From: [email protected]

Package: nginx
Version: 1.18.0-6

Debian release: 11.11, Bullseye

I tried to build nginx package from Debian source, but it's failed:

$ lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description: Debian GNU/Linux 11 (bullseye)
Release: 11
Codename: bullseye

$ cat /etc/debian_version
11.11

$ apt source nginx
Reading package lists... Done
NOTICE: 'nginx' packaging is maintained in the 'Git' version control system at: https://salsa.debian.org/nginx-team/nginx.git
Please use:
git clone https://salsa.debian.org/nginx-team/nginx.git
to retrieve the latest (possibly unreleased) updates to the package.
Skipping already downloaded file 'nginx_1.18.0-6.1+deb11u5.dsc'
Skipping already downloaded file 'nginx_1.18.0.orig.tar.gz'
Skipping already downloaded file 'nginx_1.18.0.orig.tar.gz.asc'
Skipping already downloaded file 'nginx_1.18.0-6.1+deb11u5.debian.tar.xz'
Need to get 0 B of source archives.
dpkg-source: info: extracting nginx in nginx-1.18.0
dpkg-source: info: unpacking nginx_1.18.0.orig.tar.gz
dpkg-source: info: unpacking nginx_1.18.0-6.1+deb11u5.debian.tar.xz dpkg-source: info: using patch list from debian/patches/series
dpkg-source: info: applying 0002-Make-sure-signature-stays-the-same-in-all-nginx-buil.patch
dpkg-source: info: applying 0003-define_gnu_source-on-other-glibc-based-platforms.patch
dpkg-source: info: applying CVE-2019-20372.patch
dpkg-source: info: applying Resolver-fixed-off-by-one-write-in-ngx_resolver_copy.patch
dpkg-source: info: applying CVE-2021-3618.patch
dpkg-source: info: applying CVE-2022-41741_CVE-2022-41742.patch
dpkg-source: info: applying CVE-2025-23419.patch
dpkg-source: info: applying CVE-2024-7347-1.patch
dpkg-source: info: applying CVE-2024-7347-2.patch

$ cd nginx-1.18.0
$ dpkg-buildpackage -us -uc
dpkg-buildpackage: info: source package nginx
dpkg-buildpackage: info: source version 1.18.0-6.1+deb11u5
dpkg-buildpackage: info: source distribution bullseye-security dpkg-buildpackage: info: source changed by Sylvain Beucler <[email protected]> dpkg-buildpackage: info: host architecture amd64
dpkg-source --before-build .
debian/rules clean
...
dpkg-source: info: building nginx in nginx_1.18.0-6.1+deb11u5.debian.tar.xz dpkg-source: info: building nginx in nginx_1.18.0-6.1+deb11u5.dsc
debian/rules binary
dh binary --without autoreconf
dh_update_autotools_config
debian/rules override_dh_auto_configure
make[1]: Entering directory '/opt/airween/src/nginx-1.18.0'
cd /opt/airween/src/nginx-1.18.0/debian/modules/http-cache-purge && QUILT_PATCHES=/opt/airween/src/nginx-1.18.0/debian/modules/patches/http-cache-purge quilt push -a
cd /opt/airween/src/nginx-1.18.0/debian/modules/http-lua && QUILT_PATCHES=/opt/airween/src/nginx-1.18.0/debian/modules/patches/http-lua quilt push -a
File series fully applied, ends at patch CVE-2024-7347-2.patch
make[1]: *** [debian/rules:165: config.patch.http-cache-purge] Error 2
make[1]: *** Waiting for unfinished jobs....
File series fully applied, ends at patch CVE-2024-7347-2.patch
make[1]: *** [debian/rules:165: config.patch.http-lua] Error 2
make[1]: Leaving directory '/opt/airween/src/nginx-1.18.0'
make: *** [debian/rules:133: binary] Error 2
dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2


A side note: it seems like this patch is not committed to Salsa.
The last commit is for 1.18.0-6.1-deb11u4.

https://salsa.debian.org/nginx-team/nginx/-/commits/2c1bcf10e01264ac7f9774938ade89c10ba6ae3e

Could anyone help me?


Thanks,


a.

--- SoupGate-Win32 v1.05
* Origin: you cannot sedate... all the things you hate (1:229/2)