-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 18 Jun 2017 07:57:57 +0000 Source: lintian Binary: lintian Architecture: source Version: 2.5.51 Distribution: unstable Urgency: medium Maintainer: Debian Lintian Maintainers <lintian-maint@debian.org> Changed-By: Niels Thykier <niels@thykier.net> Description: lintian - Debian package checker Closes: 540294 633850 645455 695345 698723 814521 815233 829649 848878 849470 849880 851215 852005 852084 852145 852369 852404 852407 852409 852410 852411 852413 852414 852416 852419 852421 852426 852891 854132 855243 856155 856312 856857 856954 856975 857194 857654 857655 857656 858117 858326 859412 859467 860419 860558 861509 861599 861958 863020 863386 Changes: lintian (2.5.51) unstable; urgency=medium . * Summary of tag changes: + Added: - debian-control-has-dbgsym-package - debian-control-has-obsolete-dbg-package - debian-rules-parses-dpkg-parsechangelog - desktop-entry-lacks-icon-entry - distribution-and-changes-mismatch - distribution-and-experimental-mismatch - gir-in-arch-all-package - gir-missing-typelib-dependency - gir-section-not-libdevel - multiarch-foreign-shared-library - r-data-without-readme-source - readme-source-is-dh_make-template - repeated-trigger-name - systemd-service-file-refers-to-obsolete-bindto - testsuite-autopkgtest-missing - typelib-in-arch-all-package - typelib-missing-gir-depends - typelib-not-in-multiarch-directory - typelib-package-name-does-not-match - typelib-section-not-introspection - unknown-trigger - unreleased-changes - uses-implicit-await-trigger + Removed: - ancient-autotools-helper-file - init.d-script-missing-dependency-on-remote_fs - maintainer-script-should-not-use-ancient-dpkg-epoch-check - maintainer-script-should-not-use-ancient-dpkg-multi-conrep-check - outdated-autotools-helper-file - package-would-benefit-from-build-arch-targets - suidregister-used-in-maintainer-script . * checks/binaries.{desc,pm}: + [NT] Apply patch from Adrian Bunk to bump severity of the hardening-no-pie to a W-tag and improve the tag description. (Closes: #856155) + [NT] Apply patches from Michael Stapelberg to improve handling of golang binaries. (Closes: #857654, #857655, #857656) * checks/changelog-file.pm: + [BR] Check also bug over 1000000 as improbable. Bug below 50004 are not archived and are thus improbable. * checks/changes-file.{desc,pm}: + [BR] Apply patch by Simon McVittie to detect unreleased package uploaded to unstable and mismatched .changes and Changes: distribution. (Closes: #540294). * checks/control.{desc,pm}: + [BR] Detect dbgsym package in control file. (Closes: #858117). + [BR] Warn about obsolete -dbg package. * checks/cruft.{desc,pm}: + [BR] Document long line tagged source-is-missing as a feature not a bug. (Closes: #849470). + [BR] Correct a typo in description of tag license-problem-convert-utf-code. + [BR] Avoid a false positive in gfdl file detection. + [NT] Drop tags about outdated autotools config.guess and config.sub files. These days debhelper automatically updates them when people use the dh-sequencer and the check is not geared for more thorough analysis. (Closes: #848878) + [CL] Check that README.source is not the dh_make template. (Closes: #633850) * checks/debian-readme.{desc,pm}: + [NT] Locate the README.Debian using the index rather than relying on a collection. * checks/fields.pm: + [BR] Enforce naming convention for debug package. (Closes: #645455). + [NT] Avoid proposing "/git/git/" as a part of the canonical URL for anonscm.debian.org. Thanks to Andreas Beckmann for spotting the bug. (Closes: #851215) + [NT] Apply patch from Dylan Aïssi to recommend "javascript" section for libjs packages. Previously, lintian would recommend "web". (Closes: #863386) * checks/files.pm: + [BR] Do not report duplicates for package-installs-apt-preferences and package-installs-apt-sources. (Closes: #814521). + [NT] Apply patch from Helmut Grohne to detect some possible invalid uses of "Multi-Arch: foreign". (Closes: #856975) + [NT] Improve the empty-binary-package tag by adding more common files that should be ignored. Thanks to Helmut Grohne for all the research behind it. (Closes: #856857) + [BR] Detect symlink pointing to builddir. (Closes: #860419) + [CL] Detect RData without README.source. (Closes: #815233) + [NT] Remove work around for segmentation faults in t1disasm from t1utils (<< 1.38-4~). Given Jessie is the minimum supported Debian version, we can now assume t1utils to be (>= 1.38-4). * checks/gir.{desc,pm}: + [NT] Add check for gir packages written by Simon McVittie. (Closes: #695345) * checks/init.d.{desc,pm}: + [NT] Remove check for init.d scripts accessing /usr without a $remote_fs dependency as /usr must now be mounted by the initramfs. (Closes: #829649) * checks/menu-format.{desc,pm}: + [NT] Update the reference to Desktop Entry Specification to point to version 1.1. + [NT] Apply patch from Laurent Bigonville to check desktop files for missing "Icon" field. (Closes: #854132) * checks/rules.{desc,pm}: + [NT] Drop "package-would-benefit-from-build-arch-targets". The dpkg-buildpackage refuses to build packages that trigger this tag. Also, the tag implies two other "W" tags so contributors are still notified of a potential problem. + [CL] Check for manual parsing of dpkg-parsechangelog output now that we have /usr/share/dpkg/pkg-info.mk. * checks/scripts.{desc,pm}: + [NT] Apply patch from Christopher Hoskin to except -doc packages from the "new-package-should-not-package-python2-module" tag. (Closes: #855243) + [NT] Remove references to tags about calling suidregister, dpkg --assert-working-epoch, and dpkg --assert-multi-conrep from maintainer scripts. * checks/systemd.{desc,pm}: + [NT] Apply patch from Michael Biebl to warn about deprecated "BindTo" option in systemd service files. (Closes: #857194) * checks/testsuite.{desc,pm}: + [NT] Apply patch from Lucas Kanashiro to add a tag for recommending packagers to create an autopkgtest for their package. (Closes: #859467) + [NT] Fix false-positive "missing-runtime-test-file" when the "Tests-Directory" field is set to a single dot. Thanks to Ian Jackson for reporting the issue. (Closes: #849880) * checks/triggers.{desc,pm}: + [NT] New check. (Closes: #698723) * checks/upstream-metadata.pm: + [JW, NT] Disable YAML parsing of upstream metadata file as the YAML parser executes code. (Closes: #861958, CVE-2017-8829) * checks/watch-file.pm: + [NT] Apply patch from Alexander Kulak to handle whitespace correctly in the options in v4 watch files. (Closes: #861599) . * coll/debian-readme{,desc}: + [NT] Remove. Merge what little functionality it offers into the debian-readme check. . * commands/{lintian => lintian.pm}: + [NT] Turn the lintian frontend into a dplint command module to avoid code duplication. * commands/reporting-*: + [NT] Rewrite the config file handling. The reporting framework now uses a YAML configuration file instead of a perl script. + [NT] Support processing packages from multiple archives and different suites in these archives. This enables lintian.d.o to also process dbgsym packages. (Closes: #856312) . * data/changes-file/known-dists: + [NT] Add buster and remove squeeze. * data/common/source-fields: + [NT] Add new "Testsuite-Restrictions" field. * data/files/privacy-breaker-websites: + [BR] Add digit.com as tracker. + [BR] Add static.ak.fbcdn.net as facebook. + [BR] Add forkme as logo. * data/files/standard-files: + [NT] Add more common files based on feedback from Helmut Grohne. * data/obsolete-sites/obsolete-sites: + [BR] Apply patch from Hideki Yamane in order to warn about fedorahosted. (Closes: #856954). + [NT] Apply patch from Hideki Yamane to warn about codeplex.com closing down. (Closes: #859412). * data/scripts/interpreters: + [NT] Add stap as a known interpreter. Thanks to gustavo panizzo for the suggestion. (Closes: #858326) * data/scripts/maintainer-script-bad-command: + [NT] Remove check for suidregister, dpkg --assert-working-epoch, and dpkg --assert-multi-conrep. None of these trigger any tags in the archive any longer and the (new) features have been available for 8+ years. * data/spelling/corrections: + [NT] Apply patches from Edward Betts to fix bugs in the correction word lists. (Closes: #852005, #852084) + [NT] Apply patch from Edward Betts to remove corrections for "targetted" and "targetting" as they are valid alternative spellings in AU. (Closes: #852145) + [EB] Add some more spelling corrections. (Closes: #852369, #852404, #852407, #852409, #852410, #852411, #852413, #852414, #852416, #852419, #852421, #852426) + [CL] Add "none were" -> "none was" multiword spelling correction. (Closes: 860558) * data/standards-version/release-dates: + [NT] Add 4.0.0 as a known standards version along with its release date. . * debian/control: + [NT] Add explicit (Build-)Depends on dpkg (>= 1.17.14) to make it explicit that we no longer support Wheezy or older. + [NT] Drop versioned dependencies that are there to assist to Wheezy. + [NT] Mention Debian Policy v4.0.0 in the description. + [NT] Bump Standards-Version to 4.0.0 - no changes required. * debian/copyright: + [EB] Add Edward Betts. . * frontend/dplint: + [NT] Ensure all include directories are absolute before passing them on to the actual command. + [NT] Work around a "Bizarre Copy" bug in perl that could trigger on errors. . * lib/Lintian/CheckScript.pm: + [NT] Remove fallback code for "old" style "pm"-less checks. * lib/Lintian/Util.pm: + [NT] Drop dpkg_deb_has_ctrl_tarfile. Lintian now assumes that dpkg 1.17.14 is available (provided by Debian jessie or later). . * reporting/{config => config.yaml}: + [NT] Rewrite the reporting config template into the new YAML format. * reporting/graphs/tags.gpi: + [NT] Tweak tags.gpi so it works with gnuplot 5. * reporting/templates/{index.tmpl,lintian.css.tmpl}: + [NT] Update to support multiple archives. . * t/*: + [NT] Drop "Test-Depends" from tests where the versions in Debian jessie will satisfy the dependency. + [NT] Update tests to fix FTBFS caused by dpkg-source now ignoring debian/files by default. (Closes: #863020) * t/runtests: + [NT] Re-sort test output after running the "post_test" sed script on the output. This prevent test failures caused by the order changing on different architectures prior to the sed script is run (assuming the sed script otherwise normalises the differences correctly). * t/tests/cruft-general-upstream/pre_upstream: + [EB] Fix failing tests by making the fake flash object more convincing. The most recent version of libmagic uses a more precise definition of the data within a flash file. (Closes: #852891) * t/tests/java-jars: + [NT] Provide a more convincing corrupt .zip file that also fools file 5.30. . * vendors/ubuntu/main/data/changes-file/known-dists: + [CW] Add zesty. + [NT] Apply patch from "Unit 193" to add "devel" as a known Ubuntu distribution. (Closes: #861509) + [NT] Add artful. Checksums-Sha1: 9958814b241b14a8c8bfde5a8648e55e61ffc87a 2798 lintian_2.5.51.dsc 1124965ea2017a7527fbe20c9c40f4162a835347 1223124 lintian_2.5.51.tar.xz 5c2c6f419d1bb54e3ee3a69f22b0623bafa917d1 17473 lintian_2.5.51_source.buildinfo Checksums-Sha256: f03ef8831439f33a38e8bb495653075e996485f4f66a1fcf25e00ff06dfdd783 2798 lintian_2.5.51.dsc 608747cf4c7277673b02e1ea0964234f3e46e80bcc43fa7d39427fd49946dd77 1223124 lintian_2.5.51.tar.xz 9db4c5037eae541fbf23e95333292c698643a7895b0e1d8bf2cadcaff3db7281 17473 lintian_2.5.51_source.buildinfo Files: 2516131ac63f745a7e2ce279419f6dc0 2798 devel optional lintian_2.5.51.dsc de06a374f50bcd6441e7995b1bcc7f21 1223124 devel optional lintian_2.5.51.tar.xz 379b2de6ac61b0b09312264efcfd0964 17473 devel optional lintian_2.5.51_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEsxMaRR2/33ygW0GXBUu7n32AZEIFAllGOxcACgkQBUu7n32A ZEIwUxAAoGn6TvnVNYgzUQ589TpO9aCDVDJ3AHcbsua/l/fH8b0KBvwa/VV6j6Ua YTSxHVsEfTskG4hbQmUsny0hRXU2jDAWi3PCRE8UHRuVYqGeXGmLF85+bGetpO8d Z6IgU2i8QnN+JwL1W/sUdLjnguw726A3KhufquK+p9p18/em17CaRSlv0ZM68Km2 izZqkDJZ0n668NXmfxbqiQJSqaV39AnS2cXmLLPhDE9KSlMx5axJln3oADXSaGdS G6arHbYlNzCKFVnM7C/WbE8i6ql+45Aqta4byeOr/aUZoQcGwgnHn2SfTrCpRhEL S9wMmFDsgpcDn4Rpq9OrzUk+O+MV91azffAEf0rWFrUzUUKGkt7VLWos+Xhxu3rK pnF2rU4mWpCPVJOwvXysKsW51qQvU+XimBLAKAesZne9SsYeVjyEg3t2FP6iiqVX glvToxyNYJZZtdeWsE6wocNfn3nP/1nfL6RlKUsnLb9qfYXONJwP4PusdSebfwfb +MQbkEiqyZI6CT62nJ2rYIF+K4HuGMfv/lyVzfy7pQ1CEufpGDJj4h8ECjEoG2sW H7Uy4625iZeW6hvdCBtwKVsaZZaEqOHF277wJvGjis2D1h6ej6Lo6zbRG8kc0T50 xHUHuNs4XfnLjQy8858h+KIjpWek5s3Nfx3ahZWqlyQYvB2WJN4= =ty20 -----END PGP SIGNATURE-----
