Your message dated Mon, 06 May 2024 13:04:59 +0000 with message-id <E1s3y1b-008gAB-66@fasolo.debian.org> and subject line Bug#1046268: fixed in shim 15.8-1 has caused the Debian Bug report #1046268, regarding shim: Fails to build source after successful build to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 1046268: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1046268 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: submit@bugs.debian.org
- Subject: shim: Fails to build source after successful build
- From: Lucas Nussbaum <lucas@debian.org>
- Date: Sun, 13 Aug 2023 21:21:27 +0200
- Message-id: <1691954487.176509.1283958.nullmailer@grub.nussbaum.fr>
Source: shim Version: 15.7-1 Severity: minor Tags: trixie sid ftbfs User: lucas@debian.org Usertags: ftbfs-sab-20230813 ftbfs-source-after-build User: debian-qa@lists.debian.org Usertags: qa-doublebuild Hi, This package fails to build a source package after a successful build (dpkg-buildpackage ; dpkg-buildpackage -S). This is probably a clear violation of Debian Policy section 4.9 (clean target), but this is filed as severity:minor for now, because a discussion on debian-devel showed that we might want to revisit the requirement of a working 'clean' target. More information about this class of issues, included common problems and solutions, is available at https://wiki.debian.org/qa.debian.org/FTBFS/SourceAfterBuild Relevant part of the build log: > cd /<<PKGBUILDDIR>> && runuser -u user42 -- dpkg-buildpackage --sanitize-env -us -uc -rfakeroot -S > -------------------------------------------------------------------------------------------------------------- > > dpkg-buildpackage: info: source package shim > dpkg-buildpackage: info: source version 15.7-1 > dpkg-buildpackage: info: source distribution unstable > dpkg-buildpackage: info: source changed by Steve McIntyre <93sam@debian.org> > dpkg-source --before-build . > fakeroot debian/rules clean > dh clean > debian/rules override_dh_auto_clean > make[1]: Entering directory '/<<PKGBUILDDIR>>' > dh_auto_clean -- MAKELEVEL=0 > make -j8 clean MAKELEVEL=0 > make: Entering directory '/<<PKGBUILDDIR>>' > removed 'MokManager.o' > removed 'PasswordCrypt.o' > removed 'cert.o' > removed 'crypt_blowfish.o' > removed 'csv.o' > removed 'errlog.o' > removed 'fallback.o' > removed 'globals.o' > removed 'httpboot.o' > removed 'load-options.o' > removed 'mok.o' > removed 'netboot.o' > removed 'pe.o' > removed 'replacements.o' > removed 'sbat.o' > removed 'sbat_data.o' > removed 'sbat_var.o' > removed 'shim.o' > removed 'tpm.o' > removed 'version.o' > removed 'BOOTX64.CSV' > removed 'fbx64.efi.debug' > removed 'mmx64.efi.debug' > removed 'shimx64.efi.debug' > removed 'fbx64.so' > removed 'mmx64.so' > removed 'shimx64.so' > removed 'fbx64.efi' > removed 'mmx64.efi' > removed 'shimx64.efi' > removed 'version.c' > removed 'buildid' > removed 'post-process-pe' > removed 'Cryptlib/libcryptlib.a' > removed 'Cryptlib/Cipher/CryptAesNull.o' > removed 'Cryptlib/Cipher/CryptArc4Null.o' > removed 'Cryptlib/Cipher/CryptTdesNull.o' > removed 'Cryptlib/Hash/CryptMd4Null.o' > removed 'Cryptlib/Hash/CryptMd5.o' > removed 'Cryptlib/Hash/CryptSha1.o' > removed 'Cryptlib/Hash/CryptSha256.o' > removed 'Cryptlib/Hash/CryptSha512.o' > removed 'Cryptlib/Hmac/CryptHmacMd5Null.o' > removed 'Cryptlib/Hmac/CryptHmacSha1Null.o' > removed 'Cryptlib/Hmac/CryptHmacSha256Null.o' > removed 'Cryptlib/OpenSSL/libopenssl.a' > removed 'Cryptlib/Pem/CryptPemNull.o' > removed 'Cryptlib/Pk/CryptAuthenticode.o' > removed 'Cryptlib/Pk/CryptDhNull.o' > removed 'Cryptlib/Pk/CryptPkcs7SignNull.o' > removed 'Cryptlib/Pk/CryptPkcs7Verify.o' > removed 'Cryptlib/Pk/CryptRsaBasic.o' > removed 'Cryptlib/Pk/CryptRsaExtNull.o' > removed 'Cryptlib/Pk/CryptTs.o' > removed 'Cryptlib/Pk/CryptX509.o' > removed 'Cryptlib/Rand/CryptRand.o' > removed 'Cryptlib/SysCall/BaseMemAllocation.o' > removed 'Cryptlib/SysCall/BaseStrings.o' > removed 'Cryptlib/SysCall/CrtWrapper.o' > removed 'Cryptlib/SysCall/TimerWrapper.o' > make: Entering directory '/<<PKGBUILDDIR>>' > make: warning: jobserver unavailable: using -j1. Add '+' to parent make rule. > make: Leaving directory '/<<PKGBUILDDIR>>' > make: Entering directory '/<<PKGBUILDDIR>>/gnu-efi' > removed 'x86_64/lib/init.o' > removed 'x86_64/lib/sread.o' > removed directory 'x86_64/lib/aarch64' > removed 'x86_64/lib/x86_64/math.o' > removed 'x86_64/lib/x86_64/initplat.o' > removed 'x86_64/lib/x86_64/callwrap.o' > removed 'x86_64/lib/x86_64/efi_stub.o' > removed 'x86_64/lib/x86_64/setjmp.o' > removed directory 'x86_64/lib/x86_64' > removed 'x86_64/lib/runtime/efirtlib.o' > removed 'x86_64/lib/runtime/rtdata.o' > removed 'x86_64/lib/runtime/rtstr.o' > removed 'x86_64/lib/runtime/vm.o' > removed 'x86_64/lib/runtime/rtlock.o' > removed directory 'x86_64/lib/runtime' > removed 'x86_64/lib/dpath.o' > removed directory 'x86_64/lib/ia64' > removed 'x86_64/lib/pause.o' > removed 'x86_64/lib/error.o' > removed 'x86_64/lib/print.o' > removed 'x86_64/lib/exit.o' > removed 'x86_64/lib/str.o' > removed 'x86_64/lib/misc.o' > removed 'x86_64/lib/hw.o' > removed directory 'x86_64/lib/mips64el' > removed 'x86_64/lib/libefi.a' > removed 'x86_64/lib/boxdraw.o' > removed 'x86_64/lib/console.o' > removed directory 'x86_64/lib/arm' > removed 'x86_64/lib/debug.o' > removed 'x86_64/lib/guid.o' > removed 'x86_64/lib/data.o' > removed 'x86_64/lib/hand.o' > removed 'x86_64/lib/lock.o' > removed 'x86_64/lib/crc.o' > removed 'x86_64/lib/event.o' > removed 'x86_64/lib/smbios.o' > removed 'x86_64/lib/cmdline.o' > removed directory 'x86_64/lib/ia32' > removed directory 'x86_64/lib' > removed directory 'x86_64/inc' > removed 'x86_64/gnuefi/reloc_x86_64.o' > removed 'x86_64/gnuefi/libgnuefi.a' > removed 'x86_64/gnuefi/crt0-efi-x86_64.o' > removed directory 'x86_64/gnuefi' > removed directory 'x86_64/' > make: Leaving directory '/<<PKGBUILDDIR>>/gnu-efi' > make: Entering directory '/<<PKGBUILDDIR>>/Cryptlib/OpenSSL' > rm -f libopenssl.a crypto/cryptlib.o crypto/mem.o crypto/mem_clr.o crypto/mem_dbg.o crypto/cversion.o crypto/ex_data.o crypto/cpt_err.o crypto/ebcdic.o crypto/uid.o crypto/o_time.o crypto/o_str.o crypto/o_dir.o crypto/o_fips.o crypto/o_init.o crypto/fips_ers.o crypto/md5/md5_dgst.o crypto/md5/md5_one.o crypto/sha/sha_dgst.o crypto/sha/sha1dgst.o crypto/sha/sha_one.o crypto/sha/sha1_one.o crypto/sha/sha256.o crypto/sha/sha512.o crypto/hmac/hmac.o crypto/hmac/hm_ameth.o crypto/hmac/hm_pmeth.o crypto/rc4/rc4_enc.o crypto/rc4/rc4_skey.o crypto/rc4/rc4_utl.o crypto/aes/aes_misc.o crypto/aes/aes_ecb.o crypto/aes/aes_cfb.o crypto/aes/aes_ofb.o crypto/aes/aes_ctr.o crypto/aes/aes_ige.o crypto/aes/aes_wrap.o crypto/aes/aes_core.o crypto/aes/aes_cbc.o crypto/modes/cbc128.o crypto/modes/ctr128.o crypto/modes/cts128.o > crypto/modes/cfb128.o crypto/modes/ofb128.o crypto/modes/gcm128.o crypto/modes/ccm128.o crypto/modes/xts128.o crypto/modes/wrap128.o crypto/bn/bn_add.o crypto/bn/bn_div.o crypto/bn/bn_exp.o crypto/bn/bn_lib.o crypto/bn/bn_ctx.o crypto/bn/bn_mul.o crypto/bn/bn_mod.o crypto/bn/bn_print.o crypto/bn/bn_rand.o crypto/bn/bn_shift.o crypto/bn/bn_word.o crypto/bn/bn_blind.o crypto/bn/bn_kron.o crypto/bn/bn_sqrt.o crypto/bn/bn_gcd.o crypto/bn/bn_prime.o crypto/bn/bn_err.o crypto/bn/bn_sqr.o crypto/bn/bn_asm.o crypto/bn/bn_recp.o crypto/bn/bn_mont.o crypto/bn/bn_mpi.o crypto/bn/bn_exp2.o crypto/bn/bn_gf2m.o crypto/bn/bn_nist.o crypto/bn/bn_depr.o crypto/bn/bn_x931p.o crypto/bn/bn_const.o crypto/rsa/rsa_eay.o crypto/rsa/rsa_gen.o crypto/rsa/rsa_lib.o crypto/rsa/rsa_sign.o crypto/rsa/rsa_saos.o crypto/rsa/rsa_err.o > crypto/rsa/rsa_pk1.o crypto/rsa/rsa_ssl.o crypto/rsa/rsa_none.o crypto/rsa/rsa_oaep.o crypto/rsa/rsa_chk.o crypto/rsa/rsa_null.o crypto/rsa/rsa_pss.o crypto/rsa/rsa_x931.o crypto/rsa/rsa_asn1.o crypto/rsa/rsa_depr.o crypto/rsa/rsa_ameth.o crypto/rsa/rsa_prn.o crypto/rsa/rsa_pmeth.o crypto/rsa/rsa_crpt.o crypto/dso/dso_dl.o crypto/dso/dso_dlfcn.o crypto/dso/dso_err.o crypto/dso/dso_lib.o crypto/dso/dso_null.o crypto/dso/dso_openssl.o crypto/dso/dso_win32.o crypto/dso/dso_vms.o crypto/dso/dso_beos.o crypto/dh/dh_asn1.o crypto/dh/dh_gen.o crypto/dh/dh_key.o crypto/dh/dh_lib.o crypto/dh/dh_check.o crypto/dh/dh_err.o crypto/dh/dh_depr.o crypto/dh/dh_ameth.o crypto/dh/dh_pmeth.o crypto/dh/dh_prn.o crypto/dh/dh_rfc5114.o crypto/buffer/buffer.o crypto/buffer/buf_str.o crypto/buffer/buf_err.o crypto/bio/bio_lib.o > crypto/bio/bio_cb.o crypto/bio/bio_err.o crypto/bio/bss_mem.o crypto/bio/bss_null.o crypto/bio/bss_fd.o crypto/bio/bss_file.o crypto/bio/bss_sock.o crypto/bio/bss_conn.o crypto/bio/bf_null.o crypto/bio/bf_buff.o crypto/bio/b_dump.o crypto/bio/b_print.o crypto/bio/b_sock.o crypto/bio/bss_acpt.o crypto/bio/bf_nbio.o crypto/bio/bss_log.o crypto/bio/bss_bio.o crypto/bio/bss_dgram.o crypto/stack/stack.o crypto/lhash/lhash.o crypto/lhash/lh_stats.o crypto/rand/md_rand.o crypto/rand/randfile.o crypto/rand/rand_lib.o crypto/rand/rand_err.o crypto/rand/rand_unix.o crypto/err/err.o crypto/err/err_all.o crypto/err/err_prn.o crypto/objects/o_names.o crypto/objects/obj_dat.o crypto/objects/obj_lib.o crypto/objects/obj_err.o crypto/objects/obj_xref.o crypto/evp/encode.o crypto/evp/digest.o crypto/evp/evp_enc.o > crypto/evp/evp_key.o crypto/evp/evp_acnf.o crypto/evp/evp_cnf.o crypto/evp/e_des.o crypto/evp/e_bf.o crypto/evp/e_idea.o crypto/evp/e_des3.o crypto/evp/e_camellia.o crypto/evp/e_rc4.o crypto/evp/e_aes.o crypto/evp/names.o crypto/evp/e_seed.o crypto/evp/e_xcbc_d.o crypto/evp/e_rc2.o crypto/evp/e_cast.o crypto/evp/e_rc5.o crypto/evp/m_null.o crypto/evp/m_md2.o crypto/evp/m_md4.o crypto/evp/m_md5.o crypto/evp/m_sha.o crypto/evp/m_sha1.o crypto/evp/m_wp.o crypto/evp/m_dss.o crypto/evp/m_dss1.o crypto/evp/m_mdc2.o crypto/evp/m_ripemd.o crypto/evp/m_ecdsa.o crypto/evp/p_open.o crypto/evp/p_seal.o crypto/evp/p_sign.o crypto/evp/p_verify.o crypto/evp/p_lib.o crypto/evp/p_enc.o crypto/evp/p_dec.o crypto/evp/bio_md.o crypto/evp/bio_b64.o crypto/evp/bio_enc.o crypto/evp/evp_err.o crypto/evp/e_null.o > crypto/evp/c_all.o crypto/evp/c_allc.o crypto/evp/c_alld.o crypto/evp/evp_lib.o crypto/evp/bio_ok.o crypto/evp/evp_pkey.o crypto/evp/evp_pbe.o crypto/evp/p5_crpt.o crypto/evp/p5_crpt2.o crypto/evp/e_old.o crypto/evp/pmeth_lib.o crypto/evp/pmeth_fn.o crypto/evp/pmeth_gn.o crypto/evp/m_sigver.o crypto/evp/e_aes_cbc_hmac_sha1.o crypto/evp/e_aes_cbc_hmac_sha256.o crypto/evp/e_rc4_hmac_md5.o crypto/asn1/a_object.o crypto/asn1/a_bitstr.o crypto/asn1/a_utctm.o crypto/asn1/a_gentm.o crypto/asn1/a_time.o crypto/asn1/a_int.o crypto/asn1/a_octet.o crypto/asn1/a_print.o crypto/asn1/a_type.o crypto/asn1/a_set.o crypto/asn1/a_dup.o crypto/asn1/a_d2i_fp.o crypto/asn1/a_i2d_fp.o crypto/asn1/a_enum.o crypto/asn1/a_utf8.o crypto/asn1/a_sign.o crypto/asn1/a_digest.o crypto/asn1/a_verify.o crypto/asn1/a_mbstr.o > crypto/asn1/a_strex.o crypto/asn1/x_algor.o crypto/asn1/x_val.o crypto/asn1/x_pubkey.o crypto/asn1/x_sig.o crypto/asn1/x_req.o crypto/asn1/x_attrib.o crypto/asn1/x_bignum.o crypto/asn1/x_long.o crypto/asn1/x_name.o crypto/asn1/x_x509.o crypto/asn1/x_x509a.o crypto/asn1/x_crl.o crypto/asn1/x_info.o crypto/asn1/x_spki.o crypto/asn1/nsseq.o crypto/asn1/x_nx509.o crypto/asn1/d2i_pu.o crypto/asn1/d2i_pr.o crypto/asn1/i2d_pu.o crypto/asn1/i2d_pr.o crypto/asn1/t_req.o crypto/asn1/t_x509.o crypto/asn1/t_x509a.o crypto/asn1/t_crl.o crypto/asn1/t_pkey.o crypto/asn1/t_spki.o crypto/asn1/t_bitst.o crypto/asn1/tasn_new.o crypto/asn1/tasn_fre.o crypto/asn1/tasn_enc.o crypto/asn1/tasn_dec.o crypto/asn1/tasn_utl.o crypto/asn1/tasn_typ.o crypto/asn1/tasn_prn.o crypto/asn1/ameth_lib.o crypto/asn1/f_int.o crypto/asn1/f_string.o > crypto/asn1/n_pkey.o crypto/asn1/f_enum.o crypto/asn1/x_pkey.o crypto/asn1/a_bool.o crypto/asn1/x_exten.o crypto/asn1/bio_asn1.o crypto/asn1/bio_ndef.o crypto/asn1/asn_mime.o crypto/asn1/asn1_gen.o crypto/asn1/asn1_par.o crypto/asn1/asn1_lib.o crypto/asn1/asn1_err.o crypto/asn1/a_bytes.o crypto/asn1/a_strnid.o crypto/asn1/evp_asn1.o crypto/asn1/asn_pack.o crypto/asn1/p5_pbe.o crypto/asn1/p5_pbev2.o crypto/asn1/p8_pkey.o crypto/asn1/asn_moid.o crypto/pem/pem_sign.o crypto/pem/pem_seal.o crypto/pem/pem_info.o crypto/pem/pem_lib.o crypto/pem/pem_all.o crypto/pem/pem_err.o crypto/pem/pem_x509.o crypto/pem/pem_xaux.o crypto/pem/pem_oth.o crypto/pem/pem_pk8.o crypto/pem/pem_pkey.o crypto/pem/pvkfmt.o crypto/x509/x509_def.o crypto/x509/x509_d2.o crypto/x509/x509_r2x.o crypto/x509/x509_cmp.o crypto/x509/x509_obj.o > crypto/x509/x509_req.o crypto/x509/x509spki.o crypto/x509/x509_vfy.o crypto/x509/x509_set.o crypto/x509/x509cset.o crypto/x509/x509rset.o crypto/x509/x509_err.o crypto/x509/x509name.o crypto/x509/x509_v3.o crypto/x509/x509_ext.o crypto/x509/x509_att.o crypto/x509/x509type.o crypto/x509/x509_lu.o crypto/x509/x_all.o crypto/x509/x509_txt.o crypto/x509/x509_trs.o crypto/x509/x509_vpm.o crypto/x509v3/v3_bcons.o crypto/x509v3/v3_bitst.o crypto/x509v3/v3_conf.o crypto/x509v3/v3_extku.o crypto/x509v3/v3_ia5.o crypto/x509v3/v3_lib.o crypto/x509v3/v3_prn.o crypto/x509v3/v3_utl.o crypto/x509v3/v3err.o crypto/x509v3/v3_genn.o crypto/x509v3/v3_alt.o crypto/x509v3/v3_skey.o crypto/x509v3/v3_akey.o crypto/x509v3/v3_pku.o crypto/x509v3/v3_int.o crypto/x509v3/v3_enum.o crypto/x509v3/v3_sxnet.o crypto/x509v3/v3_cpols.o > crypto/x509v3/v3_crld.o crypto/x509v3/v3_purp.o crypto/x509v3/v3_info.o crypto/x509v3/v3_ocsp.o crypto/x509v3/v3_akeya.o crypto/x509v3/v3_pmaps.o crypto/x509v3/v3_pcons.o crypto/x509v3/v3_ncons.o crypto/x509v3/v3_pcia.o crypto/x509v3/v3_pci.o crypto/x509v3/pcy_cache.o crypto/x509v3/pcy_node.o crypto/x509v3/pcy_data.o crypto/x509v3/pcy_map.o crypto/x509v3/pcy_tree.o crypto/x509v3/pcy_lib.o crypto/x509v3/v3_asid.o crypto/x509v3/v3_addr.o crypto/conf/conf_err.o crypto/conf/conf_lib.o crypto/conf/conf_api.o crypto/conf/conf_def.o crypto/conf/conf_mod.o crypto/conf/conf_mall.o crypto/conf/conf_sap.o crypto/txt_db/txt_db.o crypto/pkcs7/pk7_asn1.o crypto/pkcs7/pk7_lib.o crypto/pkcs7/pkcs7err.o crypto/pkcs7/pk7_doit.o crypto/pkcs7/pk7_smime.o crypto/pkcs7/pk7_attr.o crypto/pkcs7/pk7_mime.o crypto/pkcs7/bio_pk7.o > crypto/pkcs12/p12_add.o crypto/pkcs12/p12_asn.o crypto/pkcs12/p12_attr.o crypto/pkcs12/p12_crpt.o crypto/pkcs12/p12_crt.o crypto/pkcs12/p12_decr.o crypto/pkcs12/p12_init.o crypto/pkcs12/p12_key.o crypto/pkcs12/p12_kiss.o crypto/pkcs12/p12_mutl.o crypto/pkcs12/p12_utl.o crypto/pkcs12/p12_npas.o crypto/pkcs12/pk12err.o crypto/pkcs12/p12_p8d.o crypto/pkcs12/p12_p8e.o crypto/comp/comp_lib.o crypto/comp/comp_err.o crypto/comp/c_rle.o crypto/comp/c_zlib.o crypto/ocsp/ocsp_asn.o crypto/ocsp/ocsp_ext.o crypto/ocsp/ocsp_ht.o crypto/ocsp/ocsp_lib.o crypto/ocsp/ocsp_cl.o crypto/ocsp/ocsp_srv.o crypto/ocsp/ocsp_prn.o crypto/ocsp/ocsp_vfy.o crypto/ocsp/ocsp_err.o crypto/cmac/cmac.o crypto/cmac/cm_ameth.o crypto/cmac/cm_pmeth.o > make: Leaving directory '/<<PKGBUILDDIR>>/Cryptlib/OpenSSL' > make: Entering directory '/<<PKGBUILDDIR>>/Cryptlib' > rm -f libcryptlib.a Hash/CryptMd4Null.o Hash/CryptMd5.o Hash/CryptSha1.o Hash/CryptSha256.o Hash/CryptSha512.o Hmac/CryptHmacMd5Null.o Hmac/CryptHmacSha1Null.o Hmac/CryptHmacSha256Null.o Cipher/CryptAesNull.o Cipher/CryptTdesNull.o Cipher/CryptArc4Null.o Rand/CryptRand.o Pk/CryptRsaBasic.o Pk/CryptRsaExtNull.o Pk/CryptPkcs7SignNull.o Pk/CryptPkcs7Verify.o Pk/CryptDhNull.o Pk/CryptTs.o Pk/CryptX509.o Pk/CryptAuthenticode.o Pem/CryptPemNull.o SysCall/CrtWrapper.o SysCall/TimerWrapper.o SysCall/BaseMemAllocation.o SysCall/BaseStrings.o > make: Leaving directory '/<<PKGBUILDDIR>>/Cryptlib' > make: Entering directory '/<<PKGBUILDDIR>>/lib' > rm -f lib.a > rm -f configtable.o console.o execute.o guid.o print_crypto.o security_policy.o shell.o simple_file.o string.o variables.o > make: Leaving directory '/<<PKGBUILDDIR>>/lib' > make: Leaving directory '/<<PKGBUILDDIR>>' > rm -f dbx.esl data/sbat.debian.csv sbat.*.csv BOOT*.CSV test-csv test-sbat test-str > make[1]: Leaving directory '/<<PKGBUILDDIR>>' > dh_clean > dpkg-source -b . > dpkg-source: info: using source format '3.0 (quilt)' > dpkg-source: info: building shim using existing ./shim_15.7.orig.tar.bz2 > dpkg-source: info: using patch list from debian/patches/series > dpkg-source: warning: ignoring deletion of file gnu-efi/lib/Makefile.orig, use --include-removal to override > dpkg-source: error: cannot represent change to test-load-options: binary file contents changed > dpkg-source: error: add test-load-options in debian/source/include-binaries if you want to store the modified binary in the debian tarball > dpkg-source: warning: executable mode 0755 of 'test-load-options' will not be represented in diff > dpkg-source: error: cannot represent change to test-mock-variables: binary file contents changed > dpkg-source: error: add test-mock-variables in debian/source/include-binaries if you want to store the modified binary in the debian tarball > dpkg-source: warning: executable mode 0755 of 'test-mock-variables' will not be represented in diff > dpkg-source: error: cannot represent change to test-mok-mirror: binary file contents changed > dpkg-source: error: add test-mok-mirror in debian/source/include-binaries if you want to store the modified binary in the debian tarball > dpkg-source: warning: executable mode 0755 of 'test-mok-mirror' will not be represented in diff > dpkg-source: error: unrepresentable changes to source > dpkg-buildpackage: error: dpkg-source -b . subprocess returned exit status 1 > > E: Command 'cd /<<PKGBUILDDIR>> && runuser -u user42 -- dpkg-buildpackage --sanitize-env -us -uc -rfakeroot -S' failed to run. The full build log is available from: http://qa-logs.debian.net/2023/08/13/shim_15.7-1_unstable.log If you reassign this bug to another package, please mark it as 'affects'-ing this package. See https://www.debian.org/Bugs/server-control#affects If you fail to reproduce this, please provide a build log and diff it with mine so that we can identify if something relevant changed in the meantime.
--- End Message ---
--- Begin Message ---
- To: 1046268-close@bugs.debian.org
- Subject: Bug#1046268: fixed in shim 15.8-1
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Mon, 06 May 2024 13:04:59 +0000
- Message-id: <E1s3y1b-008gAB-66@fasolo.debian.org>
- Reply-to: Steve McIntyre <93sam@debian.org>
Source: shim Source-Version: 15.8-1 Done: Steve McIntyre <93sam@debian.org> We believe that the bug you reported is fixed in the latest version of shim, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1046268@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Steve McIntyre <93sam@debian.org> (supplier of updated shim package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 04 May 2024 23:29:52 +0100 Source: shim Architecture: source Version: 15.8-1 Distribution: unstable Urgency: medium Maintainer: Debian EFI team <debian-efi@lists.debian.org> Changed-By: Steve McIntyre <93sam@debian.org> Closes: 936009 1043485 1046268 1054210 1057606 1061519 1064220 1069054 Changes: shim (15.8-1) unstable; urgency=medium . [ Steve McIntyre ] * Cope with changes in pesign packaging. Closes: #1057606 * New upstream release fixing more bugs. Closes: #1061519, #1064220 + CVE-2023-40546 mok: fix LogError() invocation (Closes: #1054210) + CVE-2023-40547 - avoid incorrectly trusting HTTP headers + CVE-2023-40548 Fix integer overflow on SBAT section size on 32-bit system + CVE-2023-40549 Authenticode: verify that the signature header is in bounds. + CVE-2023-40550 pe: Fix an out-of-bound read in verify_buffer_sbat() + CVE-2023-40551: pe-relocate: Fix bounds check for MZ binaries * Remove all our previous patches, no longer needed: + Make-sbat_var.S-parse-right-with-buggy-gcc-binutils.patch (now upstream) + Enable-NX.patch (we don't want NX just yet until the whole boot stack is NX-capable) + block-grub-sbat3-debian.patch (not needed now upstream grub SBAT is 4) * Cherry-pick 2 new patches from upstream for grub revocations: + 0001-sbat-Add-grub.peimage-2-to-latest-CVE-2024-2312.patch + 0002-sbat-Also-bump-latest-for-grub-4-and-to-todays-date.patch * NOTE: Stop building for i386 + Debian kernels are no longer signed for i386, it's time to stop supporting i386 SB. * Log if the build is nx-compatible or not * Force shim to use the latest revocations by default to block some older grub / peimage issues. This is: "shim,4\ngrub,4\ngrub.peimage,2\n" * Install a copy of the Debian CA certificate into /usr/share/shim. Closes: #1069054 * Clean up better after build. Closes: #1046268 . [ Bastien Roucariès ] * Port autopkgtest from ubuntu * Import MR-12: "shim-unsigned:amd64 cannot be installed alongside shim-unsigned:i386", thanks to adrian15 adrian15 (Closes: #936009). * Fix debian/watch and check signature (Closes: #1043485) Checksums-Sha1: 8a2d725f65087e1a6c7f012c4c70666666fef4f3 2490 shim_15.8-1.dsc cdec924ca437a4509dcb178396996ddf92c11183 2315201 shim_15.8.orig.tar.bz2 5b62d9edbaad7ece7546868dfd6e6e5be42de236 59308 shim_15.8-1.debian.tar.xz 062041702d5cdb3828fb0e3bdecf6515fa1a7062 7121 shim_15.8-1_source.buildinfo Checksums-Sha256: 65ca82c131a66362a0bb222497eebbca5d64ba9efd44738d7889eb0500b5e4fa 2490 shim_15.8-1.dsc a79f0a9b89f3681ab384865b1a46ab3f79d88b11b4ca59aa040ab03fffae80a9 2315201 shim_15.8.orig.tar.bz2 fad222c56f31a20b65753f16c66e270082295a2cccf2909686a980f19be665de 59308 shim_15.8-1.debian.tar.xz 647867dea6c5dc9d7d5d59fa70629f322379593675a7ccc3667d2dc2f1024b03 7121 shim_15.8-1_source.buildinfo Files: 96fd60cb002486370c4176382044041e 2490 admin optional shim_15.8-1.dsc a9452c2e6fafe4e1b87ab2e1cac9ec00 2315201 admin optional shim_15.8.orig.tar.bz2 4689fb8317f8a9a5ca53107743d67a27 59308 admin optional shim_15.8-1.debian.tar.xz 66bbd0b3ac2a98555d32f3f47ca1fb7e 7121 admin optional shim_15.8-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCAAvFiEEzrtSMB1hfpEDkP4WWHl5VzRCaE4FAmY40QURHDkzc2FtQGRl Ymlhbi5vcmcACgkQWHl5VzRCaE6F5Q/9F2uB+m9hTJDk2PIn5LAn8b39vBzYkoju lirfsA/FJzygJR+qJQG70nrPe+TutO8BFPdo+yhfc2G9RdLd3CXsslkl6QdNpTau LUc4FRMzHsis3Wn/7BO8WZPzPBf+2N/NUucIe02h+6gabpiXqpwt5EZf6WTGUC8D LOinr/l3iDDoymjogTBvp0PMEph0luqE95deOeXmJ6CbLQ2Ozzi40g47E4uUQ4ao jGD6yPk3PulHdaW8oXbab14e94akfrXUe0P26Y8oUUji+6mRtfckNWjhY78udMwD Cxy8gTULqPdDfjjGleVDppD+C2+pGTNs3tCPr1PdM9XOjlm0bGHzDNSkeOc39eA9 CZvOvXmQ/V9qG8puj5U1Bh+S5dPjP//gKpKnnowAc/fgMaWjP+Li/hW7TTvnilxi vMhQ6XizySj3DDEkCvGK1uH2Z75ryTsAbT3WmL9KubxKrWDGImMJKYs7soePGwPL VDFaPqEBKhAwlXO3nBDJWqSOP/QoQmAxZ6x0P7z4nLcnKK2KS9eWuFt9cBawuPYE XwDIcAFoLXyFuZGlQFinBElvdIYbreS7LGm9zKkBQDWpmu01HcT0WAlhd6fNVMOk CnT5Pg1KTUtSmyauYoc4CmcBmipH2fKCdJIFVtAaeU8qVcIV77RS46y2XnhGVst8 aJ4tOJYtaAk= =+QSm -----END PGP SIGNATURE-----Attachment: pgpZYJTlxvzR9.pgp
Description: PGP signature
--- End Message ---