Bug#774211: freeze exception for binutils 2.25-3
Package: release.debian.org Tags: sid jessie please grant a freeze exception for binutils 2.25-3 in jessie. The current version in jessie is built from the 2.25 release branch, and this update would move the final 2.25 into jessie. The package probably has more changes than needed, otoh it fixes some issues which should get into jessie: - several fixes for CVE issues, the security team asked to include these into jessie. - CVE-2014-8484 (PR binutils/17509). - CVE-2014-8485, CVE-2014-8504 (PR binutils/17510). - CVE-2014-8501, CVE-2014-8502, CVE-2014-8503 (PR binutils/17512). - gold fixes on ARM32, now capable to build chromium. - enabled gold on arm64. - A lot of fixes and updates for both the new ppc64el and arm64 architectures. These new architectures were added pretty close to the freeze, so some updates shouldn't come unexpected. - Fixes RC issue #728529 (the rebuilt smartmontools 6.3+svn4002-2+b2 apparently already is in testing). - The packages with the binNMU requests in #773972 should transition to testing as well. Attached is the Debian changelog, mentioning too all upstream changes, minus the ones which only affect architectures not released by Debian. I'm planning no further binutils for jessie. Matthias binutils (2.25-3) unstable; urgency=medium * Don't build as a release candidate, fixing the upper shlibs dependency. * Refresh patches. -- Matthias Klose Thu, 25 Dec 2014 13:45:39 +0100 binutils (2.25-2) unstable; urgency=medium * Apply proposed patch for PR ld/17742 (don't create .eh_frame_hdr on shared lib bfd). -- Matthias Klose Thu, 25 Dec 2014 06:55:02 +0100 binutils (2.25-1) unstable; urgency=medium * binutils 2.25 release. - MIPS specific gas update. -- Matthias Klose Thu, 25 Dec 2014 05:49:55 +0100 binutils (2.24.90.20141219-1) unstable; urgency=medium * Snapshot, taken from the 2.25 branch 20141219. - Fix PR ld/17713 (segfault), PR ld/17689 (link error), PR ld/15228. * Apply proposed patch for PR gold/17729 (fixing ~600 GCC test failures). -- Matthias Klose Fri, 19 Dec 2014 18:59:30 +0100 binutils (2.24.90.20141209-1) unstable; urgency=medium * Snapshot, taken from the 2.25 branch 20141209. - Fix PR binutils/17677, PR gold/17670 (powerpc), PR gold/17566 (powerpc). -- Matthias Klose Tue, 09 Dec 2014 09:31:53 +0100 binutils (2.24.90.20141201-1) unstable; urgency=medium * Snapshot, taken from the 2.25 branch 20141201. - Fix PR ld/16452, PR/ld/16457: Don't output symbol version requirement for non-DT_NEEDED libs. Closes: #728529. -- Matthias Klose Mon, 01 Dec 2014 21:53:10 +0100 binutils (2.24.90.20141128-1) unstable; urgency=medium * Snapshot, taken from the 2.25 branch 20141128. - gold: Fix corrupted .eh_frame section with LTO and --gc-sections. - gold: Fix PowerPC relaxation corner case. * Relax upper shlibs version dependency to the next release candidate. -- Matthias Klose Fri, 28 Nov 2014 14:20:09 +0100 binutils (2.24.90.20141124-1) unstable; urgency=medium * Snapshot, taken from the 2.25 branch 20141124. - ppc alignment fixes, Go fixes - PR binutils/17597, PR binutils/17512, PR binutils/17521, PR binutils/17533, trunk backports for fixing the recent CVE issues. - One more fix for Cortex-A53 Erratum 835769 (AArch64). -- Matthias Klose Mon, 24 Nov 2014 17:29:27 +0100 binutils (2.24.90.2014-2) unstable; urgency=medium * Fix ld -r abort in _bfd_elf_write_section_eh_frame, taken from the trunk. Closes: #769067. -- Matthias Klose Tue, 11 Nov 2014 11:10:27 +0100 binutils (2.24.90.2014-1) unstable; urgency=medium * Snapshot, taken from the 2.25 branch 2014. - Update .MIPS.abiflags to support MIPS R6. * gold: Misc updates for the AArch64 backend, taken from the trunk. * Mention some CVE issues, fixed in the 20141104 snapshot: - CVE-2014-8484 (PR binutils/17509). - CVE-2014-8485, CVE-2014-8504 (PR binutils/17510). - CVE-2014-8501, CVE-2014-8502, CVE-2014-8503 (PR binutils/17512). * Fix some lintian warnings. -- Matthias Klose Tue, 11 Nov 2014 07:55:51 +0100 binutils (2.24.90.20141104-1) unstable; urgency=medium * Snapshot, taken from the 2.25 branch 20141104. - Fix PR bfd/17481. - Fix PR17488, powerpc64-linux-ld segfault. LP: #1381580. - Fix PR ld/17492. LP: #882353. - Fix PR gas/17493. LP: #1051156. - Add gcc-4.9 libgomp symbols requiring --plt-thread-safe for power7. - PowerPC64 ELFv1 function symbol definition vs LTO and discarded sections. - ppc: enable msgclr and msgsnd on Power8. - Relax ppc64_elf_tls_optimize assertion. * Pick patch from the trunk: - Support relexation for the gold aarch64 backend. - AArch64: move bogus assertion. - Fix build configured with --enable-targets=aarch64-linux. - Fix running ld-unique tests on ARM. - gas: Recognize: AArch64 ThunderX processor. -- Matthias Klose Tue, 04 Nov
Bug#774211: freeze exception for binutils 2.25-3
forgot to mention that there are no regression in the binutils testsuite on all release architectures, and that there are no regression in the gcc-4.8 and gcc-4.9 testsuites on all release architectures. -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/54a28c9f.2020...@debian.org
Bug#774211: freeze exception for binutils 2.25-3
On 2014-12-30 14:05, Matthias Klose wrote: - several fixes for CVE issues, the security team asked to include these into jessie. - CVE-2014-8484 (PR binutils/17509). - CVE-2014-8485, CVE-2014-8504 (PR binutils/17510). - CVE-2014-8501, CVE-2014-8502, CVE-2014-8503 (PR binutils/17512). Please note that PR binutils/17512 includes much more issues/fixes than those CVEs. And there is also PR binutils/17531 ... -- Alexander Cherepanov -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/54a29a3c.9090...@mccme.ru
Bug#774211: freeze exception for binutils 2.25-3
On 12/30/2014 01:27 PM, Alexander Cherepanov wrote: > On 2014-12-30 14:05, Matthias Klose wrote: >> - several fixes for CVE issues, the security team asked to include these >> into jessie. >> - CVE-2014-8484 (PR binutils/17509). >> - CVE-2014-8485, CVE-2014-8504 (PR binutils/17510). >> - CVE-2014-8501, CVE-2014-8502, CVE-2014-8503 (PR binutils/17512). > > Please note that PR binutils/17512 includes much more issues/fixes than those > CVEs. And there is also PR binutils/17531 ... sure, that one should go in as well. I'll be mostly afk during the next two weeks, so a NMU addressing these would be appreciated. Could you prepare one? Matthias -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/54a29de1.4030...@debian.org
Bug#774211: freeze exception for binutils 2.25-3
On 12/30/2014 01:43 PM, Matthias Klose wrote: > On 12/30/2014 01:27 PM, Alexander Cherepanov wrote: >> On 2014-12-30 14:05, Matthias Klose wrote: >>> - several fixes for CVE issues, the security team asked to include these >>> into jessie. >>> - CVE-2014-8484 (PR binutils/17509). >>> - CVE-2014-8485, CVE-2014-8504 (PR binutils/17510). >>> - CVE-2014-8501, CVE-2014-8502, CVE-2014-8503 (PR binutils/17512). >> >> Please note that PR binutils/17512 includes much more issues/fixes than those >> CVEs. And there is also PR binutils/17531 ... > > sure, that one should go in as well. I'll be mostly afk during the next two > weeks, so a NMU addressing these would be appreciated. Could you prepare one? unfortunately, there was no help with a backport :-/ 2.25-4 now backports the changes up to the end of 2014, leaving out the new 2015 changes for 17512. I won't spend time on these, as upstream committed to backport these to the 2.25 branch themself. Matthias -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/54b906b8.6010...@debian.org
Bug#774211: freeze exception for binutils 2.25-3
On Tue, Dec 30, 2014 at 12:29:35PM +0100, Matthias Klose wrote: > forgot to mention that there are no regression in the binutils testsuite on > all > release architectures, and that there are no regression in the gcc-4.8 and > gcc-4.9 testsuites on all release architectures. Did someone from the release team have a chance to look into these? If the version from sid isn't acceptable we'll need some time to fix this through tpu (and binutils-mingw-w64 needs to be dealt with as well) Cheers, Moritz -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20150126113032.GA6532@pisco.westfalen.local
Bug#774211: freeze exception for binutils 2.25-3
Hi guys, https://sourceware.org/bugzilla/show_bug.cgi?id=17512 is still growing, and porting all the patches to 2.24.90.20141023-1 is getting less and less trivial. If you short the distance with the upstream version, that will put a lot of work of the security-team off :) Thanks for your work in the release team. Cheers, luciano -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/2980127.7AZxXk6CMa@box
Bug#774211: freeze exception for binutils 2.25-3
On 02/23/2015 10:29 PM, Niels Thykier wrote: > Control: tags -1 moreinfo > > On 2014-12-30 12:29, Matthias Klose wrote: >> forgot to mention that there are no regression in the binutils testsuite on >> all >> release architectures, and that there are no regression in the gcc-4.8 and >> gcc-4.9 testsuites on all release architectures. >> >> > > Hi Matthias, > > I am afraid that there are reports of regressions, namely #772958. Ivo > reported that the example works in Jessie but fails in unstable. #772958 reports an issue in testing, with a binutils version number found in unstable. I asked the submitter to clarify. Also "Ivo reported" doesn't help much. Please be more specific. I'll prepare an upload anyway. Matthias -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/54ed715a.7070...@debian.org
Bug#774211: freeze exception for binutils 2.25-3
On 2015-02-25 07:53, Matthias Klose wrote: > On 02/23/2015 10:29 PM, Niels Thykier wrote: >> Control: tags -1 moreinfo >> >> On 2014-12-30 12:29, Matthias Klose wrote: >>> forgot to mention that there are no regression in the binutils testsuite on >>> all >>> release architectures, and that there are no regression in the gcc-4.8 and >>> gcc-4.9 testsuites on all release architectures. >>> >>> >> >> Hi Matthias, >> >> I am afraid that there are reports of regressions, namely #772958. Ivo >> reported that the example works in Jessie but fails in unstable. > > #772958 reports an issue in testing, with a binutils version number found in > unstable. I asked the submitter to clarify. Also "Ivo reported" doesn't help > much. Please be more specific. > Hi Matthias, The message I wanted to convey was that Ivo (ivodd) informed me that he had tested the example mentioned in #772958 provided by the submitter and found it working as intended in testing. However, trying the same example in unstable reproduce the error reported in the bug. > I'll prepare an upload anyway. > > Matthias > Thank you, it will be much appreciated. ~Niels -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/54ed724b.1040...@thykier.net
Bug#774211: freeze exception for binutils 2.25-3
On 02/25/2015 07:57 AM, Niels Thykier wrote: > On 2015-02-25 07:53, Matthias Klose wrote: >> On 02/23/2015 10:29 PM, Niels Thykier wrote: >>> Control: tags -1 moreinfo >>> >>> On 2014-12-30 12:29, Matthias Klose wrote: forgot to mention that there are no regression in the binutils testsuite on all release architectures, and that there are no regression in the gcc-4.8 and gcc-4.9 testsuites on all release architectures. >>> >>> Hi Matthias, >>> >>> I am afraid that there are reports of regressions, namely #772958. Ivo >>> reported that the example works in Jessie but fails in unstable. >> >> #772958 reports an issue in testing, with a binutils version number found in >> unstable. I asked the submitter to clarify. Also "Ivo reported" doesn't help >> much. Please be more specific. >> > > Hi Matthias, > > The message I wanted to convey was that Ivo (ivodd) informed me that he > had tested the example mentioned in #772958 provided by the submitter > and found it working as intended in testing. However, trying the same > example in unstable reproduce the error reported in the bug. strange, because the original submitter replied now that he cannot reproduce this in testing. >> I'll prepare an upload anyway. >> >> Matthias >> > > Thank you, it will be much appreciated. now uploaded. -- To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/54edf0be.7030...@debian.org