Debian Bug report logs - #889509
Fix CMake module installation, prepare for DNF support

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Mihai Moldovan <ionic@ionic.de>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: Fix CMake module installation, prepare for DNF support

Date: Sun, 4 Feb 2018 00:14:32 +0100

[Message part 1 (text/plain, inline)]

Package: libsolv
Version: 0.6.30-1

This patch:
  - fixes how libsolv installs its FindLibSolv.cmake files, which has been
    broken before - no, this is not a version file!
  - fixes various meta errors (dependencies, typo in patch file name that is
    supposed to fix typos, symbols file cleanup, ...)
  - enables some optional features previously disabled and
  - patches libsolv's RPMDB handling to be compatible with the patched rpm
    package version that uses ~/.rpmdb instead of the system-level /var/lib/rpm
    dbpath.

I will probably have to push the latter patch upstream as well.

This patch also opens the way for DNF on Debian.



Mihai

[libsolv.debdiff.patch (text/x-patch, attachment)]

[signature.asc (application/pgp-signature, attachment)]

Message #10 received at 889509@bugs.debian.org (full text, mbox, reply):

From: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>

To: Mihai Moldovan <ionic@ionic.de>, 889509@bugs.debian.org

Subject: Re: Bug#889509: Fix CMake module installation, prepare for DNF support

Date: Tue, 24 Apr 2018 11:01:21 +0000

[Message part 1 (text/plain, inline)]

Hi Mihai,

oh well...

On  So 04 Feb 2018 00:14:32 CET, Mihai Moldovan wrote:

> Package: libsolv
> Version: 0.6.30-1
>
> This patch:
>   - fixes how libsolv installs its FindLibSolv.cmake files, which has been
>     broken before - no, this is not a version file!
>   - fixes various meta errors (dependencies, typo in patch file name that is
>     supposed to fix typos, symbols file cleanup, ...)
>   - enables some optional features previously disabled and
>   - patches libsolv's RPMDB handling to be compatible with the patched rpm
>     package version that uses ~/.rpmdb instead of the system-level  
> /var/lib/rpm
>     dbpath.
>
> I will probably have to push the latter patch upstream as well.
>
> This patch also opens the way for DNF on Debian.

I just uploaded 0.6.34-1 and only after that looked into open bugs on  
Debian BTS. And then I remembered.

With the greatest embarrased... may I ask you to rebase your .debdiff?  
Have your changes been upstream meanwhile?

Thanks+Greets,
Mike


-- 

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
mobile: +49 (1520) 1976 148
landline: +49 (4354) 8390 139

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

[Message part 2 (application/pgp-signature, inline)]

Message #15 received at 889509@bugs.debian.org (full text, mbox, reply):

From: Jo Shields <directhex@apebox.org>

To: 889509@bugs.debian.org

Subject: rebase

Date: Tue, 5 Feb 2019 13:53:35 -0500

[Message part 1 (text/plain, inline)]

I gave rebasing Mihai's patch a shot. Seems to build, no word on 
functionality yet.

[0001-Rebase-changes-for-DNF-support-Closes-889509.patch (text/x-patch, attachment)]

Message #20 received at 889509@bugs.debian.org (full text, mbox, reply):

From: Mihai Moldovan <ionic@ionic.de>

To: 889509@bugs.debian.org

Subject: Re: Bug#889509: Fix CMake module installation, prepare for DNF support

Date: Fri, 6 Sep 2019 04:43:58 +0200

[Message part 1 (text/plain, inline)]

> With the greatest embarrased... may I ask you to rebase your .debdiff?

Rebased everything and bumped up to 0.6.36, which also fixes the 3 CVE's
attached to this package. Will upload a new debdiff soon, need to build these
packages for sid and test them for a bit, including the updated dnf stuff.
Shouldn't take too long.


> Have your changes been upstream meanwhile?

I've reworked my own patchset, since the previous solution was weird. It should
be a lot cleaner now and not touching the whole pool content, but only RPM stuff.

I also decided not to even try to upstream it, because upstream would almost
certainly reject it anyway. It's a workaround for Debian breaking librpm/rpm, so
Debian is responsible for keeping the patch.

With a bit of luck, we will very soon be able to drop those patches completely
though, as I'm trying to get Debian to not apply the patch that breaks rpm in
the first place... see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794495

(Un-?)fortunately the rpm package is up for grabs since the current maintainer
is not interested in maintaining/using it any longer.

I'm very much interesting in having a working and if possible up-to-date rpm
package within Debian as user, but I'm not a DD and I *know* that I won't have
the time for proper maintenance.



Mihai

[signature.asc (application/pgp-signature, attachment)]

Message #25 received at 889509@bugs.debian.org (full text, mbox, reply):

From: Mihai Moldovan <ionic@ionic.de>

To: 889509@bugs.debian.org

Subject: Re: Bug#889509: Fix CMake module installation, prepare for DNF support

Date: Thu, 12 Sep 2019 15:10:05 +0200

[Message part 1 (text/plain, inline)]

* On 9/6/19 4:43 AM, Mihai Moldovan wrote:
> Rebased everything and bumped up to 0.6.36, which also fixes the 3 CVE's
> attached to this package. Will upload a new debdiff soon, need to build these
> packages for sid and test them for a bit, including the updated dnf stuff.
> Shouldn't take too long.

Longer than actually expected, but finally here it is.


Note that I've marked the bump NMU, mainly to make lintian happy or such. In any
case, when applying the debdiff, please change the version number to 0.6.36-1
and remove the NMU changelog entry. Be sure to close the CVE bug entry, though.

Built and tested on Debian unstable amd64.



Mihai

[libsolv_0.6.36-0.1.debdiff (text/plain, attachment)]

[signature.asc (application/pgp-signature, attachment)]

Message #30 received at 889509-close@bugs.debian.org (full text, mbox, reply):

From: Mike Gabriel <sunweaver@debian.org>

To: 889509-close@bugs.debian.org

Subject: Bug#889509: fixed in libsolv 0.6.36-1

Date: Sun, 24 Nov 2019 14:40:49 +0000

Source: libsolv
Source-Version: 0.6.36-1

We believe that the bug you reported is fixed in the latest version of
libsolv, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 889509@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Mike Gabriel <sunweaver@debian.org> (supplier of updated libsolv package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 24 Nov 2019 14:43:50 +0100
Source: libsolv
Architecture: source
Version: 0.6.36-1
Distribution: unstable
Urgency: medium
Maintainer: Mike Gabriel <sunweaver@debian.org>
Changed-By: Mike Gabriel <sunweaver@debian.org>
Closes: 889509 923002 936923
Changes:
 libsolv (0.6.36-1) unstable; urgency=medium
 .
   [ Mihai Moldovan ]
   * Fix CMake module installation, prepare for DNF support (Closes: #889509).
     Details see below.
 .
   * New upstream release.
     - Fixes CVE-2018-20532 CVE-2018-20533 CVE-2018-20534. (Closes: #923002).
   * debian/patches:
     + Drop 1004_cmake-module-path-fix.patch. Breaks package, since Find*
       modules should actually be installed in the modules directory and this
       file does NOT provide version information.
     + Add 1005_install-cmake-module-into-libdir.patch. Installs
       FindLibSolv.cmake into ${libdir}/cmake/libsolv/.
     + Rename 1006_various-types.patch to 1006_various-typos.patch and refresh.
     + Add 3000_ext-repo_rpmdb_debian-style-home-dir-rpmdb.patch for RPMDB
       handling in home directories, compatible with Debian's rpm package.
     + Add 3010_ext-libsolvext.ver_add-rpm_state_create_real.patch for binary
       compatibility and exporting the newly inserted symbol.
     + Add 3020_tools-rpmdb2solve.c-add-homedir-functionality.patch,
       implementing homedir-based RPMDB support via the -H flag in the
       rpmdb2solve tool.
     + Add 9000_ext_repo_updateinfoxml.c_add-support-for-modular-data-
           aac9f0c2d791fa96bc9423231050f9e18fb973d6.patch to backport the
       modular updateinfo.xml functionality.
   * debian/libsolvext0.symbols:
     + Update.
   * debian/rules:
     + Enable Fedora comps support.
     + Add DEB_DH_MISSING_ARGS with --fail-missing, since the option is
       deprecated in dh_install and has been removed in compat 12. We'll keep it
       around due to using compat 10 for now.
   * debian/libsolv0-dev.install:
     + Install FindLibSolv.cmake correctly.
   * debian/copyright:
     + Add missing files/information.
   * debian/:
     + Add libsolv-tools.lintian-overrides.
     + Add libsolvext0.lintian-overrides.
   * debian/libsolv{-tools,ext0}.lintian-overrides:
     + Silence warning about modifying/reading the dpkg database directly.
       libsolv's capabilities are actually useful here.
   * debian/libsolv{,ext}0.symbols:
     + Add Build-Depends-Package tag mentioning libsolv0-dev package.
 .
   [ Mike Gabriel ]
   * debian/control:
     + Bump Standards-Version: to 4.4.1. No changes needed.
     + Add Rules-Requires-Root: field and set it to "no".
   * debian/*:
     + Drop Py2 python-solv bin.pkg. (Closes: #936923).
Checksums-Sha1:
 d61b92b4e3a14f519d803cdec1f02f18a38eb813 2407 libsolv_0.6.36-1.dsc
 677f26b2746ac33acec6f98148a619810362a076 647054 libsolv_0.6.36.orig.tar.gz
 b2d5b052115d806eed7c6b629a91634becdced7b 19564 libsolv_0.6.36-1.debian.tar.xz
 28eb573a0ec83d47b5706c558f959e2347ba6e1e 8857 libsolv_0.6.36-1_source.buildinfo
Checksums-Sha256:
 464d6d1da3835b45b50e5e9c75a0c61f9fd7aecb416133cd47d6c4a1807a0b86 2407 libsolv_0.6.36-1.dsc
 1f0cfbddf9166ecc703605309f6dc8cdf15d0e2aa06d91c61110a6e7387f223e 647054 libsolv_0.6.36.orig.tar.gz
 2a03ffbc55ce97f74c65f1063ef85531c9febabe6576dea3a51396367fee0fe0 19564 libsolv_0.6.36-1.debian.tar.xz
 3f5c7a44c36123afc89fe8e019a665f8c22e82dc7d7da78f5cfd2e5104d7669e 8857 libsolv_0.6.36-1_source.buildinfo
Files:
 d4b96232a04d20dc26498fa7fc73c66f 2407 admin optional libsolv_0.6.36-1.dsc
 a540aae13702a8f068c6e88439f21a23 647054 admin optional libsolv_0.6.36.orig.tar.gz
 e8306b104f5fba7a6ec1b70d1956ae79 19564 admin optional libsolv_0.6.36-1.debian.tar.xz
 fb257bfdfad8ee673a497f999200ded3 8857 admin optional libsolv_0.6.36-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=qKby
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.