Merge ~sergiodj/ubuntu/+source/re2c:merge-re2c-1.3-2 into ubuntu/+source/re2c:debian/sid

Proposed by Sergio Durigan Junior
Status: Merged
Merge reported by: Sergio Durigan Junior
Merged at revision: 56633520bdacba10f4bf3acb14f57f5a5d75b7aa
Proposed branch: ~sergiodj/ubuntu/+source/re2c:merge-re2c-1.3-2
Merge into: ubuntu/+source/re2c:debian/sid
Diff against target: 55 lines (+28/-1)
2 files modified
debian/changelog (+26/-0)
debian/control (+2/-1)
Reviewer Review Type Date Requested Status
Lucas Kanashiro (community) Approve
Canonical Server Core Reviewers Pending
Review via email: mp+387171@code.launchpad.net

Description of the change

This is a simple merge, and the package became a sync.

Upstream incorporated the fix for CVE-2020-11958, which is the only delta we had.

Even though it's not necessary, I created a PPA for it:

https://launchpad.net/~sergiodj/+archive/ubuntu/re2c-merge

autopkgtest is still happy:

autopkgtest [17:12:05]: test upstream-runtests: -----------------------]
autopkgtest [17:12:05]: test upstream-runtests: - - - - - - - - - - results - - - - - - - - - -
upstream-runtests PASS
autopkgtest [17:12:06]: @@@@@@@@@@@@@@@@@@@@ summary
upstream-runtests PASS

To post a comment you must log in.
Revision history for this message
Lucas Kanashiro (lucaskanashiro) wrote :

Do you want me to sync this package on your behalf? If yes I'll run this command:

$ syncpackage --verbose --sponsor=sergiodj --force --debian-version=1.3-2 re2c

This wiki page might be useful for you on future sync requests:

https://wiki.ubuntu.com/SyncRequestProcess

review: Approve
Revision history for this message
Sergio Durigan Junior (sergiodj) wrote :

On Thursday, July 09 2020, Lucas Kanashiro wrote:

> Do you want me to sync this package on your behalf? If yes I'll run this command:
>
> $ syncpackage --verbose --sponsor=sergiodj --force --debian-version=1.3-2 re2c

Yes, please!

> This wiki page might be useful for you on future sync requests:
>
> https://wiki.ubuntu.com/SyncRequestProcess

Thank you.

--
Sergio
GPG key ID: E92F D0B3 6B14 F1F4 D8E0 EB2F 106D A1C8 C3CB BF14

Revision history for this message
Lucas Kanashiro (lucaskanashiro) wrote :

Done:

$ syncpackage --verbose --sponsor=sergiodj --force --debian-version=1.3-2 re2c
Loading KWallet
Loading SecretService
Loading Windows
Loading chainer
Loading macOS
Source re2c -> groovy/Proposed: current version 1.3-1ubuntu0.1, new version 1.3-2
New changes:
re2c (1.3-2) unstable; urgency=high

  [ JCF Ploemen (jcfp) ]
  * Control: add build-dep on python3-pygments, for use by rst2man.
  * Patches:
    + add 01, backport of the upstream fix for a heap-based buffer
      overflow in Scanner::fill in parse/scanner.cc.
      (CVE-2020-11958; closes: #963158)
    + add 02, fix for a manpage spelling error.
  * Rules: switch dh_auto_test override to execute_after.
  * Lintian: remove override for override_dh_auto_test-does-not-
    check-DEB_BUILD_OPTIONS, no longer needed.
  * Bump compat level to 13 (from 12; no further changes).

  [ Debian Janitor ]
  * Set upstream metadata fields: Bug-Submit.
  * Update standards version to 4.5.0, no changes needed.

 -- JCF Ploemen (jcfp) <email address hidden> Tue, 23 Jun 2020 14:18:11 +0000
Sponsoring this sync for Sergio Durigan Junior (sergiodj)
Sync this package [y|N]? y
Request succeeded; you should get an e-mail once it is processed.

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1diff --git a/debian/changelog b/debian/changelog
2index f450513..623b211 100644
3--- a/debian/changelog
4+++ b/debian/changelog
5@@ -1,3 +1,14 @@
6+re2c (1.3-2ubuntu1) groovy; urgency=medium
7+
8+ * Merge with Debian unstable.
9+ * Dropped changes, included in Debian:
10+ - SECURITY UPDATE: Heap-based buffer overflow
11+ + debian/patches/CVE-2020-11958.patch: fix calculation
12+ of the shift offset in src/parse/scanner.cc.
13+ + CVE-2020-11958
14+
15+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Thu, 09 Jul 2020 14:59:41 -0400
16+
17 re2c (1.3-2) unstable; urgency=high
18
19 [ JCF Ploemen (jcfp) ]
20@@ -18,6 +29,21 @@ re2c (1.3-2) unstable; urgency=high
21
22 -- JCF Ploemen (jcfp) <linux@jcf.pm> Tue, 23 Jun 2020 14:18:11 +0000
23
24+re2c (1.3-1ubuntu0.1) focal-security; urgency=medium
25+
26+ * SECURITY UPDATE: Heap-based buffer overflow
27+ - debian/patches/CVE-2020-11958.patch: fix calculation
28+ of the shift offset in src/parse/scanner.cc.
29+ - CVE-2020-11958
30+
31+ -- Leonidas S. Barbosa <leo.barbosa@canonical.com> Mon, 27 Apr 2020 09:48:36 -0300
32+
33+re2c (1.3-1build1) focal; urgency=medium
34+
35+ * No-change rebuild for libgcc-s1 package name change.
36+
37+ -- Matthias Klose <doko@ubuntu.com> Sat, 21 Mar 2020 13:29:19 +0100
38+
39 re2c (1.3-1) unstable; urgency=medium
40
41 [ JCF Ploemen (jcfp) ]
42diff --git a/debian/control b/debian/control
43index fc07bbd..15d2ff4 100644
44--- a/debian/control
45+++ b/debian/control
46@@ -1,7 +1,8 @@
47 Source: re2c
48 Section: devel
49 Priority: optional
50-Maintainer: JCF Ploemen (jcfp) <linux@jcf.pm>
51+Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
52+XSBC-Original-Maintainer: JCF Ploemen (jcfp) <linux@jcf.pm>
53 Build-Depends:
54 bison,
55 debhelper-compat (= 13),

Subscribers

People subscribed via source and target branches