Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1250624

Bug#1108127: bookworm-pu: package debian-security-support/12+2025.06.20

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian.org@packages.debian.org
Usertags: pu
X-Debbugs-Cc: debian-security-support@packages.debian.org
Control: affects -1 + src:debian-security-support

Dear release team,

I'd like to propose a bookworm update for debian-security-support.

[ Reason ]
The are two changes: fixing #1106203, and a typo in a package name.
#1106203 makes that the purpose of check-security-support (the main
debian-security-support script) is null for packages that have been
NMU'ed or that have a different version between the source and binary
packages.  See some examples at
https://salsa.debian.org/debian/debian-security-support/-/merge_requests/44#note_615156

[ Impact ]
The user will continue to no be warned that the concerned installed
packages don't benefit from a full security support from debian.

[ Tests ]
A test has been added to the package, that is run during build time.
I've tested the test on my own bookworm machine, and now I get results
like:

    * Source:golang-github-containers-buildah
      Details: See https://www.debian.org/releases/bookworm/amd64/release-notes/ch-information.en.html#golang-static-linking
      Affected binary package:
      - buildah (installed version: 1.28.2+ds1-3+deb12u1+b1)

[ Risks ]
The code is trivial, and the tests have good coverage.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

[ Changes ]
The main change is:

diff -Nru debian-security-support-12+2025.05.10/check-support-status.in debian-security-support-12+2025.06.20/check-support-status.in
--- debian-security-support-12+2025.05.10/check-support-status.in       2025-05-10 09:43:50.000000000 -0300
+++ debian-security-support-12+2025.06.20/check-support-status.in       2025-06-20 17:54:47.000000000 -0300
@@ -169,7 +169,7 @@
 # Get list of installed packages
 INSTALLED_LIST="$TEMPDIR/installed"

-LC_ALL=C [% DPKG_QUERY %] --show --showformat '${Status}\t${binary:Package}\t${Version}\t${Source}\n' |
+LC_ALL=C [% DPKG_QUERY %] --show --showformat '${Status}\t${binary:Package}\t${Version}\t${source:Package}\n' |
 [% AWK %] '($1=="install"){print}' |
 [% AWK %] -F'\t' '{if($4==""){print $2"\t"$3"\t"$2}else{print $2"\t"$3"\t"$4}}' >"$INSTALLED_LIST"

When the version of a binary package differs from the source package,
the old dpkg-query returns something like:

install ok installed    buildah 1.28.2+ds1-3+deb12u1+b1 golang-github-containers-buildah (1.28.2+ds1-3+deb12u1)
                                                        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
and the new one:

install ok installed    buildah 1.28.2+ds1-3+deb12u1+b1 golang-github-containers-buildah
                                                        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

The remaining code compares the name of the source package with the
underlined (^) string, with grep -x, so the name didn't match.

Changes in t/check-support-status.t include a test for the above.

And there is a typo fix in security-support-limited s/gobgpd/gobgp/
since check-security-support checks for the name of the source package,
not the binary. I've verified that this works.

[ Other info ]
N/A

Thanks!

 -- Santiago

Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#1108127: bookworm-pu: package debian-security-support/12+2025.06.20 Santiago Ruano Rincón <santiagorr@riseup.net> - 2025-06-20 23:40 +0200
  Bug#1108127: bookworm-pu: package debian-security-support/12+2025.06.20 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2025-06-21 12:30 +0200
  Bug#1108127: debian-security-support 12+2025.06.20 flagged for acceptance Adam D Barratt <adam@adam-barratt.org.uk> - 2025-06-21 18:00 +0200

csiph-web