ubuntu/+source/lintian:applied/debian/stretch

Last commit made on 2017-06-03
Get this branch:
git clone -b applied/debian/stretch https://git.launchpad.net/ubuntu/+source/lintian
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
applied/debian/stretch
Repository:
lp:ubuntu/+source/lintian

Recent commits

c1a982a... by Niels Thykier on 2017-06-03

Import patches-applied version 2.5.50.4 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: 2cefe9475d5657c1b5eeb330cf46c7417e50b847
Unapplied parent: 1d002704d0d3dc6463e0d6a8a0da6dbe7e76c669

New changelog entries:
  * checks/upstream-metadata.pm:
    + [JW, NT] Disable YAML parsing of upstream metadata file as the YAML
      parser executes code. (Closes: #861958, CVE-2017-8829)
  * t/*:
    + [NT] Update tests to fix FTBFS caused by dpkg-source now ignoring
      debian/files by default. This includes renaming a folder in the
      the t/tests/legacy-filenames test. (Closes: #863020)

1d00270... by Niels Thykier on 2017-06-03

Import patches-unapplied version 2.5.50.4 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 9edc52b79cad6ccd34797f25ffb39e1f69d97c01

New changelog entries:
  * checks/upstream-metadata.pm:
    + [JW, NT] Disable YAML parsing of upstream metadata file as the YAML
      parser executes code. (Closes: #861958, CVE-2017-8829)
  * t/*:
    + [NT] Update tests to fix FTBFS caused by dpkg-source now ignoring
      debian/files by default. This includes renaming a folder in the
      the t/tests/legacy-filenames test. (Closes: #863020)

2cefe94... by Niels Thykier on 2017-04-30

Import patches-applied version 2.5.50.3 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: be4c9759964910889a84bfb32296cd517932cff9
Unapplied parent: 9edc52b79cad6ccd34797f25ffb39e1f69d97c01

New changelog entries:
  * t/tests/java-jars:
    + [NT] Provide a more convincing corrupt .zip file that also fools
      file 5.30.
  * frontend/dplint:
    + [NT] Work around a "Bizarre Copy" bug in perl that could trigger
      on errors. Notably, this bug causes the reporting framework in
      lintian to break with a very non-informative error when the
      "state-cache" is not present.
  * reporting/graphs/tags.gpi:
    + [NT] Tweak tags.gpi so it works with gnuplot 5.

9edc52b... by Niels Thykier on 2017-04-30

Import patches-unapplied version 2.5.50.3 to debian/sid

Imported using git-ubuntu import.

Changelog parent: fae61ae57d8fb50c2c67e1c451c10849929baea0

New changelog entries:
  * t/tests/java-jars:
    + [NT] Provide a more convincing corrupt .zip file that also fools
      file 5.30.
  * frontend/dplint:
    + [NT] Work around a "Bizarre Copy" bug in perl that could trigger
      on errors. Notably, this bug causes the reporting framework in
      lintian to break with a very non-informative error when the
      "state-cache" is not present.
  * reporting/graphs/tags.gpi:
    + [NT] Tweak tags.gpi so it works with gnuplot 5.

be4c975... by Niels Thykier on 2017-02-04

Import patches-applied version 2.5.50.1 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: e4bfc9abe198af67cd1439cd1000e62ade18d778
Unapplied parent: fae61ae57d8fb50c2c67e1c451c10849929baea0

New changelog entries:
  * debian/copyright:
    + [EB] Add Edward Betts.
  * data/spelling/corrections:
    + [NT] Apply patches from Edward Betts to fix bugs in the correction
      word lists. (Closes: #852005, #852084)
    + [NT] Apply patch from Edward Betts to remove corrections for
      "targetted" and "targetting" as they are valid alternative
      spellings in AU. (Closes: #852145)
  * t/runtests:
    + [NT] Re-sort test output after running the "post_test" sed script
      on the output. This prevent test failures caused by the order
      changing on different architectures prior to the sed script is run
      (assuming the sed script otherwise normalises the differences
      correctly).
  * t/tests/cruft-general-upstream/pre_upstream:
    + [EB] Fix failing tests by making the fake flash object more
      convincing. The most recent version of libmagic uses a more precise
      definition of the data within a flash file. (Closes: #852891)
  * vendors/ubuntu/main/data/changes-file/known-dists:
    + [CW] Add zesty.

fae61ae... by Niels Thykier on 2017-02-04

Import patches-unapplied version 2.5.50.1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 0cb156e2dfad5c086e0fc0492d81da67ba0fad55

New changelog entries:
  * debian/copyright:
    + [EB] Add Edward Betts.
  * data/spelling/corrections:
    + [NT] Apply patches from Edward Betts to fix bugs in the correction
      word lists. (Closes: #852005, #852084)
    + [NT] Apply patch from Edward Betts to remove corrections for
      "targetted" and "targetting" as they are valid alternative
      spellings in AU. (Closes: #852145)
  * t/runtests:
    + [NT] Re-sort test output after running the "post_test" sed script
      on the output. This prevent test failures caused by the order
      changing on different architectures prior to the sed script is run
      (assuming the sed script otherwise normalises the differences
      correctly).
  * t/tests/cruft-general-upstream/pre_upstream:
    + [EB] Fix failing tests by making the fake flash object more
      convincing. The most recent version of libmagic uses a more precise
      definition of the data within a flash file. (Closes: #852891)
  * vendors/ubuntu/main/data/changes-file/known-dists:
    + [CW] Add zesty.

e4bfc9a... by Niels Thykier on 2016-12-26

Import patches-applied version 2.5.50 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: 54ad811183d4c3c775900d67a1e7e9986f262ab0
Unapplied parent: 0cb156e2dfad5c086e0fc0492d81da67ba0fad55

New changelog entries:
  * Summary of tag changes:
    + Added:
      - invalid-value-in-built-using-field
      - license-problem-convert-utf-code
      - new-package-should-not-package-python2-module
      - php-script-but-no-php-cli-dep
      - php-script-with-unusual-interpreter
    + Removed:
      - php-script-but-no-phpX-cli-dep
  * checks/binaries.{desc,pm}:
    + [NT] Handle RUNPATH like we handle RPATH. (Closes: #844903)
    + [NT] Update hardening-no-pie description to reflect that
      PIE is on by default in Debian.
  * checks/cruft.desc:
    + [BR] Detect utf convert non free code.
      (Closes: #843595)
  * checks/deb-format.pm:
    + [NT] Permit uncompressed {control,data}.tar members plus xz
      compressed control.tar files in deb files. Thanks to
      Guillem Jover for the report. (Closes: #834867)
  * checks/debhelper.pm:
    + [BR] Apply patch from Yann Soubeyrand :
      "Allow debhelper "--with" addons to be quoted".
      (Closes: #839822)
  * checks/files.{desc,pm}:
    + [NT] Check for invalid clauses in "Built-Using" fields. Thanks to
      Andrey Rahmatullin for the suggestion. (Closes: #847558)
    + [NT] Apply patch from Josh Triplett to add new sections to
      descriptions.
  * checks/files.desc:
    + [NT] Document that we no longer accept "virtual packages"
      for deliberately empty packages. If your package receives
      an "empty-binary-package" tag, please replace the use of
      "virtual package".
  * checks/{files,scripts}.pm:
    + [NT] Apply patch from Josh Triplett to exclude files under
      /usr/share/cargo/registry/ from a few checks as that directory
      contains unmodified upstream sources. (Closes: #845201)
  * checks/manpages.pm:
    + [JW, NT] Fix false negative manpage-named-after-build-path
      for packages built by sbuild. (Closes: #801760)
  * checks/scripts.{desc,pm}:
    + [JW, NT] Apply patch from Antonio Ospite that updates the
      test for php scripts without a php-cli dependency. Thanks
      to Ondřej Surý for the report and Mathieu Parent for the
      initial patch. (Closes: #818962)
    + [CL, NT] Warn about new source packages providing a python2
      package as EOL for python2 is expected in 2020, which is
      before buster's expected EOL. (Closes: #829744)
  * collection/objdump-info.desc:
    + [NT] Bump version due to RUNPATH collection.
  * commands/lintian:
    + [NT] Deprecate --fail-on-warnings, which will be removed in
      Debian/buster.
  * data/binaries/embedded-libs:
    + [BR] Allow openssl1.0 as source package. (Closes: #843406).
  * data/debhelper/dh_commands-manual:
    + [NT] Apply patch from Piotr Ożarowski that ensure that
      consumers of dh_python2 Build-Depends on dh-python.
      (Closes: #740161)
  * data/fields/archive-sections:
    + [NT] Apply patch from Josh Triplett to add javascript and
      rust sections. (Closes: #847535)
  * data/files/privacy-breaker-websites:
    + [BR] Detect more logos.
  * data/scripts/interpreters:
    + [NT] Apply patch from Antonio Ospite to correct a false
      positive warning for python scripts using python2 in the
      shebang line. Thanks to Per Andersson for the report and
      Luca Boccassi for the initial patch for solving this.
      (Closes: #743599)
  * data/spelling/corrections:
    + [PW] Add more corrections.
  * data/spelling/corrections-case:
    + [EG] Correct spelling of Lua (Closes: #842781)
  * helpers/coll/objdump-info-helper:
    + [NT] Extract RUNPATH from binaries as well.
  * lib/Lintian/Collect/Binary.pm:
    + [NT] Expose RUNPATH when set in the binary.
    + [NT] Remove "virtual package" from the list of phrases
      marking a package as a meta-package. Thanks to Stuart
      Prescott for the report. (Closes: #685029)
  * profiles/kali/main.profile:
    + [NT] Add a profile for Kali Linux. Thanks to Raphaël
      Hertzog for the report. (Closes: #847318)
  * vendors/kali/main/data/changes-file/known-dists:
    + [NT] Add data file for Kali Linux.

0cb156e... by Niels Thykier on 2016-12-26

Import patches-unapplied version 2.5.50 to debian/sid

Imported using git-ubuntu import.

Changelog parent: c0b08c6924df07166d4c959dd4342d6f45524347

New changelog entries:
  * Summary of tag changes:
    + Added:
      - invalid-value-in-built-using-field
      - license-problem-convert-utf-code
      - new-package-should-not-package-python2-module
      - php-script-but-no-php-cli-dep
      - php-script-with-unusual-interpreter
    + Removed:
      - php-script-but-no-phpX-cli-dep
  * checks/binaries.{desc,pm}:
    + [NT] Handle RUNPATH like we handle RPATH. (Closes: #844903)
    + [NT] Update hardening-no-pie description to reflect that
      PIE is on by default in Debian.
  * checks/cruft.desc:
    + [BR] Detect utf convert non free code.
      (Closes: #843595)
  * checks/deb-format.pm:
    + [NT] Permit uncompressed {control,data}.tar members plus xz
      compressed control.tar files in deb files. Thanks to
      Guillem Jover for the report. (Closes: #834867)
  * checks/debhelper.pm:
    + [BR] Apply patch from Yann Soubeyrand :
      "Allow debhelper "--with" addons to be quoted".
      (Closes: #839822)
  * checks/files.{desc,pm}:
    + [NT] Check for invalid clauses in "Built-Using" fields. Thanks to
      Andrey Rahmatullin for the suggestion. (Closes: #847558)
    + [NT] Apply patch from Josh Triplett to add new sections to
      descriptions.
  * checks/files.desc:
    + [NT] Document that we no longer accept "virtual packages"
      for deliberately empty packages. If your package receives
      an "empty-binary-package" tag, please replace the use of
      "virtual package".
  * checks/{files,scripts}.pm:
    + [NT] Apply patch from Josh Triplett to exclude files under
      /usr/share/cargo/registry/ from a few checks as that directory
      contains unmodified upstream sources. (Closes: #845201)
  * checks/manpages.pm:
    + [JW, NT] Fix false negative manpage-named-after-build-path
      for packages built by sbuild. (Closes: #801760)
  * checks/scripts.{desc,pm}:
    + [JW, NT] Apply patch from Antonio Ospite that updates the
      test for php scripts without a php-cli dependency. Thanks
      to Ondřej Surý for the report and Mathieu Parent for the
      initial patch. (Closes: #818962)
    + [CL, NT] Warn about new source packages providing a python2
      package as EOL for python2 is expected in 2020, which is
      before buster's expected EOL. (Closes: #829744)
  * collection/objdump-info.desc:
    + [NT] Bump version due to RUNPATH collection.
  * commands/lintian:
    + [NT] Deprecate --fail-on-warnings, which will be removed in
      Debian/buster.
  * data/binaries/embedded-libs:
    + [BR] Allow openssl1.0 as source package. (Closes: #843406).
  * data/debhelper/dh_commands-manual:
    + [NT] Apply patch from Piotr Ożarowski that ensure that
      consumers of dh_python2 Build-Depends on dh-python.
      (Closes: #740161)
  * data/fields/archive-sections:
    + [NT] Apply patch from Josh Triplett to add javascript and
      rust sections. (Closes: #847535)
  * data/files/privacy-breaker-websites:
    + [BR] Detect more logos.
  * data/scripts/interpreters:
    + [NT] Apply patch from Antonio Ospite to correct a false
      positive warning for python scripts using python2 in the
      shebang line. Thanks to Per Andersson for the report and
      Luca Boccassi for the initial patch for solving this.
      (Closes: #743599)
  * data/spelling/corrections:
    + [PW] Add more corrections.
  * data/spelling/corrections-case:
    + [EG] Correct spelling of Lua (Closes: #842781)
  * helpers/coll/objdump-info-helper:
    + [NT] Extract RUNPATH from binaries as well.
  * lib/Lintian/Collect/Binary.pm:
    + [NT] Expose RUNPATH when set in the binary.
    + [NT] Remove "virtual package" from the list of phrases
      marking a package as a meta-package. Thanks to Stuart
      Prescott for the report. (Closes: #685029)
  * profiles/kali/main.profile:
    + [NT] Add a profile for Kali Linux. Thanks to Raphaël
      Hertzog for the report. (Closes: #847318)
  * vendors/kali/main/data/changes-file/known-dists:
    + [NT] Add data file for Kali Linux.

54ad811... by Niels Thykier on 2016-10-22

Import patches-applied version 2.5.49 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: 8214ed0614a693f1bd07a7fd9ccfed6babf5bc44
Unapplied parent: c0b08c6924df07166d4c959dd4342d6f45524347

New changelog entries:
  * Summary of tag changes:
    + Added:
      - homepage-for-bioconductor-package-not-canonical
  * checks/debhelper.desc:
    + [CL] Drop double leading spaces in includes-maint-script-parameters
      paragraph that was causing indentation when rendered on lintian.d.o.
  * checks/fields.{pm,desc}:
    + [NT] Apply patch from Dylan Aïssi to tag non-canonical uses of
      the bioconductor homepage in the Homepage field. (Closes: #839874)
    + [JW] Apply patch from Dylan Aïssi to tag r-other packages not in
      section "gnu-r". (Closes: #841455)
  * checks/init.d.pm:
    + [JW] Don't require version constraint for lsb-base dependencies.
      The needed version has been available for many stable releases.
  * checks/shared-libs.pm:
    + [JW] Don't complain about executable bit for ld.so shipped in
      multi-arch directories.
    + [JW] Don't complain about missing SONAME for position-independent
      executables. Thanks to Reuben Thomas for the bug report.
      (Closes: #731987)
    + [JW] Check for PT_GNU_STACK existence on all architectures.
  * checks/source-copyright.pm:
    + [RA, JW] Fix handling punctuation characters in license expressions
      in machine-readable copyright files. (Closes: #841356)
  * checks/watch-file.pm:
    + [JW] Assume that watch files containing the pgpmode option (different
      than "none") verify upstream signature. Thanks to Robert Luberda for
      the bug report. (Closes: #841000)
  * data/cruft/non-distributable-files:
    + [BR] Add some rapidjson files.
  * data/debhelper/compat-level:
    + [NT] Bump the deprecated debhelper compat level to match the one
      in debhelper.
  * data/files/privacy-breaker-tag-attr:
    + [BR] Apply patch from Frederic Bonnard detecting audio tags.
      (Closes: #840009)
  * data/spelling/corrections*:
    + [JW, PW] Add more corrections.
  * lib/Lintian/Unpacker.pm:
    + [NT] Use the new "do_fork()" sub to ensure works do not inherit
      the default signal handler, which could allow any number of workers
      to promote themselves to independent "masters" - effectively
      creating a fork-bomb with an ill-timed signal.
  * lib/Lintian/Util.pm:
    + [NT] Add a "do_fork()" sub to ensure signal handling is
      reset for child processes.
  * t/tests/shared-libs-non-pic-i386/debian/Makefile:
    + [JW] Pass -fno-PIE and -fno-pie to GCC, so that the test works even
      when the compiler enables PIE by default. (Closes: #841442)

c0b08c6... by Niels Thykier on 2016-10-22

Import patches-unapplied version 2.5.49 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 7a98261acf8f540260c4510537d10d85dc60eb15

New changelog entries:
  * Summary of tag changes:
    + Added:
      - homepage-for-bioconductor-package-not-canonical
  * checks/debhelper.desc:
    + [CL] Drop double leading spaces in includes-maint-script-parameters
      paragraph that was causing indentation when rendered on lintian.d.o.
  * checks/fields.{pm,desc}:
    + [NT] Apply patch from Dylan Aïssi to tag non-canonical uses of
      the bioconductor homepage in the Homepage field. (Closes: #839874)
    + [JW] Apply patch from Dylan Aïssi to tag r-other packages not in
      section "gnu-r". (Closes: #841455)
  * checks/init.d.pm:
    + [JW] Don't require version constraint for lsb-base dependencies.
      The needed version has been available for many stable releases.
  * checks/shared-libs.pm:
    + [JW] Don't complain about executable bit for ld.so shipped in
      multi-arch directories.
    + [JW] Don't complain about missing SONAME for position-independent
      executables. Thanks to Reuben Thomas for the bug report.
      (Closes: #731987)
    + [JW] Check for PT_GNU_STACK existence on all architectures.
  * checks/source-copyright.pm:
    + [RA, JW] Fix handling punctuation characters in license expressions
      in machine-readable copyright files. (Closes: #841356)
  * checks/watch-file.pm:
    + [JW] Assume that watch files containing the pgpmode option (different
      than "none") verify upstream signature. Thanks to Robert Luberda for
      the bug report. (Closes: #841000)
  * data/cruft/non-distributable-files:
    + [BR] Add some rapidjson files.
  * data/debhelper/compat-level:
    + [NT] Bump the deprecated debhelper compat level to match the one
      in debhelper.
  * data/files/privacy-breaker-tag-attr:
    + [BR] Apply patch from Frederic Bonnard detecting audio tags.
      (Closes: #840009)
  * data/spelling/corrections*:
    + [JW, PW] Add more corrections.
  * lib/Lintian/Unpacker.pm:
    + [NT] Use the new "do_fork()" sub to ensure works do not inherit
      the default signal handler, which could allow any number of workers
      to promote themselves to independent "masters" - effectively
      creating a fork-bomb with an ill-timed signal.
  * lib/Lintian/Util.pm:
    + [NT] Add a "do_fork()" sub to ensure signal handling is
      reset for child processes.
  * t/tests/shared-libs-non-pic-i386/debian/Makefile:
    + [JW] Pass -fno-PIE and -fno-pie to GCC, so that the test works even
      when the compiler enables PIE by default. (Closes: #841442)