Your message dated Tue, 26 Apr 2022 13:33:51 +0000
with message-id <[email protected]>
and subject line Bug#1009385: fixed in ldns 1.8.1-1
has caused the Debian Bug report #1009385,
regarding libldns3 1.7.1-2.1 changes output of ldns-key2ds, causing FTBFS on
dns-root-data
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1009385: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1009385
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: dns-root-data
Version: 2021011101
Severity: serious
Justification: FTBFS
Tags: bookworm sid ftbfs
User: [email protected]
Usertags: ftbfs-20220412 ftbfs-bookworm
Hi,
During a rebuild of all packages in sid, your package failed to build
on amd64.
Relevant part (hopefully):
> make[1]: Entering directory '/<<PKGBUILDDIR>>'
> # Verify root-anchors.xml using OpenSSL
> openssl smime -verify -noverify -inform DER -in root-anchors.p7s -content
> root-anchors.xml
> Verification successful
> <?xml version="1.0" encoding="UTF-8"?>
> <TrustAnchor id="380DC50D-484E-40D0-A3AE-68F2B18F61C7"
> source="http://data.iana.org/root-anchors/root-anchors.xml";>
> <Zone>.</Zone>
> <KeyDigest id="Kjqmt7v" validFrom="2010-07-15T00:00:00+00:00"
> validUntil="2019-01-11T00:00:00+00:00">
> <KeyTag>19036</KeyTag>
> <Algorithm>8</Algorithm>
> <DigestType>2</DigestType>
> <Digest>49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5</Digest>
> </KeyDigest>
> <KeyDigest id="Klajeyz" validFrom="2017-02-02T00:00:00+00:00">
> <KeyTag>20326</KeyTag>
> <Algorithm>8</Algorithm>
> <DigestType>2</DigestType>
> <Digest>E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D</Digest>
> </KeyDigest>
> </TrustAnchor>
> # Verify root.hints
> gpgv --keyring /<<PKGBUILDDIR>>/registry-admin.key
> /<<PKGBUILDDIR>>/root.hints.sig /<<PKGBUILDDIR>>/root.hints
> gpgv: Signature made Mon Jan 11 15:55:50 2021 UTC
> gpgv: using DSA key 937BB869E3A238C5
> gpgv: Good signature from "Registry Administrator <[email protected]>"
> # Create key from validated root-anchors.xml
> ./parse-root-anchors.sh < root-anchors.xml | sort -k 4 -n > root-anchors.ds
> Digest 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5
> expired on 2019-01-11T00:00:00+00:00
> # Create key from downloaded root.key
> /usr/bin/ldns-key2ds -n -2 root.key | cut --fields=1,3- --output-delimiter='
> ' | sort -k 4 -n > root.ds
> # Compare the DS from root.key and from root-anchors.xml
> diff -u root-anchors.ds root.ds
> --- root-anchors.ds 2022-04-12 16:59:11.126351522 +0000
> +++ root.ds 2022-04-12 16:59:11.130351536 +0000
> @@ -1 +1 @@
> -. IN DS 20326 8 2
> e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
> +. IN DS 20326 8 2
> 0ae721f59a19244008217c3d2a646183acef2f17cf4c30929a3f29d09311c05e
> make[1]: *** [debian/rules:23: override_dh_auto_build] Error 1
The full build log is available from:
http://qa-logs.debian.net/2022/04/12/dns-root-data_2021011101_unstable.log
All bugs filed during this archive rebuild are listed at:
https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=ftbfs-20220412;[email protected]
or:
https://udd.debian.org/bugs/?release=na&merged=ign&fnewerval=7&flastmodval=7&fusertag=only&fusertagtag=ftbfs-20220412&[email protected]&allbugs=1&cseverity=1&ctags=1&caffected=1#results
A list of current common problems and possible solutions is available at
http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute!
If you reassign this bug to another package, please marking it as 'affects'-ing
this package. See https://www.debian.org/Bugs/server-control#affects
If you fail to reproduce this, please provide a build log and diff it with mine
so that we can identify if something relevant changed in the meantime.
--- End Message ---
--- Begin Message ---
Source: ldns
Source-Version: 1.8.1-1
Done: Michael Tokarev <[email protected]>
We believe that the bug you reported is fixed in the latest version of
ldns, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Tokarev <[email protected]> (supplier of updated ldns package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 26 Apr 2022 16:05:17 +0300
Source: ldns
Architecture: source
Version: 1.8.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian DNS Team <[email protected]>
Changed-By: Michael Tokarev <[email protected]>
Closes: 1005646 1008638 1009385
Changes:
ldns (1.8.1-1) unstable; urgency=medium
.
* New upstream version 1.8.1
Closes: #1008638 (FTBFS with python 3.10 due to distutils check)
Closes: #1005646 (FTBFS with OpenSSL 3.0)
Closes: #1009385 (output of ldns-key2ds changes after compiler changes)
Closes: CVE-2020-19860 (heap buffer overflow in while verifying zone file)
Closes: CVE-2020-19861 (heap overflow/leakage when reading a zone file)
* rework the build system, fixing numerous issues:
- stop overwriting files at install time from different builds
and ending up using the build with wrong configure options
- stop running install twice
- stop removing system-installed files if any on clean
- stop doing (re)build of everything just for the python build
- build python bits in the main build and perform extra steps
only if there's more than one python version to build for
(this effectively eliminates miltiple builds completely)
- clarify build with multiple pyversions and why it still fails
- remove old, now irrelevant, stuff (like overriding options
which are being in effect anyway, or which has no effect)
- move variable-based custom install rule for libldns.pc
into .install file once dh now allows variables in there
- reduce startup time by eliminating dpkg's default.mk which is slow
- remove the wrongly-generated staic lib for the python bindings
(_ldns.{a,la}) in the install rules instead of ignoring them
in dh_install -X
- fix add --with-trust-anchor= so it actually works
- replace dh --with python with Build-Depend: dh-sequence-python3
- run dh only for supported targets/sequences
* update symbols file for 1.8 version, adding 6 new symbols
* remove Makefile-remove-install-libldns-pc.patch
* update short descriptions of all packages to mention what is
actually in there instead of being the same for all packages
* remove Build-Dependes: chrpath & pkg-config (not used)
* add fix-pyldns-include.patch to fix building pyldns outside source dir
* d/control: update Stdandards-Version to 4.6.0.1 (no changes)
* d/watch: rework, simplify, use https, enable pgp signature verification
* add upstream/signing-key.asc with the followig key:
E5F8F8212F77A498 "Willem Toorop <[email protected]>"
* remove trailing whitespace from d/changelog
* add myself to uploaders
Checksums-Sha1:
0d89d28421f4ed0966b020de73a37a5383c9a7c2 1900 ldns_1.8.1-1.dsc
df19a0404a608821b571525214a18988bc88bb46 1284971 ldns_1.8.1.orig.tar.gz
f26fea2a95f353793d0b29474dece0ecfe0368c8 17368 ldns_1.8.1-1.debian.tar.xz
63cc0a3e1c2d8b4fb9fc221028778f23fdeefc17 7359 ldns_1.8.1-1_source.buildinfo
Checksums-Sha256:
e3d3ab041b49d02becdc6ac9c598aa35c38d7345d6b3adfc64a589ca374d2d16 1900
ldns_1.8.1-1.dsc
958229abce4d3aaa19a75c0d127666564b17216902186e952ca4aef47c6d7fa3 1284971
ldns_1.8.1.orig.tar.gz
f556233bd95cc2e3cdd76f0aa965beee39bc764b1305cd703b71ac375787ff77 17368
ldns_1.8.1-1.debian.tar.xz
70725778d17cb4637b39367ffe6f686878c60b7f85141d89d1adde994bbcc72a 7359
ldns_1.8.1-1_source.buildinfo
Files:
e1383e6f1644827c1faa1f259d988fbf 1900 net optional ldns_1.8.1-1.dsc
563a799efbafb35e691da42921bad031 1284971 net optional ldns_1.8.1.orig.tar.gz
adbd443fe33a30df11329e96c7870fba 17368 net optional ldns_1.8.1-1.debian.tar.xz
63492d515912435b21f02cf211027133 7359 net optional
ldns_1.8.1-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFDBAEBCAAtFiEEe3O61ovnosKJMUsicBtPaxppPlkFAmJn7jMPHG1qdEB0bHMu
bXNrLnJ1AAoJEHAbT2saaT5ZN3EIALFdo8A4iE3BR7nMwlfX9cq7b3RsJtMhjt+L
JvGiHCsnUfHfieqNVviQN41gC7eqsAX4a9VbYtVa8+jLmRF2KjHRzaF+XaSFNGO0
W0WJME3CwdPMQDh/8DMFdWRNcow/U9Ht/vX3ps0A1eqXzZzYLFtjHyFJHIzpl82i
8qPloluvBOdewrBX2ogPVFvLI+uYEWrWVa2X0iV+Oc7aJuA/c3rgAhPxJHCViX4d
3JF2g1dIHwl7d/uuaDI3mMwX3OrlMHHCVJG7CA99Yiw9ptvQ7qoJx7DGREi0abvE
4KgNEOksD4AwukSHJ1mfKiKoNkdCIFva3DrIPdaAgb1SyeJX0Nw=
=3F+G
-----END PGP SIGNATURE-----
--- End Message ---
