vcswatch reports that
this package seems to have a new changelog entry (version
1.21.10, distribution
UNRELEASED) and new commits
in its VCS. You should consider whether it's time to make
an upload.
Here are the relevant commit messages:
commit 0219be9f9c77eab8671f484b63c15983ba31f4e9
Author: Helge Kreutzmann <debian@helgefjell.de>
Date: Sat Jul 16 21:20:08 2022 +0200
po: Update German man pages translation
commit 0740da6a975a87135d448d3412240202729184c5
Author: Guillem Jover <guillem@debian.org>
Date: Wed Jul 6 02:29:19 2022 +0200
Dpkg::Source::Package::V1: Remove redundant exit handler for erasedir()
We are adding an exit handler for the same function, which means that if
it fails, it will most probably fail again on the exist handler. So there
is no much point in this.
commit 001345e2ead49768270461d0937a9e646bca15aa
Author: Guillem Jover <guillem@debian.org>
Date: Wed Jul 6 02:26:40 2022 +0200
debian: Update bogus lintian tag format
commit 245077b8493714d2037528ba836e29b1042aca9c
Author: Guillem Jover <guillem@debian.org>
Date: Wed Jul 6 23:45:33 2022 +0200
debian: Do not compress spec files
Whether dh_compress compresses a file depends on its size, so a file
might switch from being compressed to being a plain text file whenever
content gets added or removed. This makes stable links to these files
rather inconvenient.
As these are small files anyway, and they are shipped in a development
package, we will simply install them uncompressed.
commit ae11999a964c6fe863dde5f8dffd171458362b23
Author: Guillem Jover <guillem@debian.org>
Date: Wed Jul 6 23:44:11 2022 +0200
debian: Properly install specs under /usr/share/doc/dpkg/spec/
dh_installdoc was taking the filenames and installing them directly
under /usr/share/doc/dpkg, which was not the intention with the subdir
move.
Fixes: commit e03d559c1dbb8ea943cf4607dbdc74d3cb2996a4
commit f74e987cc4688594349c221f33cd89bd5117361a
Author: Sven Joachim <svenjoac@gmx.de>
Date: Wed Jul 6 18:12:44 2022 +0200
po: Update German programs translation
Update to 1177t.
commit f165802999476aa68325b60f69b2a8cdfc3c80d6
Author: Guillem Jover <guillem@debian.org>
Date: Tue Jul 5 05:52:25 2022 +0200
doc: Spell SELinux correctly
commit 12965e4f0a02375028f5d85095f64b99aecb6b60
Author: Christian Göttsche <cgzones@googlemail.com>
Date: Tue Jul 5 00:40:05 2022 +0200
dpkg: Avoid setgid(2) call if not needed
If run as root, dpkg unconditionally calls setgid(0), for example if
called as «dpkg --print-foreign-architectures» via lsb_release(1). On
Linux this causes a POSIX capability check for CAP_SETGID, which for
SELinux performs a permission check on the subject type. Allowing that
access unnecessarily broadens the privileges of the subject, and ignoring
(dontaudit'ing) might hide situations where CAP_SETGID is required
(maybe within another program, but same SELinux type).
This change makes the code only call setgid() if the current group ID
is not 0 (=root). Since the condition also checks for the root user
via getuid(), checking getegid() seems not to be necessary.
Closes: #1014332
Signed-off-by: Guillem Jover <guillem@debian.org>
commit f5dd09fe5b329c89afc920e94cd3ef2502d32a88
Author: Guillem Jover <guillem@debian.org>
Date: Sun Jul 3 02:56:45 2022 +0200
debian: Bump Standards-Version to 4.6.1 (no changes needed)
commit 5f06273e6a532b1a10a68fe9a7a2e7d2524dbf51
Author: Helge Kreutzmann <debian@helgefjell.de>
Date: Sat Jul 2 21:04:23 2022 +0200
po: Update German man pages translation
commit 3cfebf646c6c8a551369dd5a211cedad6abf41b9
Author: Guillem Jover <guillem@debian.org>
Date: Fri Jul 1 11:43:02 2022 +0200
Bump version to 1.21.10
![[bug history graph]](https://qa.debian.org/data/bts/graphs/d/dpkg.png){kind=link}