On 19/04/2025 16:33, Jon Turney via Cygwin-apps wrote:
[...]
I've removed the cygwin=3.5.7-1 pin in scallywag, since the issue I was
worried about there seems to have been imaginary.
[...]
So, there was actually an issue there, which I'd forgotten about, where
the package builder was producing output packages where read permission
for 'other' users (not owner or group) were missing.
(Which seems to be an interaction between a change in 3.6.0 and odd
inheritable deny ACLs in the building VM)
Anyhow, I think I've fixed things more properly, by removing those weird
ACLs, but it seems the package builder was producing defective packages
during two time windows:
~14:00 UTC 2025-04-19 to ~12:00 UTC 2025-04-23
~16:30 UTC 2025-03-18 to ~15:30 UTC 2025-03-31
Apologies for the inconvenience.
It looks like the list of potentially effected packages is:
emacs 30.1-{1,2} Ken Brown
icu 76.1-1 Ken Brown
teckit 2.5.12-2 Ken Brown
libpng 1.6.47-1 Ken Brown
harfbuzz 11.0.1-1 Ken Brown
screen 5.0.0-1 Andrew Schulman
calm 20250329-1 Jon Turney (already rebuilt as 20250329-2)
lighthttpd 1.4.78-1 Glen Strauss (already superseded by 1.4.79-1)
iperf 2.0.13-1 ORPHANED
You might want to examine your packages, and if necessary, vault and
rebuild them with a revision number increment.
Once again, sorry about this.
