cross-toolchain-base-devs team mailing list archive

[Aurelien Jarno <aurel32@xxxxxxxxxx>]

Package: release.debian.org
Severity: normal
X-Debbugs-Cc: cross-toolchain-base@xxxxxxxxxxxxxxxxxxx
Control: affects -1 + src:cross-toolchain-base
User: release.debian.org@xxxxxxxxxxxxxxxxxxx
Usertags: unblock

Please unblock package cross-toolchain-base

[ Reason ]
This is just a rebuild of cross-toolchain-base against the latest linux
and glibc version. This is needed because cross-toolchain-base only
builds arch:all packages and thus can't be binNMUed. This should reduce
the number of Extra-Source-Only packages in Trixie.

In addition, this fixes three security issues on the libc versions
shipped by this package: CVE-2025-5702, CVE-2025-5745 and CVE-2025-8058.

[ Impact ]
Users using cross-toolchain-base to build foreign static binaries will
get binaries with security issue if this unblock is not granted.

[ Tests ]
None besides the autopkgtest one.

[ Risks ]
The risk is quite low, it's just a rebuild of source packages already in
Trixie, but for foreign architectures.

[ Checklist ]
  [x] all changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in testing

[ Other info ]
I am not sure why the debian/no-packages file got added (it's not in the
git), but anyway it has no impact on the resulting packages.

unblock cross-toolchain-base/77

diff -Nru cross-toolchain-base-76/debian/changelog cross-toolchain-base-77/debian/changelog
--- cross-toolchain-base-76/debian/changelog	2025-05-19 19:41:33.000000000 +0200
+++ cross-toolchain-base-77/debian/changelog	2025-07-29 10:50:17.000000000 +0200
@@ -1,3 +1,10 @@
+cross-toolchain-base (77) unstable; urgency=medium
+
+  * Build using glibc 2.41-11.
+  * Build using linux 6.12.38.
+
+ -- Matthias Klose <doko@xxxxxxxxxx>  Tue, 29 Jul 2025 10:50:17 +0200
+
 cross-toolchain-base (76) unstable; urgency=medium
 
   * Fix typo for the dpkg-query fix in last upload.
diff -Nru cross-toolchain-base-76/debian/control cross-toolchain-base-77/debian/control
--- cross-toolchain-base-76/debian/control	2025-05-18 12:40:18.000000000 +0200
+++ cross-toolchain-base-77/debian/control	2025-07-29 10:50:17.000000000 +0200
@@ -9,9 +9,9 @@
 Build-Depends: binutils-multiarch,
   dpkg (>= 1.21.17), rdfind, symlinks, lsb-release,
   binutils-source (>= 2.44-3~),
-  glibc-source (>= 2.41-8~),
+  glibc-source (>= 2.41-11~),
   gcc-14-source (>= 14.2.0-19~), g++-14 (>= 14.2.0-19~),
-  linux-source-6.12 (>= 6.12.27-1~), linux-libc-dev (>= 6.12.27-1~),
+  linux-source-6.12 (>= 6.12.38-1~), linux-libc-dev (>= 6.12.38-1~),
   autoconf (>= 2.69), autoconf2.69,
   automake, bison (>= 1:2.3), chrpath, debhelper-compat (= 13),
   dpkg-dev (>= 1.15.3.1), fakeroot, file, flex,
diff -Nru cross-toolchain-base-76/debian/no-packages cross-toolchain-base-77/debian/no-packages
--- cross-toolchain-base-76/debian/no-packages	1970-01-01 01:00:00.000000000 +0100
+++ cross-toolchain-base-77/debian/no-packages	2025-07-29 10:50:17.000000000 +0200
@@ -0,0 +1 @@
+foobar
diff -Nru cross-toolchain-base-76/debian/rules cross-toolchain-base-77/debian/rules
--- cross-toolchain-base-76/debian/rules	2025-05-19 19:40:59.000000000 +0200
+++ cross-toolchain-base-77/debian/rules	2025-07-29 10:50:17.000000000 +0200
@@ -74,8 +74,8 @@
   export ELF_PACKAGE_METADATA
 endif
 
-MIN_VER_GLIBC		:= 2.41-8~
-MIN_VER_LINUX		:= 6.12.27-1~
+MIN_VER_GLIBC		:= 2.41-11~
+MIN_VER_LINUX		:= 6.12.38-1~
 MIN_VER_GCC		:= 14.2.0-19~
 MIN_VER_BINUTILS	:= 2.44-3~
 VER_GCC_BASE		:= 14