Bug#1109972: perl: FTCBFS: cross build support files need updating for CVE-2025-40909

[Niko Tyni]

Source: perl
Version: 5.40.1-4
Severity: normal
Tags: patch
User: debian-cross at lists.debian.org
Usertags: ftcbfs

The upstream changes for CVE-2025-40909 introduced a new Configure
variable `d_fdopendir`. Unfortunately this broke cross builds as seen
at http://crossqa.debian.net/src/perl because I didn't think of updating
the bundled support files [1].

A minimal fix is to add

 d_fdopendir='define'

to the config.sh.static files under debian/cross/, as in the attached
patch. Some of those files are outdated as the architectures are not
built on the buildds anymore etc., but it seems easiest to update them
all for this.  The extra variable should not hurt in any case.

I have tested that this fixes cross building an armhf package on amd64.

I'll try to get this in trixie if it's not too late. The files in
debian/cross are not used for anything during native builds, so the risk
of regressions is very low.

[1] Building Perl currently requires running native probes with the
    Configure script. Fixing this to support cross builds is not
    trivial. So we work around it by bundling the configuration
    information from native builds in the source package, and using
    those for cross building. While this is far from the desired goal
    of full cross build support, the approach at least keeps the rest
    of the machinery working.

    See debian/cross/README for more information.

-- 
Niko Tyni   ntyni at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Update-cross-support-files-for-CVE-2025-40909.patch
Type: text/x-diff
Size: 11732 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/perl-maintainers/attachments/20250727/6484f310/attachment.patch>