Your message dated Sun, 05 May 2024 17:36:23 +0000 with message-id <e1s3fmh-004jbl...@fasolo.debian.org> and subject line Bug#1069997: fixed in nginx 1.26.0-1 has caused the Debian Bug report #1069997, regarding nginx: NGX_MODULE_SIGNATURE has changed on 32-bit t64 architectures, but the ${nginx:abi} substvar has not to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 1069997: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1069997 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: nginx Version: 1.24.0-2 Severity: serious User: debian-...@lists.debian.org Usertags: time-t X-Debbugs-Cc: Sebastian Ramacher <sramac...@debian.org>, Steve Langasek <vor...@debian.org> Control: block 1069482 with -1 While looking into #1069482 (libnginx-mod-http-lua: FTBFS on armhf) I noticed that nginx has a NGX_MODULE_SIGNATURE string which is required to match between server and modules. This string has been changed by the t64 transition, but the substvar ${nginx:abi} describing the abi for package relationships has not been changed. nginx_1.24.0-2+b1_armhf.deb -> 4,4,4,0011111111010111001111111111111111 nginx_1.24.0-2+b2_armhf.deb -> 4,4,8,0011111111010111001111111111111111 (I used 'strings usr/sbin/nginx | grep 11111111111' to get them from the binaries) NGX_MODULE_SIGNATURE is defined in src/core/ngx_module.h and starts with ngx_value(NGX_PTR_SIZE) "," \ ngx_value(NGX_SIG_ATOMIC_T_SIZE) "," \ ngx_value(NGX_TIME_T_SIZE) "," I'd suggest bumping the substvar in debian/libnginx-mod.abisubstvars to e.g. nginx-abi-1.24.0-1t64 and rebuilding all modules. Maybe that's already sufficient for fixing #1069482. Andreas PS: could something automatically generated from $(DEB_VERSION_UPSTREAM) and NGX_MODULE_SIGNATURE (s/,/-/g) (and maybe an optional suffix) be used for the abi substvar?
--- End Message ---
--- Begin Message ---Source: nginx Source-Version: 1.26.0-1 Done: Jan Mojžíš <jan.moj...@gmail.com> We believe that the bug you reported is fixed in the latest version of nginx, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1069...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Jan Mojžíš <jan.moj...@gmail.com> (supplier of updated nginx package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 May 2024 18:48:05 +0200 Source: nginx Architecture: source Version: 1.26.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Nginx Maintainers <pkg-nginx-maintain...@alioth-lists.debian.net> Changed-By: Jan Mojžíš <jan.moj...@gmail.com> Closes: 1063659 1069997 Changes: nginx (1.26.0-1) unstable; urgency=medium . * New upstream version 1.26.0 * nginx ABI release: nginx-abi-1.26.0-1 (Closes: 1069997) * d/libnginx-mod.abisubstvars: remove third-party modules version constraints * d/u/signing-key.asc add Roman Arutyunyan’s PGP public key, the key is used to sign the 1.26.0 release * d/p/CVE-2023-44487.patch remove, fixed in upstream * d/ufw/nginx update, add QUICK, thanks Marcus Bointon * d/conf/mime.types add application/xslt+xml, thanks K. Widholm * d/copyright: updated copyright related to new upstream version * d/copyright: bump my copyright year * d/conf/nginx.conf: add worker_cpu_affinity auto (Closes: 1063659) * d/gbp.conf: add sign-tags = True, [pull] track-missing = True, [import-orig] merge-mode = replace Checksums-Sha1: 7511055323408af7e522341aa65e93d1c81bed84 3554 nginx_1.26.0-1.dsc 798390eae26a25e91d158891b341596eaddd0dea 1244118 nginx_1.26.0.orig.tar.gz 78f4e6330489fe2a51738b2ae42fa3c35f2e45ee 74204 nginx_1.26.0-1.debian.tar.xz 787462ceced979367070f71dc1461322d283ecc3 8908 nginx_1.26.0-1_source.buildinfo Checksums-Sha256: 128f18a7de6cabe53f981ad254f7a70da81a778319a793764318500a803988a8 3554 nginx_1.26.0-1.dsc d2e6c8439d6c6db5015d8eaab2470ab52aef85a7bf363182879977e084370497 1244118 nginx_1.26.0.orig.tar.gz 03dc71d97584a5cb7d914d68b1aa73e482042b4f731f17b7120a8b764e1a22a5 74204 nginx_1.26.0-1.debian.tar.xz 30ddb883ed9e2013b6f0a723a63d86fd658280ef1b90be3596cf5f39351ecab0 8908 nginx_1.26.0-1_source.buildinfo Files: 00f09dc859d9efec27d6e0ea3efe3c1c 3554 httpd optional nginx_1.26.0-1.dsc bb1b92cf7d72efcc0da343b057f23516 1244118 httpd optional nginx_1.26.0.orig.tar.gz ceb057c7185f768dbe10d7bd41177745 74204 httpd optional nginx_1.26.0-1.debian.tar.xz fd20154c6bb0206b88e21cca0970c7c3 8908 httpd optional nginx_1.26.0-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJJBAEBCgAzFiEE0Aiwwj2EeeRrn8uQRdpRdJaTn/kFAmY3uWAVHGphbi5tb2p6 aXNAZ21haWwuY29tAAoJEEXaUXSWk5/5DXUQAI5QF8a9E9W4DwtOJteIVogFslWH z1h/MPd+zJhAzBgjPb+m8RHCapPeyDGYVo3tHTnFeXcjF05Huai5q0FfgzQuQb2v /iA7OXiXvtHd1HWriB3yA1B8fKgHiDnzD0pPaaWxmTL3LJ4UzrkcQL8eBR9fw5YH gATl8TOr3ScHNTAlKdKhLHZSo2fGvBu4f/M725kq6MyTG5hEhRA0OUEgnqNbNazo cx0vmJsQQk3I2zjs1OvxTcZcGW2Bjjcf/IjLJbiJAbHC3AltjMu9xL2N6oAoFlXP iFZTM5kVPceg3AtENjv35+gTsTT+ml/QPzE61Fx9Z8NwIV++Fvh5L109DHisCDuU 5ZiADuxiyuBcz7ynkAextT6OiDMJIrQeRNr/+dWHHEKeqq4vvyEE0sktQUO2jl6L XI9eC5g3foKD+TVYs4FGhybnJc3H8W3bohDpAG48RDzEnH3GwBCe1uPOSByJISYZ aThdalJtGciTNQDxUgi2Tvg48udSPcmJVtOQIeX+HSk8ZpYo/O1Gf8134Oy6MMrn TUwKq5IpDg7HaeHfdOSfe1xNngyBlz4tjPlAR9CHiXazcqDGZtGxwJNTS3hEbsGa qHcunxxXxEq2oEQbUxaZbv47RFW/XuxY1ftI16elp0HKz2pgLuKiux5VZxKq/sNV /3CjPhyts5YtNHkd =QeUj -----END PGP SIGNATURE-----pgpjZfV80TzYx.pgp
Description: PGP signature
--- End Message ---