• Bug#1106797: catatonit: statically linked against glibc without a Built

    From Aurelien Jarno@21:1/5 to All on Thu May 29 23:00:02 2025
    UGFja2FnZTogY2F0YXRvbml0ClZlcnNpb246IDAuMS43LTEKU2V2ZXJpdHk6IHNlcmlvdXMKSnVz dGlmaWNhdGlvbjogUG9saWN5IDcuOAoKRGVhciBtYWludGFpbmVyLAoKVGhlIGNhdGF0b25pdCBw YWNrYWdlIHByb3ZpZGVzIC91c3IvYmluL2NhdGF0b25pdCB3aGljaCBpcyBzdGF0aWNhbGx5Cmxp bmtlZCBhZ2FpbnN0IGdsaWJjLgoKZ2xpYmMgaXMgbW9zdGx5IGlzIG1vc3RseSBsaWNlbnNlZCB1 bmRlciB0aGUgTEdQTCwgd2hpY2ggcmVxdWlyZXMgdGhhdAp0aGUgZnVsbCBzb3VyY2UgY29kZSBv ZiB0aGUgaW5jb3Jwb3JhdGluZyBiaW5hcnkgcGFja2FnZSBiZSBtYWRlCmF2YWlsYWJsZS4gQWNj b3JkaW5nIHRvIERlYmlhbiBQb2xpY3kgwqc3LjggWzFdIHN1Y2ggYSBiaW5hcnkgcGFja2FnZQpN VVNUIGxpc3QgdGhlIGdsaWJjIHNvdXJjZSBwYWNrYWdlIChhbmQgcG9zc2libHkgb3RoZXJzKSBp biB0aGUKQnVpbHQtVXNpbmc6IGZpZWxkLgoKUmVnYXJkcwpBdXJlbGllbgoKWzFdIGh0dHBzOi8v d3d3LmRlYmlhbi5vcmcvZG9jL2RlYmlhbi1wb2xpY3kvY2gtcmVsYXRpb25zaGlwcy5odG1sI2Fk ZGl0aW9uYWwtc291cmNlLXBhY2thZ2VzLXVzZWQtdG8tYnVpbGQtdGhlLWJpbmFyeS1idWlsdC11 c2luZwo=

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Debian Bug Tracking System@21:1/5 to All on Fri May 30 12:50:01 2025
    Processing control commands:

    tag -1 + patch
    Bug #1106797 [catatonit] catatonit: statically linked against glibc without a Built-Using: field
    Added tag(s) patch.

    --
    1106797: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1106797
    Debian Bug Tracking System
    Contact [email protected] with problems

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Aurelien Jarno@21:1/5 to Aurelien Jarno on Fri May 30 12:50:01 2025
    control: tag -1 + patch

    Hi,

    On 2025-05-29 22:53, Aurelien Jarno wrote:
    Package: catatonit
    Version: 0.1.7-1
    Severity: serious
    Justification: Policy 7.8

    Dear maintainer,

    The catatonit package provides /usr/bin/catatonit which is statically
    linked against glibc.

    glibc is mostly is mostly licensed under the LGPL, which requires that
    the full source code of the incorporating binary package be made
    available. According to Debian Policy ยง7.8 [1] such a binary package
    MUST list the glibc source package (and possibly others) in the
    Built-Using: field.

    Please find attached a patch to fix this issue.

    Regards
    Aurelien

    --
    Aurelien Jarno GPG: 4096R/1DDD8C9B [email protected] http://aurel32.net

    --- catatonit-0.2.1/debian/control
    +++ catatonit-0.2.1/debian/control
    @@ -13,6 +13,7 @@
    Architecture: any
    Depends: ${misc:Depends},
    ${shlibs:Depends}
    +Built-Using: ${misc:Built-Using}
    Description: init process for containers
    catatonic is a very simple init process for application containers. Its
    purpose is to support only the usage by container managers such as docker and --- catatonit-0.2.1/debian/rules
    +++ catatonit-0.2.1/debian/rules
    @@ -2,3 +2,6 @@

    %:
    dh $@
    +
    +override_dh_gencontrol:
    + dh_gencontrol -- -Vmisc:Built-Using="$(shell dpkg-query -f '$${source:Package} (= $${source:Version})' -W libc-dev-bin)"

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Debian Bug Tracking System@21:1/5 to All on Fri May 30 13:40:01 2025
    This is a multi-part message in MIME format...

    Your message dated Fri, 30 May 2025 11:34:43 +0000
    with message-id <[email protected]>
    and subject line Bug#1106797: fixed in catatonit 0.2.1-2
    has caused the Debian Bug report #1106797,
    regarding catatonit: statically linked against glibc without a Built-Using: field
    to be marked as done.

    This means that you claim that the problem has been dealt with.
    If this is not the case it is now your responsibility to reopen the
    Bug report if necessary, and/or fix the problem forthwith.

    (NB: If you are a system administrator and have no idea what this
    message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected]
    immediately.)


    --
    1106797: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1106797
    Debian Bug Tracking System
    Contact [email protected] with problems

    Received: (at submit) by bugs.debian.org; 29 May 2025 20:53:20 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
    (2024-03-25) on buxtehude.debian.org
    X-Spam-Level:
    X-Spam-Status: No, score=-123.0 required=4.0 tests=BAYES_00,
    BODY_INCLUDES_PACKAGE,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,
    DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FROMDEVELOPER,HAS_PACKAGE,
    SPF_HELO_NONE,SPF_NONE,UNPARSEABLE_RELAY,USER_IN_DKIM_WELCOMELIST,
    XMAILER_REPORTBUG autolearn=ham autolearn_force=no
    version=4.0.1-bugs.debian.org_2005_01_02
    X-Spam-Bayes: score:0.0000 Tokens: new, 11; hammy, 150; neutral, 32; spammy,
    0. spammytokens:
    hammytokens:0.000-+--Hx-spam-relays-external:sk:stravin,
    0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311,
    0.000-+--H*RT:311, 0.000-+--H*RT:108
    Return-path: <[email protected]>
    Received: from stravinsky.debia