Your message dated Sat, 05 Jul 2008 14:17:08 +0000 with message-id <[EMAIL PROTECTED]> and subject line Bug#484912: fixed in tcl8.3 8.3.5-13 has caused the Debian Bug report #484912, regarding tcl8.3: FTBFS when converted to new source format 3.0 (quilt): unprotected quilt push -a to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [EMAIL PROTECTED] immediately.) -- 484912: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484912 Debian Bug Tracking System Contact [EMAIL PROTECTED] with problems
--- Begin Message ---Package: tcl8.3 Version: 8.3.5-12 Severity: minor Usertags: 3.0-quilt-by-default To prepare a possible switch to the new source package format "3.0 (quilt)" [1], I converted all source packages and tried to rebuild them. Unfortunately, tcl8.3 failed, you can try yourself with those commands (and dpkg-dev >= 1.14.19 [2]) : $ apt-get source tcl8.3 $ sed -i -e '/^Source:/ aFormat: 3.0 (quilt)' tcl8.3-8.3.5/debian/control $ dpkg-source -b tcl8.3-8.3.5 $ dpkg-source -x tcl8.3_8.3.5-12.dsc $ cd tcl8.3-8.3.5 && debuild -us -uc In this process, if the .diff.gz contains changes to upstream files, dpkg-source will have created a corresponding patch in debian/patches/debian-changes-8.3.5-12 and will have registered that patch in a quilt series (debian/patches/series, it is created if needed). All the patches listed in the "series" file are applied directly during the extraction (dpkg-source -x). quilt itself is used if available (and will thus lead to the creation of the .pc directory), otherwise dpkg-source applies the patches by itself. For more information about the new source package format see the manual page dpkg-source(1). In the case of tcl8.3, it already uses quilt but the package fails to build because "quilt push -a" fails when the patch are already applied (by dpkg-source -x or dpkg-source -b). You should really uses patch/unpatch rules like those in /usr/share/quilt/quilt.make (you can directly use those by using "include /usr/share/quilt/quilt.make" in your debian/rules file). The call to quilt is protected like this "quilt push -a || test $? = 2" because 2 is the error code returned by quilt when it has nothing to do. Furthermore, you must also pay attention to the following points in your quilt usage to guarantee compatibility with the new source package format: - all your patches must be applicable with the "-p1" option of patch (and you shouldn't use options in the series file to override this) - the patches must be in debian/patches/ together with the "series" file (you can use QUILT_PATCHES=debian/patches if needed) - you should not override QUILT_PC to change the location of quilt's internal directory (".pc" by default) - the patches should not reference absolute filenames (in +++/--- lines) - your clean target must work even if the patches are already applied - your build target must work with patches applied even if the clean target is supposed to unapply them (because dpkg-source -b might have applied them back) Cheers, [1] http://lists.debian.org/debian-devel-announce/2008/04/msg00004.html [2] the upcoming dpkg-dev 1.14.20 is more tolerant with patches, you can grab it here if you want to try with that version: http://people.debian.org/~hertzog/packages/dpkg-dev_1.14.20_all.deb -- Raphael Hertzog
--- End Message ---
--- Begin Message ---Source: tcl8.3 Source-Version: 8.3.5-13 We believe that the bug you reported is fixed in the latest version of tcl8.3, which is due to be installed in the Debian FTP archive: tcl8.3-dev_8.3.5-13_i386.deb to pool/main/t/tcl8.3/tcl8.3-dev_8.3.5-13_i386.deb tcl8.3-doc_8.3.5-13_all.deb to pool/main/t/tcl8.3/tcl8.3-doc_8.3.5-13_all.deb tcl8.3_8.3.5-13.diff.gz to pool/main/t/tcl8.3/tcl8.3_8.3.5-13.diff.gz tcl8.3_8.3.5-13.dsc to pool/main/t/tcl8.3/tcl8.3_8.3.5-13.dsc tcl8.3_8.3.5-13_i386.deb to pool/main/t/tcl8.3/tcl8.3_8.3.5-13_i386.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Sergei Golovan <[EMAIL PROTECTED]> (supplier of updated tcl8.3 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [EMAIL PROTECTED]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sat, 05 Jul 2008 17:31:11 +0400 Source: tcl8.3 Binary: tcl8.3 tcl8.3-doc tcl8.3-dev Architecture: source all i386 Version: 8.3.5-13 Distribution: unstable Urgency: medium Maintainer: Tcl/Tk Debian Packagers <[EMAIL PROTECTED]> Changed-By: Sergei Golovan <[EMAIL PROTECTED]> Description: tcl8.3 - Tcl (the Tool Command Language) v8.3 - run-time files tcl8.3-dev - Tcl (the Tool Command Language) v8.3 - development files tcl8.3-doc - Tcl (the Tool Command Language) v8.3 - manual pages Closes: 484912 Changes: tcl8.3 (8.3.5-13) unstable; urgency=medium . * Fixed CVE-2007-4772 vulnerability (The regular expression parser in TCL before 8.4.17 allows attacker to cause a denial of service (infinite loop) via a crafted regular expression.) * Fixed CVE-2007-6067 vulnerability (The regular expression parser in TCL allows users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states.) * Set urgency to medium as this upload fixes a security bug. * Protected quilt calls in debian/rules to make the source package convertible to 3.0 (quilt) format (closes: #484912). * Bumped standards version to 3.8.0. Files: 7d8206c2a8bdaf4b9609373e62f0076a 1149 libs optional tcl8.3_8.3.5-13.dsc 8733f949a1a917b8ea891c4b6395b981 18803 libs optional tcl8.3_8.3.5-13.diff.gz e89e4769b8b70a4a53c1a4a5453c4217 813976 doc optional tcl8.3-doc_8.3.5-13_all.deb 696feff6d04087804901e28f7ca688f1 893182 interpreters optional tcl8.3_8.3.5-13_i386.deb 02c7b0d5a90251c469695e19cf514eda 611450 devel optional tcl8.3-dev_8.3.5-13_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFIb3+nIcdH02pGEFIRAi8LAJ4ogXRzzBaWYcW2tsOf3mcO09diTACfb4ce OPVaP6R63Y9Sn7D9+JQfGM8= =HYMI -----END PGP SIGNATURE-----
--- End Message ---
