Your message dated Mon, 29 Sep 2025 16:51:20 +0000
with message-id <[email protected]>
and subject line Bug#1115787: fixed in protobuf 3.21.12-14
has caused the Debian Bug report #1115787,
regarding nanopb: FTBFS: make[1]: *** [debian/rules:18: override_dh_auto_test]
Error 2
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1115787: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1115787
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: nanopb
Version: 0.4.9.1-1
Severity: serious
Justification: FTBFS
Tags: forky sid ftbfs
User: [email protected]
Usertags: ftbfs-20250919 ftbfs-forky
Hi,
During a rebuild of all packages in sid, your package failed to build
on amd64.
The full build log is available from:
http://qa-logs.debian.net/2025/09/19/nanopb_0.4.9.1-1_unstable.log
All bugs filed during this archive rebuild are listed at:
https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=ftbfs-20250919;[email protected]
or:
https://udd.debian.org/bugs/?release=na&merged=ign&fnewerval=7&flastmodval=7&fusertag=only&fusertagtag=ftbfs-20250919&[email protected]&allbugs=1&cseverity=1&ctags=1&caffected=1#results
A list of current common problems and possible solutions is available at
http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute!
If you reassign this bug to another package, please mark it as 'affects'-ing
this package. See https://www.debian.org/Bugs/server-control#affects
If you fail to reproduce this, please provide a build log and diff it with mine
so that we can identify if something relevant changed in the meantime.
--
Relevant part of the build log (hopefully):
> make[1]: Entering directory '/build/reproducible-path/nanopb-0.4.9.1'
> cd /build/reproducible-path/nanopb-0.4.9.1/tests/ && scons
> scons: Reading SConscript files ...
> Mkdir("build")
> Checking for C header file stdbool.h... yes
> Checking for C header file stdint.h... yes
> Checking for C header file stddef.h... yes
> Checking for C header file string.h... yes
> Checking for C header file stdlib.h... yes
> Checking for C header file limits.h... yes
> Checking support for CCFLAGS="" LINKFLAGS="-lm"... yes
> Checking protoc version... libprotoc 3.21.12
> Checking for C library mudflap... no
> Checking support for CCFLAGS="-Wcast-qual -Wlogical-op -Wconversion
> -fstrict-aliasing -Wstrict-aliasing=1 -Wmissing-prototypes
> -Wmissing-declarations -Wredundant-decls -Wstack-protector " LINKFLAGS=""...
> yes
> Checking whether the C++ compiler works... yes
> Checking for C++ header file vector... yes
> Checking whether the C++ compiler works... yes
> Checking for C++ header file vector... yes
> Checking whether the C++ compiler works... yes
> Checking for C++ header file vector... yes
> Checking whether the C++ compiler works... yes
> Checking for C++ header file vector... yes
> Checking whether the C++ compiler works... yes
> Checking whether the C++ compiler works... yes
> Checking whether the C++ compiler works... yes
> Checking whether the C++ compiler works... yes
> Checking whether the C++ compiler works... yes
> scons: done reading SConscript files.
> scons: Building targets ...
> os.chdir('build/alltypes')
> "/build/reproducible-path/nanopb-0.4.9.1/generator/protoc" -I. -I"../.."
> -I"/build/reproducible-path/nanopb-0.4.9.1/generator/proto"
> -I"/build/reproducible-path/nanopb-0.4.9.1/generator"
> "--nanopb_out=--source-extension=.c,--header-extension=.h:." "alltypes.proto"
>
>
> **********************************************************************
> *** Could not import the Google protobuf Python libraries
> ***
> ***
> ***
> *** Easiest solution is often to install the dependencies via pip:
> ***
> *** pip install protobuf grpcio-tools
> ***
>
> **********************************************************************
>
> Traceback (most recent call last):
> File "/build/reproducible-path/nanopb-0.4.9.1/generator/protoc-gen-nanopb",
> line 7, in <module>
> from nanopb_generator import *
> File
> "/build/reproducible-path/nanopb-0.4.9.1/generator/nanopb_generator.py", line
> 36, in <module>
> import google.protobuf.compiler.plugin_pb2 as plugin_pb2
> File
> "/usr/lib/python3/dist-packages/google/protobuf/compiler/plugin_pb2.py", line
> 17, in <module>
> DESCRIPTOR =
> _descriptor_pool.Default().AddSerializedFile(b'\n%google/protobuf/compiler/plugin.proto\x12\x18google.protobuf.compiler\x1a
> google/protobuf/descriptor.proto\"F\n\x07Version\x12\r\n\x05major\x18\x01
> \x01(\x05\x12\r\n\x05minor\x18\x02 \x01(\x05\x12\r\n\x05patch\x18\x03
> \x01(\x05\x12\x0e\n\x06suffix\x18\x04
> \x01(\t\"\xba\x01\n\x14\x43odeGeneratorRequest\x12\x18\n\x10\x66ile_to_generate\x18\x01
> \x03(\t\x12\x11\n\tparameter\x18\x02 \x01(\t\x12\x38\n\nproto_file\x18\x0f
> \x03(\x0b\x32$.google.protobuf.FileDescriptorProto\x12;\n\x10\x63ompiler_version\x18\x03
>
> \x01(\x0b\x32!.google.protobuf.compiler.Version\"\xc1\x02\n\x15\x43odeGeneratorResponse\x12\r\n\x05\x65rror\x18\x01
> \x01(\t\x12\x1a\n\x12supported_features\x18\x02
> \x01(\x04\x12\x42\n\x04\x66ile\x18\x0f
> \x03(\x0b\x32\x34.google.protobuf.compiler.CodeGeneratorResponse.File\x1a\x7f\n\x04\x46ile\x12\x0c\n\x04name\x18\x01
> \x01(\t\x12\x17\n\x0finsertion_point\x18\x02
> \x01(\t\x12\x0f\n\x07\x63ontent\x18\x0f
> \x01(\t\x12?\n\x13generated_code_info\x18\x10
> \x01(\x0b\x32\".google.protobuf.GeneratedCodeInfo\"8\n\x07\x46\x65\x61ture\x12\x10\n\x0c\x46\x45\x41TURE_NONE\x10\x00\x12\x1b\n\x17\x46\x45\x41TURE_PROTO3_OPTIONAL\x10\x01\x42W\n\x1c\x63om.google.protobuf.compilerB\x0cPluginProtosZ)google.golang.org/protobuf/types/pluginpb')
> File "/usr/lib/python3/dist-packages/google/protobuf/descriptor_pool.py",
> line 217, in AddSerializedFile
> file_desc_proto = descriptor_pb2.FileDescriptorProto.FromString(
> serialized_file_desc_proto)
> File
> "/usr/lib/python3/dist-packages/google/protobuf/internal/python_message.py",
> line 801, in FromString
> message.MergeFromString(s)
> ~~~~~~~~~~~~~~~~~~~~~~~^^^
> File
> "/usr/lib/python3/dist-packages/google/protobuf/internal/python_message.py",
> line 1128, in MergeFromString
> if self._InternalParse(serialized, 0, length) != length:
> ~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^
> File
> "/usr/lib/python3/dist-packages/google/protobuf/internal/python_message.py",
> line 1195, in InternalParse
> pos = field_decoder(buffer, new_pos, end, self, field_dict)
> File "/usr/lib/python3/dist-packages/google/protobuf/internal/decoder.py",
> line 715, in DecodeRepeatedField
> current_depth += 1
> ^^^^^^^^^^^^^
> UnboundLocalError: cannot access local variable 'current_depth' where it is
> not associated with a value
> --nanopb_out: protoc-gen-nanopb: Plugin failed with status code 1.
> os.chdir('/build/reproducible-path/nanopb-0.4.9.1/tests')
> scons: *** [build/alltypes/alltypes.pb.c] Error 1
> scons: building terminated because of errors.
> make[1]: *** [debian/rules:18: override_dh_auto_test] Error 2
--- End Message ---
--- Begin Message ---
Source: protobuf
Source-Version: 3.21.12-14
Done: Laszlo Boszormenyi (GCS) <[email protected]>
We believe that the bug you reported is fixed in the latest version of
protobuf, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Laszlo Boszormenyi (GCS) <[email protected]> (supplier of updated protobuf
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 29 Sep 2025 14:11:47 +0200
Source: protobuf
Architecture: source
Version: 3.21.12-14
Distribution: unstable
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <[email protected]>
Changed-By: Laszlo Boszormenyi (GCS) <[email protected]>
Closes: 1115787
Changes:
protobuf (3.21.12-14) unstable; urgency=high
.
* Complete fix of CVE-2025-4565 (closes: #1115787):
- make pure Python reject unmatched end-group tag in unknown fields,
- internal pure python fixes.
* Remove now redundant Rules-Requires-Root value.
Checksums-Sha1:
b3fbc6549d65692ff964fe971eb6b17769874d19 3033 protobuf_3.21.12-14.dsc
a35fc7214a54f53b10b6429bff30e06f325a88aa 46708
protobuf_3.21.12-14.debian.tar.xz
Checksums-Sha256:
d0de16b20ccae9e981c274025951adc7e40444217c4ae4466c120239afb19c25 3033
protobuf_3.21.12-14.dsc
644ee891839ac32bdb8050e0ff8ff3320889b3c468e45de1ace9b521e099f5d3 46708
protobuf_3.21.12-14.debian.tar.xz
Files:
8cfe3621261ebab4e4df4a056f8e0093 3033 devel optional protobuf_3.21.12-14.dsc
9c1db4c9b44988cdefb4db3d4c8ed051 46708 devel optional
protobuf_3.21.12-14.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=I4yM
-----END PGP SIGNATURE-----
pgpQfe71wRH2O.pgp
Description: PGP signature
--- End Message ---
