Your message dated Wed, 03 Aug 2016 12:49:15 +0000 with message-id <[email protected]> and subject line Bug#828127: fixed in curl 7.50.1-1 has caused the Debian Bug report #828127, regarding curl: FTBFS with openssl 1.1: to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 828127: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=828127 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Source: curl Version: 7.47.0-1 Severity: important Control: block 827061 by -1 Hi, Your package is failing to build with openssl 1.1: vtls/openssl.c:758:3: warning: 'ERR_remove_thread_state' is deprecated [-Wdeprecated-declarations] ERR_remove_thread_state(NULL); ^ In file included from /usr/include/openssl/ui.h:13:0, from /usr/include/openssl/engine.h:29, from ../lib/urldata.h:88, from vtls/openssl.c:41: /usr/include/openssl/err.h:244:1: note: declared here DEPRECATEDIN_1_1_0(void ERR_remove_thread_state(void *)) ^ vtls/openssl.c: In function 'get_cert_chain': vtls/openssl.c:2389:20: error: dereferencing pointer to incomplete type 'EVP_PKEY {aka struct evp_pkey_st}' switch(pubkey->type) { ^ >From the manpage of ERR_remove_thread_state: DESCRIPTION The functions described here were used to free the error queue associated with the current or specificed thread. They are now deprecated and do nothing, as the OpenSSL libraries now normally do all thread initialisation and deinitialisation automatically (see OPENSSL_init_crypto(3)). >From the manpage of EVP_PKEY_base_id: Most applications wishing to know a key type will simply call EVP_PKEY_base_id() and will not care about the actual type: which will be identical in almost all cases. Previous versions of this document suggested using EVP_PKEY_type(pkey->type) to determine the type of a key. Since EVP_PKEY is now opaque this is no longer possible: the equivalent is EVP_PKEY_base_id(pkey). openssl 1.1.0 is available in experimental. If you run into other problems you might want to look at: https://wiki.openssl.org/index.php/1.1_API_Changes Kurt
--- End Message ---
--- Begin Message ---Source: curl Source-Version: 7.50.1-1 We believe that the bug you reported is fixed in the latest version of curl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Alessandro Ghedini <[email protected]> (supplier of updated curl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 03 Aug 2016 12:46:05 +0100 Source: curl Binary: curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-openssl-dev libcurl4-gnutls-dev libcurl4-nss-dev libcurl3-dbg libcurl4-doc Architecture: source amd64 all Version: 7.50.1-1 Distribution: unstable Urgency: medium Maintainer: Alessandro Ghedini <[email protected]> Changed-By: Alessandro Ghedini <[email protected]> Description: curl - command line tool for transferring data with URL syntax libcurl3 - easy-to-use client-side URL transfer library (OpenSSL flavour) libcurl3-dbg - debugging symbols for libcurl (OpenSSL, GnuTLS and NSS flavours) libcurl3-gnutls - easy-to-use client-side URL transfer library (GnuTLS flavour) libcurl3-nss - easy-to-use client-side URL transfer library (NSS flavour) libcurl4-doc - documentation for libcurl libcurl4-gnutls-dev - development files and documentation for libcurl (GnuTLS flavour) libcurl4-nss-dev - development files and documentation for libcurl (NSS flavour) libcurl4-openssl-dev - development files and documentation for libcurl (OpenSSL flavour) Closes: 818092 818131 827900 828127 830273 Changes: curl (7.50.1-1) unstable; urgency=medium . * New upstream release (Closes: #827900) - Fix TLS session resumption client cert bypass as per CVE-2016-5419 https://curl.haxx.se/docs/adv_20160803A.html - Fix re-using connection with wrong client cert as per CVE-2016-5420 https://curl.haxx.se/docs/adv_20160803B.html - Fix use of connection struct after free as per CVE-2016-5421 https://curl.haxx.se/docs/adv_20160803C.html - Support OpenSSL 1.1 (Closes: #828127) * Fix 04_workaround_as_needed_bug.patch. Thanks to Yuriy M. Kaminskiy for the patch (Closes: #818131) * Bump Standards-Version to 3.9.8 (no changes needed) * Update Vcs-* URLs * Refresh patches * Add 08_enable-zsh.patch to re-enable zsh completion generation * Remove 08_fix-zsh-completion.patch (was already disabled) * Add 09_fix-typo.patch to fix spelling-error-in-manpage * Add 10_disable-network-tests.patch to disable networked tests (Closes: #830273) * Improve cross Build-Depends satisfiability. Thanks to Helmut Grohne for the patch (Closes: #818092) Checksums-Sha1: 8f00f30c06203650df7d97c3bb512231e0e71724 2713 curl_7.50.1-1.dsc c8db732c280059f570fc39c6b49ae5c1f19ee5ef 8894258 curl_7.50.1.orig.tar.gz e8d33aba3f9e47237f926f5c5fe99f37c4470de4 26948 curl_7.50.1-1.debian.tar.xz 3c2ca385f197073a78b4773a62da50ef57019048 120606 curl-dbgsym_7.50.1-1_amd64.deb 67f821fc291eda3bf5cb76c5733e7b66530c0dee 217816 curl_7.50.1-1_amd64.deb 98aee512d4845101dc0b0d7fb30d366f0df9b570 4148696 libcurl3-dbg_7.50.1-1_amd64.deb e6aa2c4c533051ff3907af33da4600a7438c9446 277594 libcurl3-gnutls_7.50.1-1_amd64.deb c0c35a338685a1230baebdd6ebd67012378bbf49 283932 libcurl3-nss_7.50.1-1_amd64.deb 292367db46dcd0f50086e08d25728ed993d9319f 279808 libcurl3_7.50.1-1_amd64.deb da87dcc6433a1eeab0c09ea5e4d72583425592fe 1996982 libcurl4-doc_7.50.1-1_all.deb 0319de14d04d1b1ae48136b8051de6b57e0ea59c 360150 libcurl4-gnutls-dev_7.50.1-1_amd64.deb bd09645702e8039bcea72f83ec90d71f2b9371cf 366764 libcurl4-nss-dev_7.50.1-1_amd64.deb f411978a72b0a511b55366f1a07b1b1f32cbdffd 361942 libcurl4-openssl-dev_7.50.1-1_amd64.deb Checksums-Sha256: 0dc812ada7fccc111c6497e51977e395e01024bbf94325e7b0c515da9d89a756 2713 curl_7.50.1-1.dsc 3e392cf600822b817be82d9080b377fcbab70538d5a8bf525a1cd66e157b99ea 8894258 curl_7.50.1.orig.tar.gz 62cfd79dd0eaae5f2aff1941a60ae0f8ecef089ca9aadfa6e75b59c9f4dda63b 26948 curl_7.50.1-1.debian.tar.xz 74063c3c678ba5051f33f6e4f6315abfc72e1bea46f365d3e42a6030c3529520 120606 curl-dbgsym_7.50.1-1_amd64.deb 60ba083d5aeced6c8a4756a30cca20eca5385e214acc37bd0d29d7901ef3906d 217816 curl_7.50.1-1_amd64.deb 3db8449b63a855d4ec9fb9c7aa41d2e66a5402a4e99c724978ebf620b85da2f2 4148696 libcurl3-dbg_7.50.1-1_amd64.deb 1a328d00ad82b144afaad4daa24965fb64d9fdc1ae0d9ed759169b0634bdda22 277594 libcurl3-gnutls_7.50.1-1_amd64.deb 32a6638c860531eef44073d344f0d50262900facf36a57624c3fdf3777836b71 283932 libcurl3-nss_7.50.1-1_amd64.deb b7f5f4eda17b13c3c6b1f70b0881ab2bd553cd7b110d263013e0a7042a8c9adc 279808 libcurl3_7.50.1-1_amd64.deb 332c18c6bce6b8b1fd0a439bdfbdbfe6c47bb1a1f6e85cd30f15f35ba2c7fce8 1996982 libcurl4-doc_7.50.1-1_all.deb 95f88f289b41c4ed04629ace050bfe7e24fa1d8d6a6c5859ac20b0c10237a7a6 360150 libcurl4-gnutls-dev_7.50.1-1_amd64.deb efe023d7292397bdb95b23e9048ce6dc45567f9691a299d84eec8c8120d4e1c4 366764 libcurl4-nss-dev_7.50.1-1_amd64.deb d2d2d361b1fc7f245cbff0fb11d0ccbf546d551be7b9ffabb784a4d831df036f 361942 libcurl4-openssl-dev_7.50.1-1_amd64.deb Files: 0b05144e23458d86f91f0a1bd4c677ef 2713 web optional curl_7.50.1-1.dsc c264788f2e4313a05140d712c1ec90c2 8894258 web optional curl_7.50.1.orig.tar.gz 3760421989032e739c8ae29d53c4a83e 26948 web optional curl_7.50.1-1.debian.tar.xz afe2d347366fc9ab2496e40719ebf315 120606 debug extra curl-dbgsym_7.50.1-1_amd64.deb 242096d2f801a6f65c89b2b220251bfe 217816 web optional curl_7.50.1-1_amd64.deb 6c49cfe91b2702e4962de533bda56537 4148696 debug extra libcurl3-dbg_7.50.1-1_amd64.deb b5d02937ca80c39a37613b24f557c730 277594 libs optional libcurl3-gnutls_7.50.1-1_amd64.deb 5418844c48c4075da8f3cf8a91406b55 283932 libs optional libcurl3-nss_7.50.1-1_amd64.deb 7056b45656122611a218f347341e2ba7 279808 libs optional libcurl3_7.50.1-1_amd64.deb 0adbfbeb241024538a9d8762709b635a 1996982 doc optional libcurl4-doc_7.50.1-1_all.deb dd933adee9af8d40e2c955478346a0dc 360150 libdevel optional libcurl4-gnutls-dev_7.50.1-1_amd64.deb ca3bd4895add336caaa6ddefa5771d92 366764 libdevel optional libcurl4-nss-dev_7.50.1-1_amd64.deb c3d4b6ff483b18a82e2e30b2964a2cf4 361942 libdevel optional libcurl4-openssl-dev_7.50.1-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJXoeN4AAoJEG8My+AhYkcoj3cP/2nz1AjTG65ooU3BKzP1YCYd E9ucE+Y6srBj9vBSlWsX5NCXQOfbLkuKMQxAJTXxkRyHupcqhLgeJx465tkBqd+C s1ZpOB3vNdKvNtXqD/11x8g6o6S/ghlfoeYQZrZcQzRNFM72PnQCm5oYe2PaJvQx hsHvSMnqsVfuxTB8nNKGZFIjGF4jzsMWOoWAUYm4q6h1JoJoWLKXa6PlJxJ+r4qu RvTKohalMOAMMusAcfPCyL/rzj0CX5T5HYgbRMow/AY0DtCZGx9We5EvogZuOEgT oMB8k/K/hlLxpBVj2viE2DbdlPl0Yc46/GdrR2SVIiIydWPUpWMF3Q7wCOhegeaQ 7ZQe8jUsSCXyVrPQPxQPVAOiYgYgspZYk1+XS8C6gdFLbgXmh2FHwOPQVQm48ycB /ulD209WZHNaooDdNfVNjX68HgocYv9a8sJj9PcNH5y1IVn0l10LW4mndpoUqb6b SILX68IWggd91dGUzPLqSxVlzVGl7k8eamnD6F2SsgLoy6KwGi5jub9CLRrsJjr3 /Dt3Lfi5IVKyrigudVCoKpjATFpacxUVL+Hv0nHaHD/kiRf9wjU+U1Qwks/zeXAp wJyXte6FYwIjcrwkcesKd5zQBn4sGVFdBja/HWeQ0gNZD/LG5xO1sbsNzmGOZSFg 1mcQjgKr7K3jTFxjpYJ7 =PYKr -----END PGP SIGNATURE-----
--- End Message ---
