← Back to team overview

debcrafters-packages team mailing list archive

[Bug 2112033] [NEW] Merge libseccomp from Debian Unstable for questing

 

Public bug reported:

Scheduled-For: ubuntu-25.06
Ubuntu: 2.5.5-1ubuntu6
Debian Unstable: 2.6.0-2

A new release of libseccomp is available for merging from Debian
Unstable.

If it turns out this needs a sync rather than a merge, please change the
tag 'dcr-merge' to 'dcr-sync', and (optionally) update the title as
desired.

If this merge pulls in a new upstream version, also consider adding an
entry to the questing Release Notes:
https://discourse.ubuntu.com/t/questing-quokka-release-notes/

### New Debian Changes ###

libseccomp (2.6.0-2) unstable; urgency=medium

  * Upload to unstable.
  * Disable valgrind unit tests, it's not stable enough.
  * Cherry-pick upstream fixes:
    - tests_remove_the_fuzzer_from_test_62-sim-arch_transactions.patch
    - hash_fix_strict_aliasing_UB_in_MurMur_hash_implementation.patch
    - api_fix_seccomp_export_bpf_mem_out-of-bounds_read.patch

 -- Felix Geyer <fgeyer@xxxxxxxxxx>  Thu, 20 Mar 2025 22:12:14 +0100

libseccomp (2.6.0-1) experimental; urgency=medium

  * New upstream release. (Closes: #1088935)
  * Drop backported loongarch64 patches, applied upstream.
  * Drop python_Fix_distutils_DeprecationWarning.patch, applied upstream.
  * Update symbols file.
  * Fix watch file.
  * Refresh upstream signing keys.
  * Run unit tests in parallel.

 -- Felix Geyer <fgeyer@xxxxxxxxxx>  Fri, 24 Jan 2025 22:10:51 +0100

libseccomp (2.5.5-2) unstable; urgency=medium

  * Revert: Dynamically skip autopkgtests when the test runner already applies
    seccomp restrictions.
    - Container based backends usually apply a seccomp filter so it's better
      to declare the isolation-machine restriction.
  * Backport support for syscalls up to kernel v6.12-rc5 and loongarch64.
    (Closes: #1051323)
    - syscalls_update_to_Linux_v6.0.patch
    - tests_add_fstatfs_syscall_in_the_06-sim-actions.patch
    - arch_Add_64-bit_LoongArch_support.patch
    - tests_Add_64-bit_LoongArch_support.patch
    - doc_update_README_and_manpage_for_64-bit_LoongArch.patch
    - tests_Fix_wrong_syscall-error_in_test_29.patch
    - tests_only_use_bogus_syscall_numbers_in_test_29.patch
    - arch_unify_handling_of_syscall.tbl_in_arch-syscall-validate.patch
    - arch_adapt_arch-syscall-validate_to_Linux_6.11.patch
    - syscalls_Update_the_syscall_table_for_Linux_v6.12-rc5.patch

 -- Felix Geyer <fgeyer@xxxxxxxxxx>  Sun, 24 Nov 2024 21:54:16 +0100


### Old Ubuntu Delta ###

libseccomp (2.5.5-1ubuntu6) plucky; urgency=medium

  * No-change rebuild with Python 3.13 only

 -- Graham Inggs <ginggs@xxxxxxxxxx>  Tue, 04 Mar 2025 17:31:09 +0000

libseccomp (2.5.5-1ubuntu5) plucky; urgency=medium

  * SRU: #2083480: No-change rebuild to add support for Python 3.13.

 -- Matthias Klose <doko@xxxxxxxxxx>  Wed, 13 Nov 2024 09:59:54 +0100

libseccomp (2.5.5-1ubuntu4) oracular-proposed; urgency=medium

  * LP: #2076340: No-change rebuild to pick up changed build flags on
    ppc64el and s390x.

 -- Matthias Klose <doko@xxxxxxxxxx>  Thu, 08 Aug 2024 14:55:38 +0200

libseccomp (2.5.5-1ubuntu3) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@xxxxxxxxxx>  Sun, 31 Mar 2024
07:58:07 +0000

libseccomp (2.5.5-1ubuntu2) noble; urgency=medium

  * No-change rebuild to build with python3.12 only.

 -- Matthias Klose <doko@xxxxxxxxxx>  Sat, 16 Mar 2024 23:14:35 +0100

libseccomp (2.5.5-1ubuntu1) noble; urgency=medium

  * Merge from Debian unstable; remaining changes:
    - Add autopkgtests
  * Added changes:
    - d/t/test-filter: generate syscalls list from src/syscalls.csv rather than
      shipping a static list to ensure all get tested via autopkgtests
  * Dropped changes:
    - d/t/data/all-5.16-rc1.filter: remove static syscall list

 -- Alex Murray <alex.murray@xxxxxxxxxxxxx>  Fri, 02 Feb 2024 13:30:43
+1030

** Affects: libseccomp (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: dcr-merge

** Changed in: libseccomp (Ubuntu)
    Milestone: None => ubuntu-25.06

-- 
You received this bug notification because you are a member of
Debcrafters packages, which is subscribed to libseccomp in Ubuntu.
https://bugs.launchpad.net/bugs/2112033

Title:
  Merge libseccomp from Debian Unstable for questing

Status in libseccomp package in Ubuntu:
  New

Bug description:
  Scheduled-For: ubuntu-25.06
  Ubuntu: 2.5.5-1ubuntu6
  Debian Unstable: 2.6.0-2

  A new release of libseccomp is available for merging from Debian
  Unstable.

  If it turns out this needs a sync rather than a merge, please change
  the tag 'dcr-merge' to 'dcr-sync', and (optionally) update the title
  as desired.

  If this merge pulls in a new upstream version, also consider adding an
  entry to the questing Release Notes:
  https://discourse.ubuntu.com/t/questing-quokka-release-notes/

  ### New Debian Changes ###

  libseccomp (2.6.0-2) unstable; urgency=medium

    * Upload to unstable.
    * Disable valgrind unit tests, it's not stable enough.
    * Cherry-pick upstream fixes:
      - tests_remove_the_fuzzer_from_test_62-sim-arch_transactions.patch
      - hash_fix_strict_aliasing_UB_in_MurMur_hash_implementation.patch
      - api_fix_seccomp_export_bpf_mem_out-of-bounds_read.patch

   -- Felix Geyer <fgeyer@xxxxxxxxxx>  Thu, 20 Mar 2025 22:12:14 +0100

  libseccomp (2.6.0-1) experimental; urgency=medium

    * New upstream release. (Closes: #1088935)
    * Drop backported loongarch64 patches, applied upstream.
    * Drop python_Fix_distutils_DeprecationWarning.patch, applied upstream.
    * Update symbols file.
    * Fix watch file.
    * Refresh upstream signing keys.
    * Run unit tests in parallel.

   -- Felix Geyer <fgeyer@xxxxxxxxxx>  Fri, 24 Jan 2025 22:10:51 +0100

  libseccomp (2.5.5-2) unstable; urgency=medium

    * Revert: Dynamically skip autopkgtests when the test runner already applies
      seccomp restrictions.
      - Container based backends usually apply a seccomp filter so it's better
        to declare the isolation-machine restriction.
    * Backport support for syscalls up to kernel v6.12-rc5 and loongarch64.
      (Closes: #1051323)
      - syscalls_update_to_Linux_v6.0.patch
      - tests_add_fstatfs_syscall_in_the_06-sim-actions.patch
      - arch_Add_64-bit_LoongArch_support.patch
      - tests_Add_64-bit_LoongArch_support.patch
      - doc_update_README_and_manpage_for_64-bit_LoongArch.patch
      - tests_Fix_wrong_syscall-error_in_test_29.patch
      - tests_only_use_bogus_syscall_numbers_in_test_29.patch
      - arch_unify_handling_of_syscall.tbl_in_arch-syscall-validate.patch
      - arch_adapt_arch-syscall-validate_to_Linux_6.11.patch
      - syscalls_Update_the_syscall_table_for_Linux_v6.12-rc5.patch

   -- Felix Geyer <fgeyer@xxxxxxxxxx>  Sun, 24 Nov 2024 21:54:16 +0100


  ### Old Ubuntu Delta ###

  libseccomp (2.5.5-1ubuntu6) plucky; urgency=medium

    * No-change rebuild with Python 3.13 only

   -- Graham Inggs <ginggs@xxxxxxxxxx>  Tue, 04 Mar 2025 17:31:09 +0000

  libseccomp (2.5.5-1ubuntu5) plucky; urgency=medium

    * SRU: #2083480: No-change rebuild to add support for Python 3.13.

   -- Matthias Klose <doko@xxxxxxxxxx>  Wed, 13 Nov 2024 09:59:54 +0100

  libseccomp (2.5.5-1ubuntu4) oracular-proposed; urgency=medium

    * LP: #2076340: No-change rebuild to pick up changed build flags on
      ppc64el and s390x.

   -- Matthias Klose <doko@xxxxxxxxxx>  Thu, 08 Aug 2024 14:55:38 +0200

  libseccomp (2.5.5-1ubuntu3) noble; urgency=medium

    * No-change rebuild for CVE-2024-3094

   -- Steve Langasek <steve.langasek@xxxxxxxxxx>  Sun, 31 Mar 2024
  07:58:07 +0000

  libseccomp (2.5.5-1ubuntu2) noble; urgency=medium

    * No-change rebuild to build with python3.12 only.

   -- Matthias Klose <doko@xxxxxxxxxx>  Sat, 16 Mar 2024 23:14:35 +0100

  libseccomp (2.5.5-1ubuntu1) noble; urgency=medium

    * Merge from Debian unstable; remaining changes:
      - Add autopkgtests
    * Added changes:
      - d/t/test-filter: generate syscalls list from src/syscalls.csv rather than
        shipping a static list to ensure all get tested via autopkgtests
    * Dropped changes:
      - d/t/data/all-5.16-rc1.filter: remove static syscall list

   -- Alex Murray <alex.murray@xxxxxxxxxxxxx>  Fri, 02 Feb 2024 13:30:43
  +1030

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libseccomp/+bug/2112033/+subscriptions



Follow ups