cross-toolchain-base-devs team mailing list archive

[Aurelien Jarno <aurel32@xxxxxxxxxx>]

Package: release.debian.org
Severity: normal
X-Debbugs-Cc: cross-toolchain-base-ports@xxxxxxxxxxxxxxxxxxx
Control: affects -1 + src:cross-toolchain-base-ports
User: release.debian.org@xxxxxxxxxxxxxxxxxxx
Usertags: unblock

Please unblock package cross-toolchain-base-ports

[ Reason ]
This is just a rebuild of cross-toolchain-base-ports against the latest
linux and glibc version. This is needed because
cross-toolchain-base-ports only builds arch:all packages and thus can't
be binNMUed. This should reduce the number of Extra-Source-Only packages
in Trixie.

In addition, this fixes three security issues on the libc versions
shipped by this package: CVE-2025-5702, CVE-2025-5745 and CVE-2025-8058.

[ Impact ]
Users using cross-toolchain-base-ports to build foreign static binaries
will get binaries with security issue if this unblock is not granted.

[ Tests ]
None besides the autopkgtest one.

[ Risks ]
The risk is quite low, it's just a rebuild of source packages already in
Trixie, but for foreign architectures.

[ Checklist ]
  [x] all changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in testing

[ Other info ]
I am not sure why the debian/no-packages file got added (it's not in the
git), but anyway it has no impact on the resulting packages.

unblock cross-toolchain-base-ports/74