Bug#900193: pvm-dev is wrongly marked Multi-Arch: foreign
Package: pvm-dev
Version: 3.4.6-1
Severity: important
Tags: patch
User: helm...@debian.org
Usertags: rebootstrap
Control: affects -1 + src:biosquid
biosquid fails to cross build from source, because it cannot find
-lpvm3. It requested pvm-dev via build-depends for the host
architecture, but it got pvm-dev (and thus libpvm3) for the build
architecture, because pvm-dev is wrongly marked Multi-Arch: foreign.
Please remove the erroneous marking.
--- a/debian/control
+++ b/debian/control
@@ -18,7 +18,6 @@
Package: pvm
Architecture: any
-Multi-Arch: foreign
Depends:
openssh-client | rsh-client,
${misc:Depends},
Helmut
Processed: pvm-dev is wrongly marked Multi-Arch: foreign
Processing control commands: > affects -1 + src:biosquid Bug #900193 [pvm-dev] pvm-dev is wrongly marked Multi-Arch: foreign Added indication that 900193 affects src:biosquid -- 900193: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900193 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Bug#900194: bluemon FTCBFS: fails finding dbus-1.pc with the build architecture pkg-config
Source: bluemon Version: 1.4-7 Tags: patch upstream User: helm...@debian.org Usertags: rebootstrap bluemon fails to cross build from source, because the upstream build system hard codes the build architecture pkg-config and thus fails finding dbus-1.pc, which is only requested for the host architecture by Build-Depends. I think the proper solution is to make pkg-config substitutable. After doing so, bluemon cross builds successfully, because dh_auto_build substitutes PKG_CONFIG. Please consider applying the attached patch. Helmut --- bluemon-1.4.orig/Makefile +++ bluemon-1.4/Makefile @@ -1,6 +1,7 @@ +PKG_CONFIG ?= pkg-config LIBRARYPATH ?= /usr/lib -LIBS = -L$(LIBRARYPATH) -lbluetooth `pkg-config --libs dbus-1` -INCLUDES=`pkg-config --cflags dbus-1` +LIBS = -L$(LIBRARYPATH) -lbluetooth `$(PKG_CONFIG) --libs dbus-1` +INCLUDES=`$(PKG_CONFIG) --cflags dbus-1` # Where to put stuff on 'make install'? PREFIX ?= $(DESTDIR)/usr SBIN?= $(PREFIX)/sbin
Bug#900205: sockstat FTCBFS: uses the build architecture compiler
Source: sockstat
Version: 0.3-2
Tags: patch upstream
User: helm...@debian.org
Usertags: rebootstrap
sockstat fails to cross build from source, because it uses the build
architecture compiler. The upstream build system hard codes the build
architecture compiler "cc". After making it substitutable, sockstat
cross builds successfully. Please consider applying the attached patch.
Helmut
--- sockstat-0.3.orig/Makefile
+++ sockstat-0.3/Makefile
@@ -2,7 +2,7 @@
OBJS = ${SRCS:.c=.o}
sockstat: ${OBJS}
- cc -o $@ $(LDFLAGS) ${OBJS}
+ $(CC) -o $@ $(LDFLAGS) ${OBJS}
install:
install -m 755 -c sockstat ${DESTDIR}/usr/bin
Processing of kasumi_2.5-8_source.changes
kasumi_2.5-8_source.changes uploaded successfully to localhost along with the files: kasumi_2.5-8.dsc kasumi_2.5-8.debian.tar.xz kasumi_2.5-8_amd64.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)
kasumi_2.5-8_source.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 27 May 2018 19:18:04 +0200 Source: kasumi Binary: kasumi Architecture: source Version: 2.5-8 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Mattia Rizzolo Description: kasumi - Simple dictionary utility for Anthy Changes: kasumi (2.5-8) unstable; urgency=medium . * QA upload. * d/control: + wrap-and-sort + Since the package is orphaned, remove the Uploaders field. + Move the Vcs-* fields to salsa.debian.org. + Bump Standards-Version to 4.1.4. * d/menu: Drop, as it's deprecated since Policy 3.9.8. * Bump debhelper compat level to 11. + Drop explicit autoreconf, now default. * Rename patches and update descriptions so they lose any mention of dpatch. * d/rules: + Drop misspelled override_dh_build. It has never been run in the last 9 years, so it's most likely not needed anyway. + Use dpkg-buildflags to inject LDFLAGS instead of using it directly. Checksums-Sha1: 1953834b940dd57269fbf8223da3ce9f9f3ecbe1 1818 kasumi_2.5-8.dsc 1bb3f88b867f60cef4b5243c5c6b731f4cee3d13 4576 kasumi_2.5-8.debian.tar.xz 70cc3e02f08ca3d2b0f0e80dc645761e96b5decc 10415 kasumi_2.5-8_amd64.buildinfo Checksums-Sha256: 9688a3d7553722b8fa324dd528b6051ff09fc9cdbac8fd14b5120b396f8f9e39 1818 kasumi_2.5-8.dsc c6e34c516650c2ae6f328053f4c1ce426de8a926f33b4bfcc7773a72a809eed3 4576 kasumi_2.5-8.debian.tar.xz e5fa7f558dbccd8fb79cd019d53d4d84f13a0d55f6be5db64d84e2a90d807c87 10415 kasumi_2.5-8_amd64.buildinfo Files: a6d341d8224eb8f24fa27d8edbc345bd 1818 x11 optional kasumi_2.5-8.dsc eb625f8d53eb9e3310a160e90281d9b3 4576 x11 optional kasumi_2.5-8.debian.tar.xz 770434989e208630feb291b283c927d9 10415 x11 optional kasumi_2.5-8_amd64.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEi3hoeGwz5cZMTQpICBa54Yx2K60FAlsK66YACgkQCBa54Yx2 K63Ckg//S+mGeffz8UBuTdv8yjLb5hiKmBDguFuFUvJkwqgVdQis5F5TXrMaxX3B XtHxw4vnSX5nIporD0jhRyCeDleKS2llpU3qDytsX9YwD1lnhwd1Qa0OdafPU7re 2uzWGBgFpZk7+sFIsh78I8TdMNOy1JyKr/27kGhgDduL1AakshkyPo+X9xhWtsjQ s/qsprYL1CzRh0NEI2yJtObPmEreo1KF52uKmyVM85PVDpxcZuf9a03ZWbJ5jtbC Mys+oG4/w/+F2o1d3/1hC0Tmkfs9GSrZzKPRomqYGqhVizpPTP/PEJPR/4ZSOrJj j4YX+SoJXWVqQxAEBibqH6aT7tEmnBmeg8kL2DmEWYPyQOedf4PmQkuNJ4LqUbC3 SEVbkoTeplCaGowHnRDZ2jRSDtU6lp0agung4qwfkLiSet/ZdH7dgJ+6WRyTu6Ng rwN+0MWd3FWT9r3tzYZB8zDjRTFeRTdxdlIYGtodBQ20HyhJeHhPIPnxWHhcbZJS +gMZvn4OHtUC8avhBJXRTgfTA924up1VHuMNlTy6Wj1/bBXa3SVkIlQKLJpp0LFw pz71hh2R5oeMcR28GgPnZRCe4vuE9SrDwLEBuIrRQQJMV6MNH3B/oYuufE7pLWyS HFc0RJT/o5mLN1QIlqJnkScaIFkTlUBcdD55sTD46pPTHEtmWJk= =A57t -END PGP SIGNATURE- Thank you for your contribution to Debian.
Processing of pygresql_5.0.5-1_amd64.changes
pygresql_5.0.5-1_amd64.changes uploaded successfully to localhost along with the files: pygresql_5.0.5-1.dsc pygresql_5.0.5.orig.tar.gz pygresql_5.0.5-1.debian.tar.xz pygresql_5.0.5-1_amd64.buildinfo python-pygresql-dbgsym_5.0.5-1_amd64.deb python-pygresql-doc_5.0.5-1_all.deb python-pygresql_5.0.5-1_amd64.deb python3-pygresql-dbgsym_5.0.5-1_amd64.deb python3-pygresql_5.0.5-1_amd64.deb Greetings, Your Debian queue daemon (running on host usper.debian.org)
pygresql_5.0.5-1_amd64.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 27 May 2018 14:24:36 -0300 Source: pygresql Binary: python-pygresql python3-pygresql python-pygresql-doc Architecture: source amd64 all Version: 1:5.0.5-1 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Herbert Parentes Fortes Neto Description: python-pygresql - PostgreSQL module for Python python-pygresql-doc - Python Pygresql (common documentation) python3-pygresql - PostgreSQL module for Python3 Changes: pygresql (1:5.0.5-1) unstable; urgency=medium . * QA upload * New upstream version 5.0.5 * DH_LEVEL: 11 * debian/control: - X-Python*-Version commented - Bump Standards-Version from 4.1.2 to 4.1.4 - Vcs-* at salsa.debian.org * debian/copyright: - Update file Checksums-Sha1: 042976733bc813636bb82cd95a4eebca40045817 2182 pygresql_5.0.5-1.dsc 26b8b5e296e0c1a113b50f9a6413321937d6ec48 647699 pygresql_5.0.5.orig.tar.gz f0c8ab4a17d30ad8033e444c32aefaa953124cf3 7452 pygresql_5.0.5-1.debian.tar.xz c0c6ff5957bc0d7095a0a78d31e7e3b535c707c5 10241 pygresql_5.0.5-1_amd64.buildinfo 4079c3eeb4fd67c826a3385329fc38b1c77d3789 61344 python-pygresql-dbgsym_5.0.5-1_amd64.deb 500205a952d33a618d98240491a7da3e9911dd74 74080 python-pygresql-doc_5.0.5-1_all.deb f0dee8590124eee717a67796376a4a14e1d6ddb0 75028 python-pygresql_5.0.5-1_amd64.deb 67b686e29363905cfb3e7b0a1c2863175d790aa5 65936 python3-pygresql-dbgsym_5.0.5-1_amd64.deb d0a9bca01085ed5f8c4076ec68da181cf4994d8e 75240 python3-pygresql_5.0.5-1_amd64.deb Checksums-Sha256: 35bda5651617ea747da97a1318a8f6e67de0cd6001a3c233ab108ea4f402efd0 2182 pygresql_5.0.5-1.dsc ff5e76b840600d4912b79daf347b44274a1c0368663e7b57529c406f8426479c 647699 pygresql_5.0.5.orig.tar.gz 2f32643f1027eb6acd68665f33e2cfccd1cdf779ac874330e72dd20141eea94f 7452 pygresql_5.0.5-1.debian.tar.xz 073260b1052e231ec79bec8f02548bc0294a6685204dbadc3b6b69404c8d18eb 10241 pygresql_5.0.5-1_amd64.buildinfo 366d125f0e83d06c8fd5c54df14b8fe35b13206488d742adbc2589f7c0a5781f 61344 python-pygresql-dbgsym_5.0.5-1_amd64.deb 29c53d6a764f7b5e05d83f6f53ccb6f97b27bd7999c57fd242a1c9b0028f1a33 74080 python-pygresql-doc_5.0.5-1_all.deb 43b7ade4ce323af390448f39b642591548e8412f3431c2bff033cabae1108a40 75028 python-pygresql_5.0.5-1_amd64.deb 226a6cd0244c2c8986cd430cd0854bca67e18d8d6b4b34757514d6dde80d50a5 65936 python3-pygresql-dbgsym_5.0.5-1_amd64.deb 67255c05fe099f7681a2b72e1051e5bc63d85e2d1fb46e0d549cf1f47a731760 75240 python3-pygresql_5.0.5-1_amd64.deb Files: 8632fbc53d3aea23ca8212f10432da95 2182 python optional pygresql_5.0.5-1.dsc c7d1558e85568d3369a98609174ca6a0 647699 python optional pygresql_5.0.5.orig.tar.gz 7bf1c6d46d11d1cd2da5d39906e2a320 7452 python optional pygresql_5.0.5-1.debian.tar.xz fed480557747f4a41ade98ef819a50ff 10241 python optional pygresql_5.0.5-1_amd64.buildinfo 2a07573b1515b55ba6850a9a93dd22c9 61344 debug optional python-pygresql-dbgsym_5.0.5-1_amd64.deb 7dc2ec59f600f50837e79aa9a2d27bd3 74080 doc optional python-pygresql-doc_5.0.5-1_all.deb cfef7211c3e0b424220f02fb4dd3195d 75028 python optional python-pygresql_5.0.5-1_amd64.deb 5ac21d537c0d352e2d568bf65ab406af 65936 debug optional python3-pygresql-dbgsym_5.0.5-1_amd64.deb cabec212525e89a5e2f355597eb6fb1a 75240 python optional python3-pygresql_5.0.5-1_amd64.deb -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEbiJhr5LBUJGFGPlCVSVvKKxgYRoFAlsK9DUACgkQVSVvKKxg YRrgnA//VBEQI7POyZZFOmznQPKxXveEhy6paBgP/rXt4TETmjfBiGSvWxsSAOAT fgKjSzNg26O0gg/ZsY2jOceWfc0ZJvl5m0A5StD7hhVZzpPQnkpjuwX2MbL/ag1W wsVryFI9l6VGBIIYOYrcY0lxcHv79VuluE2Swzg7ciqlfTvBc7rXP/4ceMd6Degy jUXYe8rxcEZk7CUrtnFbLHGTL7nBfNg1SkLfk+rq/r03KqALD5s0vq1svHl46W8n JdQgG1all18RvQ3nwAHy9h16W/nFUQak9L+xHZyS+rQCR9wV0dGO/gkdJtl24TgO mcAA2FDtxSlSneLuz0Hd0U83++LJdlnFGdbfjV1j2cEHFYxBjOa99V+ViKonULjB XRAyO3Tb6QpcEmjpCNd69xftOYy4RqbMJg+luZrbakxckjMGnHRhXb0SVne47p0x 3KM+cGyub44MRe63cGu89GoeI5a1tgSWhVmX953jCjfVsoHaa8I3BHB+DuIRMCPF IztNl3uKgAEplVeHkdyX3mOGq450rH2oCkOgT0DjAWrEDOIzMjZS6eZ45VlbwSZN zEE2XoofXvhvXLUXdc8z8xGpVYaFAoY81rYh1RoAlBgYVF1p8n4Zk0R80MsXeIvL M+sjWrSb97DsTK43qxSFSYyckrHGdiY7qfSpV19CGOIFZ60Aq84= =dQIY -END PGP SIGNATURE- Thank you for your contribution to Debian.
Processing of fteproxy_0.2.19-3_source.changes
fteproxy_0.2.19-3_source.changes uploaded successfully to localhost along with the files: fteproxy_0.2.19-3.dsc fteproxy_0.2.19-3.debian.tar.xz fteproxy_0.2.19-3_amd64.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)
fteproxy_0.2.19-3_source.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 27 May 2018 20:38:45 +0200 Source: fteproxy Binary: fteproxy Architecture: source Version: 0.2.19-3 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Mattia Rizzolo Description: fteproxy - programmable proxy for censorship circumvention Changes: fteproxy (0.2.19-3) unstable; urgency=medium . * QA upload. * d/control: + The package is orphaned, drop the Uploaders field. + Move the Vcs-* fields to salsa.debian.org. + wrap-and-sort. + Bump Standards-Version to 4.1.4: - d/copyright: Use HTTPS in the Format field. + Bump Priority to optional from the deprecated extra. + Make fteproxy Architecture:all as it should be being pure Python. * d/copyright: Use HTTPS in the Source field. * Bump debhelper compat level to 11. * Use dh-python to generate proper dependencies and mangle the shebang. * d/gbp.conf: fixup section name so gbp actually picks it up. Checksums-Sha1: 5bd72c4ccad3bd8b205c5672b1941e9d355c3313 1862 fteproxy_0.2.19-3.dsc 15cdc3e72780f6ec081139f84e03aa937e4b981d 5196 fteproxy_0.2.19-3.debian.tar.xz 827622b18e0f452f8442ed3d6bc9dfd48b81f69a 6249 fteproxy_0.2.19-3_amd64.buildinfo Checksums-Sha256: e25e89d1eaf350fb921b2788143d75d8639588302df09c4b5cba1830853bcceb 1862 fteproxy_0.2.19-3.dsc f03e73e8aa53a4cab178a38448da6fda4f818727929d19c65c837b8bd7ff8b9a 5196 fteproxy_0.2.19-3.debian.tar.xz 0c320caeaf64769ba6c1bbcd084312be9fe926d14cfe70ead2a920feba0fbecb 6249 fteproxy_0.2.19-3_amd64.buildinfo Files: 673a2994ac5e0c66afe109b4e658f27a 1862 net optional fteproxy_0.2.19-3.dsc 25fae24915e5865711850275edf15358 5196 net optional fteproxy_0.2.19-3.debian.tar.xz bcb4f51ac17e7ad00360812b1ae328ec 6249 net optional fteproxy_0.2.19-3_amd64.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEi3hoeGwz5cZMTQpICBa54Yx2K60FAlsK+8IACgkQCBa54Yx2 K63zjRAAu8Ki3C+R5aKQu8GrFXFVTHobrYJBoZw80uvW1zODcAj0pWUKUQzCsZbb IwCTn7C60N0YoFcrWD9T6U7dE5PH2a5XRUMcNzfYK15qDhAgoA2IkU4hh/qQuee8 mxwbALZFNdUMzbkpepcgdhTSjLEKfRLHRC35Wts+7OG3It0oirhOSa2hVsvxA8dn 4tV3qbjXID038wA9Rqz6EOC/er3aclTQEq95s2/ShsjBvYjjAn1PaB+9z389k84i VcsZwf+pkr0EjmEvRnXRRHse1xbt1RkJq2VptKXF2h6NqJkqRn3BGycyRGJZQx1d lOssmu8vEYxauveRa+3YLdI2MIObEjuMpUQoRBeDViWebvpCmiCi/Zb0N5FXur3K qFy+ki6T4Kg2ffaQbDcGgevXeN7U859J9VOkZW0p0afbRzBiU18gB6sjtZQEzOhJ mLfJYCdqXy4O+KSS4pi2VmeoKMG8A185nadFT/2AQMLNWs70dtwr8qIC3g7Ft0GD M20zvsb8kyjBYPWhgM1LV0RHnbkbcYyZqSvPp6JWpRWZkgCb3JBfyRIzWzRwR2ym PSoJoKNYlKoDsaHvbDT/BmcPinzj7dyr1x5TJUAiFfnM6M14OLWe1YEO9AweKZOg QPJk++KI0LMJpceGjes7hXGPhC8bZyZIN+dz4J2ESW68vET7/aE= =56fC -END PGP SIGNATURE- Thank you for your contribution to Debian.
Processing of bugz_0.10.1-7_source.changes
bugz_0.10.1-7_source.changes uploaded successfully to localhost along with the files: bugz_0.10.1-7.dsc bugz_0.10.1-7.debian.tar.xz bugz_0.10.1-7_amd64.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)
bugz_0.10.1-7_source.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 27 May 2018 21:47:17 +0200 Source: bugz Binary: bugz Architecture: source Version: 0.10.1-7 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Mattia Rizzolo Description: bugz - command-line interface to Bugzilla Changes: bugz (0.10.1-7) unstable; urgency=medium . * QA upload. * d/control: + Remove the Uploaders field, since the package is orphaned. + wrap-and-sort. + Move the Vcs-* fields to salsa.debian.org. + Drop alternative dependency for Python < 2.7. + Change Homepage field to github, as the former doesn't talk about bugz anymore. + Bump Standards-Version to 4.1.4, no changes needed. + Set Rules-Requires-Root:no. * Unconditionally use dh-python and add Build-Depends on it. * Namespace the debhelper files (d/docs → d/bugz.docs, etc). * Bump debhelper compat level to 11. * Install regular files for the shell completion instead of using symlinks. Also, move the bash completion to /usr/share/bugs-completion from /etc. * d/copyright: Rewrite using copyright-format 1.0. Checksums-Sha1: 86cb55810619eb42b4483f36262d6705a2c9a0fc 1810 bugz_0.10.1-7.dsc c2df753d156899bb5cd495f762ab6a864ac209b2 3516 bugz_0.10.1-7.debian.tar.xz a284e1984a7ab1985c5be1562c7782669dfc0c32 6099 bugz_0.10.1-7_amd64.buildinfo Checksums-Sha256: 7d4ee10093f963ccbbc81926f7cb31a29b9e949cee90fe973f50c60bacb168dc 1810 bugz_0.10.1-7.dsc 659e936ee55530654a93f90f990d3feccbdc786eb00a82491e19c15ae79dd1c1 3516 bugz_0.10.1-7.debian.tar.xz fefa56d42b603e0d502e6916ae34f1e1dd596d420fa60f18d78c46bb12f4a44f 6099 bugz_0.10.1-7_amd64.buildinfo Files: fe21c5577278e9952eb8362bcc43f8e8 1810 misc optional bugz_0.10.1-7.dsc 8fe132b8608c2fd87d8beac047602333 3516 misc optional bugz_0.10.1-7.debian.tar.xz ef58a3aab0883585158836b3b902e638 6099 misc optional bugz_0.10.1-7_amd64.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEi3hoeGwz5cZMTQpICBa54Yx2K60FAlsLDS8ACgkQCBa54Yx2 K63SxRAAjFK4BiIb5RVBeL0uvzZAk6y8+0ITw38+vLeP41pEDGuznBFaRBMhP2Kb /go/AaHyGIyXQmCqzG8UAhwh2J5cE0ia1IsM6HgyAgSL+Na8gk07UMugp3PEgmgg 3+QirHKNjWwUWaoeFzWXsNfMfDDy2ge4WCXVJP2oq4aM6IWfEDid7x+hOj8ARNT1 M5J1c64vDCfi9ZBqe4hpOHKMYEoPRQgBThfswIoSbk+XgMvYhnft1avyoLsZowjk 5pzKmffgPr/AXVq5LYamX+V0mApbgbfwusJOtXvcNLS58EHhJey+yhb2ZqXILvvw X/XbSGW2PuVz0QMiWQV1bMjrYOhBYhy5TtX3WXV9esZvkMIS5D5fICpX9wglQLZD fOEwTdDn9FQUUD1V9HOstF61e3Q5E4kctg/6R4gdZIO0kDEUfBHRNZ2peovp0CP7 0+8F91vgd4Avn5/UmT2bZNKbR0IauUdDYBdaVnJHynC0F7btU6mzv3g+9fe69NdG pbLAA1bixhSeTnRML4sl5CA9d/DLxOdG0G2mxclJvMajtRH1AqUcWEApIm2Vpf9V r0xF00DY0PQgKdbNjDYOrg1jM479asguy8zo88Udkrp8HGI+vmpYN5GGTBO172tH 2FblmWIwAuIEmxM26QTkFkonCeeyUnyDnxfRXtfZ/xXxvLPnYec= =Q50p -END PGP SIGNATURE- Thank you for your contribution to Debian.
Bug#884923: abiword: CVE-2017-17529
Hi,
Are you sure this is vulnerable ? I did not manage to trigger anything
problematic.
The code referenced is (in fallback_open_uri):
gintargc;
gchar **argv = NULL;
char *cmd_line = g_strconcat (browser, " %1", NULL);
if (g_shell_parse_argv (cmd_line, &argc, &argv, err)) {
/* check for '%1' in an argument and substitute the url
* otherwise append it */
gint i;
char *tmp;
for (i = 1 ; i < argc ; i++)
if (NULL != (tmp = strstr (argv[i], "%1"))) {
*tmp = '\0';
tmp = g_strconcat (argv[i],
(clean_url != NULL) ? (char const *)clean_url : url,
tmp+2, NULL);
g_free (argv[i]);
argv[i] = tmp;
break;
}
/* there was actually a %1, drop the one we added */
if (i != argc-1) {
g_free (argv[argc-1]);
argv[argc-1] = NULL;
}
g_spawn_async (NULL, argv, NULL, G_SPAWN_SEARCH_PATH,
NULL, NULL, NULL, err);
g_strfreev (argv);
}
g_free (cmd_line);
This seems correct with respect to injection through the URI:
the URI string cannot be expanded into multiple arguments
and is not passed to `system()`.
--
Gabriel
Processing of freelan_2.0-7_source.changes
freelan_2.0-7_source.changes uploaded successfully to localhost along with the files: freelan_2.0-7.dsc freelan_2.0-7.debian.tar.xz freelan_2.0-7_amd64.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)
freelan_2.0-7_source.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 27 May 2018 22:41:18 +0200 Source: freelan Binary: freelan Architecture: source Version: 2.0-7 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Mattia Rizzolo Description: freelan- Peer-to-peer virtual private network daemon Changes: freelan (2.0-7) unstable; urgency=medium . * QA upload. * Add d/gbp.conf to deal with the non-standard repository layout. * d/control: + Remove Uploaders field as the package has been orphaned. + wrap-and-sort. + Move Vcs-* fields to salsa.debian.org. + Bump Standards-Version to 4.1.4: - Replace Priority:extra (deprecated) with optional. - d/copyright: Use HTTPS in the Format field. * Bump debhelper compat level to 11. * Add patch from Ubuntu to fix build with boost 1.65. Checksums-Sha1: ccdd35e626b53cfcfdbb54676dede1031db51afa 1952 freelan_2.0-7.dsc 033d73e845f0bc2f8c1984c2767109f09fdc159c 17744 freelan_2.0-7.debian.tar.xz 625f47d93eaf8cf1419926fdbf6bc726c0068729 8961 freelan_2.0-7_amd64.buildinfo Checksums-Sha256: 3fdf30030640cc1d13db443865b917428b56662ec3c5c7542d1f9b46f9e12f2d 1952 freelan_2.0-7.dsc 62e44de6220433759e18aa66cfa7c7b818f129a0a38cdd19c29b19389072f78c 17744 freelan_2.0-7.debian.tar.xz 442a8347f1a1be81123886eeaadc8034d8a535e46d17317766a7600c208a39ca 8961 freelan_2.0-7_amd64.buildinfo Files: 3e4cb480622bfe175d3b758c150b1f38 1952 net optional freelan_2.0-7.dsc 7d7c31d4db25d4385e9e3f345091b770 17744 net optional freelan_2.0-7.debian.tar.xz b0602f217810efd1f52ce32e15a03d87 8961 net optional freelan_2.0-7_amd64.buildinfo -BEGIN PGP SIGNATURE- iQIzBAEBCgAdFiEEi3hoeGwz5cZMTQpICBa54Yx2K60FAlsLGX0ACgkQCBa54Yx2 K60fBxAAtj/t/DnsfhI/HDrz9F8XOv0TKTNl1sNgf9XoRaYhqo/ko+mP9Gjkwpi+ 7l0UHPcPVVrXealnlNj5vm89QnPMRncdSdgeNk147YX5zhHS9fkT7oZW+Uk2o4+Q FqYYaXkM48id+p+nG7iJnvM9MCLt3F2KXG5Qg3UauQwjYFNPCCJkjG/70qjw/4th 3JFg0NcZbjm9itVQ+l9cJglsqFI10M+cjS3QpstIHux6hzJkWD2hvFceV/PLz5nJ L0AzaiyZUH2EI2oCarTTxkzQgY5z4oHWH8u93yceGhlYyYcI0zIqHuChfyi1cWEm V8VCmHt9edtRo3FR3P2kS6ZYAJjiTT/Gh5pWjvie5FVVBxk9rIbMxks3sG6F8ze6 s+jhoMUcs0Avtsx1T+qdefEDvdn6VQ/BykqWNkKJ57s4iQFGSDwLcinBN9b7cKpJ UZDaFW3De9diPAst8Vbg/votejlW33yecjOcKxfexHYJGgfnYiOcUluU9qDN5cJi vqmWkjr38DNrvSvywL9u8/kmN/sS9HMcI260E3X16O/BMFI1bW8ppJxej1TpAkfk PY/sawCSc+ITv+72ElZrLSGlUxnBLxOksnYWiMjw8/4EkrC1nUM71gYgmXk/c0fz 3q3lI9pQXulxkIwhxmk5NBeA9dZ1mNxzvF4SGz8xrjqqGwtCVB8= =q8hI -END PGP SIGNATURE- Thank you for your contribution to Debian.
Processing of zinnia_0.06-3_source.changes
zinnia_0.06-3_source.changes uploaded successfully to localhost along with the files: zinnia_0.06-3.dsc zinnia_0.06-3.debian.tar.xz zinnia_0.06-3_source.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)
zinnia_0.06-3_source.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 27 May 2018 23:10:13 +0200 Source: zinnia Binary: zinnia-utils libzinnia-dev libzinnia-doc libzinnia0 libzinnia0-dbg python-zinnia Architecture: source Version: 0.06-3 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Adam Borowski Description: libzinnia-dev - development files for the zinnia library libzinnia-doc - documentation files for the zinnia library libzinnia0 - online handwriting recognition system with machine learning libzinnia0-dbg - debugging symbols for the zinnia library python-zinnia - Python binding for the zinnia library zinnia-utils - utils for the zinnia library Closes: 899754 Changes: zinnia (0.06-3) unstable; urgency=medium . * QA upload. * Set maintainer to the QA team. Closes: #899754. * Bump dh to level 8 (highest that builds...). * Build-Depend on dh-python. * Priority optional. * Fix typos in desc. Checksums-Sha1: 15dd2bded42eef9d2b1bcfad58d174a888d89818 2185 zinnia_0.06-3.dsc f466a227662cb8ed4d1d9717216247ea949c845e 5084 zinnia_0.06-3.debian.tar.xz ac6e4d2ed042d9e18f59b487923f23fe2db49510 5962 zinnia_0.06-3_source.buildinfo Checksums-Sha256: 48a8479cebfcdaae7773cf86a5671efcd290617e4da8a5eb8a722afaac19602e 2185 zinnia_0.06-3.dsc a134e92ddc2d0a93c160505648e470e777572081ea32519b4f919d9621270b9d 5084 zinnia_0.06-3.debian.tar.xz 4c053372f96df2aaec41a12a2d61c5103c9af7ec6ef2eab95e54eb66aae02280 5962 zinnia_0.06-3_source.buildinfo Files: 15522bdc7dd6000c8614941985ce05d0 2185 libs optional zinnia_0.06-3.dsc 1f51b552e8189b6f5e5c8c5410954d52 5084 libs optional zinnia_0.06-3.debian.tar.xz 020e1770ee9ef71f1545d131aea3349a 5962 libs optional zinnia_0.06-3_source.buildinfo -BEGIN PGP SIGNATURE- iQJIBAEBCgAyFiEEkjZVexcMh/iCHArDweDZLphvfH4FAlsLI7gUHGtpbG9ieXRl QGFuZ2JhbmQucGwACgkQweDZLphvfH7KGw/7BeaKJa/x5y/pRMC3lPfrrl5jbzWH KZFIegC3o1IO3JRodx0l5qTkj48CixxeQJe3AON7/NuHOfuKAGJa4OGKfmhRi4iu 0wXF89bEtnPa2r0Yj8mhYxkQsDpZtn1bzYdNZ3RwOEkjCnByBTClTjoYRKlfVZtD EJVQEyHudYtCRYL7Q4yfbVu0wZn3wmMaeNtcqDF/5GAbpDa0nX0pQhiZ/zFvwBen EzEdOxhM84+/5X4U8qS//k47b6u1hkI06VGm7Ukg1nLeeuvUQjmbaD0QX5j8Xkzt CniwysI2RzgSvQEiiPbArrm5CJ6qp+bpsIORX6QiARkoaLKa2p4Z8FQ/Fck4xXcW z/AwIskJ3LERUMdMVDmbGKM6EA9gbPD2hokS5xlG5R0NByAJ5x7m49acOpBLmbf1 XdeGdwTo5xhLTusZdbr/vLz12yQ1LYitilIJIch0K807OM99U+np2R7IuhDWAhAU aeH0NJryVyCpR2sOkmXaQRy04TJaCE5RoEOQv8LssIVoNLpD+wXmnqXClHiPpTf4 BwOLgd0VLcAAGlSlvePQX1HEUWgeugBVrQ0Vr2gWD8rpzrTZDt52+GhLL6kqL6RX bxRB+smlb4r+ELVFzntt5MgPAcqb/YlgBPj7ADXRuSD0vhX6Z/fHPPaIni0I0+2a Fd46yR0wysv21OM= =wHL6 -END PGP SIGNATURE- Thank you for your contribution to Debian.
Processing of libhbalinux_1.0.16-2_source.changes
libhbalinux_1.0.16-2_source.changes uploaded successfully to localhost along with the files: libhbalinux_1.0.16-2.dsc libhbalinux_1.0.16-2.debian.tar.xz libhbalinux_1.0.16-2_source.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)
libhbalinux_1.0.16-2_source.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 28 May 2018 01:02:42 +0200 Source: libhbalinux Binary: libhbalinux-dev libhbalinux2 Architecture: source Version: 1.0.16-2 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Adam Borowski Description: libhbalinux-dev - Library headers files for retrieving FCOE adapter information libhbalinux2 - Library for retrieving FCOE adapter information Closes: 899575 Changes: libhbalinux (1.0.16-2) unstable; urgency=medium . * QA upload. * Set maintainer to the QA group (Closes: #899575) * Move the VCS to Salsa. * dh compat 11. * R³. * wrap-and-sort. * Priority optional. * Drop redundant Build-Depends. Checksums-Sha1: 018f982ba797eca007aa7bb082a994887cbca517 1996 libhbalinux_1.0.16-2.dsc 199414c1d99ba6e9fbc8de0c8a5d77a7004bda3b 2976 libhbalinux_1.0.16-2.debian.tar.xz ad29f5d69320343c3f9e51adbe346fdb8b43a071 5551 libhbalinux_1.0.16-2_source.buildinfo Checksums-Sha256: e98afc2f9869dc5c80e5e3e96540d949bd6337ac3f26d3ee274e20343e57 1996 libhbalinux_1.0.16-2.dsc ed2dce0ccfc857fc6c23e216c055574c98789c6e64bc3b07f7c64f00f85c9667 2976 libhbalinux_1.0.16-2.debian.tar.xz 382ff003202fe5ad4a4abb54b06653fa04288a64ded412d5bf3752785f160134 5551 libhbalinux_1.0.16-2_source.buildinfo Files: 01ad6a81d14d52ab4a12b31390d1833b 1996 libs optional libhbalinux_1.0.16-2.dsc 1e8250c89b54a9fe80f472d9987324b8 2976 libs optional libhbalinux_1.0.16-2.debian.tar.xz 4fa3e10922c6d5718e4a576bade02ec2 5551 libs optional libhbalinux_1.0.16-2_source.buildinfo -BEGIN PGP SIGNATURE- iQJIBAEBCgAyFiEEkjZVexcMh/iCHArDweDZLphvfH4FAlsLOZMUHGtpbG9ieXRl QGFuZ2JhbmQucGwACgkQweDZLphvfH4NJxAAo2Or3nCqMMwEniok/tp+lVlJJrB5 t/gGFnmwY/DwcSllrzfe14LQxs41zbZVkgOn4s/LtTZCMcS+W+hnkeinR+rd/eDU g0OA9kHU+1KjwSaGQzrk4kGbTe3TajcSC5Sq9z06AxuZc5NCvG0Sw7qWu97t4G6f gqcLzzAogA+AYDwsjAIo3VOJwzT5Fz3X2cg5RJuUqOyCp4VlQ3L8RcQsfZ6vbYYe 67Gb4rMKLuAJoHFSJxjOb33JG5PFAUMOava7/cRPKuteFuV4H2c1Al0Q0ngWvGJP 0fMleO9WcEPBF31MGNu+JzyzcCw+HAKGJFy6rZse6EEhC2qSuht+g32y4OVulXEF dUIMR6IibhhMxfydBgrMwDSOeGrUUoQ+XUakcnXys+96uTZ1Hp5a1ws3s5CkI0cg gWRnqMoUoPtzNVxVHdcQiroqh1JrVLLzKL19S5eJKePyuX7obu54IROX4DURdJHp +R8Cs9ENyJEuAXW9Q7vCSOrAETosOH5aaXh4yAI1NpQ/IBC3o5xXUBPrr006TpAu poiP7dczti3olQuQGMMsZVlVGkXg8WjFE96frL6ecvvjKvCYAd6CT1GxlZ2ir0E7 5hW7vZSDCT0JAE+hPPtIUYo9jGO/c7gJKiQ8uHzPdRg2gT5EgoJsONaw2IOO5Ld3 k1zWwYJBPyzkxC8= =xvCh -END PGP SIGNATURE- Thank you for your contribution to Debian.
libhbaapi_2.2.9-2_source.changes ACCEPTED into unstable
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 28 May 2018 01:20:26 +0200 Source: libhbaapi Binary: libhbaapi-dev libhbaapi2 Architecture: source Version: 2.2.9-2 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Adam Borowski Description: libhbaapi-dev - SNIA HBAAPI library (development files) libhbaapi2 - SNIA HBAAPI library Closes: 899573 Changes: libhbaapi (2.2.9-2) unstable; urgency=medium . * QA upload. * Set maintainer to the QA team (Closes: #899573) * Move VCS to Salsa. * wrap-and-sort. * Priority: optional, R³, dh 11. * Drop redundant B-Deps. Checksums-Sha1: ff49efce1108d6e4605fde058dca1ca8ee1a4ed7 1921 libhbaapi_2.2.9-2.dsc f085e5537a2997dea11fd5cb79f8180d7becc9b5 40460 libhbaapi_2.2.9-2.debian.tar.xz 49025592e515feb9f205a41ff49cd411841cb352 5508 libhbaapi_2.2.9-2_source.buildinfo Checksums-Sha256: 3837048cd4e7e455e8801594f29d085bf0708b60b89c42442a21ee7bb657b950 1921 libhbaapi_2.2.9-2.dsc 8ed6be87c6c1064df63ccf5505cae3dae1043ba9800827fa2c996f26cee0e1c6 40460 libhbaapi_2.2.9-2.debian.tar.xz e439e3e1b7d5f6b110e5d70e4bccdcda860e8bdb7f82a5b5ff2cb6f2ce4cdebb 5508 libhbaapi_2.2.9-2_source.buildinfo Files: 70da4c92d1c07fc09e71eaf22300bd1a 1921 libs optional libhbaapi_2.2.9-2.dsc 05600625a7a58cc7509338d0b95d7520 40460 libs optional libhbaapi_2.2.9-2.debian.tar.xz ed186782a0ce25b841278a901f4f7deb 5508 libs optional libhbaapi_2.2.9-2_source.buildinfo -BEGIN PGP SIGNATURE- iQJIBAEBCgAyFiEEkjZVexcMh/iCHArDweDZLphvfH4FAlsLPbgUHGtpbG9ieXRl QGFuZ2JhbmQucGwACgkQweDZLphvfH7DDA/+MpOQN3CGcHGvWvYYqOc+MugwyzHV 2bgTU+MUxOxGh2yCfTfXGuWwclhQgQW1Yjts4syNz0YTPu3VJMMRYEn+nOSNTMHV nX48a5EjGNdxsd9WEUA3nqdAK6GTGmtBDiY8wELrC/IBDwaWPxLTsSGfvBqDnyL2 6yNGBn2h4lOweslz4VWVTSuIDfVLfpCc8iw6SbddX99/JL5t3B99+fV6NmZQyPXC tiWBhn7jTcfeEg9UbG8XvPt3IZQS/ZLk6WiripdqaRIomIuzAErJFy0zuzq0siYx k3oVgc5nA4sf5wincOquL4gopRFe/Qn5zRRJRNtl3wlR8GEwLkFdForU9WwfXraP PH9pr0P173kKghNC2gPr//3h9YNjASMe0UcMe8vjC5Qsv0NAFKPtcMIi61ysU6TQ rtkwzsLU0sCvIy/Uft7VaD3WC+mHFIi+c+HGYnK5AYmwnMm6E940UyttLm+f59T1 dPzONWNhatry6sFNzKTbysKyKw+jRyqjbThxV7XmHDOyUtrJ9cOFOzvfXHWgLopg /sA9gs8WvFUqEJUFDnB/CwH9/x6ljo/Re6MfFHxXUYXB3stnzEF9Hxi9oRTQKUeq ce6i7Dk9ipAIXJFypPXe9gXGTM19g+gYTK438obmTa4x5WTLDOm+gNAoaV8OnESf SZowkXm/97kL0sM= =RUp6 -END PGP SIGNATURE- Thank you for your contribution to Debian.
Processing of libhbaapi_2.2.9-2_source.changes
libhbaapi_2.2.9-2_source.changes uploaded successfully to localhost along with the files: libhbaapi_2.2.9-2.dsc libhbaapi_2.2.9-2.debian.tar.xz libhbaapi_2.2.9-2_source.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)
