Bug#983719: esptool: Version 3.0 fixes critical bugs

2023-03-09 Thread Milan Kupcevic

Hi Faidon,

First of all thank you for your work on esptool update. I'm currently 
using my available time to work on avrdude for bookworm. If you wish to 
co-maintain esptool package feel free to add yourself to uploaders of 
this package.


I agree with your assessment. The best course at this point is to upload 
the updated package version together with the newly introduced 
dependencies to sid and let the system to auto-remove the old package 
from bookworm.


As soon as bookworm gets released we can make the updated esptool 
available via bookworm-backports.


Milan


On 2/21/23 07:16, Faidon Liambotis wrote:

Control: retitle -1 Package is severely outdated
Control: severity -1 serious

This package is severely outdated. esptool v2.8, as currently packaged
in Debian, was released in October 2019, almost 3.5 years ago. Upstream
has regularly released newer versions every few months in the meantime,
with the latest being v4.5, released last week.

Newer versions bring a myriad of fixes, as well as equally importantly,
support for newer chips that can be found in the wild.

As I've also reported in #948096, esptool in Debian is crippled right
now by not including any flasher stubs, limiting its usefulness. The
removal was justified at the time, but some of the underlying reasons
have been resolved for a long time now for several of the supported
chips, and only require simple patches to be applied to restore.

(Also note: the packaging and DFSG-ness can be simplified quite a bit,
since the binary blobs are now split into JSON files in the build tree,
that can be cleaned up with Files-Excluded, removing the need for
modifying the source through the uupdate script.)

Given how outdated the source is, and the lack of responses from the
maintainer in the BTS, I do not believe the package is fit for the next
release, therefore I'm elevating the severity to RC.

I should note that while the package seems to meet the criteria for
Salvaging (DevRef 5.12) I don't currently have the bandwidth to maintain
it properly in the long run either. I'm happy to do a one-off NMU to
bring it to a more decent shape, however.

Best,
Faidon





Bug#983719: esptool: Version 3.0 fixes critical bugs

2023-03-08 Thread Faidon Liambotis
On Thu, Feb 23, 2023 at 12:16:41PM +0200, Faidon Liambotis wrote:
> I also have changes underway for 4.5, but currently looking into what it
> would take dependency-wise to accomplish this, as there are 1-2 new
> Python module dependencies that are not present in Debian yet. I'll
> follow up once I have something; I expect this to be in the next week or
> so.

I packaged the two new dependencies mentioned above:
 * python-reedsolo, which entered unstable this week; and 
 * python-pkcs11 (used only conditionally, for espsecure's HSM bits),
   which is waiting in NEW for about a week now.

I moved the repository to the DEP-14 layout, rebased the
feature/2.8-update branch, and then built on top of it in the new
debian/experimental branch. This now has 4.5.1, with lots of other fixes
and flasher stubs! I'd consider this a release candidate for an
experimental upload once pkcs11 passes through NEW.

Faidon



Bug#983719: esptool: Version 3.0 fixes critical bugs

2023-02-23 Thread Faidon Liambotis
On Tue, Feb 21, 2023 at 02:16:40PM +0200, Faidon Liambotis wrote:
> I should note that while the package seems to meet the criteria for
> Salvaging (DevRef 5.12) I don't currently have the bandwidth to maintain
> it properly in the long run either. I'm happy to do a one-off NMU to
> bring it to a more decent shape, however.

Update: I pushed a branch into the main repo, feature/2.8-update, that
just brings up the packaging to modern standards and switches to using
pybuild -- a step necessary given new upstream releases are now using
Python modules etc.

This is still tagged as a 2.8+dfsg-1.1 release that builds the package
as-is with enhancements and no regressions.

I also have changes underway for 4.5, but currently looking into what it
would take dependency-wise to accomplish this, as there are 1-2 new
Python module dependencies that are not present in Debian yet. I'll
follow up once I have something; I expect this to be in the next week or
so.

Regards,
Faidon



Processed: Re: Bug#983719: esptool: Version 3.0 fixes critical bugs

2023-02-21 Thread Debian Bug Tracking System
Processing control commands:

> retitle -1 Package is severely outdated
Bug #983719 [esptool] esptool: Version 3.0 fixes critical bugs
Changed Bug title to 'Package is severely outdated' from 'esptool: Version 3.0 
fixes critical bugs'.
> severity -1 serious
Bug #983719 [esptool] Package is severely outdated
Severity set to 'serious' from 'important'

-- 
983719: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=983719
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#983719: esptool: Version 3.0 fixes critical bugs

2021-02-28 Thread Matthias Urlichs
Package: esptool
Version: 2.8+dfsg-1
Severity: serious
Justification: broken

$ esptool  erase_flash
esptool.py v2.8
Found 3 serial ports
Serial port /dev/ttyUSB0
Connecting
Detecting chip type... ESP32
Chip is ESP32D0WDQ6 (revision 1)
Features: WiFi, BT, Dual Core, 240MHz, VRef calibration in efuse, Coding Scheme 
None
Crystal is 40MHz
MAC: 3c:71:bf:03:2e:0c
Enabling default SPI flash mode...
Erasing flash (this may take a while)...

A fatal error occurred: ESP32 ROM does not support function erase_flash.

... umm ... YES IT DOES.

Version 3.0 works. Please upgrade.


-- System Information:
Debian Release: 10.8
  APT prefers stable
  APT policy: (700, 'stable'), (600, 'unstable'), (550, 'experimental'), (550, 
'oldstable'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-13-amd64 (SMP w/8 CPU threads)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages esptool depends on:
ii  libc6   2.31-9
ii  python3 3.9.1-1
ii  python3-ecdsa   0.13-3+deb10u1
pn  python3-pyaes   
ii  python3-serial  3.4-4

esptool recommends no packages.

esptool suggests no packages.



Processed: Bug#983719: esptool: Version 3.0 fixes critical bugs

2021-02-28 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> owner 983719 !
Bug #983719 [esptool] esptool: Version 3.0 fixes critical bugs
Owner recorded as Milan Kupcevic .
> severity 983719 important
Bug #983719 [esptool] esptool: Version 3.0 fixes critical bugs
Severity set to 'important' from 'serious'
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
983719: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=983719
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems