Hi,
On 2025-05-31 13:24, Aurelien Jarno wrote:
Hi,
On 2025-05-29 22:53, Aurelien Jarno wrote:
Package: condor
Version: 23.2.0+dfsg-1
Severity: serious
Justification: Policy 7.8
Dear maintainer,
condor provides /usr/libexec/condor/singularity_test_sandbox/exit_37
which is statically linked against glibc.
glibc is mostly is mostly licensed under the LGPL, which requires that
the full source code of the incorporating binary package be made
available. According to Debian Policy ยง7.8 [1] such a binary package
MUST list the glibc source package (and possibly others) in the Built-Using: field.
Please find attached to fix the issue. Please note that the exit_37 file
is statically compiled on all architectures except amd64, hence the architecture specification in debian/control next to the Built-Using
field.
I have just done an NMU to fix this issue before the package gets
removed from testing. Please find the debdiff attached.
Regards
Aurelien
--
Aurelien Jarno GPG: 4096R/1DDD8C9B
[email protected] http://aurel32.net
diff -Nru condor-23.9.6+dfsg/debian/changelog condor-23.9.6+dfsg/debian/changelog
--- condor-23.9.6+dfsg/debian/changelog 2025-04-02 23:50:00.000000000 +0200
+++ condor-23.9.6+dfsg/debian/changelog 2025-06-20 21:49:07.000000000 +0200
@@ -1,3 +1,10 @@
+condor (23.9.6+dfsg-2.1) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Add missing Built-Using to the condor binary package (Closes: #1106798).
+
+ -- Aurelien Jarno <
[email protected]> Fri, 20 Jun 2025 21:49:07 +0200
+
condor (23.9.6+dfsg-2) unstable; urgency=medium
* Address security issue CVE-2025-30093 (Closes: #1101498)
diff -Nru condor-23.9.6+dfsg/debian/control condor-23.9.6+dfsg/debian/control --- condor-23.9.6+dfsg/debian/control 2025-04-02 23:50:00.000000000 +0200
+++ condor-23.9.6+dfsg/debian/control 2025-06-20 21:36:18.000000000 +0200
@@ -8,6 +8,7 @@
debhelper-compat (=