Your message dated Fri, 26 Jun 2026 17:18:55 +0000
with message-id <[email protected]>
and subject line Bug#1140168: fixed in dtrace 2.0.7-2
has caused the Debian Bug report #1140168,
regarding link dtrace statically against libbinutils
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1140168: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140168
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: src:dtrace
Version: 2.0.7-1
Severity: serious
Tags: sid forky patch
dtrace uses the private libbinutils APIs, which result in
uninstallability when binutils is updated:
Package: libdtrace2
Depends: libbinutils (>= 2.46), libbinutils (<< 2.46.1), ...
to avoid this, please link dtrace statically against libbinutils, and
record the dependency in a built-using attribute.
The attached patch assumes that dtrace can be linked with libctf-nobfd.
diff -Nru dtrace-2.0.7/debian/changelog dtrace-2.0.7/debian/changelog
--- dtrace-2.0.7/debian/changelog 2026-05-12 23:55:24.000000000 +0200
+++ dtrace-2.0.7/debian/changelog 2026-06-16 16:47:27.000000000 +0200
@@ -1,3 +1,13 @@
+dtrace (2.0.7-1.1) UNRELEASED; urgency=medium
+
+ * Link against libctf-nobfd. Closes: #1140166.
+ * Link against libopcodes_pic.
+ * Add Built-Using attributes.
+ * libdtrace2: Don't hard-code dependencies on shared libs. Closes: #1140165.
+ * Make the build verbose.
+
+ -- Matthias Klose <[email protected]> Tue, 16 Jun 2026 16:47:27 +0200
+
dtrace (2.0.7-1) unstable; urgency=medium
* Fix CVE-2026-21996: divide-by-zero if section header data corruped.
diff -Nru dtrace-2.0.7/debian/control dtrace-2.0.7/debian/control
--- dtrace-2.0.7/debian/control 2026-05-12 23:55:24.000000000 +0200
+++ dtrace-2.0.7/debian/control 2026-06-16 16:47:27.000000000 +0200
@@ -12,6 +12,7 @@
Package: dtrace
Architecture: amd64 arm64
+Built-Using: ${Built-Using}
Depends: ${misc:Depends}, ${shlibs:Depends}
Description: Dynamic tracing for Linux (DTrace)
This is the official Linux port of the advanced tracing tool DTrace.
@@ -25,8 +26,9 @@
Package: libdtrace2
Architecture: amd64 arm64
+Built-Using: ${Built-Using}
Depends: ${misc:Depends}, ${shlibs:Depends},
- fuse3, libctf0, libelf1t64, libfuse3-4, libpcap0.8t64, libpfm4, libz1
+ fuse3
Description: Dynamic tracing for Linux (DTrace) (library)
This is the official Linux port of the advanced tracing tool DTrace.
.
@@ -41,6 +43,7 @@
Package: libdtrace2-dev
Architecture: amd64 arm64
+Built-Using: ${Built-Using}
Depends: ${misc:Depends},
libdtrace2 (= ${binary:Version})
Description: Dynamic tracing for Linux (DTrace) (development)
diff -Nru dtrace-2.0.7/debian/patches/series dtrace-2.0.7/debian/patches/series
--- dtrace-2.0.7/debian/patches/series 2026-05-12 23:55:24.000000000 +0200
+++ dtrace-2.0.7/debian/patches/series 2026-06-16 16:47:27.000000000 +0200
@@ -1,3 +1,4 @@
# You must remove unused comment lines for the released package.
debian-configure.patch
debian-fix-sed-path.patch
+static-link.diff
diff -Nru dtrace-2.0.7/debian/patches/static-link.diff dtrace-2.0.7/debian/patches/static-link.diff
--- dtrace-2.0.7/debian/patches/static-link.diff 1970-01-01 01:00:00.000000000 +0100
+++ dtrace-2.0.7/debian/patches/static-link.diff 2026-06-16 16:47:27.000000000 +0200
@@ -0,0 +1,20 @@
+--- a/libdtrace/Build
++++ b/libdtrace/Build
+@@ -82,7 +82,7 @@ SHLIBS += libdtrace
+ libdtrace_DIR := $(current-dir)
+ libdtrace_TARGET = libdtrace
+ ifdef HAVE_LIBCTF
+-libdtrace_LIBS := -lctf
++libdtrace_LIBS := -lctf-nobfd
+ else
+ libdtrace_LIBS := -ldtrace-ctf
+ endif
+@@ -95,7 +95,7 @@ libdtrace_SECONDARY := libproc libport
+
+ # Required for dt_pid.c for varying instruction lengths on x86
+ ifeq ($(shell uname -m), x86_64)
+-libdtrace_LIBS += -lopcodes
++libdtrace_LIBS += -lopcodes_pic
+ endif
+
+ # Disable certain warnings for these files
diff -Nru dtrace-2.0.7/debian/rules dtrace-2.0.7/debian/rules
--- dtrace-2.0.7/debian/rules 2026-05-12 23:55:24.000000000 +0200
+++ dtrace-2.0.7/debian/rules 2026-06-16 16:47:27.000000000 +0200
@@ -5,10 +5,15 @@
export DEB_CFLAGS_MAINT_APPEND = -Wall -pedantic
export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
+source_version := $(shell dpkg-query -W -f="\$${Version}\n" binutils-dev)
+BUILT_USING := $(shell dpkg-query -f '$${source:Package} (= $${source:Version}), ' -W binutils-dev)
+
include /usr/share/dpkg/pkg-info.mk
export DEB_VERSION_UPSTREAM
+export verbose = yes
+
%:
dh $@
@@ -22,3 +27,8 @@
override_dh_auto_install:
dh_auto_install -- install-test
+
+override_dh_gencontrol:
+ dh_gencontrol -a -- \
+ -Vbinutils:Version=$(source_version) \
+ -VBuilt-Using="$(BUILT_USING)"
--- End Message ---
--- Begin Message ---
Source: dtrace
Source-Version: 2.0.7-2
Done: Kris Van Hees <[email protected]>
We believe that the bug you reported is fixed in the latest version of
dtrace, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Kris Van Hees <[email protected]> (supplier of updated dtrace package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 16 Jun 2026 19:46:35 -0400
Source: dtrace
Architecture: source
Version: 2.0.7-2
Distribution: unstable
Urgency: medium
Maintainer: Kris Van Hees <[email protected]>
Changed-By: Kris Van Hees <[email protected]>
Closes: 1140165 1140166 1140167 1140168
Changes:
dtrace (2.0.7-2) unstable; urgency=medium
.
* Apply fixes in control file. (Closes: #1140165)
* Use static linking for libbinutils. (Closes: #1140166, #1140168)
* Suppress adding utsname info in USDT ELF notes. (Closes: #1140167)
Checksums-Sha1:
81996f2016dae1c83853d18d0db9b54b04d68bb5 2143 dtrace_2.0.7-2.dsc
6540103d931ccfcf2580be0af879eb08a3e2eb9a 8844 dtrace_2.0.7-2.debian.tar.xz
339ad50f96405e862e9f2b840433629157d73ff3 7423 dtrace_2.0.7-2_source.buildinfo
Checksums-Sha256:
f999764bb2cd0d65cce1faa98c023ab6cec3eff74c480fb1ce902dd5268c2a7c 2143
dtrace_2.0.7-2.dsc
ee47aecdce4d2579439662ff36e064cf222c9d1392d06835d10a879bb787f148 8844
dtrace_2.0.7-2.debian.tar.xz
fb883112ad62baf63317ded5bb291c2746e8484c64b8f9b0c1a7d152821027b4 7423
dtrace_2.0.7-2_source.buildinfo
Files:
ef41e33168f632f0f505aa863b1035fd 2143 utils optional dtrace_2.0.7-2.dsc
5132e790d990a8755bfc5d1a549f17ed 8844 utils optional
dtrace_2.0.7-2.debian.tar.xz
7d5770cfc0b5f019a9e9bfc6ac41ae5a 7423 utils optional
dtrace_2.0.7-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=wPS2
-----END PGP SIGNATURE-----
pgp4Qxt86nBMR.pgp
Description: PGP signature
--- End Message ---
