Your message dated Tue, 30 Dec 2025 16:18:40 +0000
with message-id <[email protected]>
and subject line Bug#1112009: fixed in node-cipher-base 1.0.6+~1.0.3-1
has caused the Debian Bug report #1112009,
regarding node-cipher-base: autopkgtest regression on s390x: endianness issue
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1112009: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1112009
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: node-cipher-base
Version: 1.0.6-1
Severity: serious
User: [email protected]
Usertags: regression
X-Debbugs-CC: [email protected]
User: [email protected]
Usertags: s390x

Dear maintainer(s),

With a recent upload of node-cipher-base the autopkgtest of node-cipher-base fails in testing when that autopkgtest is run with the binary packages of node-cipher-base from unstable. Looking at the output, it seems that the fix for CVE-2025-9287 has endianness problem (bytes are swapped). I have no idea if this is a test only problem, or the patch has a problem. I copied some of the output at the bottom of this report.

Currently this regression is blocking the migration to testing [1]. Can you please investigate the situation and fix it?

Paul

[1] https://qa.debian.org/excuses.php?package=node-cipher-base

https://ci.debian.net/data/autopkgtest/testing/s390x/n/node-cipher-base/63663875/log.gz


 84s not ok 17 should be strictly equal
 84s   ---
 84s     operator: equal
 84s     expected: 'd2040002'
 84s     actual:   '04d20200'
84s at: Test.<anonymous> (/tmp/autopkgtest-lxc.7hdyz_hz/downtmp/autopkgtest_tmp/smokegJXUWQ/test/index.js:215:5)
 84s     stack: |-
 84s       Error: should be strictly equal
84s at Test.assert [as _assert] (/usr/share/nodejs/tape/lib/test.js:312:48) 84s at Test.bound [as _assert] (/usr/share/nodejs/tape/lib/test.js:95:17) 84s at Test.strictEqual (/usr/share/nodejs/tape/lib/test.js:476:7) 84s at Test.bound [as equals] (/usr/share/nodejs/tape/lib/test.js:95:17) 84s at Test.<anonymous> (/tmp/autopkgtest-lxc.7hdyz_hz/downtmp/autopkgtest_tmp/smokegJXUWQ/test/index.js:215:5) 84s at Test.bound [as _cb] (/usr/share/nodejs/tape/lib/test.js:95:17)
 84s           at Test.run (/usr/share/nodejs/tape/lib/test.js:115:28)
84s at Test.bound [as run] (/usr/share/nodejs/tape/lib/test.js:95:17) 84s at Immediate.next [as _onImmediate] (/usr/share/nodejs/tape/lib/results.js:157:7)
 84s           at process.processImmediate (node:internal/timers:483:21)
 84s   ...
 84s  84s 1..17
 84s # tests 17
 84s # pass  16
 84s # fail  1
 84s  84s autopkgtest [18:12:07]: test pkg-js-autopkgtest

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature


--- End Message ---
--- Begin Message ---
Source: node-cipher-base
Source-Version: 1.0.6+~1.0.3-1
Done: Bastien Roucariès <[email protected]>

We believe that the bug you reported is fixed in the latest version of
node-cipher-base, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Bastien Roucariès <[email protected]> (supplier of updated node-cipher-base 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 30 Dec 2025 15:36:05 +0100
Source: node-cipher-base
Architecture: source
Version: 1.0.6+~1.0.3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers 
<[email protected]>
Changed-By: Bastien Roucariès <[email protected]>
Closes: 1112009
Changes:
 node-cipher-base (1.0.6+~1.0.3-1) unstable; urgency=medium
 .
   * Team upload
 .
   [ Yadd ]
   * Multi-Arch: foreign
   * Embed typescript declarations and repack
   * New upstream version 1.0.6+~1.0.3
 .
   [ Pranav P ]
   * Add patch to fix test for Big-Endian platforms (Closes: #1112009)
 .
   [ Bastien Roucariès ]
   * upload to sid
Checksums-Sha1:
 fcc4316a109a34b11efe71546a92d2d3ed0d9db4 2632 
node-cipher-base_1.0.6+~1.0.3-1.dsc
 9354ed9d9ccab17a5de4e9861b40b65bbaace8aa 1601 
node-cipher-base_1.0.6+~1.0.3.orig-types-cipher-base.tar.gz
 e9bf8903fbcaf1c0406d9c10c043234f40ee7c3f 6995 
node-cipher-base_1.0.6+~1.0.3.orig.tar.gz
 29b2cfb72dbc61a4b25bed0413bff5ae29d50d5f 3736 
node-cipher-base_1.0.6+~1.0.3-1.debian.tar.xz
 e0b67076000214b8e26a6285b817054cda4a22c8 15781 
node-cipher-base_1.0.6+~1.0.3-1_source.buildinfo
Checksums-Sha256:
 efef587e01c4d28f93c8bfb0b005e679716b6804482879da1ac6f4dc096889d5 2632 
node-cipher-base_1.0.6+~1.0.3-1.dsc
 3f31622b2190891df4a17939393319ce8393aa096cdb53083e4352a03c361732 1601 
node-cipher-base_1.0.6+~1.0.3.orig-types-cipher-base.tar.gz
 cb81d2bae67ef1b61fb33018e7edd9e75ba5832324684e2546477ec7e5ddf856 6995 
node-cipher-base_1.0.6+~1.0.3.orig.tar.gz
 adaab17fb07d8d252459870d602523870bae97375679253191a16bac330bea88 3736 
node-cipher-base_1.0.6+~1.0.3-1.debian.tar.xz
 5a26ed8053cdd0249ac7a36bda8530bb45a3ae6872a0dd91dd51e87facea3757 15781 
node-cipher-base_1.0.6+~1.0.3-1_source.buildinfo
Files:
 539f051b31e4ac025c240b6b1cfd5b9d 2632 javascript optional 
node-cipher-base_1.0.6+~1.0.3-1.dsc
 d0591621ba33e8e91cd48e85426f1066 1601 javascript optional 
node-cipher-base_1.0.6+~1.0.3.orig-types-cipher-base.tar.gz
 b79c524140cfab17d9ea5ae85067411e 6995 javascript optional 
node-cipher-base_1.0.6+~1.0.3.orig.tar.gz
 922ec6cdeb48cf32eb042873f1992341 3736 javascript optional 
node-cipher-base_1.0.6+~1.0.3-1.debian.tar.xz
 fd148f932b87246041f7c413188cdb6b 15781 javascript optional 
node-cipher-base_1.0.6+~1.0.3-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=WO/I
-----END PGP SIGNATURE-----

Attachment: pgpyRZ9mW7Jw4.pgp
Description: PGP signature


--- End Message ---
-- 
Pkg-javascript-devel mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel

Reply via email to