need of rain for many days. "Only a promise," Lao Er said. Pearl S. Buck - Dragon Seed