[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1102922: marked as done (transition: libtheora 1.2.0)

Your message dated Thu, 25 Sep 2025 21:50:29 +0200
with message-id <aNWdBa_7ndhunl2p@ramacher.at>
and subject line Re: Bug#1102922: transition: libtheora 1.2.0
has caused the Debian Bug report #1102922,
regarding transition: libtheora 1.2.0
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1102922: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1102922
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: release.debian.org
Severity: normal
X-Debbugs-Cc: debian-multimedia@lists.debian.org
User: release.debian.org@packages.debian.org
Usertags: transition

There is a new version of libtheora,
<URL: https://tracker.debian.org/pkg/libtheora >, available from
upstream, which fixes a few crash bugs that might be security related,
discovered when using GCC sanitaztion on the upstream self test checks.
The ABI changing triggering the SONAME change is moving from 'char *' to
'const char *' in some public function arguments.

The autogenerated transition page is available from
<URL: https://release.debian.org/transitions/html/auto-libtheora.html >.

The new version is already in experimental, and I have verified that it
build with every of its reverse dependency which is buildable in testing
before the upgrade of libtheora-dev, in other words allegro5, boswars,
darkplaces, ffmpeg, godot, gst, handbrake, icecast2, indi, liboggplay,
libshout, libshout, liquidsoap, love, mediastreamer2, mplayer, ocaml,
oggvideotools, ogmrip, openmsx, recordmydesktop, ros, scummvm, tupi,
ufoai, vlc, vtk9, warzone2100, xine and zaz.

The gmerlin-avdecoder and gmerlin-encoders packages failed to build
because their build dependencies failed to install in testing.  The
os-autoinst package  fail to build because of failing self tests,
also observed on
<URL: https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/os-autoinst.html >.
The paraview package fail to build because the hdf5.h header file it
require is not provided by its build dependencies.  The kcemu package
failed to build because there were no package in testing.  I discovered
and fixed a build problem in tupi in the process, to get it into
testing.

As there might be lingering security issues in the libtheora 1.1.1
release in testing, I thought it best to ask if the release team are OK
an upload of libtheora 1.2.0 to unstable.

-- 
Happy hacking
Petter Reinholdtsen

--- End Message ---
--- Begin Message --- 
On 2025-08-17 23:20:25 +0200, Sebastian Ramacher wrote:
> Control: tags -1 confirmed
> 
> On 2025-04-13 10:53:03 +0200, Petter Reinholdtsen wrote:
> > 
> > Package: release.debian.org
> > Severity: normal
> > X-Debbugs-Cc: debian-multimedia@lists.debian.org
> > User: release.debian.org@packages.debian.org
> > Usertags: transition
> > 
> > There is a new version of libtheora,
> > <URL: https://tracker.debian.org/pkg/libtheora >, available from
> > upstream, which fixes a few crash bugs that might be security related,
> > discovered when using GCC sanitaztion on the upstream self test checks.
> > The ABI changing triggering the SONAME change is moving from 'char *' to
> > 'const char *' in some public function arguments.
> > 
> > The autogenerated transition page is available from
> > <URL: https://release.debian.org/transitions/html/auto-libtheora.html >.
> > 
> > The new version is already in experimental, and I have verified that it
> > build with every of its reverse dependency which is buildable in testing
> > before the upgrade of libtheora-dev, in other words allegro5, boswars,
> > darkplaces, ffmpeg, godot, gst, handbrake, icecast2, indi, liboggplay,
> > libshout, libshout, liquidsoap, love, mediastreamer2, mplayer, ocaml,
> > oggvideotools, ogmrip, openmsx, recordmydesktop, ros, scummvm, tupi,
> > ufoai, vlc, vtk9, warzone2100, xine and zaz.
> 
> Please go ahead

The old binaries got removed from testing. Closing

Cheers
-- 
Sebastian Ramacher

--- End Message ---
Reply to: