Bug#1061515: transition: ace
On Mon, 6 May 2024 at 13:06, Sudip Mukherjee wrote: > > On Sat, 4 May 2024 at 08:44, Sebastian Ramacher wrote: > > > > Control: tags -1 confirmed > > > > On 2024-01-25 19:47:27 +, Sudip Mukherjee wrote: > > > Package: release.debian.org > > > Severity: normal > > > User: release.debian@packages.debian.org > > > Usertags: transition > > > X-Debbugs-Cc: sudipm.mukher...@gmail.com > > > Control: affects -1 + src:ace > > > > > > > > > Hi, > > > > > > Small transition with only two affected packages: diagnostics, ivtools, > > > Both of them builds fine with ace 7.1.3+dfsg-1 in experimental. > > > > > > The autogenerated ben tracker looks good. Please consider 'ace' for > > > transition. > > > Thanks in advance. > > > > Please go ahead. > > Thanks. Uploaded to unstable now. "ace" has now migrated to testing. -- Regards Sudip
Bug#1061515: transition: ace
On Sat, 4 May 2024 at 08:44, Sebastian Ramacher wrote: > > Control: tags -1 confirmed > > On 2024-01-25 19:47:27 +, Sudip Mukherjee wrote: > > Package: release.debian.org > > Severity: normal > > User: release.debian@packages.debian.org > > Usertags: transition > > X-Debbugs-Cc: sudipm.mukher...@gmail.com > > Control: affects -1 + src:ace > > > > > > Hi, > > > > Small transition with only two affected packages: diagnostics, ivtools, > > Both of them builds fine with ace 7.1.3+dfsg-1 in experimental. > > > > The autogenerated ben tracker looks good. Please consider 'ace' for > > transition. > > Thanks in advance. > > Please go ahead. Thanks. Uploaded to unstable now. -- Regards Sudip
Bug#1061515: transition: ace
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition X-Debbugs-Cc: sudipm.mukher...@gmail.com Control: affects -1 + src:ace Hi, Small transition with only two affected packages: diagnostics, ivtools, Both of them builds fine with ace 7.1.3+dfsg-1 in experimental. The autogenerated ben tracker looks good. Please consider 'ace' for transition. Thanks in advance. -- Regards Sudip
Bug#1057540: transition: ace
On Wed, Dec 06, 2023 at 11:22:30AM +0100, Emilio Pozuelo Monfort wrote: > Control: tags -1 confirmed > > On 05/12/2023 22:45, Sudip Mukherjee wrote: > > Package: release.debian.org > > Severity: normal > > User: release.debian@packages.debian.org > > Usertags: transition > > X-Debbugs-Cc: sudipm.mukher...@gmail.com > > Control: affects -1 + src:ace > > > > Hi, > > > > Small transition with only two affected packages: diagnostics, ivtools, > > Both of them builds fine with ace 7.1.2+dfsg-1 in experimental. > > > > The autogenerated ben tracker looks good. Please consider 'ace' for > > transition. > > Thanks in advance. > > Go ahead. Thanks. It has now migrated to Testing. -- Regards Sudip
Bug#1057540: transition: ace
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition X-Debbugs-Cc: sudipm.mukher...@gmail.com Control: affects -1 + src:ace Hi, Small transition with only two affected packages: diagnostics, ivtools, Both of them builds fine with ace 7.1.2+dfsg-1 in experimental. The autogenerated ben tracker looks good. Please consider 'ace' for transition. Thanks in advance. -- Regards Sudip
Bug#1035868: unblock: kernelshark/2.2.0-2
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock
X-Debbugs-Cc: sudipm.mukher...@gmail.com
Hi,
Please unblock package kernelshark
Its a simple change to rename the links which fixes the RC bug.
[ Reason ]
It fixes the RC bug.
[ Impact ]
User will not be able to use libkshark.
[ Tests ]
manual tests to confirm symlinks are pointing to the correct file.
[ Risks ]
No risk in unblocking it. :)
[ Checklist ]
[x] all changes are documented in the d/changelog
[x] I reviewed all changes and I approve them
[x] attach debdiff against the package in testing
unblock kernelshark/2.2.0-2
--
Regards
Sudip
diff -Nru kernelshark-2.2.0/debian/changelog kernelshark-2.2.0/debian/changelog
--- kernelshark-2.2.0/debian/changelog 2023-02-05 00:47:33.0 +
+++ kernelshark-2.2.0/debian/changelog 2023-05-05 20:37:24.0 +0100
@@ -1,3 +1,9 @@
+kernelshark (2.2.0-2) unstable; urgency=medium
+
+ * Fix symlink names. (Closes: #1035449)
+
+ -- Sudip Mukherjee Fri, 05 May 2023 20:37:24
+0100
+
kernelshark (2.2.0-1) unstable; urgency=medium
* New upstream version 2.2.0
diff -Nru kernelshark-2.2.0/debian/libkshark2.links
kernelshark-2.2.0/debian/libkshark2.links
--- kernelshark-2.2.0/debian/libkshark2.links 2022-04-26 20:16:02.0
+0100
+++ kernelshark-2.2.0/debian/libkshark2.links 2023-05-05 20:05:16.0
+0100
@@ -1,2 +1,2 @@
-usr/lib/${DEB_HOST_MULTIARCH}/libkshark-gui.so.2.0.0
usr/lib/${DEB_HOST_MULTIARCH}/libkshark-gui.so.2
-usr/lib/${DEB_HOST_MULTIARCH}/libkshark-plot.so.2.0.0
usr/lib/${DEB_HOST_MULTIARCH}/libkshark-plot.so.2
+usr/lib/${DEB_HOST_MULTIARCH}/libkshark-gui.so.2.2.0
usr/lib/${DEB_HOST_MULTIARCH}/libkshark-gui.so.2
+usr/lib/${DEB_HOST_MULTIARCH}/libkshark-plot.so.2.2.0
usr/lib/${DEB_HOST_MULTIARCH}/libkshark-plot.so.2
Bug#1023550: transition: qcustomplot
Hi Filippo,
On Thu, Nov 24, 2022 at 09:59:49PM +0100, Filippo Rusconi wrote:
> Greetings Sebastian,
>
> On Thu, Nov 24, 2022 at 09:05:07PM +0100, Sebastian Ramacher wrote:
> > Hi Filippo
>
> [...]
>
> > > > Thanks! Please go ahead with the transition.
> > >
> > > I just uploaded the package to unstable. I have not closed the bug yet,
> > > waiting
> > > to check that everything goes fine.
> >
> > qcustomplot's autopkgtests are failing. Could you please take a look at
> > them? Thanks
>
> It is weeks that I monitor the salsa stuff, but I do not understand what these
> tests mean. One example (bear with me):
The failures are because cmake could not find the library and so the
variable 'QCustomPlot_LIBRARIES' was empty and so while linking it did not
ask 'ld' to link with libqcustomplot. Please dont ask why.
Try the attached patch which will explicitely ask cmake to find the library
and save it to the variable. It worked in my schroot.
--
Regards
Sudip
diff -Nru qcustomplot-2.1.0+dfsg1/debian/changelog qcustomplot-2.1.0+dfsg1/debian/changelog
--- qcustomplot-2.1.0+dfsg1/debian/changelog 2022-11-25 10:01:09.0 +
+++ qcustomplot-2.1.0+dfsg1/debian/changelog 2022-12-01 17:36:10.0 +
@@ -1,3 +1,10 @@
+qcustomplot (2.1.0+dfsg1-3.1) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Fix autopkgtest.
+
+ -- Sudip Mukherjee Thu, 01 Dec 2022 17:36:10 +
+
qcustomplot (2.1.0+dfsg1-3) unstable; urgency=low
* Fix the autopkgtest by fixing the dependencies of libqcustomplot-dev: when
diff -Nru qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-axis qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-axis
--- qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-axis 2022-11-25 10:01:09.0 +
+++ qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-axis 2022-12-01 16:27:01.0 +
@@ -19,6 +19,7 @@
FIND_PACKAGE(QCustomPlot REQUIRED)
FIND_PACKAGE(Qt5PrintSupport REQUIRED)
+find_library(QCustomPlot_LIBRARIES QCustomPlot REQUIRED)
set(CMAKE_MODULE_PATH "\${CMAKE_CURRENT_SOURCE_DIR}/cMake")
set(CMAKE_AUTOMOC ON)
diff -Nru qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-inter qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-inter
--- qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-inter 2022-11-25 10:01:09.0 +
+++ qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-inter 2022-12-01 17:26:26.0 +
@@ -19,6 +19,7 @@
FIND_PACKAGE(QCustomPlot REQUIRED)
FIND_PACKAGE(Qt5PrintSupport REQUIRED)
+find_library(QCustomPlot_LIBRARIES QCustomPlot REQUIRED)
set(CMAKE_MODULE_PATH "\${CMAKE_CURRENT_SOURCE_DIR}/cMake")
set(CMAKE_AUTOMOC ON)
diff -Nru qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-plot qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-plot
--- qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-plot 2022-11-25 10:01:09.0 +
+++ qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-plot 2022-12-01 17:26:40.0 +
@@ -19,6 +19,7 @@
FIND_PACKAGE(QCustomPlot REQUIRED)
FIND_PACKAGE(Qt5PrintSupport REQUIRED)
+find_library(QCustomPlot_LIBRARIES QCustomPlot REQUIRED)
set(CMAKE_MODULE_PATH "\${CMAKE_CURRENT_SOURCE_DIR}/cMake")
set(CMAKE_AUTOMOC ON)
diff -Nru qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-scroll qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-scroll
--- qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-scroll 2022-11-25 10:01:09.0 +
+++ qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-scroll 2022-12-01 17:26:50.0 +
@@ -19,6 +19,7 @@
FIND_PACKAGE(QCustomPlot REQUIRED)
FIND_PACKAGE(Qt5PrintSupport REQUIRED)
+find_library(QCustomPlot_LIBRARIES QCustomPlot REQUIRED)
set(CMAKE_MODULE_PATH "\${CMAKE_CURRENT_SOURCE_DIR}/cMake")
set(CMAKE_AUTOMOC ON)
diff -Nru qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-text qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-text
--- qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-text 2022-11-25 10:01:09.0 +
+++ qcustomplot-2.1.0+dfsg1/debian/tests/buildtest-text 2022-12-01 17:27:05.0 +
@@ -19,6 +19,7 @@
FIND_PACKAGE(QCustomPlot REQUIRED)
FIND_PACKAGE(Qt5PrintSupport REQUIRED)
+find_library(QCustomPlot_LIBRARIES QCustomPlot REQUIRED)
set(CMAKE_MODULE_PATH "\${CMAKE_CURRENT_SOURCE_DIR}/cMake")
set(CMAKE_AUTOMOC ON)
diff -Nru qcustomplot-2.1.0+dfsg1/debian/tests/control qcustomplot-2.1.0+dfsg1/debian/tests/control
--- qcustomplot-2.1.0+dfsg1/debian/tests/control 2022-11-25 10:01:09.0 +
+++ qcustomplot-2.1.0+dfsg1/debian/tests/control 2022-12-01 17:35:46.0 +
@@ -1,2 +1,3 @@
Tests: buildtest-axis buildtest-inter buildtest-plot buildtest-scroll buildtest-text
Depends: libqcustomplot-dev, build-essential, cmake
+Restrictions: allow-stderr
Bug#1018945: transition: libbpf
Hi Sebastian, On Thu, Nov 10, 2022 at 10:01 PM Sebastian Ramacher wrote: > > On 2022-11-06 11:36:16 +, Sudip Mukherjee wrote: > > On Sat, Nov 5, 2022 at 8:14 PM Sebastian Ramacher > > wrote: > > > > > > Control: tags -1 confirmed > > > > > > On 2022-11-05 00:11:07 +, Sudip Mukherjee wrote: > > > > Control: tags -1 - moreinfo > > > > -- > > > > > > > > On Mon, Oct 24, 2022 at 10:22:32PM +0100, Sudip Mukherjee wrote: > > > > > > > > Please consider libbpf for transition. > > > > > > Please go ahead > > > > Thanks. Has been uploaded. > > The autopkgtests of dpdk regressed on amd64: > https://ci.debian.net/data/autopkgtest/testing/amd64/d/dpdk/28081847/log.gz > Could you please take a look? I have seen that, and also noticed that the test was with dpdk from testing which is not rebuilt with libbpf from unstable. So I triggered a new job to see the result of dpdk/unstable with libbpf/unstable. https://ci.debian.net/data/autopkgtest/unstable/amd64/d/dpdk/28109044/log.gz The job you linked uses dpdk/21.11-5+b1 And, the job I triggered uses dpdk/21.11-5+b2 which is the binnmu for libbpf transition. And, the test passed. Not sure if I need to do something for it. -- Regards Sudip
Bug#1018945: transition: libbpf
On Sat, Nov 5, 2022 at 8:14 PM Sebastian Ramacher wrote: > > Control: tags -1 confirmed > > On 2022-11-05 00:11:07 +, Sudip Mukherjee wrote: > > Control: tags -1 - moreinfo > > -- > > > > On Mon, Oct 24, 2022 at 10:22:32PM +0100, Sudip Mukherjee wrote: > > > As of today only v4l-utils and bpfcc still fails to build with libbpf > > > in experimental. > > > > > > v4l-utils is a key package, I will look into its fix and request the > > > libbpf transition after that. > > > > All the packages except bpfcc (#1018818) now builds fine with libbpf/1.0.1-1 > > from experimental. I can help bpfcc maintainers with the porting to new > > libbpf > > but they have not replied to the bug report or to my mails. > > > > Please consider libbpf for transition. > > Please go ahead Thanks. Has been uploaded. -- Regards Sudip
Bug#1018945: transition: libbpf
Control: tags -1 - moreinfo -- On Mon, Oct 24, 2022 at 10:22:32PM +0100, Sudip Mukherjee wrote: > As of today only v4l-utils and bpfcc still fails to build with libbpf > in experimental. > > v4l-utils is a key package, I will look into its fix and request the > libbpf transition after that. All the packages except bpfcc (#1018818) now builds fine with libbpf/1.0.1-1 from experimental. I can help bpfcc maintainers with the porting to new libbpf but they have not replied to the bug report or to my mails. Please consider libbpf for transition. -- Regards Sudip
Bug#1018945: transition: libbpf
As of today only v4l-utils and bpfcc still fails to build with libbpf in experimental. v4l-utils is a key package, I will look into its fix and request the libbpf transition after that. -- Regards Sudip
Bug#1018945: transition: libbpf
On Fri, Sep 02, 2022 at 11:13:26AM +0100, Sudip Mukherjee wrote: > > The autogenerated ben tracker looks good. Please consider 'libbpf' for > transition. Ok, please dont consider it yet. As mentioned in https://github.com/libbpf/libbpf/issues/562#issuecomment-1237299951 libbpf has now added a hard dependency on v6.0+ kernel. -- Regards Sudip
Bug#1018945: transition: libbpf
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition X-Debbugs-Cc: sudipm.mukher...@gmail.com Hi, This is the most complicated transition I have ever asked for. Please bear with me. 10 affected packages. Dependency level 2: Fails to build and bug raised with "Severity: important": bpfcc - #1018818 dwarves - #1018906 knot - #1018911 qemu - #1018913 suricata - #1018914 v4l-utils - #1018915 xdp-tools - #1018916 dpdk/21.11-5 - builds fine with libbpf from experimental. iproute2/5.19.0-1 - builds fine with libbpf from experimental. Dependency level 3: bpftrace - could not test as it will also need bpfcc. The autogenerated ben tracker looks good. Please consider 'libbpf' for transition. Thanks in advance. -- Regards Sudip
Bug#1018876: transition: ace
On Thu, Sep 1, 2022 at 10:36 PM Sebastian Ramacher wrote: > > Control: tags -1 confirmed > > On 2022-09-01 10:53:10 +0100, Sudip Mukherjee wrote: > > Package: release.debian.org > > Severity: normal > > User: release.debian@packages.debian.org > > Usertags: transition > > X-Debbugs-Cc: sudipm.mukher...@gmail.com > > > > Hi, > > > > Small transition with only two affected packages: diagnostics, ivtools. > > > > diagnostics already has a FTBFS due to #1012912, so could not test it. > > ivtools builds fine with ace 7.0.8+dfsg-1 version in experimental. > > > > The autogenerated ben tracker looks good. Please consider 'ace' for > > transition. > > Thanks in advance. > > Please go ahead Thanks. Uploaded now. I have a fix for the diagnostics FTBFS also. Do you want me to upload it to DELAYED/1-day queue now or upload after this transition is over? -- Regards Sudip
Bug#1018876: transition: ace
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition X-Debbugs-Cc: sudipm.mukher...@gmail.com Hi, Small transition with only two affected packages: diagnostics, ivtools. diagnostics already has a FTBFS due to #1012912, so could not test it. ivtools builds fine with ace 7.0.8+dfsg-1 version in experimental. The autogenerated ben tracker looks good. Please consider 'ace' for transition. Thanks in advance. -- Regards Sudip
Bug#1012223: transition: ace
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition X-Debbugs-Cc: sudipm.mukher...@gmail.com Hi, Small transition with only two affected packages: diagnostics, ivtools, Both of them builds fine with ace 7.0.7+dfsg-1 version in experimental. The autogenerated ben tracker looks good. Please consider 'ace' for transition. Thanks in advance. -- Regards Sudip
Bug#1010994: transition: trace-cmd
Hi Sebastian, On Sun, May 15, 2022 at 11:48:00AM +0200, Sebastian Ramacher wrote: > Control: tags -1 confirmed > > On 2022-05-14 22:09:10 +0100, Sudip Mukherjee wrote: > > Package: release.debian.org > > Severity: normal > > User: release.debian@packages.debian.org > > Usertags: transition > > X-Debbugs-Cc: sudipm.mukher...@gmail.com > > > > Hi, > > > > Small transition with only one affected package: kernelshark. > > It builds fine and works properly with the trace-cmd/libtracecmd1 > > from experimental. > > Please go ahead This has been uploaded and transition to testing also complete. Thanks for your help. -- Regards Sudip
Bug#1010994: transition: trace-cmd
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition X-Debbugs-Cc: sudipm.mukher...@gmail.com Hi, Small transition with only one affected package: kernelshark. It builds fine and works properly with the trace-cmd/libtracecmd1 from experimental. Ben file: title = "trace-cmd"; is_affected = .depends ~ "libtracecmd0" | .depends ~ "libtracecmd1"; is_good = .depends ~ "libtracecmd1"; is_bad = .depends ~ "libtracecmd0"; Please consider 'trace-cmd' for transition. Thanks in advance. -- Regards Sudip
Bug#1005060: transition: ace
On Mon, Feb 14, 2022 at 9:30 PM Sudip Mukherjee wrote: > > On Sun, Feb 13, 2022 at 7:41 PM Sebastian Ramacher > wrote: > > > > Control: tags -1 confirmed > > > > On 2022-02-13 18:52:08 +, Sudip Mukherjee wrote: > > > Hi, > > > > > > Just to add here, diagnostics FTBFS has been fixed and I have verified > > > that it builds fine with ace 7.0.6+dfsg-1 version in experimental. > > > > Please go ahead > > Thanks. And uploaded to unstable now. And, ace has now migrated to testing. Thanks. -- Regards Sudip
Bug#1005060: transition: ace
On Sun, Feb 13, 2022 at 7:41 PM Sebastian Ramacher wrote: > > Control: tags -1 confirmed > > On 2022-02-13 18:52:08 +, Sudip Mukherjee wrote: > > Hi, > > > > Just to add here, diagnostics FTBFS has been fixed and I have verified > > that it builds fine with ace 7.0.6+dfsg-1 version in experimental. > > Please go ahead Thanks. And uploaded to unstable now. -- Regards Sudip
Bug#1005060: transition: ace
Hi, Just to add here, diagnostics FTBFS has been fixed and I have verified that it builds fine with ace 7.0.6+dfsg-1 version in experimental. -- Regards Sudip
Bug#1005060: transition: ace
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition X-Debbugs-Cc: sudipm.mukher...@gmail.com Hi, Small transition with only two affected packages: diagnostics, ivtools, ivtools builds fine with ace 7.0.6+dfsg-1 version in experimental. diagnostics already has a FTBFS #984031 and I could not verify it. The autogenerated ben tracker looks good. Please consider 'ace' for transition. Thanks in advance. -- Regards Sudip
Bug#992646: transition: ace
On Mon, Aug 23, 2021 at 7:42 PM Sebastian Ramacher wrote: > > > > > Small transition with only two affected packages: diagnostics, ivtools, > > Both of them builds fine with ace 7.0.3+dfsg-1 version in experimental. > > > > The autogenerated ben tracker looks good. Please consider 'ace' for > > transition. > > Thanks in advance. > > Please go ahead Thanks. Uploaded to unstable. -- Regards Sudip
Bug#992646: transition: ace
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition X-Debbugs-Cc: sudipm.mukher...@gmail.com Hi, Small transition with only two affected packages: diagnostics, ivtools, Both of them builds fine with ace 7.0.3+dfsg-1 version in experimental. The autogenerated ben tracker looks good. Please consider 'ace' for transition. Thanks in advance. -- Regards Sudip
Bug#973762: transition: ace
On Thu, Nov 5, 2020 at 7:26 PM Sebastian Ramacher wrote: > > Control: tags -1 + confirmed > Control: forwarded -1 > https://release.debian.org/transitions/html/auto-ace.html > > > > > The autogenerated ben tracker looks good. Please consider 'ace' for > > transition. > > Thanks in advance. > > Please go ahead. Thanks. Uploaded now. And sorry for the delay. Your mail went to spam for some reason. :( -- Regards Sudip
Bug#973762: transition: ace
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition Hi, A transition request for 'ace' please. Small transition with only two affected packages: diagnostics, ivtools. Both of them builds fine with ace 6.5.12+dfsg-1 version in experimental. The autogenerated ben tracker looks good. Please consider 'ace' for transition. Thanks in advance. -- Regards Sudip
Bug#970549: buster-pu: package libcommons-compress-java/1.18-2
Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian@packages.debian.org
Usertags: pu
X-Debbugs-CC: tmanc...@debian.org
Hi,
This is an update for CVE-2019-12402. The change is same as done for
libcommons-compress-java_1.18-3 at:
https://salsa.debian.org/java-team/libcommons-compress-java/-/commit/b0f86e2643f1edde31f42a8245224b618030c6aa
Its a no-dsa so needs to be fixed via stable update.
--
Regards
Sudip
diff -Nru libcommons-compress-java-1.18/debian/changelog
libcommons-compress-java-1.18/debian/changelog
--- libcommons-compress-java-1.18/debian/changelog 2019-03-01
22:27:13.0 +
+++ libcommons-compress-java-1.18/debian/changelog 2020-09-18
12:47:06.0 +0100
@@ -1,3 +1,10 @@
+libcommons-compress-java (1.18-2+deb10u1) buster; urgency=medium
+
+ * Team upload.
+ * Add patch for CVE-2019-12402 (Closes: #939610)
+
+ -- Sudip Mukherjee Fri, 18 Sep 2020 12:47:06
+0100
+
libcommons-compress-java (1.18-2) unstable; urgency=medium
* Team upload.
diff -Nru
libcommons-compress-java-1.18/debian/patches/CVE-2019-12402-939610.patch
libcommons-compress-java-1.18/debian/patches/CVE-2019-12402-939610.patch
--- libcommons-compress-java-1.18/debian/patches/CVE-2019-12402-939610.patch
1970-01-01 01:00:00.0 +0100
+++ libcommons-compress-java-1.18/debian/patches/CVE-2019-12402-939610.patch
2020-09-14 16:52:45.0 +0100
@@ -0,0 +1,127 @@
+Description: addresses CVE-2019-12402 (Debian: #939610)
+From: Stefan Bodewig
+Date: Fri, 23 Aug 2019 14:12:05 + (+0200)
+Subject: unit tests for encoding logic
+X-Git-Tag: 1.19-RC1~6
+X-Git-Url:
https://gitbox.apache.org/repos/asf?p=commons-compress.git;a=commitdiff_plain;h=4ad5d80a6272e007f64a6ac66829ca189a8093b9;hp=16a0c84e84b93cc8c107b7ff3080bd11317ab581
+
+unit tests for encoding logic
+---
+
+diff --git
a/src/main/java/org/apache/commons/compress/archivers/zip/NioZipEncoding.java
b/src/main/java/org/apache/commons/compress/archivers/zip/NioZipEncoding.java
+index 0a7581a..4ce9c20 100644
+---
a/src/main/java/org/apache/commons/compress/archivers/zip/NioZipEncoding.java
b/src/main/java/org/apache/commons/compress/archivers/zip/NioZipEncoding.java
+@@ -112,6 +112,9 @@ class NioZipEncoding implements ZipEncoding,
CharsetAccessor {
+ } else if (res.isOverflow()) {
+ int increment = estimateIncrementalEncodingSize(enc,
cb.remaining());
+ out = ZipEncodingHelper.growBufferBy(out, increment);
++
++} else if (res.isUnderflow() || res.isError()) {
++break;
+ }
+ }
+ // tell the encoder we are done
+diff --git
a/src/test/java/org/apache/commons/compress/archivers/zip/NioZipEncodingTest.java
b/src/test/java/org/apache/commons/compress/archivers/zip/NioZipEncodingTest.java
+new file mode 100644
+index 000..a04730c
+--- /dev/null
b/src/test/java/org/apache/commons/compress/archivers/zip/NioZipEncodingTest.java
+@@ -0,0 +1,97 @@
++/*
++ * Licensed to the Apache Software Foundation (ASF) under one
++ * or more contributor license agreements. See the NOTICE file
++ * distributed with this work for additional information
++ * regarding copyright ownership. The ASF licenses this file
++ * to you under the Apache License, Version 2.0 (the
++ * "License"); you may not use this file except in compliance
++ * with the License. You may obtain a copy of the License at
++ *
++ * http://www.apache.org/licenses/LICENSE-2.0
++ *
++ * Unless required by applicable law or agreed to in writing,
++ * software distributed under the License is distributed on an
++ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
++ * KIND, either express or implied. See the License for the
++ * specific language governing permissions and limitations
++ * under the License.
++ */
++
++package org.apache.commons.compress.archivers.zip;
++
++import java.nio.ByteBuffer;
++import java.nio.charset.StandardCharsets;
++import java.util.Arrays;
++
++import org.junit.Assert;
++import org.junit.Test;
++
++public class NioZipEncodingTest {
++
++private static final String UMLAUTS = "\u00e4\u00f6\u00fc";
++
++@Test
++public void umlautToUTF16BE() {
++NioZipEncoding e = new NioZipEncoding(StandardCharsets.UTF_16BE,
false);
++ByteBuffer bb = e.encode(UMLAUTS);
++final int off = bb.arrayOffset();
++byte[] result = Arrays.copyOfRange(bb.array(), off, off + bb.limit()
- bb.position());
++Assert.assertArrayEquals(UMLAUTS.getBytes(StandardCharsets.UTF_16BE),
result);
++}
++
++@Test
++public void umlautToUTF8() {
++NioZipEncoding e = new NioZipEncoding(StandardCharsets.UTF_8, true);
++ByteBuffer bb = e.encode("\u00e4\u00f6\u00fc");
++final int off = bb.arrayOffset();
++byte[] result = Arrays.copyOfRange(bb.array(), off, off + bb.limit()
- bb.position());
++A
Bug#965355: transition: ace
Just an update: 'diagnostics' now builds fine with new binutils/2.35-1 and the RC bug has been closed. I have also tested it with ace 6.5.10+dfsg-1 version in experimental and it builds properly with that. -- Regards Sudip
Bug#965355: transition: ace
On Mon, Jul 20, 2020 at 09:34:41AM +0100, Sudip Mukherjee wrote: > Package: release.debian.org > Severity: normal > User: release.debian@packages.debian.org > Usertags: transition > > Hi, > > Another transition for 'ace' please. > Small transition with only two affected packages: diagnostics, ivtools. > ivtools builds fine with ace 6.5.10+dfsg-1 version in experimental. > diagnostics already has a FTBFS (#964631) on it and so I could not verify > if there is any impact on it. fwiw, I have used a snapshot of '20200706T204334Z' (the last snapshot where diagnostics built successfully), installed ace/6.5.10+dfsg-1 and verified diagnostics still builds. Not an idea way to verify, but atleast now I know that new version of 'ace' will not create any new FTBFS with diagnostics. -- Regards Sudip
Bug#965355: transition: ace
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition Hi, Another transition for 'ace' please. Small transition with only two affected packages: diagnostics, ivtools. ivtools builds fine with ace 6.5.10+dfsg-1 version in experimental. diagnostics already has a FTBFS (#964631) on it and so I could not verify if there is any impact on it. The autogenerated ben tracker looks good. Please consider 'ace' for transition. Thanks in advance. -- Regards Sudip
Bug#963272: transition: ace
On Sun, Jun 21, 2020 at 10:06:05PM +0200, Sebastian Ramacher wrote: > Control: forwarded -1 > https://release.debian.org/transitions/html/auto-ace.html > Control: tags -1 + confirmed > > On 2020-06-21 19:45:53 +0100, Sudip Mukherjee wrote: > > Package: release.debian.org > > Severity: normal > > User: release.debian@packages.debian.org > > Usertags: transition > > > > Hi, > > > > Small transition with only two affected packages: diagnostics, ivtools, > > Both of them builds fine with ace 6.5.8+dfsg-1 version in experimental. > > Please go ahead with the upload to unstable. Thanks Sebastian. It was uploaded and has now migrated to testing. Not sure if I need to do anything else with it. -- Regards Sudip
Bug#963272: transition: ace
Hi, I am not sure I understood the question. This is my first transition and I might have missed some information with the request. This was a request for transition of 'ace'. 'ace' (https://tracker.debian.org/pkg/ace) generates couple of libraries and there is an ABI bump. The autogenerated tracker is at https://release.debian.org/transitions/html/auto-ace.html. -- Regards Sudip On Sun, Jun 21, 2020 at 8:37 PM R hertoric wrote: > > What transition? > > On Sun, Jun 21, 2020, 1:48 PM Sudip Mukherjee > wrote: >> >> Package: release.debian.org >> Severity: normal >> User: release.debian@packages.debian.org >> Usertags: transition >> >> Hi, >> >> Small transition with only two affected packages: diagnostics, ivtools, >> Both of them builds fine with ace 6.5.8+dfsg-1 version in experimental. >> >> The autogenerated ben tracker looks good. Please consider 'ace' for >> transition. >> Thanks in advance. >> >> -- >> Regards >> Sudip >>
Bug#963272: transition: ace
Package: release.debian.org Severity: normal User: release.debian@packages.debian.org Usertags: transition Hi, Small transition with only two affected packages: diagnostics, ivtools, Both of them builds fine with ace 6.5.8+dfsg-1 version in experimental. The autogenerated ben tracker looks good. Please consider 'ace' for transition. Thanks in advance. -- Regards Sudip
