Bug#1052239: transition: ocaml
Hi all, Le 20/09/2023 à 09:44, Sebastian Ramacher a écrit : Good. Please go ahead I've uploaded ocaml 4.14.1-1 3 days ago, then uploaded camlp4, ocamlnet, a few other arch:all packages that could not be binNMUed, and binNMUed all the rest. All packages, except the ones I had already spotted during my test rebuild, built fine on all release architectures: https://release.debian.org/transitions/html/ocaml.html scilab's status is unrelated to this transition; there are open RC bugs for the other "bad" packages: https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=ocaml-4.14.1-transition;users=debian-ocaml-ma...@lists.debian.org The following packages should be removed from testing for now: gmetadom otags xmlrpc-light mlpost ulex0.8 ocamlviz There is also another issue I didn't foresee: the binary package libllvm-13-ocaml-dev would be broken in testing by the migration of ocaml 4.14.1. Its source package, llvm-toolchain-13, has been removed from unstable and cannot be removed from testing because of... Haskell! libllvm-13-ocaml-dev has no reverse dependencies, though... Is it possible to remove just this one from testing as well? Or to explicitly allow its breakage? The transition is also looking good on riscv64. For the convenience of riscv porters, I've set up a transition tracker for OCaml packages on this architecture: https://people.debian.org/~glondu/ben/ocaml.html Cheers, -- Stéphane
Processed: Re: Bug#1052445: Request for permission to upload to sid
Processing control commands: > tags -1 confirmed Bug #1052445 [release.debian.org] transition: libpqxx Added tag(s) confirmed. -- 1052445: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052445 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#1052445: Request for permission to upload to sid
Control: tags -1 confirmed On 2023-09-22 19:25:15 +0200, Teus Benschop wrote: > Hello Release Team, > > For clarity, this is a request for me to upload libpqxx to sid to start the > transition there. > > A binNMU is enough for each reverse dependency. Please go ahead. Cheers -- Sebastian Ramacher
Bug#1052463: bookworm-pu: package debian-edu-doc/2.12.18~deb12u1
On Fri, Sep 22, 2023 at 03:28:28PM +, Holger Levsen wrote: > On Fri, Sep 22, 2023 at 04:45:49PM +0200, Holger Levsen wrote: > > I'll attach the full (compressed) debdiff in a reply, once this bug has > > made it > > to the list. > see below. hm, I guess attachments over 500K are not send to the list, just to the BTS. However, I've also uploaded to bookworm now, so you can also just diff there. thanks! -- cheers, Holger ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C ⠈⠳⣄ Dance like no one's watching. Encrypt like everyone is. signature.asc Description: PGP signature
Bug#1051395: bookworm-pu: package pywinrm/0.3.0-4+deb12u1
With the upload window closing next week, I've uploaded these changes to bookworm. Kind Regards, Bas -- GPG Key ID: 4096R/6750F10AE88D4AF1 Fingerprint: 8182 DE41 7056 408D 6146 50D1 6750 F10A E88D 4AF1
Bug#1052467: transition: svt-av1
Control: tags -1 confirmed On 2023-09-22 17:07:48 +0200, Dylan Aïssi wrote: > Package: release.debian.org > Severity: normal > User: release.debian@packages.debian.org > Usertags: transition > > Dear Release Team, > > Please schedule a transition slot for svt-av1. > > The auto-generated ben tracker looks good: > https://release.debian.org/transitions/html/auto-svt-av1.html Please go ahead. Cheers -- Sebastian Ramacher
Processed: Re: Bug#1052467: transition: svt-av1
Processing control commands: > tags -1 confirmed Bug #1052467 [release.debian.org] transition: svt-av1 Added tag(s) confirmed. -- 1052467: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052467 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Processed: retitle 1052445 to transition: libpqxx ..., user release.debian....@packages.debian.org ...
Processing commands for cont...@bugs.debian.org: > retitle 1052445 transition: libpqxx Bug #1052445 [release.debian.org] Transition: libpqxx 6.4->7.8 Changed Bug title to 'transition: libpqxx' from 'Transition: libpqxx 6.4->7.8'. > forwarded 1052445 > https://release.debian.org/transitions/html/auto-libpqxx.html Bug #1052445 [release.debian.org] transition: libpqxx Set Bug forwarded-to-address to 'https://release.debian.org/transitions/html/auto-libpqxx.html'. > user release.debian@packages.debian.org Setting user to release.debian@packages.debian.org (was sebas...@debian.org). > usertags 1052445 transition There were no usertags set. Usertags are now: transition. > thanks Stopping processing here. Please contact me if you need assistance. -- 1052445: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052445 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#1052445: Request for permission to upload to sid
Hello Release Team, For clarity, this is a request for me to upload libpqxx to sid to start the transition there. A binNMU is enough for each reverse dependency. With thanks, Teus Benschop teusbensc...@debian.org
Bug#1052480: bookworm-pu: package libpam-mklocaluser/0.18+deb12u1
Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-Cc: libpam-mklocalu...@packages.debian.org,
debian-...@lists.debian.org
Control: affects -1 + src:libpam-mklocaluser
[ Reason ]
In Debian Edu, we provide roaming workstations. The mechanism of
persistent user creation is handled by libpam-mklocaluser (Users in
LDAP get created as local users on such machines when logging in
on the school's network. From then on, the user exists locally on
that machine).
It was observed that with LightDM it would always take two logins
to complete this process. The first login would create the user
but bump back into the login manager.
With GDM3 this is not the case.
While investigating this deeper, it was discovered that it is
important to place libpam-mklocaluser at the very top of the
PAM session type stack. This is provided with the changeset of
this package. Furthermore, we cherry-picked a change that fixes
various (awful) grammar mistakes and typos in the README.
[ Impact ]
Users will continue to login twice on Debian Edu roaming workstations.
There will also be a fix to LightDM, that we plan to propose as a
bookworm-pu. If that finds its way into bookworm, having this change
is mandatory, otherwise the successful initial login will have
broken systemd user services.
[ Tests ]
Manual tests on Debian Edu 12 (preview installations).
[ Risks ]
Not much, libpam-mklocaluser seems to be used by Debian Edu, only,
it seems.
[ Checklist ]
[x] *all* changes are documented in the d/changelog
[x] I reviewed all changes and I approve them
[x] attach debdiff against the package in (old)stable
[x] the issue is verified as fixed in unstable
[ Changes ]
+ [ Mihai Moldovan ]
+ * README: Typo and grammar fixes.
-> the mentioned language fixes...
+ [ Guido Berhoerster ]
+ * debian/pam-auth-update/mklocaluser:
++ Ensure this PAM module is ordered before other session type modules.
+ Since this potentially changes the home directory, the module should be
+ ordered before others which require the correct location of the home
+ directory and/or start executables, particularly pam_systemd. (Closes:
+ #1052475).
-> the priority bump for pam-auth-update.
[ Other info ]
None.
diff -Nru libpam-mklocaluser-0.18/debian/changelog
libpam-mklocaluser-0.18+deb12u1/debian/changelog
--- libpam-mklocaluser-0.18/debian/changelog2020-05-22 18:01:47.0
+0200
+++ libpam-mklocaluser-0.18+deb12u1/debian/changelog2023-09-22
18:50:27.0 +0200
@@ -1,3 +1,18 @@
+libpam-mklocaluser (0.18+deb12u1) bookworm; urgency=medium
+
+ [ Mihai Moldovan ]
+ * README: Typo and grammar fixes.
+
+ [ Guido Berhoerster ]
+ * debian/pam-auth-update/mklocaluser:
++ Ensure this PAM module is ordered before other session type modules.
+ Since this potentially changes the home directory, the module should be
+ ordered before others which require the correct location of the home
+ directory and/or start executables, particularly pam_systemd. (Closes:
+ #1052475).
+
+ -- Mike Gabriel Fri, 22 Sep 2023 18:50:27 +0200
+
libpam-mklocaluser (0.18) unstable; urgency=medium
* Team upload.
diff -Nru libpam-mklocaluser-0.18/debian/control
libpam-mklocaluser-0.18+deb12u1/debian/control
--- libpam-mklocaluser-0.18/debian/control 2020-05-22 17:58:46.0
+0200
+++ libpam-mklocaluser-0.18+deb12u1/debian/control 2023-09-22
18:49:18.0 +0200
@@ -18,13 +18,13 @@
${python3:Depends},
libpam-python
Suggests: libpam-ccreds | libpam-sss,
-Description: Configure PAM to create a local user if it do not exist already
+Description: Configure PAM to create a local user if it does not exist already
When the user logs in for the first time, a local POSIX user account is
- created in /etc/passwd and primary group created in /etc/group, and a
+ created in /etc/passwd, a primary group is created in /etc/group, and a
local home directory is created in /home.
.
This is useful on roaming computers when the password is set up to be
- cached by for example libpam-ccreds or sssd to allow login without
+ cached by, for example, libpam-ccreds or sssd to allow login without
network connectivity using the password provided by a network
authentication service like Kerberos or LDAP.
.
diff -Nru libpam-mklocaluser-0.18/debian/pam-auth-update/mklocaluser
libpam-mklocaluser-0.18+deb12u1/debian/pam-auth-update/mklocaluser
--- libpam-mklocaluser-0.18/debian/pam-auth-update/mklocaluser 2020-05-22
07:52:53.0 +0200
+++ libpam-mklocaluser-0.18+deb12u1/debian/pam-auth-update/mklocaluser
2023-09-22 18:47:33.0 +0200
@@ -1,6 +1,6 @@
Name: Create local accounts and home directory on first time login
Default: yes
-Priority: 0
+Priority: 1024
Session-Interactive-Only: yes
Session-Type: Additional
Session-Final:
diff -Nru libpam-mklocaluser-0.18/debian/README
Processed: bookworm-pu: package libpam-mklocaluser/0.18+deb12u1
Processing control commands: > affects -1 + src:libpam-mklocaluser Bug #1052480 [release.debian.org] bookworm-pu: package libpam-mklocaluser/0.18+deb12u1 Added indication that 1052480 affects src:libpam-mklocaluser -- 1052480: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052480 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#1052479: bookworm-pu: package lxc/1:5.0.2-1+deb12u1
Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-Cc: pkg-lxc-de...@lists.alioth.debian.org, gib...@debian.org
Control: affects -1 + src:lxc
[ Reason ]
lxc 1:5.0.2-1 contains a typo in its IPv6 NAT rules, as reported in
#1049976. This prevents the lxc-net service from starting if
LXC_IPV6_NAT is set to true.
This was fixed in lxc version 5.0.3, which I have recently uploaded to
unstable. I would like to include this fix in bookworm's version of lxc
as it's a trivial fix affecting an actual Debian user.
[ Impact ]
IPv6 NAT is broken in bookworm's current version of lxc.
[ Tests ]
The changes have been reviewed and accepted by the upstream developers.
[ Risks ]
No risks -- a simple typo fix that has been fixed upstream since
February.
[ Checklist ]
[*] *all* changes are documented in the d/changelog
[*] I reviewed all changes and I approve them
[*] attach debdiff against the package in (old)stable
[*] the issue is verified as fixed in unstable
[ Changes ]
Backport upstream commit 4de047f51365cc06a626ee9de49fec5f76556c66,
which was included in lxc version 5.0.3. There's also a small change to
adjust the default branch used by gbp to reflect the new branch for
bookworm fixes.
[ Other info ]
The source debdiff is attached.
diff -Nru lxc-5.0.2/debian/changelog lxc-5.0.2/debian/changelog
--- lxc-5.0.2/debian/changelog 2023-01-17 02:53:00.0 +
+++ lxc-5.0.2/debian/changelog 2023-09-22 16:35:52.0 +
@@ -1,3 +1,10 @@
+lxc (1:5.0.2-1+deb12u1) bookworm; urgency=medium
+
+ * Cherry-pick upstream "fix nftables syntax for IPv6 NAT" (Closes: #1049976)
+ * Adjust branch in d/gbp.conf
+
+ -- Mathias Gibbens Fri, 22 Sep 2023 16:35:52 +
+
lxc (1:5.0.2-1) unstable; urgency=medium
* New upstream release
diff -Nru lxc-5.0.2/debian/gbp.conf lxc-5.0.2/debian/gbp.conf
--- lxc-5.0.2/debian/gbp.conf 2023-01-17 02:53:00.0 +
+++ lxc-5.0.2/debian/gbp.conf 2023-09-22 16:35:47.0 +
@@ -1,3 +1,3 @@
[DEFAULT]
pristine-tar = True
-debian-branch = master
+debian-branch = debian/bookworm
diff -Nru lxc-5.0.2/debian/patches/0100-fix-nftables-ipv6.patch lxc-5.0.2/debian/patches/0100-fix-nftables-ipv6.patch
--- lxc-5.0.2/debian/patches/0100-fix-nftables-ipv6.patch 1970-01-01 00:00:00.0 +
+++ lxc-5.0.2/debian/patches/0100-fix-nftables-ipv6.patch 2023-09-22 16:35:47.0 +
@@ -0,0 +1,34 @@
+From 4de047f51365cc06a626ee9de49fec5f76556c66 Mon Sep 17 00:00:00 2001
+From: Quentin Lyons <36303164+n0...@users.noreply.github.com>
+Date: Sun, 12 Feb 2023 02:03:42 +
+Subject: [PATCH] lxc-net.in: fix nftables syntax for IPv6 NAT
+
+The nftables masquarade rule for IPv6 was using the IPv4 syntax. This
+resulted in the following error when starting the lxc-net.service with
+LXC_IPV6_NAT="true" and nftables:
+
+Feb 11 18:54:54 pc lxc-net[4936]: Error: conflicting protocols specified: ip6 vs. ip
+Feb 11 18:54:54 pc lxc-net[4936]:
+Feb 11 18:54:54 pc lxc-net[4917]: Failed to setup lxc-net.
+Feb 11 18:54:54 pc systemd[1]: lxc-net.service: Main process exited, code=exited, status=1/FAILURE
+Feb 11 18:54:54 pc systemd[1]: lxc-net.service: Failed with result 'exit-code'.
+Feb 11 18:54:54 pc systemd[1]: Failed to start LXC network bridge setup.
+
+Signed-off-by: Quentin Lyons <36303164+n0...@users.noreply.github.com>
+---
+ config/init/common/lxc-net.in | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/config/init/common/lxc-net.in b/config/init/common/lxc-net.in
+index efee9b96f0..e9ab88890a 100755
+--- a/config/init/common/lxc-net.in
b/config/init/common/lxc-net.in
+@@ -92,7 +92,7 @@ start_nftables() {
+ add table ip6 lxc;
+ flush table ip6 lxc;
+ add chain ip6 lxc postrouting { type nat hook postrouting priority 100; };
+-add rule ip6 lxc postrouting ip saddr ${LXC_IPV6_NETWORK} ip daddr != ${LXC_IPV6_NETWORK} counter masquerade;
++add rule ip6 lxc postrouting ip6 saddr ${LXC_IPV6_NETWORK} ip6 daddr != ${LXC_IPV6_NETWORK} counter masquerade;
+ "
+ fi
+ NFT_RULESET="${NFT_RULESET};
diff -Nru lxc-5.0.2/debian/patches/series lxc-5.0.2/debian/patches/series
--- lxc-5.0.2/debian/patches/series 2023-01-17 02:53:00.0 +
+++ lxc-5.0.2/debian/patches/series 2023-09-22 16:35:47.0 +
@@ -1,3 +1,4 @@
0004-apparmor.d-Sets-container-base-accordingly-to-container-base.in.patch
0005-lxc.service-Starts-after-remote-fs.target.patch
0004-nesting-Extend-mount-permissions-in-apparmor-to-allo.patch
+0100-fix-nftables-ipv6.patch
signature.asc
Description: This is a digitally signed message part
Processed: bookworm-pu: package lxc/1:5.0.2-1+deb12u1
Processing control commands: > affects -1 + src:lxc Bug #1052479 [release.debian.org] bookworm-pu: package lxc/1:5.0.2-1+deb12u1 Added indication that 1052479 affects src:lxc -- 1052479: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052479 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Processed (with 5 errors): Re: Bug#1052445: Transition: libpqxx 6.4->7.8
Processing commands for cont...@bugs.debian.org: > reassign 1052445 release.debian.org Bug #1052445 [src:libpqxx] Transition: libpqxx 6.4->7.8 Bug reassigned from package 'src:libpqxx' to 'release.debian.org'. No longer marked as found in versions libpqxx/6.4.5-2. Ignoring request to alter fixed versions of bug #1052445 to the same values previously set > On 22/09/2023 17:22, Christoph Berg wrote: Unknown command or malformed arguments to command. > > Re: Maarten van Geijn Unknown command or malformed arguments to command. > >> Hi Christoph, Unknown command or malformed arguments to command. > >> Unknown command or malformed arguments to command. > >> Thanks for pointing this out. Unknown command or malformed arguments to command. Too many unknown commands, stopping here. Please contact me if you need assistance. -- 1052445: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052445 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#1052467: transition: svt-av1
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition Dear Release Team, Please schedule a transition slot for svt-av1. The auto-generated ben tracker looks good: https://release.debian.org/transitions/html/auto-svt-av1.html All reverse deps (ffmpeg, libavif and libheif) build fine with the new version in experimental. Thanks, Dylan
Bug#1052463: bookworm-pu: package debian-edu-doc/2.12.18~deb12u1
Package: release.debian.org Severity: normal Tags: bookworm User: release.debian@packages.debian.org Usertags: pu x-debbugs-cc: debian-...@lists.debian.org Hi, please accept debian-edu-doc 2.12.18~deb12u1 into bookworm. [ Reason ] Updated documentation and translations. [ Impact ] Outdated documentation and translations for our users. [ Tests ] Build tests and manually confirmed the .debs are still the same size. [ Risks ] not really. [ Checklist ] [x] *all* changes are documented in the d/changelog [x] I reviewed all changes and I approve them [x] attach debdiff against the package in stable [x] the issue is verified as fixed in unstable [ Changes ] debian-edu-doc (2.12.18~deb12u1) bookworm; urgency=medium . * Upload to bookworm. . debian-edu-doc (2.12.18) unstable; urgency=medium . [ Holger Levsen ] * Update Debian Edu Bookworm manual from the wiki, thanks to Guido Berhörster. * Update Debian Edu Bookworm manual from the wiki. * debian/copyright: Update after running 'make update-copyright'. . [ Frans Spiesschaert ] * Synchronize translations from weblate.org . [ Translation updates ] * Bookworm manual: - Brasilian Portuguese: Fred Maranhão and José Vieira. - Dutch: Frans Spiesschaert. - Portuguese: Fred Maranhão. - Romanian: Remus-Gabriel Chelu. - Spanish: Eulalio Barbero Espinosa and Francisco Javier Carro Orgeira. - Swedish: Luna Jernberg. . * Bullseye manual: - Brasilian Portuguese: Fred Maranhão and José Vieira. - Portuguese: Fred Maranhão. - Romanian: Remus-Gabriel Chelu. - Spanish: Eulalio Barbero Espinosa and Francisco Javier Carro Orgeira. - Swedish: Luna Jernberg. [ Other info ] $ debdiff debian-edu-doc_2.12.17.dsc debian-edu-doc_2.12.18~deb12u1.dsc|diffstat debian/changelog | 34 + debian/copyright |1 documentation/debian-edu-bookworm/debian-edu-bookworm-manual-stripped.xml | 121 +++- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.da.po | 369 +++--- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.de.po | 361 +++-- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.es.po | 740 +++- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.fr.po | 368 +++-- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.it.po | 1560 +-- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.ja.po | 363 +++-- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.nb-no.po | 362 +++-- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.nl.po | 939 +++ documentation/debian-edu-bookworm/debian-edu-bookworm-manual.pl.po | 350 +++-- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.pot | 289 +- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.pt-br.po | 983 +++-- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.pt-pt.add |2 documentation/debian-edu-bookworm/debian-edu-bookworm-manual.pt-pt.po | 1051 ++- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.pt.add |1 documentation/debian-edu-bookworm/debian-edu-bookworm-manual.pt.po | 2017 ++-- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.ro.po | 714 ++- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.sv.add |2 documentation/debian-edu-bookworm/debian-edu-bookworm-manual.sv.po | 2187 +++ documentation/debian-edu-bookworm/debian-edu-bookworm-manual.xml | 117 +++- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.zh-cn.po | 356 +++-- documentation/debian-edu-bookworm/debian-edu-bookworm-manual.zh-tw.po | 295 +-- documentation/debian-edu-bookworm/source/AllInOne-debian-edu-bookworm-manual.xml |3 documentation/debian-edu-bullseye/debian-edu-bullseye-manual.es.po | 368 ++--- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.pt-br.po | 41 - documentation/debian-edu-bullseye/debian-edu-bullseye-manual.pt-pt.add |2 documentation/debian-edu-bullseye/debian-edu-bullseye-manual.pt-pt.po | 774
Bug#1052455: bookworm-pu: package freetype/2.12.1+dfsg-5+deb12u1
Package: release.debian.org Severity: normal Tags: bookworm User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: freet...@packages.debian.org Control: affects -1 + src:freetype [ Reason ] FreeType 2.12.1 shipped with experimental COLRv1 support enabled. This was unintentional, as the implementation shipped in this release was incomplete and incompatible with the final COLRv1 API. Upstream's intention was to enable COLRv1 support in FreeType 2.13.0. Applications attempting to use the partial COLRv1 API in FreeType 2.12.1 will get unexpected (and incorrect) results. FreeType 2.12.1 is the only version affected. The patch included in this stable-p-u upload effectively disables COLRv1 support by making the public methods consistently return failure instead of attempting to parse a format somewhat different from the final specification. [ Impact ] Applications attempting to use the partial COLRv1 API implementation in FreeType 2.12.1 will get unexpected (and incorrect) results. [ Risks ] The patch is trivial. Calls to the public COLRv1-related methods consistently fail, which is expected behaviour with the patch applied. [ Checklist ] [x] *all* changes are documented in the d/changelog [x] I reviewed all changes and I approve them [x] attach debdiff against the package in stable [x] the issue is verified as fixed in unstable [ Other info ] I realise this isn't a 'standard' special case, as described in Section 5.5.1 of the Developer's Reference [0]. For instance, the bug doesn't impact unstable, as it's not an issue in that more recent version. However, due to the significant differences in API behaviour between this partial version and the final specification, it is important to disable the partial COLRv1 support, which was never supposed to be enabled. I'm seeking your approval to make the upload to stable-p-u. [0] https://www.debian.org/doc/manuals/developers-reference/pkgs.html#special- case-uploads-to-the-stable-and-oldstable-distributions diff -Nru freetype-2.12.1+dfsg/debian/changelog freetype-2.12.1+dfsg/debian/changelog --- freetype-2.12.1+dfsg/debian/changelog 2023-04-20 21:08:03.0 +1000 +++ freetype-2.12.1+dfsg/debian/changelog 2023-09-22 21:48:19.0 +1000 @@ -1,3 +1,10 @@ +freetype (2.12.1+dfsg-5+deb12u1) bookworm; urgency=medium + + * debian/patches: Disable COLRv1 support, which was unintentionally enabled +by upstream in this version of FreeType (Closes: #1051816). + + -- Hugh McMaster Fri, 22 Sep 2023 21:48:19 +1000 + freetype (2.12.1+dfsg-5) unstable; urgency=medium * debian/patches: Add a patch to fix CVE-2023-2004 (Closes: #1034612). diff -Nru freetype-2.12.1+dfsg/debian/patches/disable_COLRv1.patch freetype-2.12.1+dfsg/debian/patches/disable_COLRv1.patch --- freetype-2.12.1+dfsg/debian/patches/disable_COLRv1.patch1970-01-01 10:00:00.0 +1000 +++ freetype-2.12.1+dfsg/debian/patches/disable_COLRv1.patch2023-09-22 21:42:32.0 +1000 @@ -0,0 +1,22 @@ +Description: Disable COLRv1 support in FreeType 2.12.1. + FreeType 2.12.1 shipped with COLRv1 support enabled. This was unintentional, + as the partial implementation shipped is incomplete and incompatible with + the final COLRv1 API. + . + Applications attempting to use this version of the COLRv1 API will get + unexpected (and incorrect) results. +Author: Hugh McMaster +Bug-Debian: https://bugs.debian.org/1051816 +Last-Update: 2023-09-22 + +--- a/src/sfnt/sfdriver.c b/src/sfnt/sfdriver.c +@@ -1220,7 +1220,7 @@ + #define PUT_SVG_SUPPORT( a ) NULL + #endif + +-#define PUT_COLOR_LAYERS_V1( a ) PUT_COLOR_LAYERS( a ) ++#define PUT_COLOR_LAYERS_V1( a ) NULL + + #ifdef TT_CONFIG_OPTION_POSTSCRIPT_NAMES + #define PUT_PS_NAMES( a ) a diff -Nru freetype-2.12.1+dfsg/debian/patches/series freetype-2.12.1+dfsg/debian/patches/series --- freetype-2.12.1+dfsg/debian/patches/series 2023-04-20 21:08:03.0 +1000 +++ freetype-2.12.1+dfsg/debian/patches/series 2023-09-22 21:34:52.0 +1000 @@ -6,3 +6,4 @@ fix-wild-free-svg.patch hardening.patch CVE-2023-2004.patch +disable_COLRv1.patch
Processed: bookworm-pu: package freetype/2.12.1+dfsg-5+deb12u1
Processing control commands: > affects -1 + src:freetype Bug #1052455 [release.debian.org] bookworm-pu: package freetype/2.12.1+dfsg-5+deb12u1 Added indication that 1052455 affects src:freetype -- 1052455: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052455 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
