[Pkg-javascript-devel] block request on js-team packages?

[Nilesh Patra]

Hey Andrius!

On 1/28/22 12:55 PM, Andrius Merkys wrote:
> Hi Nilesh,
> 
> On 2022-01-27 17:00, Nilesh Patra wrote:
>> It is because of:
>>
>>      https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1004272
> 
> Thanks for the pointer. However, it is not evident to me how this bug
> could cause false-positive freeze blocks, but maybe there is a whole
> story behind that. Just minutes ago there was an inquiry on this on
> debian-devel@, I hope to see the explanation there.

There's a block-all source hint added, see here[1]
which is translating to the deep freeze message, it is definitely misleading but probably to my understanding britney
code is not mature enough for real reasons yet.

About the bug, as far as I saw IRC (I don't see it often - chat pasted below) binutils is producing broken binaries because of that
bug, and since virtually everything in debian would depend on that package everything is blocked for now.
I hope that helps clarify it a bit :)

[1]: https://release.debian.org/britney/hints/elbrus

Regards,
Nilesh

<aurel32> it seems binutils is producing broken binaries without RELRO on at least amd64, i386, ppc64 and s390x, although not always
<aurel32> so we might have broken binaries in the archive
<aurel32> note that systemd uses MemoryDenyWriteExecute=true for most of the services it provides, and that a few other services use that option
<aurel32> if any of those services use a wrongly linked library (and systemd is linked to many libraries), they will fail to start
<aurel32> that might render the system unbootable
<aurel32> it might be a good idea to stop migrations to testing until more investigations are done
<elbrus> aurel32: do I understand correctly we halt all migration until further notice?
<elbrus> s/we halt/you suggest we halt/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20220128/551222e2/attachment.sig>