Your message dated Fri, 19 Jun 2026 15:05:03 +0000
with message-id <[email protected]>
and subject line Bug#1128877: fixed in krb5 1.22.1-3
has caused the Debian Bug report #1128877,
regarding krb5: FTBFS with glibc 2.43 due to ISO C23 const return types
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1128877: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128877
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: krb5
Version: 1.22.1-2
Severity: important
Tags: ftbfs upstream
Justification: fails to build from source
User: [email protected]
Usertags: glibc-2.43
Dear maintainer(s),
krb5 fails to build from source with glibc 2.43, currently in
experimental. From the build log:
| make[6]: Entering directory
'/build/reproducible-path/krb5-1.22.1/build/lib/krb5/ccache'
| gcc -fPIC -DSHARED -DHAVE_CONFIG_H -I../../../include
-I../../../../src/include -I../../../../src/lib/krb5/ccache/ccapi
-I../../../../src/lib/krb5/ccache -I. -DKRB5_DEPRECATED=1 -DKRB5_PRIVATE
-Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration
-ffile-prefix-map=/build/reproducible-path/krb5-1.22.1=.
-fstack-protector-strong -fstack-clash-protection -Wformat
-Werror=format-security -fcf-protection -Wall -Wcast-align -Wshadow
-Wmissing-prototypes -Wno-format-zero-length -Woverflow -Wstrict-overflow
-Wmissing-format-attribute -Wmissing-prototypes -Wreturn-type -Wmissing-braces
-Wparentheses -Wswitch -Wunused-function -Wunused-label -Wunused-variable
-Wunused-value -Wunknown-pragmas -Wsign-compare -Werror=uninitialized
-Wno-maybe-uninitialized -Werror=pointer-arith -Werror=int-conversion
-Werror=incompatible-pointer-types -Werror=discarded-qualifiers
-Werror=implicit-int -Werror=strict-prototypes
-Werror=declaration-after-statement -Werror-implicit-function-declaration
-pthread -c ../../../../src/lib/krb5/ccache/ccapi_util.c -o ccapi_util.so.o &&
mv -f ccapi_util.so.o ccapi_util.so
| gcc -fPIC -DSHARED -DHAVE_CONFIG_H -I../../../include
-I../../../../src/include -I../../../../src/lib/krb5/ccache/ccapi
-I../../../../src/lib/krb5/ccache -I. -DKRB5_DEPRECATED=1 -DKRB5_PRIVATE
-Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration
-ffile-prefix-map=/build/reproducible-path/krb5-1.22.1=.
-fstack-protector-strong -fstack-clash-protection -Wformat
-Werror=format-security -fcf-protection -Wall -Wcast-align -Wshadow
-Wmissing-prototypes -Wno-format-zero-length -Woverflow -Wstrict-overflow
-Wmissing-format-attribute -Wmissing-prototypes -Wreturn-type -Wmissing-braces
-Wparentheses -Wswitch -Wunused-function -Wunused-label -Wunused-variable
-Wunused-value -Wunknown-pragmas -Wsign-compare -Werror=uninitialized
-Wno-maybe-uninitialized -Werror=pointer-arith -Werror=int-conversion
-Werror=incompatible-pointer-types -Werror=discarded-qualifiers
-Werror=implicit-int -Werror=strict-prototypes
-Werror=declaration-after-statement -Werror-implicit-function-declaration
-pthread -c ../../../../src/lib/krb5/ccache/ccbase.c -o ccbase.so.o && mv -f
ccbase.so.o ccbase.so
| ../../../../src/lib/krb5/ccache/ccbase.c: In function ‘krb5_cc_resolve’:
| ../../../../src/lib/krb5/ccache/ccbase.c:213:8: error: assignment discards
‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers]
| 213 | cp = strchr (name, ':');
| | ^
| cc1: some warnings being treated as errors
| make[6]: *** [Makefile:784: ccbase.so] Error 1
| make[6]: Leaving directory
'/build/reproducible-path/krb5-1.22.1/build/lib/krb5/ccache'
| make[5]: *** [Makefile:1109: all-recurse] Error 1
| make[5]: Leaving directory
'/build/reproducible-path/krb5-1.22.1/build/lib/krb5'
| make[4]: *** [Makefile:971: all-recurse] Error 1
| make[4]: Leaving directory '/build/reproducible-path/krb5-1.22.1/build/lib'
| make[3]: *** [Makefile:1537: all-recurse] Error 1
| make[3]: Leaving directory '/build/reproducible-path/krb5-1.22.1/build'
| dh_auto_build: error: cd build && make -j1 returned exit code 2
| make[2]: *** [debian/rules:58: override_dh_auto_build] Error 25
| make[2]: Leaving directory '/build/reproducible-path/krb5-1.22.1'
| make[1]: *** [debian/rules:161: build-arch] Error 2
| make[1]: Leaving directory '/build/reproducible-path/krb5-1.22.1'
| make: *** [debian/rules:161: binary] Error 2
| dpkg-buildpackage: error: debian/rules binary subprocess failed with exit
status 2
The full build log is attached to this bug report.
The issue is due to ISO C23 declaration of bsearch, memchr, strchr,
strpbrk, strrchr, strstr, wcschr, wcspbrk, wcsrchr, wcsstr and wmemchr,
which now returns a pointer to a const-qualified type when the input
argument is a pointer to a const-qualified type [2]. I believe that the
issue is fixed upstream [3], but I haven't tested the patch.
Regards
Aurelien
[1] https://people.debian.org/~ema/glibc-2.43-rebuilds/output-1/krb5_arm64.build
[2]
https://sourceware.org/git/?p=glibc.git;a=blob;f=NEWS;h=e271fb2e4d76903c77a302aaec1ca22ce31027d0;hb=f762ccf84f122d1354f103a151cba8bde797d521#l19
[3] https://github.com/krb5/krb5/commit/ad4dcf1856dadc4b352b5c8ff08e51c7290fb41f
--
Aurelien Jarno GPG: 4096R/1DDD8C9B
[email protected] http://aurel32.net
krb5_amd64-2026-02-23T20:37:59Z.build.gz
Description: application/gzip
--- End Message ---
--- Begin Message ---
Source: krb5
Source-Version: 1.22.1-3
Done: Sam Hartman <[email protected]>
We believe that the bug you reported is fixed in the latest version of
krb5, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Sam Hartman <[email protected]> (supplier of updated krb5 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 19 Jun 2026 08:30:16 -0600
Source: krb5
Architecture: source
Version: 1.22.1-3
Distribution: unstable
Urgency: medium
Maintainer: Sam Hartman <[email protected]>
Changed-By: Sam Hartman <[email protected]>
Closes: 1128877 1138466 1139821
Changes:
krb5 (1.22.1-3) unstable; urgency=medium
.
[ Emmanuel Arias ]
* CVE-2026-11850: Prevent read overrun in libkdb_ldap (Closes: #1139821).
.
[ Sam Hartman ]
* Fix C23 use of strchr, Closes: #1128877
* Remove lintian tag that ldap plugin is linked against libc6; no longer
needed
* Upstream patch for OpenSSL 4.0 compatibility, Closes: #1138466
* Upstream commit f5bbfa4 to use openssl facilities to verify certificates;
needed to avoid discarding const qualifier from Openssl 4.0 patch
Checksums-Sha1:
845bb8aaa01fff2fc5fb696c6d662d3f0ffbb32e 3397 krb5_1.22.1-3.dsc
1d8d7d0ebabe58a4c8fd73e994b9185fddeb70d6 111476 krb5_1.22.1-3.debian.tar.xz
a0b70184d6328b4ef43b7cd07566dcc6f67bc8a0 5430 krb5_1.22.1-3_source.buildinfo
Checksums-Sha256:
b619af9a52f00c4888e1f53f38d5e147e8c518d1c5b0cda120873fa4ebd4ea77 3397
krb5_1.22.1-3.dsc
519ad7537260ebc450a678b38f00c8deaf0e05d848d0e5cfeef1ddb154663ba8 111476
krb5_1.22.1-3.debian.tar.xz
7920ad149020edb369818ac43505bcf704974c5dadb99e9ccbfe454863d9686f 5430
krb5_1.22.1-3_source.buildinfo
Files:
3730d9a46e9231b4d200afaab70ff91b 3397 net optional krb5_1.22.1-3.dsc
43ba1f462c405922f93d52df62f9d3dd 111476 net optional
krb5_1.22.1-3.debian.tar.xz
17f3f77631ce2425aa43ae8752a25f1d 5430 net optional
krb5_1.22.1-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQSj2jRwbAdKzGY/4uAsbEw8qDeGdAUCajVT1wAKCRAsbEw8qDeG
dHx3AQDDJPFs5+Ydjhj6Vo7s4YSNZb1Z2sR42GzteXd4/qYEtgD+PGJW+prLvCa1
JVoMZ0eUAsdEMNEagaUDh0kMJQBp7wQ=
=eZWN
-----END PGP SIGNATURE-----
pgpZITPINAaBw.pgp
Description: PGP signature
--- End Message ---
