Your message dated Tue, 04 Aug 2020 10:00:17 +0000
with message-id <[email protected]>
and subject line Bug#954886: fixed in libraw 0.20.0-1
has caused the Debian Bug report #954886,
regarding Please make autopkgtests cross-test-friendly
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
954886: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=954886
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libraw
Version: 0.19.5-1
Severity: minor
Tags: patch
User: [email protected]
Usertags: origin-ubuntu focal ubuntu-patch
Dear maintainers,
In Ubuntu, we are in the process of moving the i386 architecture to a
compatibility-only layer on amd64, and therefore we are also moving our
autopkgtest infrastructure to test i386 binaries in a cross-environment.
This requires changes to some tests so that they are cross-aware and can
do the right thing.
The libxcb tests currently fail in this environment, because they are
build tests that do not invoke the toolchain in a cross-aware manner.
I've verified that the attached patch lets the tests successfully build
(and run) i386 tests on an amd64 host.
Note that upstream autopkgtest doesn't currently set DEB_HOST_ARCH so
thisis a complete no-op in Debian for the moment. Support for
cross-testing in autopkgtest is currently awaiting review at
https://salsa.debian.org/ci-team/autopkgtest/merge_requests/69 and once
landed, will still have no effect unless autopkgtest is invoked with a
'-a' option. So this change should be safe to land in your package
despite this not being upstream in autopkgtest.
Thanks for considering,
diff -Nru libraw-0.19.5/debian/changelog libraw-0.19.5/debian/changelog
--- libraw-0.19.5/debian/changelog 2019-08-28 23:45:51.000000000 +0200
+++ libraw-0.19.5/debian/changelog 2020-03-24 16:36:35.000000000 +0100
@@ -1,3 +1,11 @@
+libraw (0.19.5-2) unstable; urgency=medium
+
+ * debian/tests/build:
+ - Use the correct compiler for proposed autopkgtest cross-testing
+ support.
+
+ -- Sebastien Bacher <[email protected]> Tue, 24 Mar 2020 16:36:35 +0100
+
libraw (0.19.5-1) unstable; urgency=medium
* New upstream release
diff -Nru libraw-0.19.5/debian/tests/smoketest libraw-0.19.5/debian/tests/smoketest
--- libraw-0.19.5/debian/tests/smoketest 2018-07-18 21:27:03.000000000 +0200
+++ libraw-0.19.5/debian/tests/smoketest 2020-03-24 16:36:20.000000000 +0100
@@ -1,6 +1,12 @@
#!/bin/sh
set -e
+if [ -n "${DEB_HOST_GNU_TYPE:-}" ]; then
+ CROSS_COMPILE="$DEB_HOST_GNU_TYPE-"
+else
+ CROSS_COMPILE=
+fi
+
cd "$ADTTMP"
cat > test.c << EOF
#include <libraw/libraw.h>
@@ -15,6 +21,6 @@
}
EOF
-g++ -Wall -o test test.c -lraw
+${CROSS_COMPILE}g++ -Wall -o test test.c -lraw
./test
objdump -p test | grep "libraw"
--- End Message ---
--- Begin Message ---
Source: libraw
Source-Version: 0.20.0-1
Done: [email protected] (Matteo F. Vescovi)
We believe that the bug you reported is fixed in the latest version of
libraw, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Matteo F. Vescovi <[email protected]> (supplier of updated libraw package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 30 Jul 2020 00:09:36 +0200
Source: libraw
Binary: libraw-bin libraw-bin-dbgsym libraw-dev libraw-doc libraw20
libraw20-dbgsym
Architecture: source amd64 all
Version: 0.20.0-1
Distribution: experimental
Urgency: medium
Maintainer: Debian PhotoTools Maintainers
<[email protected]>
Changed-By: Matteo F. Vescovi <[email protected]>
Description:
libraw-bin - raw image decoder library (tools)
libraw-dev - raw image decoder library (development files)
libraw-doc - raw image decoder library (documentation)
libraw20 - raw image decoder library
Closes: 954886
Changes:
libraw (0.20.0-1) experimental; urgency=medium
.
[ Matteo F. Vescovi ]
* New upstream release
This release fixes CVE-2020-15503:
| LibRaw before 0.20-RC1 lacks a thumbnail size range check.
| This affects decoders/unpack_thumb.cpp,
| postprocessing/mem_image.cpp, and utils/thumb_utils.cpp.
| For example,
| malloc(sizeof(libraw_processed_image_t)+T.tlength) occurs
| without validating T.tlength.
* debian/: SONAME bump 19 -> 20
* debian/control:
- debhelper bump 12 -> 13
- S-V bump 4.4.0 -> 4.5.0 (no changes needed)
- RRR set
* debian/tests/smoketest: path adapted
* debian/copyright: entries for unused files and licenses removed
* debian/rules: drop useless files installation
* debian/libraw20.symbols: missing and new symbols added
.
[ Sebastien Bacher ]
* debian/tests/build: use the correct compiler for
autopkgtest cross-testing. (Closes: #954886)
Checksums-Sha1:
5f12feee60635e82b920c1b568ed4b1eb700b1fe 2339 libraw_0.20.0-1.dsc
ec9b5e9db38e713dbd06eab6a35999d39fb70187 518515 libraw_0.20.0.orig.tar.gz
982d0d78d1dbf4d7bddd5b96450336babb91430a 22664 libraw_0.20.0-1.debian.tar.xz
7fc1cb530313c9e76080bd714f4cf8a0a3015f5f 167564
libraw-bin-dbgsym_0.20.0-1_amd64.deb
8b926bc31d807a49307640a22b608bc3322a4501 92404 libraw-bin_0.20.0-1_amd64.deb
d9b2fd213124d68a81566e4972ce769ae1259e9e 394552 libraw-dev_0.20.0-1_amd64.deb
8c1ff7116f952c17e13778ff0993d9744010ca2e 89404 libraw-doc_0.20.0-1_all.deb
606558c4f78eea9a93094f6669ebae979a4fdb05 734816
libraw20-dbgsym_0.20.0-1_amd64.deb
3e485c28543c8eea90fe639e419b3af82136668d 349612 libraw20_0.20.0-1_amd64.deb
6a6fbcd1f9017d5308864fc505a44fb3870534e5 7128 libraw_0.20.0-1_amd64.buildinfo
Checksums-Sha256:
aceb7b2d5fd3d55570d163b507e05cd5e40c057c9b66f07c2619509fb7f9c635 2339
libraw_0.20.0-1.dsc
ad5b5a28828c5c4c86a77fb64aee83d2d2c064c319482b87b45eb9ac8b1f6028 518515
libraw_0.20.0.orig.tar.gz
3b4dfd45eacc1a5f105c897d494690b8996fa79dfd560d18ed116a7d714d6931 22664
libraw_0.20.0-1.debian.tar.xz
fdd017bc10f23772dbcddf56ed6f6e8c35a62279cdd53f3c7b26f425c0510a64 167564
libraw-bin-dbgsym_0.20.0-1_amd64.deb
04b496d04522d7242d8198981b9aef3c2041e8310100e45f9b4743f121c1a21d 92404
libraw-bin_0.20.0-1_amd64.deb
156160aa1070efda764246d62200a3be2962e58978f8cd1b8997a32426b76679 394552
libraw-dev_0.20.0-1_amd64.deb
7b985b70ccc7d872cdfd84b8d0cb423fd1d565e87eac844d73b784d4452044a4 89404
libraw-doc_0.20.0-1_all.deb
f33daf82d2ac2df34b17c2ebe02b909c2e73ad0f7c9a3abe3d6f45977d47bdde 734816
libraw20-dbgsym_0.20.0-1_amd64.deb
4f8cdda8b05b82fc51a1ff40a48285fdda73bf8f45020c4071cd5f041db507fb 349612
libraw20_0.20.0-1_amd64.deb
0dce29b656e11bcd93fd0563dedd62d28b6c576a98a1226831909d35ba44b10b 7128
libraw_0.20.0-1_amd64.buildinfo
Files:
53de2a48960bc6048ccbaadce5d65cd8 2339 libs optional libraw_0.20.0-1.dsc
00ceab1bcc4be9a95a21f4f27435e3bf 518515 libs optional libraw_0.20.0.orig.tar.gz
e687c3ea75b49f71040b9a858491e129 22664 libs optional
libraw_0.20.0-1.debian.tar.xz
30451a0a022571074c931ad152586902 167564 debug optional
libraw-bin-dbgsym_0.20.0-1_amd64.deb
b27dfa9811f1e80e39165876b5cbc716 92404 graphics optional
libraw-bin_0.20.0-1_amd64.deb
bc2342e66930497dc080f44c9f1b0cb8 394552 libdevel optional
libraw-dev_0.20.0-1_amd64.deb
0e6eaefed41f92a8a2d487c6ef98e772 89404 doc optional libraw-doc_0.20.0-1_all.deb
9168698455b6bca73dfc6672a4eb86bc 734816 debug optional
libraw20-dbgsym_0.20.0-1_amd64.deb
0c50425fe33a675b3d8bf6b75bebba5c 349612 libs optional
libraw20_0.20.0-1_amd64.deb
78fd4e1880afe816416ca3c18846a7a2 7128 libs optional
libraw_0.20.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
Comment: Debian powered!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=X9uj
-----END PGP SIGNATURE-----
--- End Message ---
--
Pkg-phototools-devel mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-phototools-devel
