On Thu, 29 Aug 2019, Agustin Martin wrote:
This message is sent to all packages that depend in some way on
libaspell15 (pdo addresses bcc'ed)
A potentially unbounded buffer over-read has been found in in GNU
Aspell 0.60.*. Package aspell 0.60.7-1 has been uploaded to Debian
experimental, including upstream patch to deal with this problem.
It looks like you just applied the patches from Git. This will not work with
a release as Aspell uses a lot of generated source files which are not checked
into git. You need to run 'maintainer/autogen' to update them after applying
the patch. Assuming the normal Debian build process rebuilds the automake/conf
related bits then you can likely get away with just doing a:
cd auto/
perl -I ./ mk-src.pl
perl -I ./ mk-doc.pl
touch auto
cd ..
There are some tests in test/. There not very expensive and will make sure
that that Aspell is correctly patched with the new interface intended for
working with wide-characters You should be able to run the tests by doing a
make -C test
The tests are completely independent of the normal build process. The build
process reconfigures and rebuilds aspell into test/build and installs it
locally into test/inst. It does configure with --enable-maintainer-mode so it
might update some files in the source directory. If that is a problem you can
easily patch the Makefile beforehand. I can also fix that upstream to make
it easier to disable.
Kevin
(Aspell Maintainer)
