[SRU] Openssl copyright/changelog.Debian.gz file points at non-existent location

[Bin Li]

[ Impact ]

 * In OEM projects, our customers need check every copyright of packages.

[ Test Plan ]

 * list the openssl or libssl-dev to check if symbol link is valid.
   $ l -thal /usr/share/doc/libssl-dev/
   $ l -thal /usr/share/doc/openssl/
   $ file /usr/share/doc/libssl-dev/copyright
   $ file /usr/share/doc/openssl/copyright

[ Where problems could occur ]

 * It didn't affects any functions, just the symbol links are misssing.

[ Other Info ]
 Currently it link to the old version libssl3, currently libssl3 is purely virtual.

$ l -thal /usr/share/doc/openssl-dev/
lrwxrwxrwx 1 root root 30 May 14 17:06 changelog.Debian.gz -> ../libssl3/changelog.Debian.gz
lrwxrwxrwx 1 root root 23 May 14 17:06 changelog.gz -> ../libssl3/changelog.gz
lrwxrwxrwx 1 root root 20 May 14 17:06 copyright -> ../libssl3/copyright

$ l -thal /usr/share/doc/libssl-dev/
total 84K
drwxr-xr-x 2 root root 4.0K May 23 16:08 ./
drwxr-xr-x 2180 root root 76K May 16 20:13 ../
lrwxrwxrwx 1 root root 30 May 14 17:06 changelog.Debian.gz -> ../libssl3/changelog.Debian.gz
lrwxrwxrwx 1 root root 23 May 14 17:06 changelog.gz -> ../libssl3/changelog.gz
lrwxrwxrwx 1 root root 20 May 14 17:06 copyright -> ../libssl3/copyright

[Bin Li (binli)]

Here the debdiff for noble

[Bin Li (binli)]

Here is defdiff for oracular

[Adrien Nader (adrien)]

Hi and thanks for the patch.

Process-wise, the changes should land in oracular first and I don't think I changed anything regarding that, even in my merge proposal for 3.2.1. I think we can integrate your patch in oracular in the version that follows the 3.2.1 merge (I'd prefer not to respin my current merge request) and which will also include at least afix for https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1297025 (and maybe a security patch too).

  lrwxrwxrwx 1 root root 23 Feb 21 11:45 /usr/share/doc/libssl-dev/changelog.gz -> ../libssl3/changelog.gz

but ../libssl3/changelog.gz doesn't exist.

This is on my list of things to do in the comings days, or weeks at most.

I guess your main worry was the copyright file however.

[Bin Li (binli)]

hi adrien,

 Thanks, and will the noble use 3.2.1?
 And yes, our worry is the copyright file, especially in noble. :)

[Adrien Nader (adrien)]

Noble will not use 3.2.1. Only oracular will.

Unfortunately, I don't have a very good answer about how to get this fix in Noble as quickly as possible.

[Bin Li (binli)]

I need someone from the sponsor team to help upload the new package for noble. From the changelog, I found 'Steve Langasek' which is from sponsor team.

Hi vorlon,

 Could you help this in noble? Thanks!

[Adrien Nader (adrien)]

Hey, a quick update.

With openssl 3.2.1 uploaded to Oracular, I've prepared the subsequent 3.2.2 (doing it so soon wasn't planned initially).

I'm including a fix for this and for #1297025 :
https://git.launchpad.net/~adrien/ubuntu/+source/openssl/commit/?id=5f94de31126ae59f2481fe77a397df9fb0941bd8

This will satisfy the SRU requirement that the fix is first included in the development release.