Your message dated Sun, 20 Oct 2024 22:26:20 +0000
with message-id <e1t2enq-000rol...@fasolo.debian.org>
and subject line Bug#1073664: fixed in opennds 10.3.0+dfsg-0.1
has caused the Debian Bug report #1073664,
regarding opennds-daemon: move aliased files from / to /usr (DEP17)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1073664: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1073664
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: opennds-daemon
Version: 10.2.0+dfsg-1
Severity: important
Tags: patch trixie sid
User: helm...@debian.org
Usertags: dep17m2 dep17dhmovetousr
This package is part of the /usr-move (DEP17) transition, because it
contains files in aliased locations and should have those files moved to
the corresponding /usr location. The goal of this move is eliminating
bugs arising from aliasing, such as file loss during package upgrades.
The following files in the following binary packages are affected.
opennds-daemon contains:
* lib
* lib/systemd
* lib/systemd/system
* lib/systemd/system/opennds.service
You may add dh-sequence-movetousr to Build-Depends to perform the move.
This is an easy and readily applicable measure that has been verified
for this package using a test build. The main advantage of this method
is the low effort and it just works when backporting to bookworm.
However, it is more of a stop-gap measure as eventually the installation
procedure should refer to the files that are actually used for
installation. This often means updating debian/*.install files but also
changing flags passed to a configure script or similar measures. In case
you do not anticipate your package being uploaded to bookworm-backports,
please prefer a manual move, but generally prefer moving over delaying
any further.
After having done this move, please keep in mind that the relevant
changes need to be reverted for bookworm-backports, with these
exceptions:
 * dh-sequence-movetousr and dh_movetousr cancel themselves.
 * dh_installsystemd and dh_installudev revert to the aliased location.
 * The pkg-config variables systemdsystemunitdir in systemd.pc and
udevdir in udev.pc reverts to aliased.
Please keep in mind that restructuring changes may introduce problems
after moving. A change is considered restructuring if formerly aliased
files formerly owned by one package are later to be owned by a package
with a different name. Such uploads should be done to experimental and
quarantine for three days before moving to unstable. This way, automatic
analysis (https://salsa.debian.org/helmutg/dumat) can detect problems
and file bugs. Such bugs shall include support for resolving the
problems.
The severity of this bug shall be raised to RC on August 6th.
For additional information about refer to
https://wiki.debian.org/UsrMerge and
https://subdivi.de/~helmut/dep17.html.
--- End Message ---
--- Begin Message ---
Source: opennds
Source-Version: 10.3.0+dfsg-0.1
Done: Chris Hofstaedtler <z...@debian.org>
We believe that the bug you reported is fixed in the latest version of
opennds, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1073...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Chris Hofstaedtler <z...@debian.org> (supplier of updated opennds package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 20 Oct 2024 22:34:03 +0200
Source: opennds
Architecture: source
Version: 10.3.0+dfsg-0.1
Distribution: unstable
Urgency: medium
Maintainer: Debian Edu Packaging Team
<debian-edu-pkg-t...@lists.alioth.debian.org>
Changed-By: Chris Hofstaedtler <z...@debian.org>
Closes: 1073664 1081792
Changes:
opennds (10.3.0+dfsg-0.1) unstable; urgency=medium
.
* Non-maintainer upload.
* New upstream release. (Closes: #1081792)
Fixes CVE-2024-25763
* Move aliased files from / to /usr (DEP17) (Closes: #1073664)
Checksums-Sha1:
6ca0bf91adb6235a8e03d9e471b9670a79405a87 2217 opennds_10.3.0+dfsg-0.1.dsc
272a11e2695bcbd3431b6c24873f7113d6f6eea5 659888 opennds_10.3.0+dfsg.orig.tar.xz
f33e0f7ed96ea2213a4d83dcb1996dc6b32984ff 7488
opennds_10.3.0+dfsg-0.1.debian.tar.xz
825d80d08143a98149a6f14587884ec1179843f6 6599
opennds_10.3.0+dfsg-0.1_arm64.buildinfo
Checksums-Sha256:
398ff24ee1ca3a3a3655f7512190fc1b61f6aeaf2207288731efda38892490ae 2217
opennds_10.3.0+dfsg-0.1.dsc
709f49b64abf2b342e54250aab9f1834c120e740ab3ee75d9ef923df62cea86c 659888
opennds_10.3.0+dfsg.orig.tar.xz
49acd37e78ddf1a2e9032898047b4cc0bdddc17841c03721dfee2e0a1d92cf71 7488
opennds_10.3.0+dfsg-0.1.debian.tar.xz
399823ff3541caad1c8c0a2bd46d4914e0491debe5ea2858f57b357c160c9c6c 6599
opennds_10.3.0+dfsg-0.1_arm64.buildinfo
Files:
a9070b7e25bc1d80b24f9887862feb67 2217 net optional opennds_10.3.0+dfsg-0.1.dsc
cd1c9902b53590ea716d13c4d16e6567 659888 net optional
opennds_10.3.0+dfsg.orig.tar.xz
b6810841767460b7794ebc51bdad315f 7488 net optional
opennds_10.3.0+dfsg-0.1.debian.tar.xz
2fa8d6e0ba4c704592ab28d3ef5ba42f 6599 net optional
opennds_10.3.0+dfsg-0.1_arm64.buildinfo
-----BEGIN PGP SIGNATURE-----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=K4aJ
-----END PGP SIGNATURE-----
pgp1v5Phi64he.pgp
Description: PGP signature
--- End Message ---