[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Taler] GNU Taler Hackathon

From: Sebastian Javier Marchano
Subject: Re: [Taler] GNU Taler Hackathon
Date: Fri, 29 Jan 2021 13:02:12 -0300

Awesome, Im in.

For anyone using Debian experimental, there is a security bug in libgcrypt 1.9.0 released 2021-01-19


On Thu, 28 Jan 2021 at 19:38, Christian Grothoff <grothoff@gnunet.org> wrote:
On 1/28/21 11:29 PM, Thien-Thi Nguyen wrote:
> One item for the agenda: recent Debian decision re libltdl.la.
> Excerpt from /usr/share/doc/libltdl-dev/changelog.Debian.gz:
>  libtool (2.4.6-15) unstable; urgency=medium

>    * Drop shipping /usr/lib/*/libltdl.la
>    * Update autoconf requirement. Closes: #979123
>    * Standards-Version: 4.5.1, no changes required
>    * Move to debhelper compat level 13
>    * Move to DEP-14 branches; add d/gbp.conf to point to these
>    * Point vcs-git to debian/latest branch
>    * Remove dates/times from documentation. Closes: #951031
>    * Include libtool patch for MacOS BigSur support. Closes: #975257
>    * Update watch file to version 4; add sig checking
>    * Drop useless autotools-dev build-dependency
>    * Fix perms for ltmain.sh
>    * Patch for incorrect struct names. Closes: #304400
>    * Ensure  libtool-2.4.6-am-1.16-test.patch is used

>   -- Alastair McKinstry <mckinstry@debian.org>  Sat, 09 Jan 2021 20:49:30 +0000
> Note the first item.  Now when i try to "make" in exchange, i see:
>    [...]
>    CC       payto.lo
>    CC       secmod_signatures.lo
>    CC       taler_error_codes.lo
>    CC       url.lo
>    CC       util.lo
>    CC       wallet_signatures.lo
>    CC       yna.lo
>    CC       os_installation.lo
>    CCLD     libtalerutil.la
>  /bin/sed: can't read /usr/lib/x86_64-linux-gnu/libltdl.la: No such file or directory
>  libtool:   error: '/usr/lib/x86_64-linux-gnu/libltdl.la' is not a valid libtool archive
> Is this a regression?  If not, what's the workaround?  :-(

Rebuild _everything_ you built while libltdl.la was around from source.
Also maybe you have to remove some "*.la" files from your target
directory.  But generally re-building libextractor (if you did build
that), GNUnet and then the Taler components should suffice. Basically,
some library (.so or .la) file on your disks still claims that the
linker should look at libltdl.la, which fails.

Once that file is gone *while* that dependency is being linked, things
should be back to normal. Note that it is quite possible that say
libgnunetutil.{so,la} is the culprit here, so you do need to rebuild
GNUnet to make the exchange happy.

And IMO the real bug is that Debian should have never shipped that file
in the first place ;-).

Happy hacking!


reply via email to

[Prev in Thread] Current Thread [Next in Thread]