Your message dated Thu, 18 Dec 2025 21:34:44 +0000
with message-id <[email protected]>
and subject line Bug#1123048: fixed in lib25519 0~20241004-5
has caused the Debian Bug report #1123048,
regarding lib25519: autopkgtest failure on arm64 due to GCS warning
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1123048: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1123048
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: lib25519
Version: 0~20241004-4
Severity: serious
User: [email protected]
Usertags: gcs
Hi,
lib25519's test "test25519-shared" fails on arm64 starting with glibc
2.42-6, which enabled an arm64 security feature called Guarded Control
Stack (GCS).
To help with GCS adoption, the linker warns about shared libraries built
without GCS. In the specific case of lib25519, the warning is:
/usr/lib/gcc/aarch64-linux-gnu/15/../../../aarch64-linux-gnu/lib25519.so:
warning: GCS is required by -z gcs, but this shared library lacks the necessary
property note. The dynamic loader might not enable GCS or refuse to load the
program unless all the shared library dependencies have the GCS marking.
Being printed to standard error the warning causes test25519-shared to
fail. See: https://ci.debian.net/packages/lib2/lib25519/testing/arm64/67118406/
The reason why lib25519 has GCS turned off is that software written in
assembly needs specific modifcations for GCS to work, see:
https://wiki.debian.org/ToolChain/GCS#Dealing_with_assembly_code
Given that the feature is opt-in, for the time being I would suggest
just disabling the warning by using something like this before setting
LDFLAGS in debian/tests/test25519-shared:
if [ "$(dpkg --print-architecture)" = "arm64" ]; then
export DEB_LDFLAGS_MAINT_APPEND="-Wl,-z,gcs-report-dynamic=none"
fi
We should also raise the issue of GCS enablement with upstream, but that
is not urgent.
Please see https://wiki.debian.org/ToolChain/GCS for further details.
--- End Message ---
--- Begin Message ---
Source: lib25519
Source-Version: 0~20241004-5
Done: Jan Mojžíš <[email protected]>
We believe that the bug you reported is fixed in the latest version of
lib25519, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jan Mojžíš <[email protected]> (supplier of updated lib25519 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 18 Dec 2025 21:27:24 +0100
Source: lib25519
Architecture: source
Version: 0~20241004-5
Distribution: unstable
Urgency: medium
Maintainer: Debian Security Tools <[email protected]>
Changed-By: Jan Mojžíš <[email protected]>
Closes: 1123048
Changes:
lib25519 (0~20241004-5) unstable; urgency=medium
.
* d/rules: Temporary disable ARM64 assembly implementations that do not
support GCS. (Closes: 1123048)
* d/tests: copy debian/changelog for ELF package
metadata in dpkg-buildflags LDFLAGS (thanks to Benjamin Drung)
Checksums-Sha1:
ded81af7576c39ae2e127d42ae6ce6c328d957fc 2666 lib25519_0~20241004-5.dsc
9295996491dd44469086d6e11fda0fa311650f13 7572
lib25519_0~20241004-5.debian.tar.xz
ef37f09254e94f2ce63df6eb44ae57c07b279c34 25399128
lib25519_0~20241004-5.git.tar.xz
c4d01a86de07d3cf765ad3d9ab510672504545a1 17159
lib25519_0~20241004-5_source.buildinfo
Checksums-Sha256:
3c718ae8315b04cb15df37d8ce76761e2632454adc167083c1cc27743b4b8a45 2666
lib25519_0~20241004-5.dsc
5fca39728553812b87fe7f07331135f3082e8bbdcdfbc01936eb602b4586cc12 7572
lib25519_0~20241004-5.debian.tar.xz
9f562364b1d548582b19f1d149a5361c5fe0b3ce67f06507a42fb8d0ba16e373 25399128
lib25519_0~20241004-5.git.tar.xz
e687da8685ee095a0e3d84d410f992e452324496b34f7dc3a27a18fa553d79c6 17159
lib25519_0~20241004-5_source.buildinfo
Files:
9652a2a9dd9561906796c7a153dcbafd 2666 libs optional lib25519_0~20241004-5.dsc
71be3703e5a19ad9a5f626f48d1ab893 7572 libs optional
lib25519_0~20241004-5.debian.tar.xz
7a09f4fd4b64932b51d1aaeb3f157a1d 25399128 libs optional
lib25519_0~20241004-5.git.tar.xz
c666a9722d84c918fe97302ad0454679 17159 libs optional
lib25519_0~20241004-5_source.buildinfo
Git-Tag-Info: tag=36ba075561f6ea6a1bc6b8da106097f121b21da5
fp=d008b0c23d8479e46b9fcb9045da517496939ff9
Git-Tag-Tagger: Jan Mojžíš <[email protected]>
-----BEGIN PGP SIGNATURE-----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=YF/J
-----END PGP SIGNATURE-----
pgpTerj5caNP1.pgp
Description: PGP signature
--- End Message ---
