Package: release.debian.org Control: affects -1 + src:lua5.4 X-Debbugs-Cc: lua...@packages.debian.org User: release.debian....@packages.debian.org Usertags: pu Tags: bookworm X-Debbugs-Cc: sgolo...@debian.org locutusofb...@debian.org lena.voy...@canonical.com Severity: normal
[ Reason ] As described in https://bugs.debian.org/1072460 , the current lua5.4 in Debian Stable (Bookworm) misses several symbols that were supposed to be exported while they still present in the lua headers. This causes undefined references at link time when building some packages. This bug is documented in https://bugs.debian.org/1034800 , and the fix is already present in Debian Testing/Unstable. This will be a non-maintainer upload. The list maintainer, the team as well as the recent uploaders were informed in advance (in Bug#1072460 and the CC list of the current bug report). [ Impact ] If the update is not approved, some software will fail to be built from source in Debian. One of the example is xmake 2.9.1+ (https://tracker.debian.org/pkg/xmake). [ Tests ] Manually tested. [ Risks ] Minimal. The changes only involve manually-maintained symbol table at debian/version-script. Only new symbols are added and no symbol was removed, making this change harmless. [ Checklist ] [X] *all* changes are documented in the d/changelog [X] I reviewed all changes and I approve them [X] attach debdiff against the package in (old)stable [X] the issue is verified as fixed in unstable [ Changes ] Add missing symbols into debian/version-script. For details, see the attached debdiff. Thanks, Boyuan Yang
diff -Nru lua5.4-5.4.4/debian/changelog lua5.4-5.4.4/debian/changelog --- lua5.4-5.4.4/debian/changelog 2022-07-17 07:56:01.000000000 -0400 +++ lua5.4-5.4.4/debian/changelog 2024-06-02 10:34:23.000000000 -0400 @@ -1,3 +1,11 @@ +lua5.4 (5.4.4-3+deb12u1) bookworm; urgency=medium + + * Non-maintainer upload. + * debian/version-script: Export additional missing symbols for lua 5.4.4. + (Closes: #1034800) + + -- Boyuan Yang <by...@debian.org> Sun, 02 Jun 2024 10:34:23 -0400 + lua5.4 (5.4.4-3) unstable; urgency=medium * Add a patch from upstream which fixes CVE-2022-33099, double free diff -Nru lua5.4-5.4.4/debian/version-script lua5.4-5.4.4/debian/version-script --- lua5.4-5.4.4/debian/version-script 2022-07-17 07:56:01.000000000 -0400 +++ lua5.4-5.4.4/debian/version-script 2024-06-02 10:32:23.000000000 -0400 @@ -6,6 +6,7 @@ lua_callk; lua_checkstack; lua_close; + lua_closeslot; lua_compare; lua_concat; lua_copy; @@ -35,6 +36,7 @@ lua_isstring; lua_isuserdata; lua_isyieldable; + luaL_addgsub; lua_len; lua_load; lua_newstate; @@ -66,6 +68,7 @@ lua_resume; lua_rotate; lua_setallocf; + lua_setcstacklimit; lua_setfield; lua_setglobal; lua_sethook;
signature.asc
Description: This is a digitally signed message part