Package: ftp.debian.org
Severity: normal
ROM Package removal - Request Of Maintainer.
I concur in removing mirrordir from the Ubuntu and Debian
repositories.
- Jim Van Zandt
From: Ploc <[email protected]>
Content-Type: text/plain; charset="UTF-8"
Date: Tue, 19 May 2009 00:09:00 +0200
Hello,
I've seen on the Ubuntu page
<http://packages.ubuntu.com/fr/jaunty/mirrordir> that you were the
official maintainer of mirrordir.
I've been using mirrordir until last week where I found out that it was
buggy and that I had lost many files during my backup.
I then emailed the original author of mirrordir who told me that he had
not updated mirrordir since 10 years and that mirrordir was buggy. I
forward you an email from him and another from a friend of him
confirming that there is bugs in mirrordir.
The main bug is that mirrordir does not tell anything when he encounters
a problem preventing him from copying the file. This is in my opinion a
severe bug for a backup and mirroring tool.
That's why I suggest to remove mirrordir from the repository until all
the bugs are patched. rsync or many other tool can do the same thing as
mirrordir in a more secure way.
Let me think what you think of it. You can contact the author (or his
friend) of mirrordir if you want some confirmation (I'm sorry but I lost
the mails they sent me).
Ploc
--
, ,
|\_/|
________________________ooO_( o o )_Ooo_____________________
mailto:[email protected] \_/ http://ploc.acampado.net/
Les idées de mon coiffeur sont un peu tirées par les cheveux.
Subject: Re: mirrordir
From: Paul Sheer <[email protected]>
To: "James R. Van Zandt" <[email protected]>
Cc: Laurie Fialkov <[email protected]>, Ploc <[email protected]>
In-Reply-To: <[email protected]>
Content-Type: text/plain
Date: Sun, 24 May 2009 23:21:38 +0200
Hi James,
Nice to hear from you.
I havn't looked at mirrordir for over 10 years.
If no one is actively working on it I recommend it be removed from the
Debian packages.
-paul
On Sat, 2009-05-23 at 17:48 -0400, James R. Van Zandt wrote:
> Paul -
>
> Greetings!
>
> I'm trying to bring the Debian mirrordir package up to date.
>
> The upstream sites http://mirrordir.sf.net,
> http://mirrordir.sourceforge.net/, and lava.obsidian.co.za apparently
> now needs a username and password. Are mirrordir sources still
> available online?
>
> The Debian packaging tools check for a lot of potential problems.
> I'm getting this error:
>
> E: mirrordir: embedded-zlib ./usr/lib/libmirrordirz.so.1.0.0
> N:
> N: The given ELF object appears to have been statically linked to zlib.
> N: Doing this is discouraged due to the extra work needed by the security
> N: team to fix all the extra embedded copies or trigger the package
> N: rebuilds, as appropriate.
> N:
> N: Severity: important, Certainty: certain
> N:
>
> The sources do include a copy of zlib, and zlib.h includes the line
> /* zlib library with modifications by Paul Sheer <[email protected]> */
>
> What modifications did you make? There have been many changes to zlib
> since the version in the mirrordir sources - the current sources are
> about 55% larger. Would it be okay to link to the standard zlib
> instead? (I might need your help to do that.)
>
> - Jim Van Zandt
>
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
