Your message dated Mon, 08 Nov 2021 22:03:53 +0000
with message-id <[email protected]>
and subject line Bug#990128: fixed in curl 7.79.1-1
has caused the Debian Bug report #990128,
regarding libcurl4-gnutls-dev: Un-installable in multiarch environment:
/usr/bin/curl-config differs
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
990128: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990128
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libcurl4-gnutls-dev
Version: 7.74.0-1.2
Severity: normal
When trying to install versions for different architectures of the package in a
multiarch environment, the installation fails for some combinations of
architectures, because /usr/bin/curl-config has differing contetns.
I have tested the architectures amd64, i386, arm64, armhf, and armel. Of these
architectures, only amd64 and i386 can be installed in parallel. In the others,
the curl-config script has one difference in line 174:
In the parameter "-ffile-prefix-map=/build/curl-mSxZiS/curl-7.74.0=.", the
portion "curl-mSxZiS" is different between architecture versions.
I have found the following variations:
x86_64, i386: curl-mSxZiS
arm64: curl-idFOZ7
armhf: curl-curl-cKdl1Z
armel: qDznpN
The string "curl-XXXXXX" seems to be a temporary filename, possibly created by
mktemp. Therefore, from my perspective, there appear two possible solutions:
1) Change the build process to use a fixed name rather than a generated one
2) Move curl-config to an architecture-independent package and make all
libcurl4-gnutls-dev packages depend on it.
NOTE:
I have not checked whether other libcurl4-???-dev packages (e.g.
libcurl4-openssl-dev) are affected as well. They may well be.
-- System Information:
Debian Release: 11.0
APT prefers testing-security
APT policy: (500, 'testing-security'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386, arm64, armhf, armel
Kernel: Linux 5.10.0-7-amd64 (SMP w/16 CPU threads)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not
set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages libcurl4-gnutls-dev depends on:
ii libcurl3-gnutls 7.74.0-1.2
libcurl4-gnutls-dev recommends no packages.
Versions of packages libcurl4-gnutls-dev suggests:
pn libcurl4-doc <none>
ii libgnutls28-dev 3.7.1-5
ii libidn11-dev 1.33-3
ii libkrb5-dev 1.18.3-5
ii libldap2-dev 2.4.57+dfsg-3
ii librtmp-dev 2.4+20151223.gitfa8646d.1-2+b2
pn libssh2-1-dev <none>
ii pkg-config 0.29.2-1
ii zlib1g-dev 1:1.2.11.dfsg-2
--- End Message ---
--- Begin Message ---
Source: curl
Source-Version: 7.79.1-1
Done: Samuel Henrique <[email protected]>
We believe that the bug you reported is fixed in the latest version of
curl, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Samuel Henrique <[email protected]> (supplier of updated curl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 08 Nov 2021 21:14:47 +0000
Source: curl
Architecture: source
Version: 7.79.1-1
Distribution: unstable
Urgency: medium
Maintainer: Alessandro Ghedini <[email protected]>
Changed-By: Samuel Henrique <[email protected]>
Closes: 989046 989228 990128 991492 992505 994940
Changes:
curl (7.79.1-1) unstable; urgency=medium
.
[ Samuel Henrique ]
* Add myself as an Uploader
* Add sergiodj as an uploader
* New upstream version 7.79.1 (closes: #989046)
- Changes since 7.74.0:
~ vtls: fix connection reuse checks for issuer cert and case sensitivity
(closes: #991492, CVE-2021-22924)
~ Fix User-Agent header missing in some cases (closes: #994940)
~ Fix TELNET stack contents disclosure (closes: #989228, CVE-2021-22898)
* d/rules: Add --with-{openssl|gnutls|nss} to configure args
* Update all patches.
Remove patches:
- 07_do-not-disable-debug-symbols: Obsolete as per
https://github.com/curl/curl/issues/7216.
- 14_transfer-strip-credentials-from-the-auto-referer-hea:
Originally from upstream, part of the release now.
- 15_vtls-add-isproxy-argument-to-Curl_ssl_get-addsession:
Originally from upstream, part of the release now.
- fix-regression-microseconds-instead-of-seconds:
Originally from upstream, part of the release now.
Update patches:
- 12_use-python3-in-tests: Update and forward upstream.
- 90_gnutls: Update
- 99_nss: Update
- 13_fix-man-formatting: Update
.
[ Debian Janitor ]
* Use secure URI in Homepage field.
* Set debhelper-compat version in Build-Depends.
* Set upstream metadata fields: Bug-Database,
Bug-Submit (from ./configure), Repository, Repository-Browse.
* Avoid explicitly specifying -Wl,--as-needed linker flag.
.
[ Helmut Grohne ]
* Also remove -ffile-prefix-map from curl-config (closes: #990128)
* Explicitly disable zstd support (closes: #992505)
.
[ Sergio Durigan Junior ]
* d/control: Add Rules-Requires-Root: no.
* d/copyright: Add public-domain license text.
* Enable GPG-checking of orig tarball.
- d/upstream/signing-key.asc: Upstream public key.
- d/watch: Add "pgpmode=auto" as an option.
* Bump debhelper-compat to 13.
- d/control: B-D on debhelper-compat = 13.
- d/rules: After the override_dh_auto_install target has been run,
we know that we can safely get rid of the contents inside the
debian/tmp/ directory. This is needed because otherwise dh_missing
will complain about uninstalled files, which will make the build
fail when using debhelper-compat 13.
* d/rules: Some minor cleanup and removal of unneeded comments.
* d/rules: Honour "nocheck" build option.
* Make OpenSSL and GNUTLS builds fail if tests fail
- d/rules: Adjust rule to make OpenSSL and GNUTLS builds fail if their
tests fail. Unfortunately, it's still not possible to make the NSS
build fail if its tests fail; we're still investigating the failures
there with it.
- d/p/14_fix-compatibility-impacket-0-9-23.patch: Needed patch
to make tests pass with impacket 0.9.23+.
Checksums-Sha1:
7a3ac4a44670643886d0030a893d458f18e519f8 2761 curl_7.79.1-1.dsc
16a3d29da766a59769d85fb8fc8599333dc07505 4144744 curl_7.79.1.orig.tar.gz
669010f98c909dad964c54f71f3c0a53a1fcd034 36632 curl_7.79.1-1.debian.tar.xz
b98edd78e95c88fc822d2bd89dee7f5874b6b99a 12277 curl_7.79.1-1_amd64.buildinfo
Checksums-Sha256:
1da995308b63cd0b6d521ba6df2c9affa6cbbdf00f62d243d1c5e1262c6d96f7 2761
curl_7.79.1-1.dsc
370b11201349816287fb0ccc995e420277fbfcaf76206e309b3f60f0eda090c2 4144744
curl_7.79.1.orig.tar.gz
51dc416e52fc70e5d32c0ff078ebca2fcc3b9e0f0410f74175d54adda758a36c 36632
curl_7.79.1-1.debian.tar.xz
86f57c1ad7e373ab4bae0ce76ed6bf3988e6242f6623b5ebfc5138717dfa2521 12277
curl_7.79.1-1_amd64.buildinfo
Files:
6d0ae1a8c9a2bdff674083e969925e33 2761 web optional curl_7.79.1-1.dsc
2840cca526ec80353fa334d28d7aa581 4144744 web optional curl_7.79.1.orig.tar.gz
f4515936df8fad99080b277cd79d2fb8 36632 web optional curl_7.79.1-1.debian.tar.xz
16b60ec6efc1e0c75b985a02464b826b 12277 web optional
curl_7.79.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=jqcG
-----END PGP SIGNATURE-----
--- End Message ---
