Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #1016913

Bug#962221: Fixes for CVE-2020-13696 (#962221)

From Mattia Rizzolo <mattia@debian.org>
Newsgroups linux.debian.bugs.dist
Subject Bug#962221: Fixes for CVE-2020-13696 (#962221)
Date 2020-07-07 16:30 +0200
Message-ID <ApWLD-2dr-3@gated-at.bofh.it> (permalink)
References (2 earlier) <ApWLD-2dr-5@gated-at.bofh.it> <Ae20p-We-3@gated-at.bofh.it> <ApWLD-2dr-7@gated-at.bofh.it> <Ae20p-We-3@gated-at.bofh.it> <ApWLD-2dr-7@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

On Mon, Jul 06, 2020 at 09:07:31PM +0000, Vasyl Gello wrote:
> I pushed the modernized package however

..however it fails to build :)

   dh_auto_install
	install -d /build/xawtv-3.107/debian/tmp
	make -j4 install DESTDIR=/build/xawtv-3.107/debian/tmp AM_UPDATE_INFO_DIR=no
make[1]: Entering directory '/build/xawtv-3.107'
/usr/bin/install -c -d -m 755 /build/xawtv-3.107/debian/tmp/usr/bin
/usr/bin/install -c  console/dump-mixers console/record console/showriff console/showqt console/streamer console/webcam console/scantv console/ttv console/radio console/fbtv console/v4l-info /build/xawtv-3.107/debian/tmp/usr/bin
/usr/bin/install -c  -m4755 -o root console/v4l-conf /build/xawtv-3.107/debian/tmp/usr/bin
/usr/bin/install: cannot change ownership of '/build/xawtv-3.107/debian/tmp/usr/bin/v4l-conf': Operation not permitted
make[1]: *** [console/Subdir.mk:100: install] Error 1
make[1]: Leaving directory '/build/xawtv-3.107'
dh_auto_install: error: make -j4 install DESTDIR=/build/xawtv-3.107/debian/tmp AM_UPDATE_INFO_DIR=no returned exit code 2
make: *** [debian/rules:6: binary] Error 25
dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2


this is related to the addition of Rules-Requires-Root.  When run
without fakeroot it's not possible to run such `chmod` commands.  In
fact, they are most likely always wrong to run them anyway…

> there are two errors claiming two libs are not compiled against libc and several
> others missing requured prerequisites. I have not figured yet how to fix these,
> maybe you know?

I'll see them when I can fully build the package ;)


In d/copyright, that boilerplate-y thing you copied into the Comment
field, IMHO you should just get rid of it.  Also, it's missing many of
the years in the copyright claims: a copyright claim without a year is
at most an legal headache and at worst invalid.

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
More about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-

Back to linux.debian.bugs.dist | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#962221: xawtv: CVE-2020-13696 Salvatore Bonaccorso <carnil@debian.org> - 2020-06-04 19:40 +0200
  Bug#962221: Fixes for CVE-2020-13696 (#962221) Mattia Rizzolo <mattia@debian.org> - 2020-07-07 16:30 +0200
  Bug#962221: Fixes for CVE-2020-13696 (#962221) Jeremy Sowden <jeremy@azazel.net> - 2020-07-08 10:40 +0200

csiph-web