Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1240575 > unrolled thread

Bug#1102135: bookworm-pu: package abseil/20220623.1-1+deb12u1

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#1102135: bookworm-pu: package abseil/20220623.1-1+deb12u1 Tobias Frost <tobi@debian.org> - 2025-04-05 16:30 +0200
    Bug#1102135: bookworm-pu: package abseil/20220623.1-1+deb12u1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2025-05-10 17:20 +0200
      Bug#1102135: bookworm-pu: package abseil/20220623.1-1+deb12u1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2025-05-11 17:00 +0200
        Bug#1102135: bookworm-pu: package abseil/20220623.1-1+deb12u1 Tobias Frost <tobi@frost.de> - 2025-05-12 08:20 +0200
        Bug#1102135: bookworm-pu: package abseil/20220623.1-1+deb12u1 Tobias Frost <tobi@debian.org> - 2025-05-12 17:50 +0200
    Bug#1102135: abseil 20220623.1-1+deb12u1 flagged for acceptance Adam D Barratt <adam@adam-barratt.org.uk> - 2025-05-11 11:50 +0200
    Bug#1102135: abseil 20220623.1-1+deb12u2 flagged for acceptance Adam D Barratt <adam@adam-barratt.org.uk> - 2025-05-12 19:00 +0200

#1240575 — Bug#1102135: bookworm-pu: package abseil/20220623.1-1+deb12u1

[Multipart message — attachments visible in raw view] — view raw

Package: release.debian.org
Severity: normal
Tags: bookworm
X-Debbugs-Cc: abseil@packages.debian.org, abseil@packages.debian.org
Control: affects -1 + src:abseil
User: release.debian.org@packages.debian.org
Usertags: pu

(Please provide enough information to help the release team
to judge the request efficiently. E.g. by filling in the
sections below.)

[ Reason ]

This is a backport for the fix for CVE-2025-0838, which I've previously
fixed for sid (#1098903) and for LTS (DLA-4116-1).

To close the gap for bookworm, I'd like to s-p-u the package.

[ Impact ]

Users upgrading from bullseye to bookworm will have regression in
terms of this vulnerbility.

[ Tests ]

The source package comes with a test suite, the vulnerablity has also
its own test suite.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

[ Changes ]

Backport of the upstream patch, origin:
https://github.com/abseil/abseil-cpp/commit/5a0e2cb5e3958dd90bb8569a2766622cb74d90c1

[toc] | [next] | [standalone]

#1245492

Control: tags -1 + confirmed

On Sat, 2025-04-05 at 16:25 +0200, Tobias Frost wrote:
> This is a backport for the fix for CVE-2025-0838, which I've
> previously fixed for sid (#1098903) and for LTS (DLA-4116-1).

Please go ahead.

Regards,

Adam

[toc] | [prev] | [next] | [standalone]

#1245612

On Sat, 2025-05-10 at 16:15 +0100, Adam D. Barratt wrote:
> Control: tags -1 + confirmed
> 
> On Sat, 2025-04-05 at 16:25 +0200, Tobias Frost wrote:
> > This is a backport for the fix for CVE-2025-0838, which I've
> > previously fixed for sid (#1098903) and for LTS (DLA-4116-1).
> 
> Please go ahead.

Unfortunately the upload FTBFS on ppc64el with a test failure.

Judging from the changelog, it looks like this is a known issue (see
20240722.0-1.2 / 1.3 / 1.4).

Regards,

Adam

[toc] | [prev] | [next] | [standalone]

#1245663

Am 11. Mai 2025 14:49:53 UTC schrieb "Adam D. Barratt" <adam@adam-barratt.org.uk>:
>On Sat, 2025-05-10 at 16:15 +0100, Adam D. Barratt wrote:
>> Control: tags -1 + confirmed
>> 
>> On Sat, 2025-04-05 at 16:25 +0200, Tobias Frost wrote:
>> > This is a backport for the fix for CVE-2025-0838, which I've
>> > previously fixed for sid (#1098903) and for LTS (DLA-4116-1).
>> 
>> Please go ahead.
>
>Unfortunately the upload FTBFS on ppc64el with a test failure.
>
>Judging from the changelog, it looks like this is a known issue (see
>20240722.0-1.2 / 1.3 / 1.4).
>
>Regards,
>
>Adam

I'll take a look asap.

[toc] | [prev] | [next] | [standalone]

#1245719

[Multipart message — attachments visible in raw view] — view raw

On Sun, May 11, 2025 at 03:49:53PM +0100, Adam D. Barratt wrote:
> On Sat, 2025-05-10 at 16:15 +0100, Adam D. Barratt wrote:
> > Control: tags -1 + confirmed
> > 
> > On Sat, 2025-04-05 at 16:25 +0200, Tobias Frost wrote:
> > > This is a backport for the fix for CVE-2025-0838, which I've
> > > previously fixed for sid (#1098903) and for LTS (DLA-4116-1).
> > 
> > Please go ahead.
> 
> Unfortunately the upload FTBFS on ppc64el with a test failure.
> 
> Judging from the changelog, it looks like this is a known issue (see
> 20240722.0-1.2 / 1.3 / 1.4).

Did the same as wit 20240722.0-1.2 / 1.3 / 1.4 and disabled the
offending test for powerpc64el, verified on a porter box.

Reuploaded as abseil_20220623.1-1+deb12u2.

That's the debdiff:

diff -Nru abseil-20220623.1/debian/changelog abseil-20220623.1/debian/changelog
--- abseil-20220623.1/debian/changelog	2025-04-05 16:09:38.000000000 +0200
+++ abseil-20220623.1/debian/changelog	2025-05-12 17:26:59.000000000 +0200
@@ -1,3 +1,9 @@
+abseil (20220623.1-1+deb12u2) bookworm; urgency=medium
+
+  * Skip absl_failure_signal_handler_test on ppc64el, it's known to fail.
+
+ -- Tobias Frost <tobi@debian.org>  Mon, 12 May 2025 17:26:59 +0200
+
 abseil (20220623.1-1+deb12u1) bookworm; urgency=medium

   * Non maintainer upload by the LTS Team.
diff -Nru abseil-20220623.1/debian/rules abseil-20220623.1/debian/rules
--- abseil-20220623.1/debian/rules	2025-04-05 15:10:45.000000000 +0200
+++ abseil-20220623.1/debian/rules	2025-05-12 12:26:41.000000000 +0200
@@ -29,6 +29,10 @@
 else
 ABSL_RUN_TESTS=ON
 endif
+ifeq ($(DEB_HOST_ARCH),ppc64el)
+# https://github.com/abseil/abseil-cpp/issues/1804
+ABSL_TEST_EXTRA_ARGS="ARGS+=--exclude-regex absl_failure_signal_handler_test"
+endif

 %:
 	dh $@
@@ -51,7 +55,7 @@

 ifeq ($(ABSL_RUN_TESTS),ON)
 override_dh_auto_test:
-	dh_auto_test -Bshared
+	dh_auto_test -Bshared -- $(ABSL_TEST_EXTRA_ARGS)
 endif

 override_dh_auto_install:


Cheers,
tobi

> Regards,
> 
> Adam

[toc] | [prev] | [next] | [standalone]

#1245575 — Bug#1102135: abseil 20220623.1-1+deb12u1 flagged for acceptance

package release.debian.org
tags 1102135 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==============

Package: abseil
Version: 20220623.1-1+deb12u1

Explanation: fix heap buffer overflow issue [CVE-2025-0838]

[toc] | [prev] | [next] | [standalone]

#1245727 — Bug#1102135: abseil 20220623.1-1+deb12u2 flagged for acceptance

package release.debian.org
tags 1102135 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==============

Package: abseil
Version: 20220623.1-1+deb12u2

Explanation: fix build failure on ppc64el

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web