Your message dated Thu, 09 Sep 2021 14:24:19 +0000
with message-id <[email protected]>
and subject line Bug#993675: fixed in opensmtpd 6.8.0p2-4
has caused the Debian Bug report #993675,
regarding opensmtpd: stores wrong path to zcat if /usr/bin/zcat or
/usr/local/bin/zcat exists
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
993675: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=993675
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: opensmtpd
Version: 6.8.0p2-3
Severity: important
Tags: patch bookworm sid
User: [email protected]
Usertags: usrmerge
X-Debbugs-Cc: [email protected]
If opensmtpd is built on a merged-/usr system (as created by new
installations of Debian >= 10, debootstrap --merged-usr, or installing
the usrmerge package into an existing installation), the path to zcat
is recorded in the binary package as /usr/bin/zcat, rather than the
canonical /bin/zcat.
This can be seen on the reproducible-builds.org infra:
https://tests.reproducible-builds.org/debian/rb-pkg/unstable/i386/diffoscope-results/opensmtpd.html
If you have sbuild available, an easy way to reproduce this is to build
twice, once with --add-depends=usrmerge and once without.
I suspect the same thing would happen if opensmtpd was built on a system
where /sbin and /usr/sbin had instead been unified via a symlink farm.
The problematic situation is if the package is *built* on a unified-/usr
system, but *used* on a non-unified-/usr system. In this situation,
/usr/bin/zcat exists on the build system but not on the system where
the package will be used, resulting in the features that use this
executable not working correctly.
Similarly, if there is a /usr/local/bin/zcat visible at build-time,
then that path would likely end up hard-coded into the binary,
causing the relevant feature to fail on all systems that do not have
/usr/local/bin/zcat.
Technical Committee resolution #978636 mandates heading towards a
transition to merged-/usr, and variation between merged-/usr and
non-merged-/usr builds is a problem while that transition is taking
place, because it can lead to partial upgrades behaving incorrectly. It
is likely that this class of bugs will become release-critical later in
the bookworm development cycle.
The attached patch resolves this: with it applied, the package builds
identically with and without --add-depends=usrmerge.
Some developers advocate unifying /bin with /usr/bin via a symlink farm
in /bin instead of merged-/usr, but that strategy would have a similar
practical effect on this particular package, and the same solution would
be required.
A side benefit of fixing this is that this change seems likely to be
sufficient to make the package reproducible (as recommended by Policy
ยง4.15).
smcv
>From 22d9dfcf49de7c577a532fc6f4450efad720d8d6 Mon Sep 17 00:00:00 2001
From: Simon McVittie <[email protected]>
Date: Sat, 4 Sep 2021 17:57:06 +0100
Subject: [PATCH] d/rules: Specify canonical path to zcat
If opensmtpd is built on a unified-/usr system where both /usr/bin/zcat
and /bin/zcat exist, it will hard-code the former into configuration,
resulting in configuration that will not work correctly when used on
non-unified-/usr systems. Similarly, if there is a local zcat executable
in /usr/local/bin, the path to that local executable would be hard-coded,
resulting in binaries that won't typically work on unmodified Debian
systems.
Forcing the canonical path will make it work on any combination of
unified-/usr and non-unified-/usr build and runtime systems.
Signed-off-by: Simon McVittie <[email protected]>
---
debian/rules | 1 +
1 file changed, 1 insertion(+)
diff --git a/debian/rules b/debian/rules
index 22b77acc..9de18cae 100755
--- a/debian/rules
+++ b/debian/rules
@@ -8,6 +8,7 @@ export DEB_BUILD_MAINT_OPTIONS = hardening=+all
override_dh_auto_configure:
./bootstrap
dh_auto_configure -- \
+ ZCAT=/bin/zcat \
--with-auth-pam \
--with-group-queue=opensmtpq \
--with-mantype=doc \
--
2.33.0
--- End Message ---
--- Begin Message ---
Source: opensmtpd
Source-Version: 6.8.0p2-4
Done: Ryan Kavanagh <[email protected]>
We believe that the bug you reported is fixed in the latest version of
opensmtpd, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Ryan Kavanagh <[email protected]> (supplier of updated opensmtpd package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 09 Sep 2021 09:35:41 -0400
Source: opensmtpd
Architecture: source
Version: 6.8.0p2-4
Distribution: unstable
Urgency: medium
Maintainer: Ryan Kavanagh <[email protected]>
Changed-By: Ryan Kavanagh <[email protected]>
Closes: 993675
Changes:
opensmtpd (6.8.0p2-4) unstable; urgency=medium
.
* Fix typo in gecos fields
* Bump standards version to 4.6.0
* Build identical packages, regardless of whether the build environment uses
usrmerge (Closes: #993675)
Checksums-Sha1:
fb81409e80697b12d5354118da60fc019862808c 1955 opensmtpd_6.8.0p2-4.dsc
b0f588d2231ff4340a300579607aaf058d5848f7 24852
opensmtpd_6.8.0p2-4.debian.tar.xz
51b449e17710b7c6165d6bcdaf8d8da62cab8ebc 6644
opensmtpd_6.8.0p2-4_amd64.buildinfo
Checksums-Sha256:
d29690dfaf870ed586ce660bfeac7281409fa8f559211a2810f04d1bb94649b3 1955
opensmtpd_6.8.0p2-4.dsc
8cf4aee9c29683f40fca97ea32d3382533971d2e941ffac8f92f34c68163bf72 24852
opensmtpd_6.8.0p2-4.debian.tar.xz
2516b0505d5c739c9c3ee3809b0e8129e62b96490c08ed3cc2220fc1fd3d7000 6644
opensmtpd_6.8.0p2-4_amd64.buildinfo
Files:
71e23d7c04114a8fd8c70033da55ddb6 1955 mail optional opensmtpd_6.8.0p2-4.dsc
e077aa0d2b7a65f6318f8cc13f608b8c 24852 mail optional
opensmtpd_6.8.0p2-4.debian.tar.xz
5ae531362e735f08dfc466eff9e31af6 6644 mail optional
opensmtpd_6.8.0p2-4_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=HIUK
-----END PGP SIGNATURE-----
--- End Message ---
