Your message dated Sun, 17 Jan 2021 17:06:46 +0000
with message-id <[email protected]>
and subject line Bug#971368: fixed in libfcgi-perl 0.79+ds-1
has caused the Debian Bug report #971368,
regarding libfcgi-perl: missing source for FCGI_COMMON_CHECKS
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
971368: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=971368
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libfcgi-perl
Version: 0.79-1
Severity: serious
Justification: missing source
I've looked into libfcgi-perl and noticed that the macro
FCGI_COMMON_CHECKS used in configure.in misses source code in the
libfcgi-perl package. I've looked in the archive and it seems that there
is another copy of this macro in another package that might do here:
https://sources.debian.org/src/libfcgi/2.4.0-10/acinclude.m4/?hl=3#L3
However, libfcgi-perl does not depend on that package in anyway, so it
definitely doesn't use it and it also does not prevent removal of
libfcgi, which is required for honouring DFSG (if that copy is indeed
the relevant source). Therefore, a bug of severity serious is
appropriate in my opinion.
A simple way out of this mess would be adding it to the debian
directory. That's still not nice as that prevents running autoreconf and
that prevents us from using dh_auto_configure, but it solves the rc-ness
part.
Another solution could be adding the macro to the libfcgi-dev binary
package and adding it as an (unused) build dependency. Doing so would
ensure that the source code for configure is available in the archive.
A better solution would likely be solving #841078 although doing so is
more involved.
Helmut
--- End Message ---
--- Begin Message ---
Source: libfcgi-perl
Source-Version: 0.79+ds-1
Done: gregor herrmann <[email protected]>
We believe that the bug you reported is fixed in the latest version of
libfcgi-perl, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
gregor herrmann <[email protected]> (supplier of updated libfcgi-perl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 17 Jan 2021 17:25:44 +0100
Source: libfcgi-perl
Architecture: source
Version: 0.79+ds-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Perl Group <[email protected]>
Changed-By: gregor herrmann <[email protected]>
Closes: 841078 971368
Changes:
libfcgi-perl (0.79+ds-1) experimental; urgency=medium
.
* Team upload.
.
[ Debian Janitor ]
* Update standards version to 4.5.0, no changes needed.
.
[ gregor herrmann ]
* Update 'DEB_BUILD_MAINT_OPTIONS = hardening=+bindnow' to '=+all'.
.
[ Debian Janitor ]
* Apply multi-arch hints.
.
[ gregor herrmann ]
* Add repacking framework to get rid of embedded libfcgi files.
(Closes: #971368)
* Import upstream version 0.79+ds.
* Drop CVE-2012-6687.patch which patched a now removed file.
* debian/copyright: remove stanza about excluded file.
* Build against the system libfcgi.
Build-depend on libfcgi-dev, and tell Makefile.PL to use the system
version. (Closes: #841078)
* Declare compliance with Debian Policy 4.5.1.
* Set Rules-Requires-Root: no.
* Bump debhelper-compat to 13.
* Upload to experimental to get some more testing.
Checksums-Sha1:
b2d1c2f7232629c811c5575729a7681023f175ef 2326 libfcgi-perl_0.79+ds-1.dsc
179d1a8ad58c9e288da832647005dac003fdfe1e 15760 libfcgi-perl_0.79+ds.orig.tar.xz
a3c143d0af004c95917348fe1b51eeef9da5126b 5512
libfcgi-perl_0.79+ds-1.debian.tar.xz
Checksums-Sha256:
2a90b1d076ace393df0a6093fb98771cb6a8cc5af4fde378469a6a957c5d6804 2326
libfcgi-perl_0.79+ds-1.dsc
b2a9ebca6d6499c05ec098ff5a68a639d7e5701c2a9d7d623dd6dc8052500375 15760
libfcgi-perl_0.79+ds.orig.tar.xz
533841570f13c1bc4eb8e0882f9a314c25eb6cb38e61ca0dfcbfeb5468d4288b 5512
libfcgi-perl_0.79+ds-1.debian.tar.xz
Files:
624cc0b626df2841aad5103f32c0b91b 2326 perl optional libfcgi-perl_0.79+ds-1.dsc
30307ac4e5bb6f90d97ceb3e69cc5415 15760 perl optional
libfcgi-perl_0.79+ds.orig.tar.xz
301558f135f5a513a73b7f4ceaf3ebac 5512 perl optional
libfcgi-perl_0.79+ds-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=D4JU
-----END PGP SIGNATURE-----
--- End Message ---
