Your message dated Sun, 31 May 2026 22:07:21 +0000
with message-id <[email protected]>
and subject line Bug#1138472: fixed in yara 4.5.6-1
has caused the Debian Bug report #1138472,
regarding yara: FTBFS with openssl 4.0
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1138472: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138472
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: yara
Version: 4.5.5-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0
OpenSSL 4.0 is in experimental. This package fails to build against it:
| libtool: compile: gcc -DPACKAGE_NAME=\"yara\" -DPACKAGE_TARNAME=\"yara\"
-DPACKAGE_VERSION=\"4.5.5\" "-DPACKAGE_STRING=\"yara 4.5.5\""
-DPACKAGE_BUGREPORT=\"[email protected]\" -DPACKAGE_URL=\"\"
-DPACKAGE=\"yara\" -DVERSION=\"4.5.5\" -DYYTEXT_POINTER=1 -DHAVE_STDIO_H=1
-DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1
-DHAVE_STRINGS_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_SYS_TYPES_H=1 -DHAVE_UNISTD_H=1
-DSTDC_HEADERS=1 -DHAVE_DLFCN_H=1 -DLT_OBJDIR=\".libs/\" -DHAVE_LIBM=1
-DHAVE_LIBM=1 -DHAVE_STRLCPY=1 -DHAVE_STRLCAT=1 -DHAVE_MEMMEM=1 -DHAVE_TIMEGM=1
-DHAVE_CLOCK_GETTIME=1 -DHAVE_STDBOOL_H=1 -DHAVE_OPENSSL_EVP_H=1
-DHAVE_OPENSSL_ASN1_H=1 -DHAVE_OPENSSL_CRYPTO_H=1 -DHAVE_OPENSSL_BIO_H=1
-DHAVE_OPENSSL_PKCS7_H=1 -DHAVE_OPENSSL_X509_H=1 -DHAVE_OPENSSL_SAFESTACK_H=1
-DHAVE_LIBCRYPTO=1 -DHAVE_LIBCRYPTO=1 -DHAVE_LIBCRYPTO=1 -DHAVE_LIBCRYPTO=1
-DHAVE_LIBCRYPTO=1 -DHAVE_LIBCRYPTO=1 -DHAVE_SCAN_PROC_IMPL=1 -I. -Wdate-time
-D_FORTIFY_SOURCE=2 -Wall -D_GNU_SOURCE -I./libyara/include -O3
-fvisibility=hidden -I./libyara -g -O2 -Werror=implicit-function-declaration
-ffile-prefix-map=/build/reproducible-path/yara-4.5.5=.
-fstack-protector-strong -fstack-clash-protection -Wformat
-Werror=format-security -fcf-protection -DUSE_LINUX_PROC -DDOTNET_MODULE
-DHASH_MODULE -DBUCKETS_128=1 -DCHECKSUM_1B=1 -c
libyara/modules/pe/authenticode-parser/authenticode.c -fPIC -DPIC -o
libyara/modules/pe/authenticode-parser/.libs/la-authenticode.o
| libyara/modules/pe/authenticode-parser/authenticode.c: In function
'get_content':
| libyara/modules/pe/authenticode-parser/authenticode.c:81:47: error: invalid
use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
| 81 | int len = content->d.other->value.sequence->length;
| | ^~
| libyara/modules/pe/authenticode-parser/authenticode.c:82:59: error: invalid
use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
| 82 | const uint8_t* data = content->d.other->value.sequence->data;
| | ^~
| libyara/modules/pe/authenticode-parser/authenticode.c: In function
'parse_program_name':
| libyara/modules/pe/authenticode-parser/authenticode.c:91:53: error: invalid
use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
| 91 | const uint8_t* spcData = spcAttr->value.sequence->data;
| | ^~
| libyara/modules/pe/authenticode-parser/authenticode.c:92:41: error: invalid
use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
| 92 | int spcLen = spcAttr->value.sequence->length;
| | ^~
| libyara/modules/pe/authenticode-parser/authenticode.c: In function
'parse_nested_authenticode':
| libyara/modules/pe/authenticode-parser/authenticode.c:131:29: warning:
initialization discards 'const' qualifier from pointer target type
[-Wdiscarded-qualifiers]
| 131 | ASN1_TYPE* nested = X509_ATTRIBUTE_get0_type(attr, i);
| | ^~~~~~~~~~~~~~~~~~~~~~~~
| libyara/modules/pe/authenticode-parser/authenticode.c:134:41: error: invalid
use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
| 134 | int len = nested->value.sequence->length;
| | ^~
| libyara/modules/pe/authenticode-parser/authenticode.c:135:53: error: invalid
use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
| 135 | const uint8_t* data = nested->value.sequence->data;
| | ^~
| libyara/modules/pe/authenticode-parser/authenticode.c: In function
'parse_pkcs9_countersig':
| libyara/modules/pe/authenticode-parser/authenticode.c:162:29: warning:
initialization discards 'const' qualifier from pointer target type
[-Wdiscarded-qualifiers]
| 162 | ASN1_TYPE* nested = X509_ATTRIBUTE_get0_type(attr, i);
| | ^~~~~~~~~~~~~~~~~~~~~~~~
| libyara/modules/pe/authenticode-parser/authenticode.c:165:41: error: invalid
use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
| 165 | int len = nested->value.sequence->length;
| | ^~
| libyara/modules/pe/authenticode-parser/authenticode.c:166:53: error: invalid
use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
| 166 | const uint8_t* data = nested->value.sequence->data;
| | ^~
| libyara/modules/pe/authenticode-parser/authenticode.c: In function
'parse_ms_countersig':
| libyara/modules/pe/authenticode-parser/authenticode.c:193:29: warning:
initialization discards 'const' qualifier from pointer target type
[-Wdiscarded-qualifiers]
| 193 | ASN1_TYPE* nested = X509_ATTRIBUTE_get0_type(attr, i);
| | ^~~~~~~~~~~~~~~~~~~~~~~~
| libyara/modules/pe/authenticode-parser/authenticode.c:196:41: error: invalid
use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
| 196 | int len = nested->value.sequence->length;
| | ^~
…
Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/yara_4.5.5-1_amd64-2026-04-19T09:22:10Z
Sebastian
--- End Message ---
--- Begin Message ---
Source: yara
Source-Version: 4.5.6-1
Done: Hilko Bengen <[email protected]>
We believe that the bug you reported is fixed in the latest version of
yara, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Hilko Bengen <[email protected]> (supplier of updated yara package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 31 May 2026 23:49:57 +0200
Source: yara
Architecture: source
Version: 4.5.6-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Security Tools <[email protected]>
Changed-By: Hilko Bengen <[email protected]>
Closes: 1138472
Changes:
yara (4.5.6-1) unstable; urgency=medium
.
* New upstream version 4.5.6
* Fix debian/clean
* Add patch to fix OpenSSL 4.0 FTBFS (Closes: #1138472)
Checksums-Sha1:
2e4b82c9dbc6c32af0f16b4fb01a582bf50a23c0 2148 yara_4.5.6-1.dsc
0a45eb7010b651835fc4a503d06261b5596cc257 2203852 yara_4.5.6.orig.tar.gz
674e9ea1ecd3fbacf6bd01043d1d434bb878ff2e 11344 yara_4.5.6-1.debian.tar.xz
8123bdea3465afdcdb35b696a6e8e00478c6bbc9 6439 yara_4.5.6-1_source.buildinfo
Checksums-Sha256:
308e03ea1c829cfd8c7b82b3ae4c9ee77cb806ac63b10369b5927e73d9a3ed51 2148
yara_4.5.6-1.dsc
8c74e8d05190ee1534c6bdb6c07cde6f77f20c611aa4bcf33b2d281861b12f0b 2203852
yara_4.5.6.orig.tar.gz
a12fe308fa400008afad06653637697393d56b2a787ba41234151970173069fb 11344
yara_4.5.6-1.debian.tar.xz
b2816a7d9e9f859f5cf3d8229ef22e30d755ba0301881a76562453ccebe77ac9 6439
yara_4.5.6-1_source.buildinfo
Files:
e421022e6d9a94b7653c9ad46423079d 2148 utils optional yara_4.5.6-1.dsc
d20f79284779973d307e2e33a8b17609 2203852 utils optional yara_4.5.6.orig.tar.gz
da87ad412dce43d300741e701eb65c2a 11344 utils optional
yara_4.5.6-1.debian.tar.xz
6ec478894ccb25c9deddcb7a7f7b9b43 6439 utils optional
yara_4.5.6-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=fju/
-----END PGP SIGNATURE-----
pgpFj6sw2e6s6.pgp
Description: PGP signature
--- End Message ---
