Your message dated Thu, 05 Sep 2024 15:11:32 +0000
with message-id <e1sme8y-007n24...@fasolo.debian.org>
and subject line Bug#1078816: fixed in ruby-redcloth 4.3.4-1
has caused the Debian Bug report #1078816,
regarding ruby-redcloth:FTBFS:build failure（test failed）
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1078816: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1078816
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: ruby-redcloth
Version: 4.3.3-1
Severity: serious
Tags: FTBFS, patch
User: debian-ri...@lists.debian.org
Usertags: riscv64
X-Debbugs-Cc: debian-ri...@lists.debian.org
Dear ruby-redcloth Maintainer,
The package ruby-redcloth build failed on arch riscv64. The crucial
buildd log below:
```
CVE-2023-31606
process malicious html without delay (FAILED - 1)
should keep the generated HTML the same
Failures:
1) CVE-2023-31606 process malicious html without delay
Failure/Error: expect(t2-t1).to be <= 3
expected: <= 3
got: 9.708168081
# ./spec/security/CVE-2023-31606_spec.rb:39:in `block (2 levels)
in <top (required)>'
Deprecation Warnings:
Using `should` from rspec-expectations' old `:should` syntax without
explicitly enabling the syntax is deprecated. Use the new `:expect`
syntax or explicitly enable `:should` with `config.expect_with(:rspec)
{ |c| c.syntax = :should }` instead. Called from
/<<PKGBUILDDIR>>/spec/custom_tags_spec.rb:33:in `block (2 levels) in
<top (required)>'.
If you need more of the backtrace for any of these deprecations to
identify where to make the necessary changes, you can configure
`config.raise_errors_for_deprecations!`, and it will turn the
deprecation warnings into errors, giving you the full backtrace.
1 deprecation warning total
Finished in 26.83 seconds (files took 7.57 seconds to load)
5799 examples, 1 failure
Failed examples:
rspec ./spec/security/CVE-2023-31606_spec.rb:10 # CVE-2023-31606
process malicious html without delay
/usr/bin/ruby3.1
-I/usr/share/rubygems-integration/all/gems/rspec-support-3.13.1/lib:/usr/share/rubygems-integration/all/gems/rspec-core-3.13.0/lib
/usr/share/rubygems-integration/all/gems/rspec-core-3.13.0/exe/rspec
--pattern ./spec/\*\*/\*_spec.rb --format documentation failed
ERROR: Test "ruby3.1" failed. Exiting.
dh_auto_install: error: dh_ruby --install
/<<PKGBUILDDIR>>/debian/ruby-redcloth returned exit code 1
make: *** [debian/rules:7: binary-arch] Error 25
dpkg-buildpackage: error: fakeroot debian/rules binary-arch subprocess
returned exit status 2
--------------------------------------------------------------------------------
Build finished at 2024-08-15T15:27:31Z
Finished
--------
```
The full buildd log is here:
https://buildd.debian.org/status/fetch.php?pkg=ruby-redcloth&arch=riscv64&ver=4.3.3-1&stamp=1723735658&raw=0
My solution to this issue:
Judging from the log, the test failed due to excessive time taken to
process HTML (expected: <= 3 seconds, got: 9.708168081 seconds). It is
possible that this processing time is normal when running on RISC-V 64
architecture. In my opinion, we should increase the test threshold for
RISC-V 64. I have tried this solution locally, and it works well. Please
let me know whether this solution is acceptable. The debdiff patch is
attached.The changes are mainly in debian/patches and debian/rules.
Gui-Yue
Best Regards
Increase_test_threshold_for_RISC-V.debdiff
Description: Binary data
--- End Message ---
--- Begin Message ---
Source: ruby-redcloth
Source-Version: 4.3.4-1
Done: Cédric Boutillier <bou...@debian.org>
We believe that the bug you reported is fixed in the latest version of
ruby-redcloth, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1078...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Cédric Boutillier <bou...@debian.org> (supplier of updated ruby-redcloth
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 05 Sep 2024 16:17:11 +0200
Source: ruby-redcloth
Architecture: source
Version: 4.3.4-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Ruby Team
<pkg-ruby-extras-maintain...@lists.alioth.debian.org>
Changed-By: Cédric Boutillier <bou...@debian.org>
Closes: 1078816
Changes:
ruby-redcloth (4.3.4-1) unstable; urgency=medium
.
* Team upload
.
[ Gui-Yue ]
* Increase test threshold for RISC-V (Closes: #1078816)
.
[ Cédric Boutillier ]
* Bump Standards-Version to 4.7.0 (no changes needed)
* Fix partially possible privacy breach
Checksums-Sha1:
d7d152a676bd59d845df2bf3d44d797d6674dfd0 1439 ruby-redcloth_4.3.4-1.dsc
33652d8cc20e43205490ebcafb8aa350db77a92f 93256 ruby-redcloth_4.3.4.orig.tar.gz
89cf50aa31aac38167e6d636bfdfcdd8755b7218 6428
ruby-redcloth_4.3.4-1.debian.tar.xz
3d67cb598cf69482eb35ff2dddaccde9dd6a0afa 9505
ruby-redcloth_4.3.4-1_amd64.buildinfo
Checksums-Sha256:
c74fb6d1d7d28c8c60404c1fc0ee8f7d5f115f950c90fcecc06368565a630192 1439
ruby-redcloth_4.3.4-1.dsc
e7243fe50625390eb9667527c0ca540cea28070c172631f337e492f05aa7884d 93256
ruby-redcloth_4.3.4.orig.tar.gz
698bf8581123c4a0303f2716e992fde55e39b9f8e035f365cc6c7398c7318681 6428
ruby-redcloth_4.3.4-1.debian.tar.xz
c84cd82379a2e2d06ad58b5470b9a698ae60e5493d8f73a8c49249c560fe4bf2 9505
ruby-redcloth_4.3.4-1_amd64.buildinfo
Files:
582001485e9338892a7ec62d358c068d 1439 ruby optional ruby-redcloth_4.3.4-1.dsc
56f6fcef7c412cc767374873cdbf9d6e 93256 ruby optional
ruby-redcloth_4.3.4.orig.tar.gz
584782084502109684dff93ac57b6da2 6428 ruby optional
ruby-redcloth_4.3.4-1.debian.tar.xz
2a75e54ca1202509336fa5ceb2e14643 9505 ruby optional
ruby-redcloth_4.3.4-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQSEz/3CFSD4gwbsKdFSaZq2P58rwwUCZtnB2QAKCRBSaZq2P58r
wyI1AP99X6DyRIB4YXZyrfimyndYaCkptEcwGUzGakn/9mzKEAD+LTErefT7YgYn
bq07ustMp7oFmcX+5OXWhiwq1PsI4wQ=
=Msy+
-----END PGP SIGNATURE-----
pgpy80Eupxu6g.pgp
Description: PGP signature
--- End Message ---
