[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1110095: unblock: cross-toolchain-base-ports/74



Hi Aurelien,

seems like you forgot the debdiff. I have attached it.

Cheers Jochen

* Aurelien Jarno <aurel32@debian.org> [2025-07-29 19:58]:
Package: release.debian.org
Severity: normal
X-Debbugs-Cc: cross-toolchain-base-ports@packages.debian.org
Control: affects -1 + src:cross-toolchain-base-ports
User: release.debian.org@packages.debian.org
Usertags: unblock

Please unblock package cross-toolchain-base-ports

[ Reason ]
This is just a rebuild of cross-toolchain-base-ports against the latest
linux and glibc version. This is needed because
cross-toolchain-base-ports only builds arch:all packages and thus can't
be binNMUed. This should reduce the number of Extra-Source-Only packages
in Trixie.

In addition, this fixes three security issues on the libc versions
shipped by this package: CVE-2025-5702, CVE-2025-5745 and CVE-2025-8058.

[ Impact ]
Users using cross-toolchain-base-ports to build foreign static binaries
will get binaries with security issue if this unblock is not granted.

[ Tests ]
None besides the autopkgtest one.

[ Risks ]
The risk is quite low, it's just a rebuild of source packages already in
Trixie, but for foreign architectures.

[ Checklist ]
 [x] all changes are documented in the d/changelog
 [x] I reviewed all changes and I approve them
 [x] attach debdiff against the package in testing

[ Other info ]
I am not sure why the debian/no-packages file got added (it's not in the
git), but anyway it has no impact on the resulting packages.

unblock cross-toolchain-base-ports/74
diff -Nru cross-toolchain-base-ports-73/debian/changelog cross-toolchain-base-ports-74/debian/changelog
--- cross-toolchain-base-ports-73/debian/changelog	2025-05-19 20:02:18.000000000 +0200
+++ cross-toolchain-base-ports-74/debian/changelog	2025-07-29 10:53:48.000000000 +0200
@@ -1,3 +1,10 @@
+cross-toolchain-base-ports (74) unstable; urgency=medium
+
+  * Build using glibc 2.41-11.
+  * Build using linux 6.12.38.
+
+ -- Matthias Klose <doko@debian.org>  Tue, 29 Jul 2025 10:53:48 +0200
+
 cross-toolchain-base-ports (73) unstable; urgency=medium
 
   * Fix typo for the dpkg-query fix in last upload.
diff -Nru cross-toolchain-base-ports-73/debian/control cross-toolchain-base-ports-74/debian/control
--- cross-toolchain-base-ports-73/debian/control	2025-05-18 12:48:58.000000000 +0200
+++ cross-toolchain-base-ports-74/debian/control	2025-07-29 10:53:48.000000000 +0200
@@ -9,9 +9,9 @@
 Build-Depends: binutils-multiarch,
   dpkg (>= 1.21.17), rdfind, symlinks, lsb-release,
   binutils-source (>= 2.44-3~),
-  glibc-source (>= 2.41-8~),
+  glibc-source (>= 2.41-11~),
   gcc-14-source (>= 14.2.0-19~), g++-14 (>= 14.2.0-19~),
-  linux-source-6.12 (>= 6.12.27-1~), linux-libc-dev (>= 6.12.27-1~),
+  linux-source-6.12 (>= 6.12.38-1~), linux-libc-dev (>= 6.12.38-1~),
   autoconf (>= 2.69), autoconf2.69,
   automake, bison (>= 1:2.3), chrpath, debhelper-compat (= 13),
   dpkg-dev (>= 1.15.3.1), fakeroot, file, flex,
diff -Nru cross-toolchain-base-ports-73/debian/no-packages cross-toolchain-base-ports-74/debian/no-packages
--- cross-toolchain-base-ports-73/debian/no-packages	1970-01-01 01:00:00.000000000 +0100
+++ cross-toolchain-base-ports-74/debian/no-packages	2025-07-29 10:53:48.000000000 +0200
@@ -0,0 +1 @@
+foobar
diff -Nru cross-toolchain-base-ports-73/debian/rules cross-toolchain-base-ports-74/debian/rules
--- cross-toolchain-base-ports-73/debian/rules	2025-05-19 19:44:59.000000000 +0200
+++ cross-toolchain-base-ports-74/debian/rules	2025-07-29 10:53:48.000000000 +0200
@@ -74,8 +74,8 @@
   export ELF_PACKAGE_METADATA
 endif
 
-MIN_VER_GLIBC		:= 2.41-8~
-MIN_VER_LINUX		:= 6.12.27-1~
+MIN_VER_GLIBC		:= 2.41-11~
+MIN_VER_LINUX		:= 6.12.38-1~
 MIN_VER_GCC		:= 14.2.0-19~
 MIN_VER_BINUTILS	:= 2.44-3~
 VER_GCC_BASE		:= 14

Attachment: signature.asc
Description: PGP signature


Reply to: