Package: release.debian.org
Severity: normal
Tags: trixie
X-Debbugs-Cc: [email protected]
Control: affects -1 + src:gpsd
User: [email protected]
Usertags: pu
[ Reason ]
CVE-2025-67268
CVE-2025-67269
[ Impact ]
CVE are not fixed
[ Tests ]
Automated during build
[ Risks ]
Low
[ Checklist ]
X ] *all* changes are documented in the d/changelog
X ] I reviewed all changes and I approve them
X ] attach debdiff against the package in (old)stable
X ] the issue is verified as fixed in unstable
[ Changes ]
CVE patches and salsaCI fix including a patch removing a systematic rebuild of
all rdeps (superseded and considered bad for salsa)
[ Other info ]
diff -Nru gpsd-3.25/debian/.gitlab-ci.yml gpsd-3.25/debian/.gitlab-ci.yml
--- gpsd-3.25/debian/.gitlab-ci.yml 2024-02-11 12:51:29.0 +
+++ gpsd-3.25/debian/.gitlab-ci.yml 2026-01-17 16:51:45.0 +
@@ -1,10 +1,9 @@
include:
- https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/salsa-ci.yml
- https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/pipeline-jobs.yml
- -
https://salsa.debian.org/bbonev/pkg-gpsd/-/raw/master/debian/.salsa-ci/rdeps-gpsd.yaml
variables:
- RELEASE: 'unstable'
+ RELEASE: 'trixie'
SALSA_CI_DISABLE_APTLY: 0
SALSA_CI_DISABLE_AUTOPKGTEST: 0
SALSA_CI_DISABLE_BLHC: 0
diff -Nru gpsd-3.25/debian/.salsa-ci/rdeps-gpsd.yaml
gpsd-3.25/debian/.salsa-ci/rdeps-gpsd.yaml
--- gpsd-3.25/debian/.salsa-ci/rdeps-gpsd.yaml 2023-06-28 21:25:56.0
+
+++ gpsd-3.25/debian/.salsa-ci/rdeps-gpsd.yaml 1970-01-01 00:00:00.0
+
@@ -1,159 +0,0 @@
-.rdep-build-before-script: &rdep-build-before-script |
- # Reported in https://salsa.debian.org/salsa-ci-team/pipeline/issues/104,
- # GitLab can only expand variables once. So at the beginning CCACHE_WORK_DIR
- # was assigned to `${WORKING_DIR}/.ccache`, and it will be expanded as
- # `$CI_PROJECT_DIR/debian/output/.ccache`, so it creates a folder named
- # "\$CI_PROJECT_DIR", which is then saved as build cache. To allow smooth
- # transition, that wrongly named folder has to be removed:
- rm -rf '$CI_PROJECT_DIR'
-
- # salsa-ci-team/pipeline#107
- rm -rf ${CI_PROJECT_DIR}/debian/output/.ccache
-
- mkdir -p ${WORKING_DIR} ${CCACHE_WORK_DIR}
-
- # https://salsa.debian.org/salsa-ci-team/pipeline/-/merge_requests/230
- rm -rf ${CCACHE_TMP_DIR}
-
- mv ${CCACHE_WORK_DIR} ${CCACHE_TMP_DIR}
- add_extra_repository.sh -v -e "${SALSA_CI_EXTRA_REPOSITORY}" -k
"${SALSA_CI_EXTRA_REPOSITORY_KEY}"
-
-
-.rdep-build-script: &rdep-build-script |
- export CCACHE_DIR=${CCACHE_TMP_DIR}
- # Add deb-src entries
- sed -i 's/^Types:.*/Types: deb deb-src/'
/etc/apt/sources.list.d/debian.sources
- apt-get update && eatmydata apt-get install --no-install-recommends -y \
- aptitude \
- devscripts \
- ccache \
- equivs \
- build-essential
- apt -y build-dep ${REVERSE_DEP}
- # install built packages
- dpkg -i ${WORKING_DIR}/*.deb || apt -y -f install
- # download source
- cd ${WORKING_DIR}
- # Generate ccache links
- dpkg-reconfigure ccache
- PATH="/usr/lib/ccache/:${PATH}"
- # Reset ccache stats
- ccache -z
- # Create salsaci user and fix permissions
- useradd salsaci
- chown -R salsaci. ${WORKING_DIR} ${CCACHE_DIR}
- # Define buildlog filename
- BUILD_LOGFILE="${WORKING_DIR}/${REVERSE_DEP}.build"
- # Build package as user salsaci
- su salsaci -c "eatmydata apt source -b ${REVERSE_DEP}" |&
OUTPUT_FILENAME=${BUILD_LOGFILE} filter-output
- # Restore PWD to ${WORKING_DIR}
- cd ${WORKING_DIR}
- rm -rf ${WORKING_DIR}/${REVERSE_DEP}*
- # Print ccache stats on job log
- ccache -s
-
-.rdep-build-definition: &rdep-build-definition
- stage: test
- image: $SALSA_CI_IMAGES_BASE
- cache:
-key: "${REVERSE_DEP}-build"
-paths:
- - .ccache
- except:
-variables:
- - $SALSA_CI_ENABLE_REVERSE_DEPENDENCY_BUILD !~ /^(1|yes|true)$/
- - $CI_COMMIT_TAG != null && $SALSA_CI_ENABLE_PIPELINE_ON_TAGS !~
/^(1|yes|true)$/
- - $CI_MERGE_REQUEST_ID != null
- variables:
-CCACHE_TMP_DIR: ${CI_PROJECT_DIR}/../.ccache
-CCACHE_WORK_DIR: ${CI_PROJECT_DIR}/.ccache
- script:
-- *rdep-build-before-script
-- *rdep-build-script
-- mv ${CCACHE_TMP_DIR} ${CCACHE_WORK_DIR}
- needs:
-- job: build
- artifacts: true
-
-
-
-
-
-
-build-rdep-alfred:
- variables:
-REVERSE_DEP: alfred
- extends: .rdep-build-definition
-
-
-build-rdep-collectd:
- variables:
-REVERSE_DEP: collectd
- extends: .rdep-build-definition
-
-
-build-rdep-direwolf:
- variables:
-REVERSE_DEP: direwolf
- extends: .rdep-build-definition
-
-
-build-rdep-foxtrotgps:
- variables:
-REVERSE_DEP: foxtrotgps
- extends: .rdep-build-definition
-
-
-build-rdep-indi-gpsd:
- variables:
-REVERSE_DEP: indi-gpsd
- extends: .rdep-build-definition
-
-
-build-rdep-marble:
- variables:
-REVERSE_DEP: marble
- extends: .rdep-build-definition
-
