-
Chris Lamb authoredlintian (2.5.119) unstable; urgency=medium * checks/changelog-file.pm: + [CL] Avoid false-positives in changelog-file-missing-explicit-entry when uploading updates to updates such as "1.2-3+nmu2" or "1.2-3deb8u2". * checks/cruft.pm: + [BR] Following #916095, tag "invariant sections" modified by upstream versions as non official. * checks/debhelper.desc: + [CL] Include the debhelper-compat method of setting the compatibility level in a number of tag descriptions. Thanks to Jeremy Bicha for the idea. (Closes: #917345) * checks/python.desc: + [CL] Update the dependency-on-python-version-marked-for-end-of-life tag's description to mention that a commented override would be useful in order to document that the package will not ported to Python 3.x. Thanks to Scott Kitterman. (Closes: #917264) * checks/shared-libs.desc: + [CL] Clarify that "Build-Depends-Package" lines should start in column 1 of the file and not be indented to align with the symbols themselves. * checks/upstream-signing-key.pm: + [CL] Apply a patch from Felix Lechner to provide writable temporary home directory for GPG. (Closes: #913930) * data/debhelper/compat-level: + [CL] Bump the recommended and experimental debhelper compat levels to 12 and 13 respectfully. (Closes: #917344) * data/files/js-libraries: + [BR] Detect the html5shiv library. This library is the de facto way to enable the use of HTML5 "sectioning" elements in legacy Internet Explorer. + [BR] Detect the mocha testing framework and recommend libjs-mocha. + [BR] Detect the "chai" testing framework, recommending libjs-chai. * data/files/privacy-breaker-websites: + [BR] Suggest using libjs-html5shiv over linking to an external version. + [BR] Detect the libjs-chai package. + [BR] Detect the libjs-expect.js package. * data/spelling/corrections: + [PW] Add a number of corrections. * debian/control: + [CL] Move to debhelper compatibility level 12. * t/tests/*: + [CL] Apply a patch eries from Felix Lechner to ensure the tests pass under groff 1.22.4-1. (Closes: #917752, #917844) + [CL] Apply a patch series from Felix Lechner to update the Debhelper compatibility level in tests. The value is now read from Lintian::Data and no longer hardcoded. (MR: !111) * t/tests/debhelper-compat-experimental/tags: + [CL] Apply a patch from Felix Lechner to remove a tag that is no longer emitted. (MR: !112) lintian (2.5.118) unstable; urgency=medium * Summary of tag changes: + Added: - changelog-file-missing-explicit-entry - debian-tests-control-and-control-autodep8 - debian-tests-control-autodep8-is-obsolete * checks/*.desc: + [CL] Consistently use a single space after a full-stop/period. * checks/changelog-file.{desc,pm}: + [CL] Check that 1.2-3~debXuY stanzas follow a 1.2-3 one. Thanks to Andreas Beckmann for the suggestion. (Closes: #916877) * checks/cruft.pm: + [CL] Allow some alternatives in the "invariant sections" regular expressions as some upstream's have modified the official wording. Thanks to Dmitry Bogatov for the patch. (Closes: #916095) * checks/files.pm: + [CL] The package-contains-documentation-outside-usr-share-doc tag should accept files under "/usr/share/help"; these are being installed by a number of GNOME packages. Thanks to Jeremy Bicha for the report. (Closes: #916497) + [CL] Avoid a number of false-positives in documentation files when processing the uses-dpkg-database-directly tag as these are invariably legitimate. + [CL] Prevent package-contains-no-arch-dependent-files false-positives regarding files under /usr/lib/<gnu-triplet>. Thanks to Andreas Beckmann. (Closes: #916901, #917028) * checks/systemd.pm: + [CL] Don't emit systemd-service-file-missing-hardening-features for WantedBy=sleep.target "services" such as autosuspend. * checks/testsuite.{desc,pm}: + [CL] Apply a patch series from Paul Gevers to warn about obsolete debian/tests/control.autodep8 files. (MR: !95) * checks/version-substvars.pm: + [CL] Apply a patch from Matt Kraai (via MR !101) to make the version-substvar-for-external-package tag require versioned provides. (Closes: #833608) * CONTRIBUTING.md: + [CL] Update a number of references to Salsa, recommending merge requests, etc. * data/output/manual-references: + [CL] Refresh. * data/spelling/corrections: + [PW] Add a number of corrections. * data/standards-version/release-dates: + [CL] Add 4.3.0 as a known Standards-Version. * data/systemd/wantedby-whitelist: + [CL] Add default, network-online and sleep' to the list of valid WantedBy systemd targets. + [PW] Add a number of corrections. * debian/{docs,lintian.install}: + [CL] Order lines. to Salvo Tomaselli for the report. (Closes: #917120) * doc/lintianrc.example: + [CL] Clarify that spaces are valid in variable assignments. Thanks * private/refresh-manual-refs: + [CL] Update location of the Python policy; it is now shipped in the "python3" binary package. * t/*: + [CL] Apply a patch series from Felix Lechner to capture log output in tests using Capture::Tiny as it works better in a multi-threaded environment. (MR: !102) + [CL] Apply a patch from Felix Lechner to remove the "diff" directory and contents for two tests. (MR: !103) lintian (2.5.117) unstable; urgency=medium * Summary of tag changes: + Added: - file-references-package-build-path * checks/files.pm: + [CL] Don't emit uses-dpkg-database-directly for d-i components; they likely know what they are doing with no alternatives. + [CL] Use the output from file(1) when determining whether to emit the package-contains-no-arch-dependent-files tag to catch packages that ship (for example) just a Python script under /usr/bin in an architecture-dependent package. This reverts 6f4bd2fee2 in order to distinguish between "data" and such scripts. Thanks to Dmitry Bogatov for investigating. (Closes: #916023) + [CL] Refactor, tidy and optimise various checks for the contents of files. + [CL] Check files for references to the build path if specified in a .buildinfo. (Closes: #916021) * checks/shared-libs.desc: + [CL] Clarify that symbols-file-missing-build-depends-package-field is emitted per-package in its long description, not based on a file. * checks/systemd.pm: + [CL] Don't emit systemd-service-file-missing-hardening-features for Type=oneshot "services" such as mdadm(8). * checks/watch-file.desc: + [CL] Correct grammar of the debian-watch-does-not-check-gpg-signature tag description. + [CL] Mark debian-watch-does-not-check-gpg-signature as "experimental" as it is not actionable in the vast majority of cases and is in danger of diluting the output of Lintian. (Closes: #916207) * data/spelling/corrections: + [PW] Add a number of corrections. * t/*: + [CL] Apply a patch series from Felix Lechner to use "skeletons" as test templates, fixing a "exec failed: Text file busy" regression when running tests by tag name. (Closes: #916087) + [CL] Apply a patch series from Felix Lechner to improve the "onlyrun=" test selection feature. One can now select all tests connected to particular Lintian check with "check:foo". (MR: !90) + [CL] Apply a patch set from Felix Lechner to sign test packages. when a upstream/private-key.asc is present. (MR: !93) lintian (2.5.116) unstable; urgency=medium * checks/fields.pm: + [CL] Apply a patch from Felix Lechner to remove the incorrect line in the fields-bugs-field-does-not-refer-to-debian-infrastructure tag's output. (MR: !83) * data/fields/perl-provides: + [CL] Update for Perl 5.028001. * data/java/constants: + [CL] Apply a patch from Felix Lechner to fix the "maximum existing * debian/rules: + [CL] Apply a patch from Felix Lechner to remove the "runtests" build stamp mechanism as it blocks runs that should be allowed such as when only the test runner itself has changed. (MR: !80) * t/*: + [CL] Apply a patch series from Felix Lechner to make "pedantic" templates the default for all tests. (MR: !87) + [CL] Apply a patch from Felix Lechner to allow debian/rules to be generated from templates in tests. (MR: !81) + [CL] Apply a patch from Felix Lechner to remove pre-existing metadata in the upstream-metadata-is-not-a-file test. (MR: !84) + [CL] Apply a patch series from Felix Lechner to provide a generalised facility to make any test template set independent of the package format. (MR: !82) + [CL] Apply a patch series from Felix Lechner to support suite-independent test templates. (MR: !88) lintian (2.5.115) unstable; urgency=medium * Summary of tag changes: + Removed: - debian-rules-makemaker-prefix-is-deprecated * checks/binaries.pm: + [CL] Allow packages to define an RPATH under /usr/lib/ghc/ as the Haskell team have their own scheme for this. (Closes: #914873) * checks/rules.{desc,pm}: + [CL] Drop the debian-rules-makemaker-prefix-is-deprecated tag as the transition was completed in 2015. Thanks to Niko Tyni for the update. (Closes: #914885) * checks/patch-systems.desc: + [CL] Downgrade package-uses-vendor-specific-patch-series from "E:" to "W:" as they are not RC bugs until the release of buster. * data/spelling/corrections: + [PW] Add a number of corrections. * t/*: + [CL] Apply a patch series from Felix Lechner to implement a universal test runner with file-based default values. (MR: !76) * t/runtests: + [CL] Apply a patch from Felix Lechner to fail tests with outdated specifications (ie. ./debian/debian exists). (MR: !77) * t/tests/{binaries-missing-lfs,deb-format-udeb-compression}: + [CL] Apply a patch from Adam Conrad to fix two typos introduced when parameterising test architectures. (Closes: #914952) * t/tests/files-multiarch-foreign-files: + [CL] Apply a patch from James Clarke to fix this test on non-amd64 architectures. (MR: !78) lintian (2.5.114) unstable; urgency=medium * checks/debhelper.pm: + [CL] Apply a patch from Stephen Kitt to avoid false-positives for the package-does-not-use-debhelper-or-cdbs tag if the call to dh(1) is prefixed with "@", "+" or "-". (Closes: #914538) * checks/*, t/*: + [CL] Consistently use (eg.) "DEP 5" over "DEP-5" to match the style used on dep.debian.net. (Closes: #914562) * data/files/documentation-file-regex: + [CL] Prevent false-positives for files called (eg.) readMesh_off.m for the package-contains-documentation-outside-usr-share-doc tag which was matching an overly-permissive regex. Thanks to Rafael Laboissière (rafael) for the report. (Closes: #914500) * data/spelling/corrections: + [PW] Add a number of corrections. * t/*: + [CL] Apply a patch series from Felix Lechner to make the templating more flexible in tests, re-using the Skeleton: statements in "desc" files for more complex templating logic. (MR: !75) lintian (2.5.113) unstable; urgency=medium * Summary of tag changes: + Added: - package-contains-file-in-usr-share-hal - package-uses-vendor-specific-patch-series - systemd-service-file-missing-hardening-features + Merged: - maintainer-script-should-not-use-dpkg-{database,status}-directly -> uses-dpkg-database-directly + Renamed: - init.d-script-does-not-implement-optional-option -> init.d-script-does-not-implement-status-option * checks/control-file.{desc.pm}: + [CL] Ensure the "Architecture" field in a changes files contains only the string "source" rather than checking whether it is defined or not. This fixes source-only-upload-to-non-free-without-autobuild false positives. Thanks to Chuan-kai Lin. (Closes: #914163) * checks/files.{desc,pm}: + [CL] Unify all dpkg internal database checks into a single new uses-dpkg-database-directly check, extending it to check all files shipped in package, not just the maintainer scripts. Thanks to Guillem Jover for the suggestion. (Closes: #913974) * checks/files.desc, checks/java.desc: + [CL] Clarify distinction between the package-installs-java-bytecode and source-contains-prebuilt-java-object tags. Thanks to Markus Koschany for the suggestion. (Closes: #879851) * checks/init.d.{pm,desc}: + [CL] Rework the init.d-script-does-not-implement-optional-option tag by renaming it to init.d-script-does-not-implement-status-option and update the description to make the distinction between the LSB (where it is required) and Debian Policy (where currently it is not). Thanks to Andreas Henriksson for the suggestion. (Closes: #913466) * checks/patch-systems.{desc,pm}: + [CL] Warn about packages that use vendor-specific patch series files since the CTTE decision in #904302. * checks/shared-libs.pm: + [CL] Apply a patch from James McCoy to fix a regression that was causing Lintian to incorrectly report the invalid-template-id-in-symbols-file and syntax-error-in-symbols-file tags. Thanks! (Closes: #913290) * checks/systemd.{desc,pm}: + [CL] Emit an experimental-level warning for .service files that do not appear to use any security/hardening features. (Closes: #913605) * checks/watch-file.pm: + [CL] Avoid debian-watch-file-should-mangle-version false-positives when the file uses the @DEB_EXT@ or auto dversionmangle features. Thanks to Sebastian Ramacher and Mattia Rizzolo. (Closes: #913761) * collection/java-info: + [CL] Prevent an "uninitialized value" warning when processing empty or otherwise truncated .class files. Thanks to Branden Robinson for the report. (Closes: #913398) * data/description/planned-features: + [AB] Add "is planned" and "is also planned". * data/fields/name_section_mappings: + [CL] Tidy file. * data/files/fnames: + [CL] Check for packages that install files to /usr/share/hal as the hal package was removed from Debian in 2014. Thanks to Paul Wise for the idea. (Closes: #913280) * data/spelling/corrections: + [AB] Add "redundant" and a bunch of variants around "conditional". + [PW] Add a number of corrections. * t/*: + [CL] Apply a patch series from Felix Lechner to parameterise the debhelper compatibility level in tests. (MR: !73) + [CL] Apply a patch from Felix Lechner to implement a new file hierarchy for test specifications. (MR: !74) * t/scripts/spellintian.t: + [CL] Make the "No no-op correction present..." test failure messages include the offending correction to make it easier to correct. lintian (2.5.112) unstable; urgency=medium * Summary of tag changes: + Added: - public-upstream-key-in-native-package - public-upstream-key-not-minimal - public-upstream-key-unusable - public-upstream-keys-in-multiple-locations - systemd-service-file-pidfile-refers-to-var-run * checks/cruft.desc: + [CL] Bump the severity of the source-contains-prebuilt-windows-binary tag from "P:" to "W:" and update the description to mention that this could potentially be a DFSG violation. * checks/systemd.{desc,pm}: + [CL] Warn if a PIDFile entry in a .service unit references /var/run. (Closes: #913078) * checks/upstream-signing-key.{desc,pm}: + [CL] Apply a patch series from Felix Lechner to add multiple tests for upstream GPG keys. Thanks! (MR: !62) * data/java/constants: + [CL] Apply patches from Bas Couwenberg to update the bytecode checks for OpenJDK 11. (Closes: #912292) * data/rules/rules-should-not-use: + [CL] Ensure --dbgsym-migration='quoted with spaces' is correctly displayed when emitting debug-symbol-migration-possibly-complete. * data/spelling/corrections: + [PW] Add a number of corrections. * debian/control: + [CL] Apply a patch from Mathieu Parent to add a dependency on dpkg-dev to ensure dpkg-architecture is available. Thanks! (Closes: #912330) * t/*: + [CL] Apply a patch from Adam Conrad to fix two tests on non-amd64 architectures in Ubuntu. Thanks! (Closes: #913099) + [CL] Apply a patch series Felix Lechner to parameterise the source format in all applicable tests. (MR: !64) + [CL] Apply a patch series from Felix Lechner to parameterise the package architecture for all tests that build only single binary package. (MR: !68) * t/tests/basic-non-native-with-epoch/desc: + [CL] Apply a patch from Felix Lechner to correct a test "Type" field. (MR: !63) * t/tests/watch-file-pgpmode-next/*: + [CL] Apply a patch series from Felix Lechner to add missing "-I -E" options to the existing "--pedantic" one. (MR: !67) * vendors/ubuntu/main/data/changes-file/known-dists: + [CL] Add "disco" as a known Ubuntu distribution. lintian (2.5.111) unstable; urgency=medium * Summary of tag changes: + Added: - maintainer-script-should-not-use-piuparts-variable - source-package-encodes-python-version * checks/binaries.pm: + [CL] Prevent a false-positive when checking statically-linked-binary when we do not have access to the source package to check for a Golang build-dependency by falling-back to checking the package name. Thanks to Jeffrey Cliff for the report. (Closes: #911864) * checks/changelog-file.desc: + [CL] Clarify the grammatical logic in the long description of the epoch-change-without-comment tag. * checks/cruft.pm: + [CL] Look for debian/missing-sources/foo for a missing "foo" to prevent source-is-missing false-positives. Thanks to Daniel Kahn Gillmor for the report. (Closes: #890468) * checks/menu-format.desc: + [CL] Apply a patch from Salvatore Bonaccorso to fix a typo in the description for the desktop-entry-lacks-icon-entry tag. (MR: !59) * checks/python.{desc,pm}: + [CL] Check for packages that encode a version number in their source package name. * checks/scripts.desc: + [CL] Warn about packages that use PIUPARTS_TEST (etc.) in their maintainer scripts. Thanks to Holger Levsen. (Closes: #912040) + [CL] Add a note that packages might have added the required dependency for missing-versioned-depends-on-init-system-helpers to Build-Depends instead of the binary package (eg. in src:lbcd). * data/spelling/corrections: + [PW] Add a number of corrections. + [CL] Add a "recognise" connection. (re. MR: !59). * data/testsuite/known-restrictions: + [CL] Apply a patch from intrigeri to add "superficial" to the list of known restrictions in testsuite definitions. This was added to autopkgtest in #904979. (MR: !60) * reporting/templates/tag.tmpl: + [CL] Also show the maintainer name on the tag-specific pages such as <https://lintian.debian.org/tags/ancient-libtool.html>. lintian (2.5.110) unstable; urgency=medium * Summary of tag changes: + Added: - symbols-file-missing-build-depends-package-field * checks/debhelper.desc: + [CL] Tidy a number of references regarding the debhelper-compat virtual package, in particular clarifying that this does not work for experimental/beta levels. + [CL] Update example experimental combination of using compatibility level 9 with debhelper >= 8.1.3 with using level 12 with debhelper >= 11.4~. * checks/fields.pm: + [CL] Apply a patch series from Felix Lechner to fix a false-negative in the multi-arch-same-package-has-arch-specific-overrides tag. (Closes: #911355) * checks/shared-libs.{desc,pm}: + [CL] Emit a "I:" warning for packages that do not specify a Build-Depends-Package field in their symbol files. (Closes: #911451) * data/files/js-libraries: + [CL] Prevent a false-positive in embedded-javascript-library as jquery-ui.structure.css is not shipped by libjs-jquery-ui. (Closes: #911311) * data/scripts/interpreters: + [CL] Apply a patch from Luca Boccassi to add /lib/init/init-d-script to the list of known interpreters. (MR: !56) * data/spelling/*: + [CL] Move the "needs" entry to the corrections-case file, preventing false positives in the spelling-error-in-{binary,changelog} tags that reference Georg Nees, an early pioneer of computer art. + [PW] Add a number of corrections. * t/*: + [CL] Apply a patch series from Felix Lechner to adjust some build-dependencies that were discovered when backporting to stretch. (MR: !51) + [CL] Apply a patch series from Felix Lechner to move data for upstream tarballs to "orig" to facilitate the addition of tests related to upstream signatures. (MR: !52) + [CL] Apply a patch series from Felix Lechner to use relative paths in Lintian options; a tight integration between the test runner and harness is generally undesirable. (MR: !54) + [CL] Apply a patch series from Felix Lechner to move the templated changelogs away from template directory. (MR: !57) + [CL] Apply a patch series from Felix Lechner to remove the default.upstream placeholder in empty template directories. (MR: !58) lintian (2.5.109) unstable; urgency=medium * Summary of tag changes: + Added: - maintainer-script-should-not-parse-etc-passwd-or-group - missing-versioned-depends-on-init-system-helpers - unknown-file-in-python-module-directory * checks/debhelper.pm: + [CL] Avoid false-positives when using the blends-dev package for the package-does-not-use-debhelper-or-cdbs tag. (Closes: #910453) * checks/files.{pm,desc}: + [CL] Check for packages that ship non-Python files in top-level Python module directories such as /usr/lib/python3/dist-packages. * checks/scripts.{desc,pm}: + [CL] Check for packages missing versioned dependencies on init-system-helpers. (Closes: #910594) + [CL] Check for packages that manually parse /etc/passwd or /etc/group using grep/egrep etc. in their maintainer scripts. Thanks to Rhonda D'Vine for the bug report. (Closes: #911157) * t/tests/*: + [CL] Apply a patch from Felix Lechner to fix some test descriptions not parsed correctly due to continuation lines. + [CL] Apply a set of patches from Felix Lechner to make various tests architecture independent. + [CL] Apply a patch from Felix Lechner to require build dependencies as prerequisites for tests. + [CL] Apply a patch from Felix Lechner to clarify the substitution variable name for the test package's Architecture field. * t/tests/debhelper-dh-nativejava: + [CL] Apply a patch from Felix Lechner to remove this now-obsolete test given that -gcj packages are no-longer built. lintian (2.5.108) unstable; urgency=medium * Summary of tag changes: + Added: - maintainer-script-has-invalid-update-inetd-options * checks/scripts.{desc,pm}: + [CL] Check for calls to update-inetd(1) that use "--group" without "--add" and "--pattern" with "--add". (Closes: #909511) * checks/testsuite.pm: + [CL] Avoid testsuite-dependency-has-unparsable-elements false positives when the "Depends" field starts with a newline. Thanks to Mattia Rizzolo for the report. (Closes: #910210) * data/spelling/corrections: + [PW] Add a number of corrections. * debian/control: + [NT] Remove myself from the Uploaders field. * t/source/*: + [CL] Apply two patch series from Felix Lechner to rename a test target to match its name and also to adjust version numbers to match test targets produced. lintian (2.5.107) unstable; urgency=medium * checks/changes-file.{desc,pm}: + [CL] Don't emit changelog-empty-entry if distribution is UNRELEASED. (Closes: #909674) * checks/debhelper.desc: + [CL] Apply patch from Josh Triplett to improve the long description of excessive-debhelper-overrides. * checks/scripts.{desc,pm}: + [CL] Don't emit udevadm-called-without-guard if the package has a dependency on udev itself. (Closes: #909801) * data/rules/rules-should-not-use: + [CL] Ensure --dbgsym-migration='quoted' is correctly displayed when emitting the debug-symbol-migration-possibly-complete tag. * data/spelling/corrections: + [CL] Add a suggestion from Sven Joachim to add "practical" and "practically" as spelling corrections for "pratical" and "pratically". (Closes: #909772) + [CL] Add "practically" as a correction for "practicaly". + [PW] Add a number of corrections. lintian (2.5.106) unstable; urgency=medium * Summary of tag changes: + Added: - excessive-debhelper-overrides - package-installs-apt-keyring * checks/debhelper.{desc,pm}: + [CL] Warn about packages that use an excessive (currently >= 20) number of debhelper overrides. * checks/files.{desc,pm}: + [CL] Apply a patch from Josh Triplett to check for packages that install APT keyrings without being called "foo-archive-keyring" or "foo-apt-source". + [CL] Apply a patch from Josh Triplett to allow packages such as "foo-apt-source" to install APT sources. * data/binaries/spelling-exceptions: + [CL] Also add "wiH" (alongside "wIH") to the list of "spelling-error-in-binary" exceptions. * t/*: + [CL] Apply a patch series from Felix Lechner to support wildcards in test architecture fields. Thanks! + [CL] Apply a patch series from Felix Lechner to disable architecture overrides in the testsuite; see <https://salsa.debian.org/lintian/lintian/merge_requests/38> for more information. + [CL] Apply a patch series from Josh Triplett to add "Test-Depends" to a few tests. (Closes: #908915) lintian (2.5.105) unstable; urgency=medium * Summary of tag changes: + Added: - debian-rules-should-not-use-custom-compression-settings - debian-source-options-has-custom-compression-settings + Removed: - xz-compression-level-too-high * checks/cruft.pm: + [CL] Do not emit package-does-not-install-examples for example directories under "vendor" or "third_party". * checks/debian-source-dir.{desc,pm}: + [CL] Warn about debian/source/options specifying custom compression settings. (Closes: #906614) * checks/rules.{desc,pm}: + [CL] Expand and rename xz-compression-level-too-high to warn about all manual adjustments to such settings. (Closes: #906611) * commands/lintian.pm: + [CL] Show the number of unused overrides in the "N: 1 tag overridden ..." summary line. (Closes: #909319) * t/*: + [CL] Apply a patch series from Felix Lechner to support dynamic test rebuilding. lintian (2.5.104) unstable; urgency=medium * checks/description.pm: + [CL] Check for overly-indented paragraph separators in package long descriptions. (Closes: #909272) * checks/fields.pm: + [CL] Apply patches from Josh Triplett to re-use the metapackage detection logic from Lintian::Collect::Binary and to allow metapackages to depend on toolchain packages. * checks/source-copyright.pm: + [CL] Fix a number of false-positives when checking for incomplete Creative Commons licenses. Thanks to Jonathan Dowland (jmtd) for collecting a corpus of test data. (Closes: #906284) + [CL] Also check the "Source" field when looking for repack explanations as per section 6.4 of the machine-readable debian/copyright file specification. (Closes: #909270) + [CL] Include the line number in the output of the incomplete-creative-commons-license tag. * private/refresh-ftp-master-tags: + [CL] Remove any duplicates from FTPmaster's list of supplied tags when automatically generating the ftp-master-{fatal,nonfatal} data files. This should be fixed upstream via <https://salsa.debian.org/ftp-team/dak/merge_requests/101>. * profiles/debian/ftp-master-auto-reject.profile: + [CL] Refresh tags via private/refresh-ftp-master-tags, specifically allowing dir-or-file-in-etc-opt to be overridable. (Closes: #908911) lintian (2.5.103) unstable; urgency=medium * private/refresh-manual-refs: + [CL] Apply a patch series from Joseph Herlant to update some locations of manual references. * t/helpers/bin/create-deb: + [CL] Apply a patch from Felix Lechner to removed a likely-accidental slash in a find(1) call. lintian (2.5.102) unstable; urgency=medium * checks/files.pm: + [CL] Ensure package-contains-documentation-outside-usr-share-doc also excludes files in directories called (eg.) "autotools_templates" or "my-templates.d". (Closes: #907734) * data/fields/name_section_mappings: + [CL] Reclassify xfonts-foo packages as part of the "fonts" section as nobody was doing this in practice. This reverts the change requested in #878609 which was released inLintian 2.5.72. Thanks to Russ Allbery. (Closes: #907725) lintian (2.5.101) unstable; urgency=medium * Summary of tag changes: + Added: - changelog-distribution-does-not-match-changes-file - package-builds-dbg-and-dbgsym-variants * checks/changes-file.{desc,pm}: + [CL] Check for packages that build both foo-dbg and foo-dbgsym debug symbol variants. (Closes: #907423) * checks/changelog-file.{desc,pm}: + [CL] Check that .changes and debian/changelog distribution are identical. (Closes: #906610) * checks/control-files.desc: + [CL] Clarify that checks/control-files.* relates to the "control" tarball, not debian/control in the source tarball. * checks/fields.desc: + [CL] Clarify that the target of the dbg-package-missing-depends check cannot be "Architecture: all". * checks/files.pm: + [CL] Don't emit package-contains-documentation-outside-usr-share-doc for files in "templates" directories. (Closes: #907734) + [CL] Apply a patch from Josh Triplett and Ximin Luo to ignore false-positive "ancient" files generated by Rust. * checks/init.d.pm: + [CL] Avoid false positives in init.d-script-possible-missing-stop when checking initscripts in "early boot" packages such as udev, etc. (Closes: #908185) * checks/scripts.desc: + [CL] Apply a patch from Adrian Bunk to improve the long description of the multi-arch-same-package-calls-pycompile tag. + [CL] Update the long description of wrong-path-for-interpreter to reflect the weakening of the /usr/bin/perl "should" requirement and to use "particular" over "special exception". Thanks to David Bremner. (Closes: #908350) * data/changelog-file/invalid-dates: + [CL] Merge patch from Josh Triplett to display the correct "short" three-letter dates for June and July. * lib/Lintian/Data.pm: + [CL] Apply a patch series from Josh Triplett to add a "matches_any" utility function to Lintian::Data instances and ports a number of applicable instances to use it. Thanks! lintian (2.5.100) unstable; urgency=medium * Summary of tag changes: + Added: - obsolete-runtime-tests-restriction - package-contains-python-dot-directory - skip-systemd-native-flag-missing-pre-depends + Renamed: - vcs-obsolete-in-debian-infrastructure -> vcs-deprecated-in-debian-infrastructure * checks/control-file.{desc.pm}: + [CL] Don't check the .dsc for "XS-Autobuild"; check the control file itself. This fixes source-only-upload-to-non-free-without-autobuild. (Closes: #907681) * checks/debhelper.pm: + [CL] Also check override_dh_systemd_<action>-arch and -indep for debian-rules-uses-deprecated-systemd-override. (Closes: #907845) * checks/fields.{desc.pm}: + [CL] Rename vcs-deprecated-in-debian-infrastructure and update the documentation to match. (Closes: #907578) * checks/scripts.{desc.pm}: + [CL] Check for "invoke-rc.d --skip-systemd-native" without a suitable Pre-Depends. (Closes: #907836) * checks/testsuite.{desc,pm}: + [CL] Don't emit unknown-runtime-tests-feature for autopkgtest "Features:" entries that use the "test-name=foo" nomenclature. (Closes: #907620) + [CL] Apply patch from Paul Gevers to emit warnings for deprecated test features. * data/files/fnames: + [CL] Check for "dot" directories in Python packaging such as ".cache", etc; they are usually an error. (Closes: #907870) * data/spelling/corrections: + [PW] Add a number of corrections. * data/testsuite/known-restrictions: + [CL] Apply patch from Paul Gevers to add hint-testsuite-triggers and skip-not-installable to the list of known autopkgtest restrictions. * lib/Lintian/Output.pm: + [CL] Escape output if --color=html is used. This prevents browsers loading images/stylesheets from foreign websites that are part of warning messages. (Closes: #907667) * Miscellaneous: + [CL] Apply patch Daniele Forsi fixing a large number of typos in the codebase, documentation, etc. + [CL] Update tests to support dash 0.5.10.2. lintian (2.5.99) unstable; urgency=medium * checks/crufts.desc: + [FL] Improve tag description for 'package-does-not-install-examples'. * checks/source-copyright.desc: + [CL] Correct "may be" typo in the long description for the 'incomplete-creative-commons-license' tag. * data/cruft/warn-file-type: + [CL] Match (for example) foo_o.golden with foo.cc to avoid source-is-missing false-positives. (Closes: #907475) * t/tests/changes: + [FL] Place all tests for the 'changes' suite into their own directories. lintian (2.5.98) unstable; urgency=medium * Summary of tag changes: + Added: - debian-rules-passes-version-info-to-dh_shlibdeps - multi-arch-same-package-calls-pycompile * checks/rules.pm: + [CL] Apply patch from Peter Pentchev to fix false-positives for missing Build-Depends on debhelper when using debhelper-compat commands. (Closes: #907261) * checks/scripts.{desc,pm}: + [CL] Warn about Multi-Arch: same packages that use pycompile or py3compile in their maintainer scripts. (Closes: #907276) + [CL] Expand the description to explain why we emit wrong-path-for-interpreter for #!/usr/bin/env perl. * checks/source-changelog.pm: + [FL] Fix false positives in version parsing, especially when some components are "0". (Closes: #906957) * data/rules/rules-should-not-use: + [CL] Check for packages that pass -V to dh_shlibdeps instead of dh_makeshlibs. (Closes: #906722) * data/standards-version/release-dates: + [CL] Add 4.2.1 as a known Standards-Version. lintian (2.5.97) unstable; urgency=medium * Summary of tag changes: + Added: - debian-changelog-version-requires-debian-revision - maintainer-script-needs-depends-on-xfonts-utils - malformed-debian-changelog-version - missing-call-to-update-fonts - upload-has-backports-version-number + Renamed: - native-package-with-dash-version -> hyphen-in-native-debian-changelog-version - non-native-package-with-native-version -> hyphen-in-upstream-part-of-debian-changelog-version * checks/changes-file.{desc,pm}: + [CL] Apply patch from Julien Cristau (with test) to warn about uploads that have a version containing "~bpo" but their target distribution is not *-backports. (Closes: #906155) * checks/scripts.{desc,pm}: + [CL] Check for packages that contain X11 fonts but do not run update-fonts-* in their postinst or depend on xfonts-utils. (Closes: #905881) * checks/source-changelog.{desc.pm}: + [FL] Rework, centralise and improve version parsing. (Closes: #886036) * data/common/dh_addons: + [NT] Refresh data. * data/debhelper/dh_{commands,packages}: + [NT] Refresh data. * data/spelling/corrections: + [PW] Add a number of corrections. * data/testsuite/known-restrictions: + [CL] Re-add "allow-stderr" accidentally dropped in 0cb688fb. (Closes: #905843) * private/refresh-debhelper-data: + [NT] Add debhelper-compat an alternative to debhelper in the data files. * t/scripts/01-critic/runner.pl: + [CL] Bump perltidy test dependencies to prevent a failing build in backports, etc. lintian (2.5.96) unstable; urgency=medium * Summary of tag changes: + Added: - incomplete-creative-commons-license - maintainer-script-should-not-use-dpkg-database-directly + Removed: - no-upstream-changelog + Renamed: - package-contains-upstream-install-documentation -> package-contains-upstream-installation-documentation * checks/changelog-file.{desc,pm}: + [CL] Drop no-upstream-changelog; it is rarely actionable and simply introduces unnecessary noise and/or requiring an override. It had additionally been disabled in the Ubuntu profile since 2011. (Closes: #513544, #646192) * checks/cruft.desc: + [CL] Tidy the description of the license-problem-cc-by-nc-sa and license-problem-non-free-img-lenna tags. * checks/files.{desc,pm}: + [BR] Improve package-contains-documentation-outside-usr-share-doc by checking if README includes 'this directory' (Closes: #904852) + [CL] Rename package-contains-upstream-install-documentation tag to package-contains-upstream-installation-documentation. * checks/source-copyright.{desc,pm}: + [CL] Check for Creative Commons license texts that use the incomplete "human-readable" summary. (Closes: #903470) * data/scripts/maintainer-script-bad-command: + [CL] Warn about packages that directly query the dpkg database in their maintainer scripts. Thanks, Guillem Jover! (Closes: #905469) * data/spelling/corrections: + [PW] Add a number of corrections. lintian (2.5.95) unstable; urgency=medium * Summary of tag changes: + Added: - debhelper-compat-virtual-relation - depends-on-python2-and-python3 - no-op-testsuite - r-package-not-arch-all - source-only-upload-to-non-free-without-autobuild * checks/debhelper.{desc,pm}: + [CL] Support "debhelper-compat (= X)" build-dependency as a replacement for "debhelper (>= X~)". (Closes: #904886) * checks/changes-file.{desc,pm}: + [CL] Detect source-only uploads to non-free uploads that will not be autobuilt by default. (Closes: #905467) * checks/control-file.desc: + [AB] Fix duplicate word "the" in tag description. * checks/cruft.pm: + [CL] Don't emit mentions-deprecated-usr-lib-perl5-directory for debian/*.install files as they are used as source directories. (Closes: #905635) * checks/fields.{desc.pm}: + [CL] Warn about R packages incorrectly set to "Architecture: any". (Closes: #904985) * checks/files.{desc,pm}: + [CL] Whitelist files in /usr/share/doc and /usr/share/locale for the missing-depends-on-sensible-utils tag and update testsuite to match. (Closes: #904936) + [CL] Add Suggests and Pre-Depends as potential relations with the sensible-utils package. Thanks to Guillem Jover for the idea. * checks/python.{desc,pm}: + [CL] Check for Python packages that have a relation on both Python 2 and Python 3. (Closes: #904817) * checks/testsuite.{desc,pm}: + [CL] Warn about packages that have a single, no-op autopkgtest. (Closes: #905030) + [CL] Move list of known fields, "Restriction" fields and testsuites to files under data/testsuite/. + [CL] Improve the long description of the testsuite-autopkgtest-missing tag; in particular, reference that autopkgtest results now influence migration from unstable to testing. * data/debhelper/filename-config-files: + [NT] Add mime and sharedmimeinfo as known debhelper config files. * data/scripts/interpreters: + [CL] Prevent ruby-script-but-no-ruby-dep false positives by also accepting ruby:any as a dependency. Thanks to Marc Dequènes for the bug report. (Closes: #905258) * data/spelling/corrections: + [PW] Add a number of corrections. * data/standards-version/release-dates: + [CL] Add 4.2.0 as a known Standards-Version. * data/testsuite/known-restrictions: + [CL] Add "flaky" and "skippable" to the list of known Restrictions in testsuite definitions. Thanks to Rebecca N. Palmer. (Closes: #904623) * lib/Lintian/Collect/Package.pm: + [CL] Don't assume that "tar -tv" output always includes a time. (Closes: #905423) * debian/rules: + [CL] Apply a patch from Felix Lechner which fixes a typo which was preventing the 'runtests' target relying on test descriptions. lintian (2.5.94) unstable; urgency=medium * Summary of tag changes: + Added: - spelling-error-in-rules-requires-root + Renamed: - missing-depends-on-sensible-utils => script-needs-depends-on-sensible-utils * checks/control-file.desc: + [CL] Raise the severity of the debian-control-has-empty-field tag from "P:" to "I:" and explicitly test the "whitespace" cases. (Closes: #904420) + [CL] Warn about mispellings of Rules-Requires-Root. Thanks to Axel Beckert for the idea. (Closes: #904522) * checks/cruft.{desc,pm}: + [CL] Correctly warn about packages using sensible-utils without a relationship by checking all files instead of just maintainer scripts. Thanks to Guillem Jover. (Closes: #872611) * checks/scripts.pm: + [CL] Policy 10.4 states that Perl scripts must use /usr/bin/perl directly and not via /usr/bin/env, etc. (Closes: #904414) * data/scripts/interpreters: + [CL] Add the Julia language as a known interpreter via #!/usr/bin/julia. (Closes: #904140) * data/spelling/corrections: + [PW] Add a number of corrections. lintian (2.5.93) unstable; urgency=medium * Summary of tag changes: + Added: - vcs-field-mismatch * checks/cruft.pm: + [CL] Don't emit r-data-without-readme-source by checking that .rda (etc.) files aren't actually R data files. (Closes: #903435) * checks/fields.{desc,pm}: + [CL] Add support and update tests for the "Vcs-Git: uri [subdir]" syntax. (Closes: #903103) + [CL] Check for mismatched Vcs-* fields. (Closes: #903690) * checks/gir.pm: + [CL] Apply patch from Simon McVittie to don't warn about wrong section for "oldlibs". * data/spelling/corrections: + [PW] Add a number of corrections. * lib/Lintian/Collect/Package.pm: + [CL] Support parsing the filename component of tar -tvf output when delimited by multiple spaces (not just a single one) to prevent source-contains-empty-directory false positives. (Closes: #903307) lintian (2.5.92) unstable; urgency=medium The "Policy 4.1.5" release. * Summary of tag changes: + Added: - font-outside-font-dir - package-contains-documentation-outside-usr-share-doc - package-contains-eslint-config-file - package-contains-npm-ignore-file * checks/files.{desc,pm}: + [BR] Detect ESLint config files installed in the tree. ESLint is pluggable linting utility for JavaScript. This kind of files belong to source not to installed package. + [BR] Detect .woff, .woff2 and .eot files as fonts. + [BR] Detect installed fonts outside /usr/share/fonts. + [BR] Detect .npmignore files installed in the tree. These files help npm the Node.js package manager to keep files out of npm package. + [BR] Detect documentation files outside /usr/share/doc. (Closes: #901274) + [CL] Apply patches from Jonathan Dowland (jmtd) to ignore rel="edituri" and rel="copyright" URIs when checking external URIs embedded in HTML files. (Closes: #902919) + [CL] Policy 4.1.5 adopts FHS 3.0 so permit files/dirs in /usr/libexec. (Closes: #834607) * data/files/{js-libraries,privacy-breaker-websites}: + [CL] Replace references to an unknown "libjs-normalize.css" package with node-normalize.css package. Thanks to Lumin for the report. (Closes: #902926) * data/spelling/corrections: + [CL] Drop non-hyphenated versions of "re-enable" and "re-enabled"; these are seemingly legitimate. See <https://github.com/systemd/systemd/pull/9321> for the background and further discussion. + [PW] Add a number of corrections. * data/standards-version/release-dates: + [CL] Add 4.1.5 as a known Standards-Version. * debian/rules: + [CL] Don't install /usr/share/lintian/data/README; it's not very useful at runtime and avoids a package-contains-documentation-outside-usr-share-doc warning. * t/scripts/spellintian.t: + [PW] Differentiate between no-op corrections and case sensitive corrections. + [CL] Bump test count. lintian (2.5.91) unstable; urgency=medium * checks/rules.desc: + [CL] Replace DH_BUILD_MAINT_OPTIONS with DEB_BUILD_MAINT_OPTIONS in tag description. Thanks to Drew Parsons for the report. (Closes: #901581) * checks/rules.{pm,desc}, data/*: + [CL] Also permit "python2" and suffixed variants as substitutes for "python" (etc.) to avoid false-positives in the missing-dep-for-interpreter, missing-build-dependency-for-dh-addon and missing-python-build-dependency tags. (Closes: #901075) * data/spelling/corrections: + [PW] Add a number of corrections. lintian (2.5.90) unstable; urgency=medium * checks/binaries.pm: + [CL] Ignore .debuginfo files under /usr/lib/jvm to prevent false- positives in shared-lib-without-dependency-information. (Closes: #900268) * checks/cruft.pm: + [BR] Ignore HTML bold tags (eg. <b>) during license checking. * checks/fields.{desc,pm}: + [CL] Move invalid-version-number-for-derivative to a "source" type check so we have access to $info->native to prevent false-positives when checking derivative versions. * checks/systemd.pm: + [CL] Don't use potentially-undefined value in invalid .service files. * checks/version-substvars.pm: + [CL] Fix a false-positives in version-substvar-for-external-package when the "external" package is actually a "Provides" in the current source package. (Closes: #833608) * data/*: + [CL] Update and expand the documentation of derivative-{changed-by,versions} to match the implementation. * data/fields/obsolete-packages: + [BR] Detect obsolete Adobe Flash packages. * data/files/js-libraries: + [BR] Detect libjs-jquery-ui, a set of user interface interactions, effects, widgets, and themes built on top of the jQuery Javascript library. * data/scripts/interpreters: + [CL] Avoid #!/usr/bin/r false-positives when checking the missing-dep-for-interpreter tag as r-cran-littler also "Provides" this package. (Closes: #901228) * data/spelling/corrections: + [PW] Add a number of corrections. * data/spelling/corrections-multiword: + [CL] Drop "some system" from the list of multiword spelling corrections. (Closes: #900670) * helpers/coll/objdump-info-helper: + [CL] Ignore low ASCII characters in ELF headers such as RPATH and SONAME to avoid false-positives in, for example, Go libraries. (Closes: #898809) * vendors/pureos/main/data/fields/derivative-fields: + [CL] Update the Vcs-* checks for PureOS now that repo structure has introduced sub-groups. lintian (2.5.89) unstable; urgency=medium * Summary of tag changes: + Added: - embedded-script-includes-copyright-statement - source-contains-browserified-javascript * checks/cruft.pm: + [BR] Detect minified Javascript in HTML files. + [BR] Detect browserified Javascript. + [BR] Detect scripts in HTML files that include copyright statements. * checks/debhelper.pm: + [CL] Specifically check for missing "auto" in (for example) "override_dh_build". Thanks to Mattia Rizzolo for the idea. (Closes: #900213) * checks/files.pm: + [BR] Detect privacy breaches in HTML5 files. * checks/group-checks.pm: + [CL] Prevent false-positives when checking debug-package-for-multi- arch-same-pkg-not-coinstallable by ignoring Python "debug" packages. (Closes: #900122) * checks/source-copyright.pm: + [CL] Update references from <https://dep.debian.net> to <https://dep-team.pages.debian.net>. * data/obsolete-sites/obsolete-sites: + [PW] Add search.cpan.org to the list of obsolete sites; it has been replaced by metacpan.org. * data/spelling/corrections: + [PW] Add a number of corrections. * vendors/pureos/main/data/fields/derivative-fields: + [CL] Update the Vcs-* checks for PureOS now that code has moved to a GitLab instance. lintian (2.5.88) unstable; urgency=medium * checks/application-not-library.desc: + [CL] Update references to pkg-perl's homepages since the Salsa migration. * checks/control-file.desc: + [CL] Update references to Go team's homepages for the Salsa move. * checks/elpa.desc: + [CL] Apply patch from Sean Whitton to update references to emacsen-team's website since the move from Alioth to Salsa. Thank! (Closes: #899214) * checks/fields.pm: + [CL] Really don't warn about binary packages "depending" on toolchain packages via Conflicts/Breaks relations. Thanks to Guillem Jover. (Closes: #896133) * checks/files.pm: + [CL] Only warn about (eg.) "/usr/include/util.h" and "/usr/include/<multiarch-dir>/util.h" when checking for overly generic header names. (Closes: #899192) * data/spelling/corrections: + [PW] Add a number of corrections. + [EB] Add some more corrections. lintian (2.5.87) unstable; urgency=medium * Summary of tag changes: + Added: - debian-pyversions-is-obsolete - debug-symbol-migration-possibly-complete - header-has-overly-generic-name * checks/cruft.{desc,pm}: + [CL] Apply patch from Joseph Herlant to warn about use of obsolete debian/pyversion files. Thanks! (Closes: #898592) * checks/debhelper.pm: + [CL] Prevent false-positives with comments and newlines when checking debhelper-compat-file-contains-multiple-levels. (Closes: #898799) * checks/fields.{desc,pm}: + [BR] Detect privacy breaches in Internet Explorer "<!--[if IE 8]>" conditional comments. + [CL] Rename python-generic-modules data file to generic-python-modules. + [CL] Warn about packages that install files under /usr/include with overly-generic filenames. Thanks to Andreas Beckmann for the report. (Closes: #898377) + [CL] Apply patch from Ian Jackson to not detect https://browse.dgit.debian.org/example.git as a VCS deprecated in the Debian infrastucture. (Closes: #898708) * checks/files.pm: + [BR] Add "umd" as a possible suffix for minified Javascript. (alongside "lite", "min", "pack", etc.) * checks/menu-format.{desc,pm}: + [CL] Apply patch from Ross Vandegrift to update specification URIs. (Closes: #899134) * checks/upstream-metadata.desc: + [CL] Correct a "non-file directory entry" grammatical error in the description of the upstream-metadata-is-not-a-file tag. * data/files/js-libraries: + [BR] Detect uses of the libjs-normalize.css CSS "style reset" helper. * data/files/privacy-breaker-websites: + [BR] Detect uses of the "libjs-rx" API for asynchronous programming. * data/rules/rules-should-not-use: + [CL] Add a pedantic-level warning about possibly complete automatic debug symbol migrations. Thanks to Graham Inggs for the report. (Closes: #897608) * data/spelling/corrections: + [PW] Add a number of corrections. * lib/Lintian/Collect/Package.pm: + [CL] Support parsing tar(1) archives with high-resolution timestamps (eg. "21:47:29.12396808"). Based on a patch by Stephen Kitt; thanks! (Closes: #898715) lintian (2.5.86) unstable; urgency=medium * Summary of tag changes: + Added: - epoch-changed-but-upstream-version-did-not-go-backwards - latest-debian-changelog-entry-reuses-existing-version + Removed: - depends-on-mail-transport-agent-without-alternatives * checks/changelog-file.{desc,pm}: + [CL] Emit an error when a package bumps the epoch but the upstream version did not go "backwards". Thanks to Raphael Hertzog for the idea. (Closes: #889816) + [CL] Correctly warn about packages that re-use a previous version number. Thanks to Raphael Hertzog for spotting this issue and the follow-ups. (Closes: #889991) * checks/fields.pm: + [CL] Move homepage-field-uses-insecure-uri regex into a separate data file now it is getting unwieldy. + [CL] Drop depends-on-mail-transport-agent-without-alternatives as it only consists of false-positives. Thanks to Paul Wise and Russ Allbery. (Closes: #898136) * data/debhelper/dh_addons-manual: + [CL] Also permit python-scour to satisfy the requirement for the scour addon. (Closes: #898077) * data/fields/insecure-homepage-uris: + [CL] Add non-HTTPS gnu.org to the list of sites we should warn about for homepage-field-uses-insecure-uri. Thanks to Mattia Rizzolo for the report. (Closes: #898160) * data/spelling/corrections: + [PW] Add a number of corrections. lintian (2.5.85) unstable; urgency=medium * Summary of tag changes: + Added: - ancient-python-version-field - changed-by-invalid-for-derivative - old-python-version-field - package-does-not-use-debhelper-or-cdbs * checks/{binaries,shared-libs.pm}: + [CL] Update shared object detection for file >= 5.33 as this version will identify shared objects as a "pie executable" or "shared object" depending on the file's executable bit. Thanks to Paul Gevers, Doug Freed, Christoph Biedl & Mattia Rizzolo. (Closes: #896840) * checks/changelog-file.pm: + [CL] Prevent false-positives in the non-consecutive-debian-revision and possible-new-upstream-release-without-new-version tags by skipping them if the source package was renamed. Thanks to Andreas Beckmann for the report. (Closes: #896675) + [CL] Include the offending version numbers in the output of the non-consecutive-debian-revision tag. * checks/cruft.pm: + [CL] Make the file-contains-trailing-whitespace tag also emit for whitespace at end of files. + [CL] Drop now-misleading comment regarding trailing whitespace filenames being relative. + [CL] Also allow /usr/share/doc/$pkg/examples to be a symlink when checking for packages that ship examples. Thanks to Rafael Laboissière for the report. (Closes: #897157) * checks/copyright-file.pm: + [CL] Disable the duplicate word "spelling" detection in copyright files to their extensive use of headings and other structures causing false positives. Thanks, Stuart Prescott. (Closes: #897402) * checks/debhelper.{pm,desc}: + [CL] Don't use $. out-of-context when reporting on dh --parallel. + [CL] Add a pedantic warning for packages that do not use debhelper or CDBS. (Closes: #884499) * checks/description.pm: + [CL] Rework the description-synopsis-might-not-be-phrased-properly tag to ensure we do not cause false-positives for literal "e.g.", "eg.", ellipsis ("..."), "etc.", splitting out the tests to make it clearer and to catch some other corner cases. Thanks to Andreas Beckmann for the detailed report. (Closes: #896671) + [CL] Include the synopsis itself for context, etc. when emitting the description-synopsis-might-not-be-phrased-properly tag. * checks/fields.pm: + [CL] Correct a default-mta-dependency-not-listed-first false- positive where we incorrect emitted the tag for, e.g. "Depends: a, default-mta | b". (Closes: #897166) + [CL] Fix orphaned-package-not-maintained-in-debian-infrastructure false positives for https://git.dgit.debian.org Vcs-* fields. Thanks to Thorsten Alteholz for the report. (Closes: #897915) * checks/menus.pm: + [CL] Also look in a package's dependencies for files listed in a doc-base control file. (Closes: #897244) * checks/patch-systems.pm: + [CL] Ignore templated ".in" files in debian/patches for the patch-file-present-but-not-mentioned-in-series tag. * checks/python.{desc,pm}: + [CL] Mark dependency-on-python-version-marked-for-end-of-life as "experimental" and with a "pedantic" severity, thus essentially hiding it from all Lintian users yet allowing us to continue to continue collect statistics and making it easier to re-introduce after the release of buster. (Closes: #897213) + [CL] Migrate the malformed-python-version and python-version-current-is-deprecated tags from fields.pm, refactor to use $info->source_field over $info->field, include the offending field name in the output, and also warn about the Python 3.x variant of this field. + [CL] Warn about ancient and old X-Python{,3}-Version fields. Thanks to Scott Kitterman. (Closes: #892304) * checks/watch-file.desc: + [CL] Update description of debian-watch-uses-insecure-uri to clarify what to do if there is currently no secure URI. Thanks to Andreas Tille for the report. (Closes: #897082) * collection/src-orig-index: + [CL] Pass --full-date to tar(1) to ensure that we get a consistent output in the presence of spaces in other fields. (Closes: #897248) + [CL] Pass --utc to tar(1) to ensure reproducible date parsing. * data/java/constants: + [CL] Apply patches from Bas Couwenberg to update the bytecode checks for OpenJDK 10 add bytecode number for OpenJDK 11. (Closes: #897424) * data/fields/perl-provides: + [CL] Update for Perl 5.026002. * data/files/python-generic-modules: + [CL] Add "scripts" and "script" to the list of overly generic Python module names. Thanks, Andreas Beckmann. (Closes: #897692) * data/spelling/corrections: + [CL] Add a "CBDS" → "CDBS" correction. + [CL] Add a "DSFG" → "DFSG" correction. + [PW] Add a number of corrections. * doc/releases.md: + [CL] Clarify that we should add an extra bit of whitespace for annotated release tags. * lib/Lintian/Check.pm: + [CL] Add support for derivative-specific "Changed-By" validation to enforce additional restrictions on the uploader. * lib/Lintian/Collect/Package.pm: + [CL] croak() a meaningful message we cannot parse an index data line. * t/tests/*: + [CL] Apply patch from Adam Conrad adding "-Wl,--no-as-needed" to fix testsuite failures with Ubuntu's ld(1). (Closes: #897639) + [CL] Correct the "files-" (should be "fields-") prefix of the files-orphaned-package-not-maintained-in-debian-infrastructure test. * vendors/ubuntu/main/data/changes-file/known-dists: + [CL] Apply patch from Adam Conrad to add cosmic as a known Ubuntu distribution. (Closes: #897638) lintian (2.5.84) unstable; urgency=medium * checks/binaries.pm: + [CL] Apply patch from Steve McIntyre to fix profiling detection on armhf which was causing test failures in Ubuntu on that architecture. (Closes: #895574) * checks/fields.pm: + [CL] Don't warn about binary-package-depends-on-toolchain-package for Conflicts/Breaks relations. Thanks to Guillem Jover for the report. (Closes: #896133) * checks/{files.desc,menu-format.*}, data/menu-format/known-desktop-keys: + [PW] Link to the latest version for all FreeDesktop standards * checks/python.desc: + [CL] Replace all instances of "specifies a dependency on Python 2.x which not be maintained past 2020" with a clarification that this refers to upstream's policy followed by a suggestion that it may be dropped after the release of Debian "buster". Thanks to Adrian Bunk for the suggestion. (Closes: #896079) * checks/source-copyright.pm: + [CL] Add the offending license name to the output of the "dep5-copyright-license-name-not-unique" tag. * data/spelling/corrections: + [PW] Add a number of corrections. * lib/Lintian/Collect/Package.pm: + [CL] Ensure directory names always end in a trailing "/" to prevent them being added multiple times to our index. This was resulting in false-positives for the source-contains-empty-directory tag. Thanks to James McCoy for the report. (Closes: #896010) + [CL] Correct "as_anchored_root_dir" -> "has_anchored_root_dir" typo introduced in e0c833b3 and disable "anchored roots", otherwise resolve_path breaks (eg. systemd-complex-service-file). * profiles/pureos/main.profile: + [CL] Also disable the "changelog-should-mention-nmu" and "source-nmu-has-incorrect-version-number" tags. lintian (2.5.83) unstable; urgency=medium * Summary of tag changes: + Added: - debian-rules-should-not-use-sanitize-all-buildflag * checks/fields.desc: + [ADB] Add missing URL in vcs-deprecated-in-debian-infrastructure's description, which was accidentally lost in lintian 2.5.80. * checks/version-substvars.desc: + [CL] Correct confusing not-binnmuable-any-depends-all tag description caused by blind replacement of ${Source-Version} to ${source:Version} in 4fd0fa4bc3. (Closes: #895656) + [CL] Correct classification of the maybe-not-arch-all-binnmuable tag by marking it as "experimental", downgrading the certainty to "wild guess" and re-adding a note recommending against making any changes at this point. Thanks, Jeremy Bicha! (Closes: #895674) * data/binaries/spelling-exceptions: + [CL] Add "selectOn" to the list of spelling-error-in-binary exceptions; it exists in the source as part of a "void ToolBoxWidget::selectOn()" method signature, etc. (Closes: #895818) + [CL] Add "wIH" to the list of exceptions. (Closes: #895841) * data/rules/should-not-use: + [CL] Detect debian/rules files that specify the sanitize=+all build flag. (Closes: #895831) * data/spelling/corrections: + [CL] Add "toogle" → "toggle" correction. Thanks to Thorsten Glaser for the report. (Closes: #895573) + [PW] Add a number of corrections. lintian (2.5.82) unstable; urgency=medium * Summary of tag changes: + Added: - invalid-field-for-derivative - invalid-version-number-for-derivative * checks/changes-file.{desc,pm}: + [CL] Add support for derivative-specific version validation to permit enforcement of additional restrictions on the version number such as being suffixed by "derivativeos1", etc. * checks/debhelper.pm: + [CL] Add a special case for the python3 addon as it needs a dependency on dh-python unless the -dev packages are used. Thanks to Julian Andres Klode for the report. (Closes: #895284) * checks/fields.{desc,pm}: + [CL] Add support for derivative-specific field parsing to allow enforcement of additional restrictions (eg. updating Vcs-Git, etc.) * checks/python.pm: + [CL] Apply patch from Pierre-Elliott Bécue to loosen the changelog parsing of the new-package-should-not-package-python2-module tag to allow (for example) "Python 2 variant" as well as "Python2 variant". Thanks! (Closes: #895128) * commands/reporting-sync-state.pm: + [CL] Add support for blacklisting source packages in order to prevent some currently-problematic packages such as gcc-8-cross-ports preventing the update of https://lintian.debian.org/. (See #890873) * debian/*, commands/*, CONTRIBUTING.md, etc.: + [CL] Move canonical source repository from Alioth to salsa. * lib/Lintian/Collect/Package.pm: + [CL] Allow spaces within the ownership field of tar -tvf output whilst still allowing spaces in filenames. (Closes: #895175) * data/scripts/maintainer-script-bad-command: + [CL] Also check for find(1) calls when checking for maintainer scripts that use a recursive chmod or chown. Thanks to Daniel Kahn Gillmor for the report. (Closes: #895370) * data/spelling/corrections: + [PW] Add a number of corrections. * vendors/pureos/main/data/changes-file/derivative-versions: + [CL] Ensure that PureOS packages always end with (eg. pureosX). * vendors/pureos/main/data/fields/derivative-fields: + [CL] Add PureOS-specific field name validation, such as ensuring the Maintainer field is updated to the mailing list. lintian (2.5.81) unstable; urgency=medium The "Policy 4.1.4" release. * Summary of tag changes: + Added: - debian-rules-contains-unnecessary-get-orig-source-target - source-contains-empty-directory + Removed: - debian-rules-missing-good-practice-target-dfsg * checks/control-file.desc: + [CL] Correct location of "AutomaticDebugPackages" wiki page in the description of the debian-control-has-obsolete-dbg-package tag. Thanks to Antonio Ospite for the report. (Closes: #893480) * checks/cruft.{desc,pm}: + [CL] Add a pedantic warning for upstream tarballs that contain empty directories as these can cause problems with git-buildpackage. Thanks to Balint Reczey for the idea! (Closes: #894368) * checks/gir.{desc,pm}: + [CL] Apply a patch series from Simon McVittie to match the Gobject Introspection policy and fixing a series of false-positives. Thanks! (Closes: #881491) * checks/java.{desc,pm}: + [CL] Apply patch from Bas Couwenberg to bump the maximum permissible bytecode version number now that openjdk-9 is now the default-jdk. (Closes: #894397) + [CL] Apply patch from Bas Couwenberg to update the description of the unknown-java-class-version tag for openjdk-9. (Closes: #894397) * checks/files.pm: + [CL] Add .ogg files to the list of non-license file extensions to avoid a false-positive in extra-license-file. Thanks to Innocent De Marchi for the report. (Closes: #894139) + [CL] Avoid false-positives in Mallard XML files; <link href="..."> tags are anchor element and not followed automatically. Thanks to Simon McVittie for the report. (Closes: #894690) * checks/rules.{desc,pm}: + [CL] Stop recommending that packages with repacked tarballs specify a get-orig-source target; this was removed in Debian Policy 4.1.4 in favour of uscan(1) and debian/watch. + [CL] Warn about packages that have apparently unnecessary "get-orig-source" targets such as single-line calls to uscan(1). Thanks to Mattia Rizzolo for the idea. (Closes: #895036) * checks/scripts.pm: + [CL] Also include the offending/unknown shebang in the output of missing (unversioned) interpreters. * checks/source-copyright.desc: + [CL] Change the severity from pedantic ("P:") to info ("I:") for the missing-explanation-for-repacked-upstream-tarball tag. * checks/testsuite.{desc,pm}: + [CL] Apply patch from Georg Faerber to add missing "needs-reboot" to the list of known autopkgtest restrictions. (Closes: #894817) + [CL] Apply patch from Georg Faerber to adjust the autopkgtest URIs from Alioth to salsa.debian.org. (Closes: #894820) * checks/udev.pm: + [CL] Apply patch from Thomas Dallmair to avoid false positives in the udev-rule-missing-subsystem tag when SUBSYSTEM GOTO is not the last "GOTO" statement. Thanks! (Closes: #894356) * checks/upstream-metadata.pm: + [CL] Re-enable YAML parsing of upstream metadata which was disabled in 2.5.51 (via #861958) to close CVE-2017-8829 as we can now use the $LoadBlessed option of YAML::XS if we have version 0.69 or above Thanks to Dylan Aïssi for the report. (Closes: #894747) * commands/lintian.pm, checks/{fields,patch-systems,python}, ...: + [CL] Apply patch from Ville Skyttä correcting many spelling mistakes in Lintian itself. Thanks! (Closes: #894834) * data/standards-version/release-dates: + [CL] Add 4.1.4 as a known Standards-Version. * data/spelling/corrections: + [PW] Add a number of corrections. * lib/Lintian/Check.pm: + [CL] Avoid false positives in spelling detection by allowing "(s)" suffixes instead of universally stripping all parenthesis. This prevents, for example, "directory(s)" from triggering false-positive whilst still warning about "directorys". Thanks to Patrick Matthäi for the report. (Closes: #894077) * lib/Lintian/Util.pm: + [NT] Fix a bug in do_fork that could cause lintian to fork bomb. (See #890873) lintian (2.5.80) unstable; urgency=medium * Summary of tag changes: + Added: - build-depends-on-build-essential-package-without-using-version + Removed: - apache2-module-depends-on-real-apache2-package - depends-on-build-essential-package-without-using-version * checks/apache2.{desc,pm}: + [CL] Drop apache2-module-depends-on-real-apache2-package tag as there are separate tags for missing apache2-api-* dependencies. Thanks to Thijs Kinkhorst et al. (Closes: #796285) * checks/cruft.{desc,pm}: + [CL] Strip \par elements from files prior to license checks to avoid false-positives when checking .rtf files. Thanks to Adam Borowski for the report and testcase. (Closes: #892967) + [CL] Look under all of /usr/share/doc (not just /usr/share/doc/$pkg) when looking for installed examples and update tag description to match. Thanks to Ferenc Wágner for the report. (Closes: #892905) * checks/java.{desc,pm}: + [CL] Only emit source-contains-prebuilt-java-object reported for .jar files that contain classes. Thanks to Emmanuel Bourg for the report. (Closes: #789802) * checks/fields.{desc,pm}: + [CL] Upgrade vcs-deprecated-in-debian-infrastructure to "W:" from "P" due to Alioth becoming read-only from May 1st, as well as additionally checking Vcs-Browser fields hosted on Alioth and updating the tag description with more details. Thanks to Stuart Prescott for his input. (Closes: #886096) + [CL] Only check dependency fields in binary packages for mail-transport-agent-dependency-does-not-specify-default-mta etc. (Closes: #892550) * checks/rules.pm: + [CL] Don't emit unnecessary-source-date-epoch-assignment if the package has explicit Build-Depends on dpkg-dev (>= 1.18.8) or debhelper (>= 10.10). Thanks to Andreas Metzler for the report. (Closes: #892549) * checks/script.pm: + [BR] Fix FP with sensible-utils need to depends on sensible-utils. * checks/fields.{desc,pm}: + [CL] Clarify the meaning of the depends-on-build-essential-package-without-using-version tag by prefixing it with "build-". Thanks to Sven Joachim and Laurent Bigonville. (Closes: #892597) * data/debhelper/*, data/common/dh_addons: + [CL] Refresh all debhelper data, correcting the entry for dh-scour. (Closes: #889016) * data/spelling/corrections: + [PW] Add a number of corrections. lintian (2.5.79) unstable; urgency=medium * Summary of tag changes: + Added: - default-mta-dependency-does-not-specify-mail-transport-agent - default-mta-dependency-not-listed-first - depends-on-mail-transport-agent-without-alternatives - mail-transport-agent-dependency-does-not-specify-default-mta * checks/changelog-file.{desc,pm}: + [CL] Ignore entries that end with ":" to avoid false-positives in the debian-changelog-line-too-short. Thanks to Mattia Rizollo for the report. (Closes: #892197) + [CL] Update the description of improbable-bug-number-in-closes removing the specific number as it can get out of sync with the actual check. * checks/changes-file.pm: + [CL] Don't emit orig-tarball-missing-upstream-signature when the package provides a "foo.tar.asc" for a "foo.tar.gz". We previously only checked for a "foo.tar.gz.asc". Thanks to Uwe Kleine-König for the report. (Closes: #892255) * checks/cruft.pm: + [CL] Check all subdirectories under /usr/share/doc/foo to test whether we ship example files, not just /usr/share/doc/foo/examples/. * checks/fields.{desc,pm}: + [CL] Warn about packages that have either have dependency on default-mta but do not specify mail-transport-agent, have a mail-transport-agent dependency but do not specify default-mta and packages that do not specify default-mta first in their alternatives. Thanks to Paul Wise for the report. (Closes: #892143) + [CL] Warn about packages that have a relationship with a mail-transport-agent but do not specify default-mta and mail-transport-agent as alternatives. (Closes: #892144) * checks/obsolete-sites.pm: + [CL] Emit a warning if a package uses a deprecated FTP package download location. (Closes: #892249) * data/fields/obsolete-packages: + [PW] Add exim and apache, replaced by exim4 and apache2 * data/spelling/corrections: + [PW] Add a number of corrections. lintian (2.5.78) unstable; urgency=medium * Summary of tag changes: + Added: - missing-vcs-browser-field * checks/fields.{desc,pm}: + [CL] Warn about packages that are missing a Vcs-Browser header when we know that they have at least one Vcs-* header that has a browser-based interface. Thanks to Paul Wise for the report. (Closes: #891688) * data/spelling/corrections: + [CL] Drop the rouge → rogue correction; it's an (admittedly) old-fashioned word for red cheek makeup as well as being a fairly-common French word. It was causing a false-positive in the spelling-error-in-binary tag for osmocom-analog. Thorsten Alteholz for the report. (Closes: #891794) + [CL] Drop the wil → will correction as Wil is "a rather common name in the Netherlands". Thanks to Paul Gevers for the report. (Closes: #891935) * data/spelling/corrections: + [PW] Add a number of corrections. lintian (2.5.77) unstable; urgency=medium * Summary of tag changes: + Added: - built-using-field-on-arch-all-package - missing-built-using-field-for-golang-package - missing-xs-go-import-path-for-golang-package * checks/control-file.{desc,pm}: + [CL] Apply a patch from Michael Stapelberg to detect Golang packages with invalid or missing Built-Using headers. (Closes: #891072) + [CL] Apply patch from Michael Stapelberg to warn when packages do not specify a XS-Go-Import-Path. (Closes: #891184) * checks/rules.pm: + [CL] Allow rel="generator" and others; they do not cause internet access by default. Thanks to Raphaël Hertzog for the report. (Closes: #891301) * checks/version-substvars.pm: + [CL] Fix a bug in version-substvar-for-external-package parsing to prevent false-positives when the LHS of the binary relation contains a substvar. Thanks to Andreas Beckmann. (Closes: #726589) * data/common/architectures, etc.: + [CL] Update architecture lists to ensure the inclusion of riscv64. This will change everything. (Closes: #891387) * data/spelling/corrections: + [PW] Add a number of corrections. lintian (2.5.76) unstable; urgency=medium * Summary of tag changes: + Added: - debhelper-compat-file-contains-multiple-levels - debian-changelog-line-too-short - unnecessary-source-date-epoch-assignment - upstream-metadata-file-is-missing + Renamed: - co-maintained-package-with-no-vcs-headers -> co-maintained-package-with-no-vcs-fields. - desktop-contains-deprecated-header -> desktop-contains-deprecated-key. - xs-testsuite-header-in-debian-control -> xs-testsuite-field-in-debian-control. - unnecessary-testsuite-autopkgtest-header -> unnecessary-testsuite-autopkgtest-field. - xs-vcs-header-in-debian-control -> xs-vcs-field-in-debian-control. * General: + [CL] Apply a patch series from Ben Finney to correct inconsistent use of "header" terminology (versus "field", etc.) in descriptions and tag names. Thanks! (Closes: #890959) * checks/changelog-file.{desc,pm}: + [CL] Warn about changelog files that are too short. Thanks to Adrian Bunk for the suggestion. (Closes: #890920) * checks/cruft.pm: + [CL] Avoid false-positives in Jush's syntax highlighting definition files. + [CL] Avoid a false-positive when matching the fake Lena Söderberg image in libplacebo. Thanks to Thorsten Alteholz for the report. (Closes: #890943) * checks/debhelper.{desc,pm}: + [CL] Warn if packages define multiple compatibility levels in the "compat" file, typically via "echo 11 >> debian/compat" (instead of ">"). * checks/fields.desc: + [CL] Correct a grammatical error and tighten up the language of the "binary-package-depends-on-toolchain-package" tag's description. Thanks to Gregor Herrmann for the report. (Closes: #890530) * checks/init.d.pm: + [CL] Also check for "RUN=" and "DAEMONRUN=" when evalating lines in /etc/default for "init.d-script-should-always-start-service" violations. Thanks to Laurent Bigonville. (Closes: #890916) * checks/rules.{desc,pm}: + [CL] Update override_dh_auto_test-does-not-check-DEB_BUILD_OPTIONS to fix a number of false positives. Thanks to Gregor Herrmann for the report. (Closes: #890537) + [CL] Also check, for example, "override_dh_fixperms-indep" and "override_dh_fixperms-arch" targets for "override_dh_fixperms-does-not-call-dh_fixperms", etc. + [CL] Prevent a large number of false-positives when checking the debian-rules-is-dh_make-template tag. Thanks to Evgeni Golov for the report. (Closes: #890660) + [CL] Check for unnecessary SOURCE_DATE_EPOCH assignments; it is either exported by dpkg >= 1.18.8 or one can include pkg-info.pk, etc. (Closes: #832099) * checks/scripts.pm: + [CL] Prevent some false-positives in udevadm-called-without-guard. * checks/upstream-metadata.{desc,pm}: + [CL] Apply patch from Dylan Aïssi to suggest maintainers add a debian/upstream/metadata file, although downgrade the check to "experimental" level for the time being. (Closes: #833007) * checks/watch-file.pm: + [CL] Use our new $PKGREPACK_REGEX to match and capture the suffix when looking at potential debian/watch mangling issues. * commands/reporting-html-reports.pm: + [NT] Stop including the uncompressed lintian log in the website as it consumes considerable space for no reason. Consumers should migrate to the compressed variant, which has been around for years and only consumes ~1/20th of the space. * data/files/python-generic-modules: + [CL] Detect "core" as an overly-generic module name. Thanks to Andreas Beckmann for the report. (Closes: #891027) * data/scripts/interpreters: + [CL] Add cwl-runner (to cwltool) as an interpreter for CWL scripts. Thanks to Michael Crusoe for the report. (Closes: #890667) * data/spelling/corrections: + [PW] Add a number of corrections. * debian/source/lintian-overrides: + [CL] Drop all the overrides for Lintian itself now that we use the <!nocheck> build profile for the previously-spurious warnings. * lib/Lintian/Util.pm: + [CL] Factor out the regex that matches "repacked" tarballs based on their filename. * lib/Lintian/Collect/{Changes,Sources}.pm: + [CL] Add repacked subroutines to check whether a package has been repacked or not. * reporting/templates/maintainer.tmpl: + [CL] Link package entries directly to sources.debian.org. * t/scripts/changelog-format.t: + [CL] Provide some possibly-helpful advice when violating the "entry header" changelog test. * t/tests/cruft-upstream-binaries: + [CL] Add a testcase to check that symlinked missing-sources do the right thing (re. #890468). lintian (2.5.75) unstable; urgency=medium * Summary of tag changes: + Added: - debian-rules-uses-unnecessary-dh-argument - missing-explanation-for-repacked-upstream-tarball - udevadm-called-without-guard * checks/changelog-file.desc: + [CL] When checking latest-debian-changelog-entry-without-new-version ignore any change of epoch. (Closes: #889991) * checks/debhelper.{desc,pm}: + [CL] Warn when specifying --parallel to dh(1) in compat levels >= 10. Thanks to Nicolas Braud-Santoni for the idea. (Closes: #890358) + [CL] Add a missing verb to the long description of the dh-quilt-addon-but-quilt-source-format tag. * checks/files.pm: + [CL] Tidy logic for detecting allowed rel="" values in <link/> HTML tags. + [CL] Allow rel="canonical" in <link/> HTML tags; they are used by search engines (etc.) and do not cause internet access. (Closes: #762753) * checks/init.desc: + [CL] Improve various parts of the long description for init.d-script-should-always-start-service. * checks/patch-systems.{desc,pm}: + [CL] Avoid false positives when checking for typos by ignoring files or patch descriptions that contain the words "typo" or "spelling". Thanks to Bas Couwenberg for the report. (Closes: #889964) + [CL] Check the first line of the description separately for spelling errors to avoid false-positive duplicate checks across a patch description's synopsis and its body. (Closes: #890100) * checks/python.desc: + [CL] Underline that maintainers do not need to override the new-package-should-not-package-python2-module tag but rather leave a comment in debian/changelog. * checks/scripts.{desc,pm}: + [CL] Check for maintainer scripts that call udevadm without a guard as it can fail within a chroot. (Closes: #890298) * checks/source-copyright.{desc,pm}: + [CL] Emit a pendatic warning for packages with repacked upstream tarballs that lack a Files-Excluded or Comment header in debian/copyright. * collection/override-file: + [CL] Actually pick the first out of debian/source/lintian-overrides and debian/source.lintian-overrides. Thanks to Thorsten Glaser for the report. (Closes: #890361) * commands/reporting-html-reports.html: + [NT] Minimize generated SVG files if scour is installed and available in PATH. * data/spelling/corrections: + [PW] Add a number of corrections. lintian (2.5.74) unstable; urgency=medium * Summary of tag changes: + Added: - control-tarball-compression-format - data-tarball-compression-format - debian-rules-is-dh_make-template - init.d-script-should-always-start-service - jar-contains-source - missing-systemd-service-for-init.d-script - source-contains-prebuilt-wasm-binary - spelling-error-in-patch-description - systemd-service-file-refers-to-unusual-wantedby-target + Renamed: - systemd-no-service-for-init-script -> omitted-systemd-service-for-init.d-script - systemd-no-service-for-init-rcS-script -> missing-systemd-service-for-init.d-rcS-script - override_dh_auto_test-does-not-check-DEB_BUILD_PROFILES -> override_dh_auto_test-does-not-check-DEB_BUILD_OPTIONS * checks/changelog-file.desc: + [CL] Improve the long description of epoch-change-without-comment. Based on suggestions by Raphael Hertzog and Ian Jackson - thanks! (Closes: #889814) * checks/cruft.desc: + [BR] Check for wasm files. (Closes: #889102) + [CL] Factor out call to _ships_examples to avoid excessive looping over $sorted_index. + [CL] Do not emit package-does-not-install-examples if we don't have any binary packages in our laboratory. (Closes: #889591) + [CL] Improve the description of package-does-not-install-examples to give more debhelper advice. + [CL] Assume that if a source package generates a binary ending in "-examples" then it does ship examples. * checks/deb-format.{desc,pm}: + [CL] Add a classification tag for the .deb data tarball compression format. (Closes: #738442) + [CL] Add a classification tag for the control tarball compression format. (Closes: #889856) * checks/fields.pm: + [CL] Avoid false positives when checking binary packages depending on toolchain packages by ignoring packages starting with "dh-" or ending with "-source". Thanks to Josh Triplett for the report. (Closes: #889486) * checks/files.pm: + [BR] Add context for privacy breach in order to improve debugging. * checks/fields.desc: + [CL] Downgrade severity of build-depends-on-obsolete-package from error to warning. (Closes: #889638) * checks/java.{desc,pm}: + [CL] Only warn about bad-jar-name for "public" .jar files. (Closes: #889628) + [CL] Check for .jar files that embed Foo.java alongside a Foo.class file. (Closes: #762113) * checks/init.d.{desc,pm}: + [CL] Warn about packages that use ENABLED="true" (etc.) in /etc/default files. * checks/patch-systems.{desc,pm}: + [CL] Avoid emitting "Can't use an undefined value as an ARRAY reference" warnings when debian/patches is a file, not a directory. (Closes: #889535) + [CL] Check spelling of patch headers. (Closes: #756130) * checks/rules.{desc,pm}: + [CL] Fix a number of false-positives when checking the "override_dh_auto_test-does-not-check-DEB_BUILD_PROFILES" tag (Closes: #889592) + [CL] Make a large number of changes suggested by Mattia Rizzolo to the override_dh_auto_test-does-not-check-DEB_BUILD_PROFILES tag, renaming it to reference DEB_BUILD_OPTIONS throughout, add Debian Policy 4.9.1 to the tag's Ref, lower "Certanty" to "wild-guess" and mark the tag as experimental, updating the tests to match. (Closes: #889746) + [CL] Check for debian/rules files that are dh_make templates. (Closes: #679124) * checks/scripts.desc: + [CL] Improve, elaborate and tidy the long description of the maintainer-script-should-not-use-recursive-chown-or-chmod tag. Heavily based on a patch by Daniel Kahn Gillmor - thanks! (Closes: #889489) * checks/source-copyright.pm: + [CL] Prevent false positives when checking for missing NOTICE.txt files by looking inside .jar archives. (Closes: #889760) * checks/systemd.{desc,pm}: + [CL] Warn about unit files that install to unusual WantedBy= targets. Thanks to Sam Morris for the initial patch. (Closes: #817170) + [CL] Rework the no service detection, improving the (rarely overridden) tag names to better match what they detect as well as adding a new "missing-systemd-service-for-init.d-script" pedantic tag where we do not have an equivalent unit as this implies missing bespoke security hardening support, etc. Thanks to Lucas Nussbaum for his input. (Closes: #858588) * checks/udev.pm: + [CL] Add simple GOTO parsing to avoid false positives when checking for udev rules for SUBSYSTEM specifiers. (Closes: #869547, #889639) * commands/reporting-{html-reports,lintian-harness}.pm: + [NT] Register packages that fail during archive wide processing. * data/files/privacy-breaker-fragments: + [BR] Detect new fragments for Google CSE. * data/spelling/corrections: + [PW] Add a number of corrections. * lib/Lintian/Util.pm: + [NT] Give lower processing priority to packages that repeatedly trigger errors during archive-wide processing. * reporting/templates/index.tmpl: + [NT] Display summary of how many groups had errors during their last processing. * reporting/templates/{lintian.css,maintainer}.tmpl: + [NT] Use a distinct error status instead of "Outdated" for packages with errors during their last processing. lintian (2.5.73) unstable; urgency=medium * Summary of tag changes: + Added: - bad-jar-name - binary-package-depends-on-toolchain-package - checksum-count-mismatch-in-changes-file - co-maintained-package-with-no-vcs-headers - description-mentions-planned-features - files-excluded-without-copyright-format-1.0 - global-files-wildcard-not-first-paragraph-in-dep5-copyright - maintainer-script-should-not-use-recursive-chown-or-chmod - missing-explanation-for-contrib-or-non-free-package - multi-arch-same-package-has-arch-specific-overrides - override_dh_auto_test-does-not-check-DEB_BUILD_PROFILES - package-does-not-install-examples - package-uses-deprecated-dpatch-patch-system - package-uses-deprecated-source-override-location - unusual-documentation-package-name * checks/cruft.{desc,pm}: + [CL] When looking for the source of "build/foo/bar.min.js", also check "src/foo/bar.js". (Closes: #832027) + [CL] Check for upstream tarballs that ship examples but none is installed in any binary package. (Closes: #539326) * checks/debian-source-dir.desc: + [CL] Upgrade severity of missing-debian-source-format from wishlist ("I") to normal ("W"). (Closes: #702671) * checks/description.{desc.pm}: + [CL] Check for packages that mention planned/upcoming features in their long description. (Closes: #782990) + [CL] Improve the description-synopsis-might-not-be-phrased-properly tag also detect multiple sentences and improve the tag description. (Closes: #778427) * checks/changes-file.{desc.pm}: + [CL] Fix an issue where the bad-section-in-changes-file, file-size-mismatch-in-changes-file and checksum-mismatch-in-changes-file tags were not being checked if a package contained an upstream signature. + [CL] Check for inconsistencies between "Files" and Checksums-* sections in .changes files. (Closes: #658542) * checks/cruft.{desc.pm}: + [CL] Add pedantic warning for packages using source.lintian-overrides instead of debian/source/lintian-overrides. * checks/fields.{desc,pm}: + [CL] Add a pedantic warning for co-maintained packages that are not managed in a revision control system. (Closes: #884497) + [CL] Warn about Multi-Arch: same packages that ship architecture-specific Lintian overrides. Thanks to Sebastian Ramacher for the report. (Closes: #787469) + [CL] Check for packages that specify binary dependencies on toolchain packages such as cdbs or debhelper. (Closes: #700953) + [CL] Emit a warning about documentation packages that end with -docs. (Closes: #664520) + [CL] Ensure salsa.debian.org Vcs-Git and Vcs-Browser URIs are canonical and do not redirect. (Closes: #888809) * checks/files.pm: + [CL] Support scanning contents of (eg.) data/files/js-libraries. * checks/java.{desc,pm}: + [CL] Check for .jar files that do not match the Debian Java policy. (Closes: #791552) * checks/patch-systems.{desc,pm}: + [CL] Emit a pedantic warning for packages that are using the dpatch patch system. (Closes: #884500) * checks/rules.pm: + [CL] Check for override_dh_auto_test targets that do not check DEB_BUILD_OPTIONS for "nocheck". (Closes: #712394) * checks/scripts.desc: + [CL] Update the maintainer-script-should-not-use-service tag to include advice and Debian Policy reference. (Closes: #889154) * checks/source-copyright.{desc,pm}: + [CL] Warn about packages that specify a Files-Excluded header without a valid Format header as the former will be ignored by uscan(1). Thanks to Gunnar Wolf for the initial patch. (Closes: #745743) + [CL] Warn when a "Files: *" DEP-5 paragraph exists but it is not the first paragraph. Thank to Christoph Biedl for the report and idea. (Closes: #879235) + [CL] Ask maintainers to add a comment header to debian/copyright if their package is in contrib or non-free. (Closes: #773562) * commands/reporting-html-reports.pm: + [NT] Add a limit to how many instances of a tag is deplayed on a tag page as 151 000 instances of unstripped-static-library is hardly human readable. * data/spelling/corrections: + [PW] Add a number of corrections. * data/common/dh_addons: + [CL] Move/create from data/debhelper/dh_addons as we plan to use it elsewhere. * data/debhelper/dh_commands: + [CL] Update requirement for dh_scour (again!) from python3-scour to scour. (Closes: #889016) * data/debhelper/dh_commands-manual: + [NT] Remove dh_systemd* entries. Debian stable have a recent enough version of debhelper that this entry no longer matters. * data/files/fnames: + [CL] Ensure package-contains-python-doctree-file also warns about compressed .doctree files. * data/files/js-libraries: + [CL] Avoid false-positives when detecting Twitter's bootstrap library. (Closes: #888972) * data/files/python-generic-modules: + [CL] Detect "backports" (and "backport") as overly generic Python module names. (Closes: #888559) * data/scripts/maintainer-script-bad-command: + [CL] Warn if the maintainer scripts include "chown -R" or "chmod -R" to prevent hardlink attacks on kernels that do not have fs.protected_hardlinks=1. (Closes: #889066) * doc/lintian.xml: + [CL] Use the debian/source/lintian-overrides location in override example. * lib/Lintian/*: + [CL] Add support for passing .buildinfo files to Lintian. (Closes: #853274) * reporting/templates/tag.tmpl: + [NT] Update template to mention tag limit when not all instances are shown. lintian (2.5.72) unstable; urgency=medium * Summary of tag changes: + Added: - debian-rules-uses-deprecated-systemd-override - debian-watch-does-not-check-gpg-signature + Removed: - debian-watch-may-check-gpg-signature * checks/binaries.pm: + [CL] Avoid a false positive for spelling-error-in-binary that was causing a FTBFS on armhf. (Closes: #888074) + [CL] Drop a duplicate line in spelling-error-in-binary exceptions. + [CL] Move spelling-error-in-binary exceptions to a data file. + [CL] Support binutils 2.29.90.20180122 (vs. 2.29.1) when parsing ELF files for errors as the newer version modified the readelf output. This was causing a testsuite failure when checking the apparently-corrupted-elf-binary tag. (Closes: #888456) * checks/cruft.{desc,pm}: + [CL] Do not emit "license-problem-php-license" when the source comes from pecl.php.net: "The last agreement with FTP Masters was that PHP license is OK when the sources some from PECL repository." (Closes: #810780) + [CL] Allow, for example, debian/missing-sources/foo.js directories to represent the source for foo.js. This is useful when foo.js is the result of concatenating multiple files. (Closes: #836771) * checks/debhelper.{desc,pm}: + [CL] Warn about packages that use about dh_systemd_enable or dh_systemd_start overrides whilst using debhelper compat level 11 as they are no longer being called. (Closes: #887899) + [CL] Include the offending context and line when emitting the brace-expansion-in-debhelper-config-file tag. + [CL] Avoid false positives and remove an existing (incorrect) test for apparent brace expansions in config files that do not include a comma. (Closes: #888304) * checks/fields.pm: + [CL] Also check xfonts-foo for font-package-not-multi-arch-foreign. * checks/files.desc: + [CL] Downgrade extra-license-file from "W" to "I". (Closes: #740118) * checks/patch-systems.{desc,pm}: + [CL] Ignore files called "README" or "README.patches" when checking packages for patch-file-present-but-not-mentioned-in-series. (Closes: #888413) + [CL] Ignore commented-out patches in series files when checking the patch-file-present-but-not-mentioned-in-series tag. + [CL] Check "$vendor.series" (not "series.$vendor") when checking for the patch-file-present-but-not-mentioned-in-series tag. * checks/source-copyright.desc: + [CL] Clarify that paragraph ordering matters in the description of the unused-file-paragraph-in-dep5-copyright tag. (Closes: #762261) * checks/watch-file.{desc,pm}: + [CL] Rename the debian-watch-may-check-gpg-signature tag to debian-watch-does-not-check-gpg-signature to avoid confusion around the "may check" implying that the package in question does such checking and we disapprove of it. Thanks to Andreas Beckmann for the suggestion. (Closes: #735040) * data/fields/name_section_mappings: + [CL] Ensure xfonts-foo are recognised as part of the "x11" section to match the definition on https://packages.debian.org/en/sid/. (Closes: #878609) * data/spelling/corrections: + [PW] Add a number of corrections. * debian/control: + [CL] docbook-xml is required to build the documentation, so drop "<!nocheck>" build restriction. * debian/copyright: + [CL] Add missing initials for Gergely Nagy, Sylvestre Ledru and Steve Langasek. (Closes: #831729) * lib/Lintian/Check.pm: + [CL] Avoid false positives in the spelling-error-in-description (etc.) tags where the repetition is part of an acronym expansion such as "ORA (ORA Recursive Acronym)". (Closes: #883719) lintian (2.5.71) unstable; urgency=medium * Summary of tag changes: + Added: - patch-file-present-but-not-mentioned-in-series * checks/files.pm: + [CL] Ignore Rust .rs files in extra-license-file. (Closes: #887715) * checks/patch-systems.{desc,pm}: + [CL] Check for patch files under the debian/patches that are not mentioned in any series file. Thanks to Paul Wise for the idea. (Closes: #887817) * checks/python.{desc,pm}: + [CL] Don't emit "python-package-missing-depends-on-python" for debug packages + [CL] Include possibility that the file should not even be installed in the description of python-package-missing-depends-on-python. * data/spelling/corrections: + [PW] Add a number of corrections. * data/rules/rules-should-not-use: + [CL] Add more context to xz-compression-level-too-high tag output. * lib/Lintian/Collect/Package.pm: + [CL] Fix "Use of uninitialized value in string ne" warnings that would have appeared as part of the src-orig-index handling in 2.5.66. (Closes: #887428) * t/tests/files-multiarch-foreign-files: + [CL] Only run on amd64. (Closes: #886163) lintian (2.5.70) unstable; urgency=medium * checks/python.pm: + [CL] Fix false positives in python-package-missing-depends-on-python for Python 3 packages; we were not checking python3:any or python3-minimal:any. * data/spelling/corrections: + [PW] Add bumpded -> bumped correction. lintian (2.5.69) unstable; urgency=medium * Summary of tag changes: + Added: - insecure-copyright-format-uri - package-contains-file-in-etc-skel - package-contains-python-tests-in-global-namespace - python-package-missing-depends-on-python - xz-compression-level-too-high * checks/cruft.pm: + [CL] Ignore TeX \section (etc.) titles when checking for GFDL license. Thanks, Norbert Preining for the report. (Closes: #863384) * checks/fields.{pm,desc}: + [CL] Downgrade severity of wrong-section-according-to-package-name from "W:" to "I:". (Closes: #883772) + [CL] Thanks to Niels Thykier, update the description of the orphaned-package-not-maintained-in-debian-infrastructure tag. + [CL] Include the offending uri in the output of the vcs-deprecated-in-debian-infrastructure tag. * checks/python.{pm,desc}: + [CL] Don't emit new-package-should-not-package-python2-module if the maintainer justifies its inclusion in the changelog entry. + [CL] Improve the description and reasoning for the new-package-should-not-package-python2-module tag. + [CL] Include the offending package name when warning about new-package-should-not-package-python2-module. + [CL] Warn about packages that ship Python modules but are missing dependencies on any Python interpreter. (Closes: #887083) + [CL] Remark that new-package-should-not-package-python2-module's appearance on https://lintian.debian.org/ can be ignored. (Closes: #887124) * checks/rules.pm: + [CL] Allow rules-not-should-not-use data-based tags to capture variables and include them in the emitted tag. * checks/source-copyright.{desc,pm}: + [CL] Warn about insecure "Format:" URIs that reference debian.org. Based on a patch by Nicolas Braud-Santoni. (Closes: #886930) * checks/standards-version.pm: + [CL] Include the date the Standards-Version was actually released in the output of the ancient-standards-version and the out-of-date-standards-version tags. * data/debhelper/*: + [ADB] Refresh. * data/files/fnames: + [CL] Warn about packages that ship (eg.) test_foo.py files in the global Python module namespace. + [CL] Emit an error if packages ship files in /etc/skel. Thanks to Paul Wise for the suggestion. (Closes: #887120) * data/files/fonts: + [ADB] Refresh. * data/fields/name_section_mappings: + [CL] Ensure that NSS (Name Services Switch) modules are placed in the "admin" section. Thanks to Mathieu Parent (sathieu) for the patch. (Closes: #886961) * data/rules/rules-should-not-use: + [CL] Include the assigned value in the Lintian output for the debian-rules-should-not-use-DH_EXTRA_ADDONS tag. + [CL] Detect overly-compressed xz packages. (Closes: #829100) * data/spelling/corrections: + [PW] Add a number of corrections. lintian (2.5.68) unstable; urgency=medium * Summary of tag changes: + Added: - dh-quilt-addon-but-quilt-source-format - orphaned-package-not-maintained-in-debian-infrastructure - package-contains-python-hypothesis-example - should-specify-rules-requires-root - vcs-deprecated-in-debian-infrastructure * checks/changelog-file.pm: + [FL] Fix version parsing for hyphen in upstream versions. * checks/cruft.pm: + [CL] Avoid a false-positive reported by Theppitak Karoonboonyanan when matching autotools-pkg-config-macro-not-cross-compilation-safe by skipping comment lines. (Closes: #886297) + [FL] Fix version parsing for native packages. * checks/control-file.{desc.pm}: + [CL] Check for packages that should specify Rules-Require-Root. (Closes: #886479) * checks/debconf.pm: + [CL] Don't warn about unknown template type "entropy" when a package depends on cdebconf. (Closes: #677870) * checks/debhelper.{desc,pm}: + [CL] Add a check for packages that specify "dh --with quilt" but use the "3.0 (quilt)" source format. Thanks to Mattia Rizzolo for the idea. (Closes: #886566) * checks/fields.pm: + [CL] Warn about orphaned packages that are not maintained in the Debian infrastucture. (Closes: #886057) + [CL] Emit pedantic warnings for packages that refer to a non-Git version control systems hosted in the Debian infrastructure for the upcoming salsa.debian.org migration. (Closes: #885974) + [CL] Include the offending "Bugs" field value in the output of the bugs-field-does-not-refer-to-debian-infrastructure tag. + [CL] Ensure that bugs-field-does-not-refer-to-debian-infrastructure can be overridden by not emitting them for -dbgsym packages. Thanks to Thorsten Glaser for the report. (Closes: #886426) * checks/huge-usr-share.pm: + [CL] Bump arch-dep-package-has-big-usr-share thresholds; they were last set in 2004. (Closes: #648755) * checks/pe.pm: + [CL] Apply a patch from Stephen Kitt to avoid false-positives when checking PE32+ Windows Portable Executable files, additionally dropping the now-unnecessary magic number parsing. (Closes: #886555) * checks/python.{pm,desc}: + [CL] Don't warn about django-package-does-not-depend-on-django for -doc packages, etc. + [CL] Lower the severity of the "dependency-on-python-version-marked-for-end-of-life" tag from normal ("W:") to wishlist ("I:") as it is not necessarily actionable by the maintainer. This reverts bug #883581. (Closes: #886259) + [CL] When checking for a Python 3 variant of a Python 2.x package also consider any package that declares a binary dependency on the ${python3:Depends} substvar to catch packages that have been renamed. Thanks to Scott Kitterman for the report. (Closes: #886303) * checks/rules.pm: + [CL] Also allow $(overridden_command) when checking for the override_dh_fixperms-does-not-call-dh_fixperms etc. tags. * checks/scripts.desc: + [CL] Also mention Recommends and Suggests in the opening paragraph of python-script-but-no-python-dep. (Closes: #687141) * checks/shared-libs.pm: + [CL] Skip Objective-C libraries for the no-symbols-control-file tag as instance/class methods do not appear in the symbol table. Thanks to Yavor Doganov for the report and help. (Closes: #749202) * checks/source-copyright.desc: + [CL] Avoid false positives for missing-notice-file-for-apache-license by also looking for files with a .txt extension in binary packages. Thanks to Ferenc Wágner for the report. (Closes: #886343) * checks/standards-version.desc: + [CL] Downgrade severity of out-of-date-standards-version from normal ("W:") to wishlist ("I:"). (Closes: #886210) * checks/watch-file.pm: + [CL] Apply patch from Carlos Maddela <e7appew@gmail.com> to prevent false-positives when options contain escaped quotation marks. (Closes: #886574) * collection/src-orig-index: + [CL] Return the replaced string after injecting any tarball prefix (ie. "foo/bar\n"), not Perl's result of the replacement (ie. "1"). (Closes: #886586) * data/common/dbg-pkg: + [CL] Identify both python-foo-dbg and python3-foo-dbg as known debug packages to avoid a false-positive for the former when checking for debian-control-has-obsolete-dbg-package. (Closes: #886271) * data/files/fnames: + [CL] Warn about packages that ship (non-reproducible) Python Hypothesis examples. (Closes: #886101) + [CL] Only test for packages shipping gschemas.compiled files in usr/share/glib-*/schemas as it is valid for packages to generate schemas at build time. Thanks to Jonathan Carter (highvoltage) for the followup. (Closes: #884142) * data/spelling/corrections: + [PW] Add a number of corrections. * data/standards-version/ancient-date: + [CL] Change the policy of "ancient-standards-version" to "a release of Policy from the previous stable release cycle" and update the value to match. (Closes: #886219) * reporting/templates/maintainer.tmpl: + [CL] Make the previously-hidden package anchor links visible so that one can right-click and copy the URL instead of constructing it manually. * t/tests/files-multiarch-foreign-files: + [CL] Ensure that we install to a multiarch directory on all architectures to prevent a FTBFS on, for example, i386. (Closes: #886163) lintian (2.5.67) unstable; urgency=medium * Summary of tag changes: + Added: - debian-rules-should-not-use-DH_EXTRA_ADDONS - debian-watch-could-verify-download - invalid-date-in-debian-changelog - override_dh_fixperms-does-not-call-dh_fixperms * checks/apache2.{desc,pm}: + [CL] Include the offending filename and line number in the output of apache2-deprecated-auth-config and apache2-unparsable-dependency. + [CL] Avoid false positives in apache2-deprecated-auth-config where the offending lines are wrapped in suitable "IfModule" or "IfVersion" directives. (Closes: #788991, #710656) * checks/changelog-file.{desc,pm}: + [CL] Warn about changelog entries that have incorrectly formatted dates. (Closes: #793406) * checks/files.pm: + [CL] Split out python-module-has-overly-generic-name regular expression into a data file. + [CL] Don't warn about extra license files installed via Sphinx. Thanks, Stuart Prescott! (Closes: #885968) * checks/python.pm: + [CL] Prevent false positives when checking for Python {2,3} packages that depend on Python {3,2} packages when the package being depended on ends with -doc. We were previously only catching the case for dependencies *from* packages with such names. (Closes: #885693) + [CL] Also ignore -doc, -docs, -dev, -common and -tools packages for intra-Python variant dependency checking, python-but-no-python3, etc. + [CL] Drop parens in depends-on-package-from-other-python-variant output. + [CL] Refactor django-package-does-not-depend-on-django check to correctly check Django packages called python2-django-foo. * checks/rules.{desc.pm}: + [CL] Suggest using /usr/share/dpkg/architecture.mk as a solution to debian-rules-sets-dpkg-architecture-variable rather than simply replacing assignments with ?=. Thanks to Helmut Grohne for the suggestion. + [CL] Include the line number when warning about instances of override_dh_clean targets that are missing calls to dh_clean. + [CL] Apply patch from Paul Tagliamonte to check for files that use DH_EXTRA_ADDONS. Thanks! (Closes: #885790) + [CL] Update $PYTHON3X_DEPEND to prevent false positives in missing-python-build-dependency. (Closes: #750537) + [CL] Refactor check for override_dh_clean-does-not-call-dh_clean tag into a loop. + [CL] Check for override_dh_fixperms targets that are missing calls to dh_fixperms. (Closes: #885910) * checks/scripts.pm: + [CL] Include the offending/unknown shebang in the output of various interpreter-related tags. (Closes: #673734) * checks/source-copyright.desc: + [CL] Also mention that we check for NOTICE.gz files when looking for Apache 2.0 packages that do not distribute their accompanying NOTICE file. * checks/watch-file.{desc,pm}: + [CL] Apply patch from Felix Lechner <felix.lechner@lease-up.com> to check for packages where an upstream signature exists but is not being used. (Closes: #885621) * data/fields/name_section_mappings: + [CL] Ensure that PAM modules are placed in the "admin" section, additionally preventing a false positive for libpam-krb5 which was being caught by a "libfoo1" => "libs" entry. (Closes: #885899) * data/files/python-generic-modules: + [CL] Add "examples". * data/spelling/corrections: + [PW] Add a number of corrections. * data/standards-version/release-dates: + [CL] Correct date(1) invocation example in comment. + [CL] Add 4.1.3 as a known standards version. * debian/control: + [CL] Declare compliance with Debian Policy 4.1.3. + [CL] Mention Debian Policy 4.1.3 in long package description. lintian (2.5.66) unstable; urgency=medium Merry Christmas! * Summary of tag changes: + Added: - autotools-pkg-config-macro-not-cross-compilation-safe - bugs-field-does-not-refer-to-debian-infrastructure - mismatched-python-substvar - missing-notice-file-for-apache-license - override_dh_clean-does-not-call-dh_clean - package-contains-python-doctree-file - pkg-config-unavailable-for-cross-compilation - portable-executable-missing-security-features - python-package-depends-on-package-from-other-python-variant - vcs-fields-use-more-than-one-vcs * checks/*.desc: + [CL] Standardise on capital-L "Lintian" in tag descriptions. Thanks to Adam D. Barratt for the suggestion. * checks/cruft.{pm,desc}: + [CL] Check for packages that invoke AC_PATH_PROG without considering cross-compilation. Thanks to Helmut Grohne for the idea and proof-of-concept implementation. (Closes: #884798) * checks/fields.{pm,desc}: + [CL] Emit a wishlist warning for packages that mix-and-match more than one version control system in Vcs-* headers. (Closes: #884503) + [CL] Warn when packages specify a "Bugs" field in debian/control that does not refer to official Debian infrastructure as this can make reportbug unable to report bugs. (Closes: #741071) * checks/files.{pm,desc}: + [CL] Warn maintainers about packages that ship pkg-config files under /usr/lib/pkgconfig as they are unavailable under cross-compilation. Thanks to Helmut Grohne for the idea. (Closes: #885096) + [CL] Warn about packages that ship non-reproducible Python .doctree files. (Closes: #885327) + [CL] Factor out simple filename checks into a Lintian::Data variable. * checks/init.d.{pm,desc}: + [CL] Don't emit init.d-script-needs-depends-on-lsb-base if the package ships a Systemd service file. (Closes: #864999) * checks/lintian.desc: + [CL] Also note that unused-override can be triggered if Lintian adds/modifies supplementary tag metadata. * checks/obsolete-sites.pm: + [CL] Ignore commented-out lines to avoid false-positives where the maintainer references the old location. (Closes: #806237) * checks/pe.{pm,desc}: + [CL] Check for Microsoft Windows Portable Executable (PE) files that are missing security hardening features. Thanks to Petter Reinholdtsen for the report. (Closes: #837548) * checks/python.{pm,desc}: + [CL] Warn about Python 2.x packages using ${python3:Depends} and Python 3.x packages using ${python:Depends}. Thanks to Mattia Rizzolo for the idea. (Closes: #884676) + [CL] Factor out definition of dependency fields. + [CL] Warn about Python 3 packages that depend on Python 2 packages and vice versa. (Closes: #782277) * checks/rules.{desc,pm}: + [CL] Check for override_dh_clean targets that are missing calls to dh_clean. Thanks to Andreas Beckmann for the idea. (Closes: #884817) * checks/standards-version.pm: + [CL] Avoid misleading tag descriptions when emitting valid timewarp-standards-version warnings if the date parts are identical (ie. "2017-11-30 < 2017-11-30"). Thanks to Andrea Bolognani eof@kiyuko.org> for the report. (Closes: #884785) * checks/scripts.pm: + [CL] Prevent a false positive in the possibly-insecure-handling-of-tmp-files-in-maintainer-script tag by detecting XXX-like mktemp(1) templates. (Closes: #601323) * checks/source-copyright.{desc,pm}: + [CL] Check for Apache 2.0 packages that do not distribute their accompanying "NOTICE" files. (Closes: #885042) + [CL] Use the list of files in the orig tarball (rather than in the regular index) to prevent false positives when checking for the source-includes-file-in-files-excluded tag when a patch system re-adds files that were removed. (Closes: #884848) * collection/src-orig-index: + [CL] Correct references to generated filename. + [CL] Update bitrotted calls to Lintian::Command:spawn. * data/debhelper/compat-level: + [MR] Bump the experimental debhelper compat level to 12. (Closes: #884678) + [CL] Bump the recommended debhelper compat level to 11, emitting a pedantic warning when using lower level. (Closes: #884699) * data/debhelper/dh_commands: + [CL] dh_scour is now provided by python3-scour, not python-scour. Thanks to Jeremy Bicha. (Closes: #885106) * data/files/js-libraries: + [CL] Detect embedded jQuery libraries with version number in their filenames (eg. jquery-1.10.2.min.js). (Closes: #833613) + [CL] Also emit embedded-javascript-library for Twitter Bootstrap and "mustache". * data/files/php-libraries: + [CL] Avoid a embedded-php-library false positive for streams.php. (Closes: #637473) * data/spelling/corrections: + [PW] Add a number of corrections. * debian/compat: + [NT] Bump debhelper compat level to 11. * debian/control: + [CL] Tag relevant build-dependencies with <!nocheck>. + [NT] Bump versioned Build-Dependency on debhelper to 11~. * lib/Lintian/Collect/{Package,Source}.pm: + [CL] Don't require that src-orig-index.gz actually contains any files rather than faking an entry. * reporting/templates/maintainer.tmpl: + [CL] Correct invalid "else if" syntax with "elsif". Thanks to Uwe Kleine-König for the report. * t/tests/fields-malformed-vcs-fields-unrel: + [CL] Add a regression test for a potential false positive in the "vcs-field-has-unexpected-spaces" tag. (Ref: #884870) * t/tests/files-multiarch-foreign-files: + [CL] Don't hardcode architecture triplet to fix FTBFS on non-amd64 architectures. (Closes: #884683) * t/scripts/implemented-tags.t: + [CL] Exclude some tests in this coverage check now that they are specified in a data file rather than in the code itself. lintian (2.5.65) unstable; urgency=medium * t/tests/files-pkgconfig: + [CL] Update tests to reflect change in Multi-Arch foreign detection. lintian (2.5.64) unstable; urgency=medium * checks/files.pm: + [CL] Apply patch from Sven Joachim to prevent false-positives multiarch-foreign-static-library for non-multiarch packages. (Closes: #884655) * reporting/templates/maintainer.tmpl: + [CL] Don't link full report entries to themselves. (Closes: #884572) + [CL] Link to the package's short report entry from the "full" version if it isn't empty. lintian (2.5.63) unstable; urgency=medium * Summary of tag changes: + Added: - development-package-ships-elf-binary-in-path - excessive-priority-for-library-package - multiarch-foreign-cmake-file - multiarch-foreign-pkgconfig - multiarch-foreign-static-library - package-contains-compiled-font-file - package-contains-compiled-glib-schema * checks/binaries.{pm,desc}: + [CL] Add an experimental check for development packages that ship ELF binaries in $PATH. Host architecture binaries are generally not executable so such files are useless for cross builds. (Closes: #794295) * checks/cruft.desc: + [CL] Add debian/changelog to the file-contains-trailing-whitespace example to make it even easier to copy-paste. * checks/fields.{pm,desc}: + [CL] Warn about library packages with excessive priority. Thanks to Josh Triplett for the report. (Closes: #834290) * checks/files.{pm,desc}: + [CL] Warn about Multi-Arch: foreign packages that ship CMake, pkg-config or static libraries in public, architecture-dependent search paths. Thanks to Helmut Grohne for the initial patch and report. (Closes: #882684) + [CL] Raise the certainty of multiarch-foreign-shared-library from "wild guess" to "possible" on the suggestion of Helmut Grohne. + [CL] Test for packages shipping "gschemas.compiled" files. Thanks to Andreas Beckmann for the idea. (Closes: #884142) + [CL] Warn if a package ships compiled font files. Thank you to Andreas Beckmann for the report. (Closes: #884165) * checks/python.pm: + [CL] Also check for packages installing modules called "site" or "docs" into the global namespace. (Closes: #769365) * checks/scripts.desc: + [CL] Update description of python-script-but-no-python-dep to refer to ${python3:Depends}. Thanks to Mattia Rizzolo. (Closes: #660718) + [CL] Prevent a false-positive in missing-dep-for-interpreter by matching ABI-versioned virtual packages for Erlang. Thanks to Jean Parpaillon for the report. (Closes: #810204) * checks/source-copyright.desc: + [CL] Update description of source-includes-file-in-files-excluded to clarify the potential problem and to reference the relevant wishlist bug against git-buildpackage. * checks/python.pm: + [CL] Clarify that new-package-should-not-package-python2-module triggers when there is a single changelog entry as well as providing general guidance where upstreams have not ported to Python 3 yet. * commands/lintian.pm: + [CL] Correct parsing of "jobs=42" in lintianrc. If specified, it would be coerced to a boolean resulting in a value of 1. + [CL] Allow the tag display limit to be configured via the "--tag-display-limit" command-line argument or "tag-display-limit" in lintianrc. (Closes: #813525) + [CL] Make -v imply --no-tag-display-limit. (Closes: #812756) * data/files/privacy-breaker-fragments: + [CL] Don't match, for example, "FB.login()" when used as a documentation example. (Closes: #884296) * data/spelling/corrections: + [PW] Add a number of corrections. * doc/lintianrc.example: + [CL] Add missing "jobs" entry. * profiles/pureos/main.profile: + [CL] Add a profile for Purism's PureOS. (Closes: #884408) * reporting/images/*.png: + [CL] Apply patch from Ville Skyttä that runs the .PNG files through the "zopflipng" minimiser tool to save space. (Closes: #884559) * reporting/templates/maintainer.tmpl: + [CL] Add links from each maintainer page (which does not include pedantic tags, etc.) to the corresponding package on the full report. Thanks to Paul Wise for the idea and report. (Closes: #884572) * vendors/pureos/main/data/changes-file/known-dists: + [CL] Add data file for PureOS. lintian (2.5.62) unstable; urgency=medium * Summary of tag changes: + Added: - invalid-potfiles-in * checks/changelog-file.pm: + [CL] Correct operator precedence in "epoch-change-without-comment" to prevent a false positive when an epoch is present but is unchanged between versions. + [CL] Improve output of epoch-change-without-comment to include the actual version change. * checks/python.desc: + [CL] Also match, for example, "python2.7:any" when checking the "dependency-on-python-version-marked-for-end-of-life" tag, not just "python2.7". (Closes: #883053) + [CL] Detect an invalid debian/po/POTFILES.in instead of bailing out. (Closes: #883653) * checks/scripts.desc: + [AB] command-with-path-in-maintainer-script: Add more references, especially the reason why "if [ -x /usr/bin/<command> ]; …" is indeed bad (#769845 and the mail referred to in there). Rewrite recommendations, explain what conditions should be given if someone intents to override this tag. (Closes: #807695) * checks/source-copyright.pm: + [CL] Correct false positives in the "source-includes-file-in-files-excluded" tag where a Files-Excluded of "lib/*" would be triggered for "foolib/filename". + [CL] Correct another false positive in the "source-includes-file-in-files-excluded" tag where we would warn when the maintainer has removed upstream's debian/ directory and then we would trigger it on the maintainer's replacement files. + [CL] List all files violating source-includes-file-in-files-excluded, not just the first one we encounter per "Files-Excluded" entry. + [CL] Ignore .pc dirs for source-includes-file-in-files-excluded, * data/spelling/corrections: + [AB] Remove "publically". It's a seldom, but valid English word (c.f. https://en.wiktionary.org/wiki/publically) and causes false positives in the OpenSSL license. * t/scripts/spellintian.t: + [AB] Ensure that "publically" is not re-added as spelling correction in the future again to avoid hundreds of false positives in the OpenSSL license. lintian (2.5.61) unstable; urgency=medium * Summary of tag changes: + Added: - epoch-change-without-comment - source-includes-file-in-files-excluded - unnecessary-team-upload * checks/changelog-file.{desc,pm}: + [CL] Warn about packages that modify the epoch and there's no comment about the change. This was motivated by the accidental bumping of the epoch in my python-django 2:2.0-1 upload. * checks/elpa.desc: + [CL] Correct reference to dh_elpa(1) manpage. Thanks to Paul Gevers for the report. (Closes: #883356) * checks/fields.pm: + [CL] Apply patch from Dylan Aïssi to add R CRAN & Bioconductor repositories to the list of known insecure URIs. (Closes: #883121) * checks/nmu.{desc,pm}: + [CL] Warn if a "Team upload" (ie. that string is present in the changelog) but the uploader is among the Maintainer/Uploaders. (Closes: #882954) * checks/python.desc: + [CL] Raise the severity of the "dependency-on-python-version-marked-for-end-of-life" and "python-foo-but-no-python3-foo" Python 2.x deprecation tags to regular warnings. (Closes: #883581) * checks/source-copyright.{desc,pm}: + [CL] Warn when files specified in Files-Excluded exist in the source tree. (Closes: #871454) * data/spelling/corrections: + [PW] Add a number of corrections. + [CL] Remove "german|German" and "russian|Russian" entries - they are covered by data/spelling/corrections-case. (Closes: #883041) * data/standards-version/release-dates: + [AB] Add 4.1.2 as known standards version. + [AB] Suggest "date +%s -s …" instead of libtimedate-perl. * debian/control: + [AB] Declare compliance with Debian Policy 4.1.2. + [AB] Mention Debian Policy 4.1.2 in long package description. * t/runtests: + [AB] Use standards version 4.1.2 in tests. * t/scripts/spellintian.t: + [AB] Add two checks for common mistakes in d…/spelling/corrections: "iff" is a valid word (c.f. #865055) and case-only misspellings belong into data/spelling/corrections-case. lintian (2.5.60) unstable; urgency=medium * Summary of tag changes: + Added: - homepage-field-uses-insecure-uri - hyphen-file - rules-does-not-require-root - rules-requires-root-explicitly * checks/control-file.{desc,pm}: + [AB] Add classification tags for R³. + [CL] Remove the "Experimental: yes" flag from the debian-control-has-obsolete-dbg-package tag. (Closes: #882154) + [AB] Change reference for debian-control-has-obsolete-dbg-package from https://wiki.debian.org/DebugPackage to https://wiki.debian.org/AutomaticDebugPackages * checks/cruft.desc: + [CL] Add suggested [[:space:]]-based sed call for file-contains-trailing-whitespace. Thanks to Stuart Prescott. (Closes: #881389) + [AB] Also mention Emacs' "M-x wh-cl" (whitespace-cleanup) for file-contains-trailing-whitespace. * checks/fields.desc: + [CL] Warn for Homepage files using well-known insecure URIs. (Closes: #849514) * checks/files.pm: + [NT] Add missing slash for usr/sbin that caused lintian to report false-positive multiarch-foreign-shared-library when a package only had executables in usr/sbin. Thanks to Helmut Grohne for reporting the issue. + [CL] Warn on files called "-" (hyphen symbol). See #882638 for an example. * checks/version-substvars.desc: + [CL] Don't recommend "Source-Version" in tag descriptions. * data/fields/*: + [CL] Revert patch from Guillem Jover to add a "golang" archive section; it has not ben added to the archive yet. * data/spelling/corrections: + [PW] Add several corrections. * lib/Test/Lintian/Harness.pm, t/runtests, t/tests/README: + [AB] Add support for a "Test-Conflicts" field. * t/tests/rules-including-deprecated-makefiles/desc: + [AB] Add "Test-Conflict: dh-buildinfo". Having dh-buildinfo installed causes that test to fail. * .gitignore: + [AB] Ignore /debian/.debhelper/ directory. lintian (2.5.59) unstable; urgency=medium * lib/Lintian/Check.pm: + [CL] Don't warn about duplicate words when separated by punctuation. (Closes: #822504) * data/fields/*: + [CL] Apply patch from Guillem Jover to add a "golang" archive section. (Closes: #880701) lintian (2.5.58) unstable; urgency=medium * checks/cruft.pm: + [CL] Rewrite file-contains-trailing-whitespace tag to be a hash from the filename to the regex we should match. + [CL] Allow trailing tabs in debian/rules files; they are a very common idiom in Makefiles. * checks/fields.desc: + [SL] Update of the documentation for the change introduced in 2.5.53: Transitional packages should now be "oldlibs/optional" rather than "oldlibs/extra". * checks/python.pm: + [CL] Don't count python-django and python3-django as Django modules. This avoids a warning where Django itself triggers "django-package-does-not-depend-on-django". * data/fields/name_section_mappings: + [CL] Apply patch from Simon McVittie to prevent a misdetection of libcanberra-gstreamer as a GNU Smalltalk library. (Closes: #880140) * data/spelling/corrections: + [AB] Add more misspellings of the word "dependency". * doc/lintian.xml: + [CL] Improve overrides docs using source-is-missing as an example. (Closes: #838807) * vendors/ubuntu/main/data/changes-file/known-dists: + [CL] Add bionic as a known Ubuntu distribution. Thanks Jeremy Bicha! (Closes: #880115) lintian (2.5.57) unstable; urgency=medium * Summary of tag changes: + Added: - debian-rules-should-not-set-CFLAGS-from-noopt * checks/control-file.pm: + [CL] Avoid false positives in debian-control-has-empty-field when the field is wrapped onto a new line. Thanks to Mattia Rizzolo for the report. (Closes: #879977) * checks/cruft.desc: + [CL] Add example on how to remove trailing whitespace with sed. + [CL] Drop README.source from files to check against the file-contains-trailing-whitespace tag as it can include quotes from upstream that would be ideally left intact. * checks/debhelper.pm: + [NT] Remove code handling named compat levels. * checks/files.desc: + [CL] Ignore embedded jQuery libraries for Doxygen. (Closes: #736360) * checks/rules.desc: + [CL] Warn if packages set CFLAGS if the value of DEB_BUILD_OPTIONS contains noopt. (Closes: #718640) * commands/lintian.pm: + [NT] Have lintian resignal between various stages of the processing. Previously, ill-timed signals would be caught and "semi-ignored" with lintian happily continuing to process the next package. (Closes: #878575) * data/debhelper/named-compat-levels: + [NT] Removed; no longer used. lintian (2.5.56) unstable; urgency=medium * Summary of tag changes: + Added: - appstream-metadata-invalid - debhelper-tools-from-autotools-dev-are-deprecated - debian-control-has-empty-field - debian-rules-sets-dpkg-architecture-variable - empty-section-field - file-contains-trailing-whitespace - init.d-script-contains-skeleton-template-content - latest-changelog-entry-without-new-date * checks/appstream-metadata.{pm,desc}: + [CL] Don't error out when AppStream metadata is invalid and emit new appstream-metadata-invalid tag instead. (Closes: #879661) * checks/binaries.desc: + [CL] Apply patch from Adrian Bunk to mention the lack of the "-g" flag as a common cause for the debug-file-with-no-debug-symbols tag. (Closes: #878806) + [CL] Apply patch from Guillem Jover to strongly discourage the use of the getconf(1) interface for LFS support. (Closes: #879935) * checks/changes-file.desc: + [CL] Add a note to orig-tarball-missing-upstream-signature regarding support in pristine-tar and git-buildpackage. * checks/conffiles.pm, checks/{debconf,files,scripts}.desc: + [CL] Apply patch from Ville Skyttä <ville.skytta@iki.fi> to fix a number of spelling mistakes. (Closes: #878446) + [CL] Apply patch from Ville Skyttä <ville.skytta@iki.fi> to update a number of manual references. (Closes: #878517) * checks/control-file.{pm,desc}: + [CL] Warn about empty fields in debian/control. (Closes: #744388) * checks/cruft.{pm,desc}: + [CL] Warn about certain files under debian/* that contain trailing whitespace characters. (Closes: #748405) * checks/debconf.desc: + [CL] Apply patch from Ville Skyttä <ville.skytta@iki.fi> to update the debconf-spec refs. (Closes: #878449) * checks/debhelper.{desc,pm}: + [NT] Add a check for packages using the debhelper tooling from the autotools-dev package. These have been replaced by the changes inside debhelper itself. + [NT] Avoid useless-autoreconf-build-depends for autotools-dev when the autotools-dev tooling is used in debian/rules. (Closes: #871711) * checks/fields.pm: + [CL] Apply patch from Nicolas Boulenguez to accept and recommend the new vcs-mtn mtn:// uri format. (Closes: #878798) + [CL] Emit new empty-section-field tag instead of uninitialized value warnings on an empty "Section:" field. (Closes: #878515) * checks/files.pm: + [CL] Lower the severity of package-installs-java-bytecode from "error" to "warning". (Closes: #879862) + [CL] Do not trigger package-installs-java-bytecode if the path contains "WEB-INF", "demo", "doc" etc. (Closes: #879860) + [CL] Verify files triggering package-installs-java-bytecode files really are Java class files. (Closes: #879861) * checks/init.d.pm: + [CL] Check for files that use content from the /etc/init.d/skeleton template. Thanks to Christoph Biedl for the idea. (Closes: #879152) * checks/md5sums.pm: + [CL] Allow empty md5sums files. (Closes: #781372) * checks/rules.{pm,desc}: + [CL] Warn on packages unnecessararily setting dpkg-architecture(1) variables. (Closes: #793554) * checks/scripts.desc: + [CL] Check the "Recommends" field as well when testing scripts for script-needs-depends-on-sensible-utils. (Closes: #879953) * checks/source-changelog.{desc.pm}: + [CL] Move latest-debian-changelog-entry-without-new-date tag into a new check of type "source". (Closes: #873612) * checks/watch-file.pm: + [CL] Include the offending URI in debian-watch-uses-insecure-uri output, not the line number. + [CL] Ignore the magic http://sf.net/ redirector URI for the debian-watch-uses-insecure-uri tag. (Closes: #879206) * data/common/source-fields: + [NT] Add "Rules-Requires-Root". * data/fields/essential: + [CL] Apply patch from Helmut Grohne <helmut@subdivi.de> to treat e2fsprogs as non-essential. (Closes: #878518) * data/fields/perl-provides: + [CL] Update for Perl 5.026001. * data/scripts/interpreters: + [CL] Add cwl-runner to the list of interpreters. (Closes: #851126) * data/spelling/corrections: + [CL] Revert addition of "none were" -> "none was" multiword spelling correction as it is "acceptable beyond serious criticism". (Closes: #878457) * debian/control: + [NT] Set R³ to "no". Lintian builds fine without root and Build-Depends on fakeroot for the tests that still require fakeroot. * doc/lintian.xml, checks/{fields,files,menu-format}.desc, etc.: + [CL] Apply patch from Ville Skyttä <ville.skytta@iki.fi> to update a large number of errors in links. (Closes: #878521) * private/refresh-manual-refs: + [CL] Apply patch from Ville Skyttä <ville.skytta@iki.fi> to update the Debconf reference mapping. Many thanks! (Closes: #878449) + [CL] Apply a patch series from Ville Skyttä <ville.skytta@iki.fi> to a number of issues in the Menu, Perl, Python and Debian Policy parsing. * t/scripts/pod-synopsis.t: + [CL] Apply patch from Ville Skyttä <ville.skytta@iki.fi> to skip all POD synopsis tests if Test::Pod is not available. (Closes: #878522) * t/tests/debconf-config-*, t/tests/legacy-maintainer-scripts: + [CL] Split out checks for debconf-config-not-executable into a separate test protected by a Test-Depends now that dpkg >= 1.19.0 will bail out on that condition. lintian (2.5.55) unstable; urgency=medium * Summary of tag changes: + Added: - debian-watch-uses-insecure-uri - django-package-does-not-depend-on-django - example-script-uses-deprecated-nodejs-location - priority-extra-is-replaced-by-priority-optional - python-module-has-overly-generic-name - systemd-service-file-wraps-init-script + Removed: - copyright-year-in-future * checks/copyright-file.pm: + [CL] Drop copyright-year-in-future after all; it's just too error prone and time-consuming to maintain given the severity of the issues it can find. (Closes: #877766) * checks/cruft.pm: + [CL] Exempt debian/copyright from license-problem-non-free-RFC tag to avoid false-positives on meta-references. (Closes: #877999) * checks/debhelper.pm: + [AB] Also recognize dh-exec's "=>" arrow if surrounded by tabs. (Closes: #877905) * checks/fields.{desc,pm}: + [NT] Add an info tag for packages that use "Priority: extra". Thanks to Mattia Rizzolo for the suggestion. (Closes: #870898) * checks/files.pm: + [CL] Ignore privacy breach violations in comments. (Closes: #877421) + [CL] Check for Python modules with overly generic names such as "tests" or "test". (Closes: #875964) * checks/{files,manpages,menu-format}.{desc,pm}: + [NT] Stop considering usr/man, usr/X11R6/bin and usr/X11R6/man as manpage directories / PATH directories to simplify some code paths. Nothing ships manpages in these directories and lintian emits tags to strongly discourage people from doing so. * checks/init.d.pm: + [CL] Avoid warning for init.d-script-not-marked-as-conffile when the init.d script does not exist; we will already be alerted via the init.d-script-not-included-in-package error. * checks/python.pm: + [CL] Move to "Type: source, binary" check type. + [CL] Also match packages named "python2-*" as relating to Python 2.x. + [CL] Warn about Django libraries that do not depend on Django itself. (Closes: #877292) + [CL] Do not emit python-foo-but-no-python3-foo for -common packages. * checks/scripts.desc: + [CL] Add missing example-script-uses-deprecated-nodejs-location tag. (Closes: #877142) + [NT] Apply patch from Mattia Rizzolo to improve the tag description for script-uses-deprecated-nodejs-location. + [CL] Actually check for a dependency on sensible-utils before emitting script-needs-depends-on-sensible-utils. Thanks to Daniel Reichelt for the detailed bug report. (Closes: #877439) * checks/standards-version.desc: + [CL] Correct invalid link to upgrading-checklist. Thanks to Dann Frazier for the report. (Closes: #878184) * checks/systemd.{desc,pm}: + [CL] Warn if native systemd service files only wrap existing SysV/LSB init scripts. (Closes: #870704) * checks/watch-file.{pm,desc}: + [CL] Warn for debian/watch files using insecure URIs such as HTTP or FTP, similar to vcs-field-uses-insecure-uri. (Closes: #849515) * data/{common => fields}/priorities: + [NT] Rename file. * data/fields/essential: + [MR] Remove 'mount' from the essential packages. Starting with util-linux version 2.29.2-3 the Essential flag has been removed. (Closes: #877511) * data/fields/priorities: + [NT] Remove "extra". * data/files/privacy-breaker-websites: + [CL] Replace (eg.) "You may use libjs-prototype package" with "You may use the libjs-prototype package". * commands/lintian.pm: + [NT] Simplify handling of uncaught exceptions. * doc/lintian.xml: + [NT] Document that the XDG_DATA_HOME directory can be used for user profiles and data files. This has been supported for quite a while but the documentation incorrectly listed "$HOME/.lintian" instead (which in fact did not work for this purpose). (Closes: #701477) * frontend/dplint: + [NT] Restore "$HOME/.lintian" as a directory that is used for user profiles and data files. It was advertised as such in the documentation but the code actually only used the XDG_DATA_HOME path. Thanks to Daniel Kauffman for the report. (Closes: #875636) + [NT] Correct the order of restricted search paths (user directories and /etc/lintian). It incorrectly used /etc/lintian before the user directory. * lib/Lintian/Util.pm: + [NT] Rename the "fail" subroutine to "internal_error" to better reflect its purpose. * t/tests/binaries-from-other-arch: + [NT] Make test architecture specific as it fails on certain architectures. (Closes: #877147) * t/tests/python-new-python2-package/*: + [CL] Correct Depends of python2.7 → python3 in Python 3 test package. * t/tests/python-python2-no-python3-unrel/debian/debian/control.in: + [CL] Add test for ignoring python-foo-doc packages. + [CL] Correct short descriptions of binary packages. lintian (2.5.54) unstable; urgency=medium * checks/copyright-file.pm: + [CL] Prevent false positives in copyright-year-in-future when matching URLs. + [CL] Prevent false positives in copyright-year-in-future when matching the Tcl license (eg. postgresql-10). (Closes: #876360) * checks/debhelper.pm: + [CL] Ensure that "missing-build-dependency-for-dh_-command" is not emitted for dh-strip-nondeterminism at Debhelper compat levels >= 10. (Closes: #876443) * checks/files.desc: + [CL] Correct grammar and punctuation in description of node-package-install-in-nodejs-rootdir. * checks/changelog-file.pm: + [CL] Also ignore lines that (meta) reference "typo" when checking for "spelling-error-in-changelog". * data/standards-version/release-dates: + [CL] Add 4.1.1 as a known standards version. * debian/control: + [CL] Mention Debian Policy v4.1.1 in the description. * t/tests/binaries-from-other-arch/debian/debian/dumpobj: + [CL] Apply patch from Jakub Wilk to prevent test failures on armhf/arm64, etc. (Closes: #877147) * t/tests/fields-perl-provides/{desc,tags}: + [CL] Apply patch from Gianfranco Costamagna (locutusofborg) to fix failing test on 32-bit architectures and add a suitable Test-Against stanza to make this easier to catch in future. Thanks to Matthias Klose (doko) for the report. (Closes: #876343) lintian (2.5.53) unstable; urgency=medium The "we are all Perl developers now" release. * Summary of tag changes: + Added: - alternatively-build-depends-on-python-sphinx-and-python3-sphinx - build-depends-on-python-sphinx-only - dependency-on-python-version-marked-for-end-of-life - maintainer-script-interpreter - missing-call-to-dpkg-maintscript-helper - node-package-install-in-nodejs-rootdir - override-file-in-wrong-package - package-installs-java-bytecode - python-foo-but-no-python3-foo - script-needs-depends-on-sensible-utils - script-uses-deprecated-nodejs-location - transitional-package-should-be-oldlibs-optional - unnecessary-testsuite-autopkgtest-header - vcs-browser-links-to-empty-view + Removed: - debug-package-should-be-priority-extra - missing-classpath - transitional-package-should-be-oldlibs-extra * checks/apache2.pm: + [CL] Fix an apache2-unparsable-dependency false positive by allowing periods (".") in dependency names. (Closes: #873701) * checks/binaries.pm: + [CL] Apply patches from Guillem Jover & Boud Roukema to improve the description of the binary-file-built-without-LFS-support tag. (Closes: #874078) * checks/changelog-file.desc: + [CL] Upgrade latest-debian-changelog-entry-without-new-date from a warning to an error. (Closes: #873490) * checks/changes.{pm,desc}: + [CL] Ignore DFSG-repacked packages when checking for upstream source tarball signatures as they will never match by definition. (Closes: #871957) + [CL] Downgrade severity of orig-tarball-missing-upstream-signature from "E:" to "W:" as many common tools do not make including the signatures easy enough right now. (Closes: #870722, #870069) + [CL] Expand the explanation of the orig-tarball-missing-upstream-signature tag to include the location of where dpkg-source will look. Thanks to Theodore Ts'o for the suggestion. * checks/copyright-file.pm: + [CL] Address a number of issues in copyright-year-in-future: - Prevent false positives in port numbers, email addresses, ISO standard numbers and matching specific and general street addresses. (Closes: #869788) - Match all violating years in a line, not just the first (eg. "2000-2107"). - Ignore meta copyright statements such as "Original Author". Thanks to Thorsten Alteholz for the bug report. (Closes: #873323) - Expand testsuite. * checks/cruft.{pm,desc}: + [CL] Downgrade severity of file-contains-fixme-placeholder tag from "important" (ie. "E:") to "wishlist" (ie. "I:"). Thanks to Gregor Herrmann for the suggestion. + [CL] Apply patch from Alex Muntada (alexm) to use "substr" instead of "substring" in mentions-deprecated-usr-lib-perl5-directory's description. (Closes: #871767) + [CL] Don't check copyright_hints file for FIXME placeholders. (Closes: #872843) + [CL] Don't match quoted "FIXME" variants as they are almost always deliberate. Thanks to Adrian Bunk for the report. (Closes: #870199) + [CL] Avoid false positives in missing source checks for "CSS Browser Selector". (Closes: #874381) * checks/debhelper.pm: + [CL] Prevent a false positive of missing-build-dependency-for-dh_-command that can be exposed by following the advice for the recently added useless-autoreconf-build-depends tag. (Closes: #869541) * checks/debian-readme.{pm,desc}: + [CL] Ensure readme-debian-contains-debmake-template also checks for templates "Automatically generated by debmake". * checks/description.{desc,pm}: + [CL] Clarify explanation of description-starts-with-leading-spaces tag. Thanks to Taylor Kline <taylor.kline@utexas.edu> for the report and patch. (Closes: #849622) + [NT] Skip capitalization-error-in-description-synopsis for auto-generated packages (such as dbgsym packages). * checks/fields.{desc,pm}: + [CL] Ensure that python3-foo packages have "Section: python", not just python2-foo. (Closes: #870272) + [RG] Do no longer require debug packages to be priority extra. + [BR] Use Lintian::Data for name/section mapping + [CL] Check for packages including "?rev=0&sc=0" in Vcs-Browser. (Closes: #681713) + [NT] Transitional packages should now be "oldlibs/optional" rather than "oldlibs/extra". The related tag has been renamed accordingly. * checks/filename-length.pm: + [NT] Skip the check on auto-generated binary packages (such as dbgsym packages). * checks/files.{pm,desc}: + [BR] Avoid privacy-breach-generic false positives for legal.xml. + [BR] Detect install of node package under /usr/lib/nodejs/[^/]*$ + [CL] Check for packages shipping compiled Java class files. Thanks Carnë Draug <carandraug+dev@gmail.com>. (Closes: #873211) + [BR] Privacy breach is no longer experimental. + [CL] Check for Lintian overrides installed in the wrong package. (Closes: #792198) * checks/init.d.desc: + [RG] Do not recommend a versioned dependency on lsb-base in init.d-script-needs-depends-on-lsb-base. (Closes: #847144) * checks/java.pm: + [CL] Additionally consider .cljc files as code to avoid false- positive codeless-jar warnings. (Closes: #870649) + [CL] Drop problematic missing-classpath check. (Closes: #857123) * checks/menu-format.desc: + [CL] Prevent false positives in desktop-entry-lacks-keywords-entry for "Link" and "Directory" .desktop files. (Closes: #873702) + [CL] Add reference to Policy 9.6 for the command-in-menu-file-and-desktop-file tag. (Closes: #871008) * checks/python.{pm,desc}: + [CL] Split out Python checks from "scripts" check to a new, source check of type "source". + [CL] Check for python-foo without corresponding python3-foo packages to assist in Python 2.x deprecation. (Closes: #870681) + [CL] Check for packages that Build-Depend on python-sphinx only. (Closes: #870730) + [CL] Check for packages that alternatively Build-Depend on the Python 2 and Python 3 versions of Sphinx. (Closes: #870758) + [CL] Check for binary packages that depend on Python 2.x. (Closes: #870822) * checks/scripts.pm: + [CL] Correct false positives in unconditional-use-of-dpkg-statoverride by detecting "if !" as a valid shell prefix. (Closes: #869587) + [CL] Check for missing calls to dpkg-maintscript-helper(1) in maintainer scripts. (Closes: #872042) + [CL] Check for packages using sensible-utils without declaring a dependency after its split from debianutils. (Closes: #872611) + [CL] Warn about scripts using "nodejs" as an interpreter now that nodejs provides /usr/bin/node. (Closes: #873096) + [BR] Add a statistic tag giving interpreter. * checks/testsuite.{desc,pm}: + [CL] Remove recommendations to add a "Testsuite: autopkgtest" field to debian/control as it is added when needed by dpkg-source(1) since dpkg 1.17.1. (Closes: #865531) + [CL] Warn if we see an unnecessary "Testsuite: autopkgtest" header in debian/control. + [NT] Recognise "autopkgtest-pkg-go" as a valid test suite. + [CL] Recognise "autopkgtest-pkg-elpa" as a valid test suite. (Closes: #873458) + [CL] Recognise "autopkgtest-pkg-octave" as a valid test suite. (Closes: #875985) + [CL] Update the description of unknown-testsuite to reflect that "autopkgtest" is not the only valid value; the referenced URL is out-of-date (filed as #876008). (Closes: #876003) * data/binaries/embedded-libs: + [RG] Detect embedded copies of heimdal, libgxps, libquicktime, libsass, libytnef, and taglib. + [RG] Use an additional string to detect embedded copies of openjpeg2. (Closes: #762956) * data/fields/name_section_mappings: + [BR] node- package section is javascript. + [CL] Apply patch from Guillem Jover to add more section mappings. (Closes: #874121) * data/fields/obsolete-packages: + [MR] Add dh-systemd. (Closes: #872076) * data/fields/perl-provides: + [CL] Refresh perl provides. * data/fields/virtual-packages: + [CL] Update data file from archive. This fixes a false positive for "bacula-director". (Closes: #835120) * data/files/obsolete-paths: + [CL] Add note to /etc/bash_completion.d entry regarding stricter filename requirements. (Closes: #814599) * data/files/privacy-breaker-websites: + [BR] Detect custom donation logos like apache. + [BR] Detect generic counter website. * data/scripts/interpreters: + [CL] Add node as a known interpreter. Thanks to Julien Puydt for the bug report. (Closes: #872699) * data/spelling/corrections: + [CL] Avoid false positives in spelling-error-in-{binary,manpage} for "CAs" which was annoying for cryptographic software. (Closes: #871791) * data/standards-version/release-dates: + [CL] Add 4.0.1 and 4.1.0 as known standards versions. (Closes: #875509) * debian/control: + [CL] Mention Debian Policy v4.1.0 in the description. + [CL] Add myself to Uploaders. + [CL] Drop unnecessary "Testsuite: autopkgtest"; this is implied from debian/tests/control existing. * commands/info.pm: + [CL] Add a --list-tags option to print all tags Lintian knows about. Thanks to Rajendra Gokhale for the suggestion. (Closes: #779675) * commands/lintian.pm: + [CL] Apply patch from Maia Everett to avoid British spelling when using en_US locale. (Closes: #868897) * lib/Lintian/Check.pm: + [CL] Stop emitting {maintainer,uploader}-address-causes-mail-loops for @packages.debian.org addresses. (Closes: #871575) * lib/Lintian/Collect/Binary.pm: + [NT] Introduce an "auto-generated" argument for "is_pkg_class". * lib/Lintian/Data.pm: + [CL] Modify Lintian::Data's "all" to always return keys in insertion order, dropping dependency on libtie-ixhash-perl. * helpers/coll/objdump-info-helper: + [CL] Apply patch from Steve Langasek to accommodate binutils 2.29 outputting symbols in a different format on ppc64el. (Closes: #869750) * t/tests/fields-perl-provides/tags: + [CL] Update expected output to match new Perl provides. * t/tests/files-privacybreach/*: + [CL] Add explicit test for packages including external fonts via the Google Font API. Thanks to Ian Jackson for the report. (Closes: #873434) + [CL] Add explicit test for packages including external fonts via the Typekit API via <script/> HTML tags. * t/tests/*/desc: + [CL] Add missing entries in "Test-For" fields to make development/testing workflow less error-prone. * private/generate-tag-summary: + [CL] git-describe(1) will usually emit 7 hexadecimal digits as the abbreviated object name. However, as this can be user-dependent, pass --abbrev=0 to ensure it does not vary between systems. This also means we do not need to strip it ourselves. * private/refresh-*: + [CL] Use deb.debian.org as the default mirror. + [CL] Update locations of Contents-<arch> files; they are now namespaced by distribution (eg. "main"). lintian (2.5.52) unstable; urgency=medium * Summary of tag changes: + Added: - appstream-metadata-in-legacy-location - appstream-metadata-legacy-format - appstream-metadata-malformed-modalias-provide - appstream-metadata-missing-modalias-provide - copyright-contains-automatically-extracted-boilerplate - copyright-year-in-future - debian-rules-sets-DEB_BUILD_OPTIONS - elf-maintainer-script - emacsen-common-without-dh-elpa - file-contains-fixme-placeholder - gobject-instrospection-package-missing-depends-on-gir-depends - manpage-has-overly-generic-name - orig-tarball-missing-upstream-signature - package-installs-deprecated-upstart-configuration - udev-rule-missing-subsystem - udev-rule-missing-uaccess - udev-rule-unreadable - unconditional-use-of-dpkg-statoverride - useless-autoreconf-build-depends + Removed: - copyright-contains-dh-make-perl-boilerplate - package-depends-on-multiple-tkx-versions - restriction-formula-with-debhelper-without-debhelper-version - restriction-formula-without-versioned-dpkg-dev-dependency * checks/appstream-metadata.{desc,pm}: + [NT] New check by Petter Reinholdtsen. * checks/changelog-file.desc: + [AB] Fix typo "%gt;" vs ">". + [CL] Expand the rationale for the latest-debian-changelog-entry-without-new-date tag to mention possible implications for SOURCE_DATE_EPOCH/reproducible builds. * checks/control-file.pm: + [NT] Remove check for missing versioned build-depends for dpkg and debhlper when using Build-Profiles. The necessary versions are now in oldstable. + [CL] Add check for GObject Introspection packages that are missing binary dependencies on ${gir:Depends}. (Closes: #860801) * checks/changes-file.{desc,pm}: + [CL] Check for the presence of an .asc signature if an upstream signing key is present. (Closes: #833585) * checks/copyright-file.{desc,pm}: + [CL] Rename copyright-contains-dh-make-perl-boilerplate to copyright-contains-automatically-extracted-boilerplate as it can be generated by other tools such as dh-make-elpa. Thanks to Sean Whitton for the report. (Closes: #841832) + [CL] Check for years that are later than the last entry added to debian/changelog. (Closes: #807461) * checks/cruft.{desc,pm}: + [CL] Clarify language of source-contains-prebuilt-ms-help-file description; there exists free software to generate .chm files. + [CL] Don't emit source-contains-prebuilt-ms-help-file for files generated by Halibut. (Closes: #867673) + [CL] Move r-data-without-readme-source to check the source package, no the binary; the expected README.source files are not installed in binary packages. (Closes: #866322) + [CL] Apply patch from Dylan Aïssi to also check for .RData files (not just .Rdata) files in r-data-without-readme-source. (Closes: #868178) + [CL] Check for "FIXME" and similar placeholders in various files under debian/. (Closes: #846009) * checks/debhelper.{desc,pm}: + [CL] Check for useless build-dependencies on dh-autoreconf or autotools-dev under compat levels 10 or higher. (Closes: #844191) * checks/elpa.{desc,pm}: + [NT] Apply patch from Sean Whitton to add elpa related checks. (Closes: #867042) * checks/fields.{desc,pm}: + [NT] Remove check for missing versioned build-depends for dpkg and debhlper when using Build-Profiles. The necessary versions are now in oldstable. + [NT] Drop check for depending on multiple versions of tkx as tkx does not seem to be in Debian any longer. * checks/files.pm: + [CL] Add .yml to the list of file extensions to avoid false positives when emitting extra-license-file, with testcase. Thanks to Rene Engelhard for the report. (Closes: #856137) + [CL] Check for packages containing upstart configuration under /etc/init. Thanks to Paul Wise for the report. (Closes: #825348) * checks/init.d.desc: + [CL] Add an example snippet to explain how to prevent emission of init.d-script-sourcing-without-test. * checks/manpages.{desc,pm}: + [CL] Check for overly-generic filenames such as README.3pm.gz. (Closes: #792846) * checks/menu-format.desc: + [ADB] Fix formatting of desktop-entry-lacks-icon-entry * checks/scripts.desc: + [CL] Upgrade new-package-should-not-package-python2-module from I: to W:. See #829744 for more info. + [CL] Clarify wording in new-package-should-not-package-python2-module to make the justification clearer. + [CL] Check for calls to dpkg-statoverride --add without a corresponding --list. (Closes: #652963) + [CL] Add missing "contains" verb to the description of the debhelper-autoscript-in-maintainer-scripts tag. + [CL] Emit new "elf-maintainer-script" classification tag if debian/postinst (etc.) is an ELF binary. * checks/rules.desc: + [CL] Clarify wording in debian-rules-parses-dpkg-parsechangelog to make the justification clearer. (Closes: #865882) + [CL] Check for files setting DEB_BUILD_OPTIONS instead of DH_BUILD_MAINT_OPTIONS. (Closes: #833691) * checks/udev.{desc,pm}: + [NT] New check by Petter Reinholdtsen. * checks/watch-file.pm: + [CL] Factor out hard-coded list of possible upstream key locations to the "common/signing-key-filenames" Lintian::Data resource. + [CL] Add "repack" (along with "dfsg" etc.) to identify a repacked upstream tarball. (Closes: #871957) * collection/scripts: + [CL] Check that non-ELF maintainer scripts start with #!. (Closes: #843428) * commands/lintian.pm: + [NT] Attempt to clean up on SIGTERM (like with SIGINT). + [CL] Allow the use of suppress-tags=<tag>[,<tag>[,<tag>]] in lintianrc. (Closes: #764486) * commands/reporting-html-reports: + [NT] Enable re-use of the memory for the maintainer mapping once the log file as been parsed. + [CL] Consistently use the same "Debian style" RFC 822 date format for both "Mirror timestamp" and "Last updated" on the index page. (Closes: #828720) * commands/reporting-sync-state: + [NT] Re-encode checksums into base64 encoded strings (from hex). This reduces size per checksum by about ~30% (disk and memory). This reduction is also applicable to other reporting tools that loads the harness cache. * data/cruft/non-free-files: + [CL] Match more Lena Söderberg images. Thanks to Lumin <cdluminate@gmail.com> and Dylan Aïssi <bob.dybian@gmail.com>. (Closes: #827941) * data/fields/build-profiles: + [NT] Add patch from Mattia Rizzolo to update the list of known build profiles, adding «nolua» and «noruby». * data/spelling/corrections: + [AB] Remove "iff". It's a valid English word. (Closes: #865055) * debian/control: + [NT] Add (Build-)Depends on libxml-simple-perl for the new appstream-metadata check. + [NT] Apply patch from Sean Whitton to add a Build-Depends on dh-elpa for a test. + [NT] Prefer default-jdk-headless to default-jdk when available. * debian/rules: + [JW, NT] Post process HTML docmentation to set the charset to UTF-8, which fixes mojibake in the Debian Policy Manual links. Thanks to Paul Hardy for finding a solution to the problem. (Closes: #802721) + [NT] Override dh_autoreconf tools as they are not used (but need to scan over all files in the source package). * lib/Lintian/Collect/Source.pm: + [CL] Improve support for "3.0 (git)" packages. They are still marked as unsupported-source-format as they are not accepted by the Debian archive. (Closes: #605999) * lib/Lintian/Util.pm: + [NT] Fix uninitialized warning if a fork call fails. * profiles/debian/main.profile: + [NT] Enable appstream-metadata + udev check by default. (Closes: #841670) * t/tests/spelling-general/debian/debian/copyright: + [CL] Add regression test for #844166. lintian (2.5.51) unstable; urgency=medium * Summary of tag changes: + Added: - debian-control-has-dbgsym-package - debian-control-has-obsolete-dbg-package - debian-rules-parses-dpkg-parsechangelog - desktop-entry-lacks-icon-entry - distribution-and-changes-mismatch - distribution-and-experimental-mismatch - gir-in-arch-all-package - gir-missing-typelib-dependency - gir-section-not-libdevel - multiarch-foreign-shared-library - r-data-without-readme-source - readme-source-is-dh_make-template - repeated-trigger-name - systemd-service-file-refers-to-obsolete-bindto - testsuite-autopkgtest-missing - typelib-in-arch-all-package - typelib-missing-gir-depends - typelib-not-in-multiarch-directory - typelib-package-name-does-not-match - typelib-section-not-introspection - unknown-trigger - unreleased-changes - uses-implicit-await-trigger + Removed: - ancient-autotools-helper-file - init.d-script-missing-dependency-on-remote_fs - maintainer-script-should-not-use-ancient-dpkg-epoch-check - maintainer-script-should-not-use-ancient-dpkg-multi-conrep-check - outdated-autotools-helper-file - package-would-benefit-from-build-arch-targets - suidregister-used-in-maintainer-script * checks/binaries.{desc,pm}: + [NT] Apply patch from Adrian Bunk to bump severity of the hardening-no-pie to a W-tag and improve the tag description. (Closes: #856155) + [NT] Apply patches from Michael Stapelberg to improve handling of golang binaries. (Closes: #857654, #857655, #857656) * checks/changelog-file.pm: + [BR] Check also bug over 1000000 as improbable. Bug below 50004 are not archived and are thus improbable. * checks/changes-file.{desc,pm}: + [BR] Apply patch by Simon McVittie to detect unreleased package uploaded to unstable and mismatched .changes and Changes: distribution. (Closes: #540294). * checks/control.{desc,pm}: + [BR] Detect dbgsym package in control file. (Closes: #858117). + [BR] Warn about obsolete -dbg package. * checks/cruft.{desc,pm}: + [BR] Document long line tagged source-is-missing as a feature not a bug. (Closes: #849470). + [BR] Correct a typo in description of tag license-problem-convert-utf-code. + [BR] Avoid a false positive in gfdl file detection. + [NT] Drop tags about outdated autotools config.guess and config.sub files. These days debhelper automatically updates them when people use the dh-sequencer and the check is not geared for more thorough analysis. (Closes: #848878) + [CL] Check that README.source is not the dh_make template. (Closes: #633850) * checks/debian-readme.{desc,pm}: + [NT] Locate the README.Debian using the index rather than relying on a collection. * checks/fields.pm: + [BR] Enforce naming convention for debug package. (Closes: #645455). + [NT] Avoid proposing "/git/git/" as a part of the canonical URL for anonscm.debian.org. Thanks to Andreas Beckmann for spotting the bug. (Closes: #851215) + [NT] Apply patch from Dylan Aïssi to recommend "javascript" section for libjs packages. Previously, lintian would recommend "web". (Closes: #863386) * checks/files.pm: + [BR] Do not report duplicates for package-installs-apt-preferences and package-installs-apt-sources. (Closes: #814521). + [NT] Apply patch from Helmut Grohne to detect some possible invalid uses of "Multi-Arch: foreign". (Closes: #856975) + [NT] Improve the empty-binary-package tag by adding more common files that should be ignored. Thanks to Helmut Grohne for all the research behind it. (Closes: #856857) + [BR] Detect symlink pointing to builddir. (Closes: #860419) + [CL] Detect RData without README.source. (Closes: #815233) + [NT] Remove work around for segmentation faults in t1disasm from t1utils (<< 1.38-4~). Given Jessie is the minimum supported Debian version, we can now assume t1utils to be (>= 1.38-4). * checks/gir.{desc,pm}: + [NT] Add check for gir packages written by Simon McVittie. (Closes: #695345) * checks/init.d.{desc,pm}: + [NT] Remove check for init.d scripts accessing /usr without a $remote_fs dependency as /usr must now be mounted by the initramfs. (Closes: #829649) * checks/menu-format.{desc,pm}: + [NT] Update the reference to Desktop Entry Specification to point to version 1.1. + [NT] Apply patch from Laurent Bigonville to check desktop files for missing "Icon" field. (Closes: #854132) * checks/rules.{desc,pm}: + [NT] Drop "package-would-benefit-from-build-arch-targets". The dpkg-buildpackage refuses to build packages that trigger this tag. Also, the tag implies two other "W" tags so contributors are still notified of a potential problem. + [CL] Check for manual parsing of dpkg-parsechangelog output now that we have /usr/share/dpkg/pkg-info.mk. * checks/scripts.{desc,pm}: + [NT] Apply patch from Christopher Hoskin to except -doc packages from the "new-package-should-not-package-python2-module" tag. (Closes: #855243) + [NT] Remove references to tags about calling suidregister, dpkg --assert-working-epoch, and dpkg --assert-multi-conrep from maintainer scripts. * checks/systemd.{desc,pm}: + [NT] Apply patch from Michael Biebl to warn about deprecated "BindTo" option in systemd service files. (Closes: #857194) * checks/testsuite.{desc,pm}: + [NT] Apply patch from Lucas Kanashiro to add a tag for recommending packagers to create an autopkgtest for their package. (Closes: #859467) + [NT] Fix false-positive "missing-runtime-test-file" when the "Tests-Directory" field is set to a single dot. Thanks to Ian Jackson for reporting the issue. (Closes: #849880) * checks/triggers.{desc,pm}: + [NT] New check. (Closes: #698723) * checks/upstream-metadata.pm: + [JW, NT] Disable YAML parsing of upstream metadata file as the YAML parser executes code. (Closes: #861958, CVE-2017-8829) * checks/watch-file.pm: + [NT] Apply patch from Alexander Kulak to handle whitespace correctly in the options in v4 watch files. (Closes: #861599) * coll/debian-readme{,desc}: + [NT] Remove. Merge what little functionality it offers into the debian-readme check. * commands/{lintian => lintian.pm}: + [NT] Turn the lintian frontend into a dplint command module to avoid code duplication. * commands/reporting-*: + [NT] Rewrite the config file handling. The reporting framework now uses a YAML configuration file instead of a perl script. + [NT] Support processing packages from multiple archives and different suites in these archives. This enables lintian.d.o to also process dbgsym packages. (Closes: #856312) * data/changes-file/known-dists: + [NT] Add buster and remove squeeze. * data/common/source-fields: + [NT] Add new "Testsuite-Restrictions" field. * data/files/privacy-breaker-websites: + [BR] Add digit.com as tracker. + [BR] Add static.ak.fbcdn.net as facebook. + [BR] Add forkme as logo. * data/files/standard-files: + [NT] Add more common files based on feedback from Helmut Grohne. * data/obsolete-sites/obsolete-sites: + [BR] Apply patch from Hideki Yamane in order to warn about fedorahosted. (Closes: #856954). + [NT] Apply patch from Hideki Yamane to warn about codeplex.com closing down. (Closes: #859412). * data/scripts/interpreters: + [NT] Add stap as a known interpreter. Thanks to gustavo panizzo for the suggestion. (Closes: #858326) * data/scripts/maintainer-script-bad-command: + [NT] Remove check for suidregister, dpkg --assert-working-epoch, and dpkg --assert-multi-conrep. None of these trigger any tags in the archive any longer and the (new) features have been available for 8+ years. * data/spelling/corrections: + [NT] Apply patches from Edward Betts to fix bugs in the correction word lists. (Closes: #852005, #852084) + [NT] Apply patch from Edward Betts to remove corrections for "targetted" and "targetting" as they are valid alternative spellings in AU. (Closes: #852145) + [EB] Add some more spelling corrections. (Closes: #852369, #852404, #852407, #852409, #852410, #852411, #852413, #852414, #852416, #852419, #852421, #852426) + [CL] Add "none were" -> "none was" multiword spelling correction. (Closes: 860558) * data/standards-version/release-dates: + [NT] Add 4.0.0 as a known standards version along with its release date. * debian/control: + [NT] Add explicit (Build-)Depends on dpkg (>= 1.17.14) to make it explicit that we no longer support Wheezy or older. + [NT] Drop versioned dependencies that are there to assist to Wheezy. + [NT] Mention Debian Policy v4.0.0 in the description. + [NT] Bump Standards-Version to 4.0.0 - no changes required. * debian/copyright: + [EB] Add Edward Betts. * frontend/dplint: + [NT] Ensure all include directories are absolute before passing them on to the actual command. + [NT] Work around a "Bizarre Copy" bug in perl that could trigger on errors. * lib/Lintian/CheckScript.pm: + [NT] Remove fallback code for "old" style "pm"-less checks. * lib/Lintian/Util.pm: + [NT] Drop dpkg_deb_has_ctrl_tarfile. Lintian now assumes that dpkg 1.17.14 is available (provided by Debian jessie or later). * reporting/{config => config.yaml}: + [NT] Rewrite the reporting config template into the new YAML format. * reporting/graphs/tags.gpi: + [NT] Tweak tags.gpi so it works with gnuplot 5. * reporting/templates/{index.tmpl,lintian.css.tmpl}: + [NT] Update to support multiple archives. * t/*: + [NT] Drop "Test-Depends" from tests where the versions in Debian jessie will satisfy the dependency. + [NT] Update tests to fix FTBFS caused by dpkg-source now ignoring debian/files by default. (Closes: #863020) * t/runtests: + [NT] Re-sort test output after running the "post_test" sed script on the output. This prevent test failures caused by the order changing on different architectures prior to the sed script is run (assuming the sed script otherwise normalises the differences correctly). * t/tests/cruft-general-upstream/pre_upstream: + [EB] Fix failing tests by making the fake flash object more convincing. The most recent version of libmagic uses a more precise definition of the data within a flash file. (Closes: #852891) * t/tests/java-jars: + [NT] Provide a more convincing corrupt .zip file that also fools file 5.30. * vendors/ubuntu/main/data/changes-file/known-dists: + [CW] Add zesty. + [NT] Apply patch from "Unit 193" to add "devel" as a known Ubuntu distribution. (Closes: #861509) + [NT] Add artful. lintian (2.5.50) unstable; urgency=medium * Summary of tag changes: + Added: - invalid-value-in-built-using-field - license-problem-convert-utf-code - new-package-should-not-package-python2-module - php-script-but-no-php-cli-dep - php-script-with-unusual-interpreter + Removed: - php-script-but-no-phpX-cli-dep * checks/binaries.{desc,pm}: + [NT] Handle RUNPATH like we handle RPATH. (Closes: #844903) + [NT] Update hardening-no-pie description to reflect that PIE is on by default in Debian. * checks/cruft.desc: + [BR] Detect utf convert non free code. (Closes: #843595) * checks/deb-format.pm: + [NT] Permit uncompressed {control,data}.tar members plus xz compressed control.tar files in deb files. Thanks to Guillem Jover for the report. (Closes: #834867) * checks/debhelper.pm: + [BR] Apply patch from Yann Soubeyrand : "Allow debhelper "--with" addons to be quoted". (Closes: #839822) * checks/files.{desc,pm}: + [NT] Check for invalid clauses in "Built-Using" fields. Thanks to Andrey Rahmatullin for the suggestion. (Closes: #847558) + [NT] Apply patch from Josh Triplett to add new sections to descriptions. * checks/files.desc: + [NT] Document that we no longer accept "virtual packages" for deliberately empty packages. If your package receives an "empty-binary-package" tag, please replace the use of "virtual package". * checks/{files,scripts}.pm: + [NT] Apply patch from Josh Triplett to exclude files under /usr/share/cargo/registry/ from a few checks as that directory contains unmodified upstream sources. (Closes: #845201) * checks/manpages.pm: + [JW, NT] Fix false negative manpage-named-after-build-path for packages built by sbuild. (Closes: #801760) * checks/scripts.{desc,pm}: + [JW, NT] Apply patch from Antonio Ospite that updates the test for php scripts without a php-cli dependency. Thanks to Ondřej Surý for the report and Mathieu Parent for the initial patch. (Closes: #818962) + [CL, NT] Warn about new source packages providing a python2 package as EOL for python2 is expected in 2020, which is before buster's expected EOL. (Closes: #829744) * collection/objdump-info.desc: + [NT] Bump version due to RUNPATH collection. * commands/lintian: + [NT] Deprecate --fail-on-warnings, which will be removed in Debian/buster. * data/binaries/embedded-libs: + [BR] Allow openssl1.0 as source package. (Closes: #843406). * data/debhelper/dh_commands-manual: + [NT] Apply patch from Piotr Ożarowski that ensure that consumers of dh_python2 Build-Depends on dh-python. (Closes: #740161) * data/fields/archive-sections: + [NT] Apply patch from Josh Triplett to add javascript and rust sections. (Closes: #847535) * data/files/privacy-breaker-websites: + [BR] Detect more logos. * data/scripts/interpreters: + [NT] Apply patch from Antonio Ospite to correct a false positive warning for python scripts using python2 in the shebang line. Thanks to Per Andersson for the report and Luca Boccassi for the initial patch for solving this. (Closes: #743599) * data/spelling/corrections: + [PW] Add more corrections. * data/spelling/corrections-case: + [EG] Correct spelling of Lua (Closes: #842781) * helpers/coll/objdump-info-helper: + [NT] Extract RUNPATH from binaries as well. * lib/Lintian/Collect/Binary.pm: + [NT] Expose RUNPATH when set in the binary. + [NT] Remove "virtual package" from the list of phrases marking a package as a meta-package. Thanks to Stuart Prescott for the report. (Closes: #685029) * profiles/kali/main.profile: + [NT] Add a profile for Kali Linux. Thanks to Raphaël Hertzog for the report. (Closes: #847318) * vendors/kali/main/data/changes-file/known-dists: + [NT] Add data file for Kali Linux. lintian (2.5.49) unstable; urgency=medium * Summary of tag changes: + Added: - homepage-for-bioconductor-package-not-canonical * checks/debhelper.desc: + [CL] Drop double leading spaces in includes-maint-script-parameters paragraph that was causing indentation when rendered on lintian.d.o. * checks/fields.{pm,desc}: + [NT] Apply patch from Dylan Aïssi to tag non-canonical uses of the bioconductor homepage in the Homepage field. (Closes: #839874) + [JW] Apply patch from Dylan Aïssi to tag r-other packages not in section "gnu-r". (Closes: #841455) * checks/init.d.pm: + [JW] Don't require version constraint for lsb-base dependencies. The needed version has been available for many stable releases. * checks/shared-libs.pm: + [JW] Don't complain about executable bit for ld.so shipped in multi-arch directories. + [JW] Don't complain about missing SONAME for position-independent executables. Thanks to Reuben Thomas for the bug report. (Closes: #731987) + [JW] Check for PT_GNU_STACK existence on all architectures. * checks/source-copyright.pm: + [RA, JW] Fix handling punctuation characters in license expressions in machine-readable copyright files. (Closes: #841356) * checks/watch-file.pm: + [JW] Assume that watch files containing the pgpmode option (different than "none") verify upstream signature. Thanks to Robert Luberda for the bug report. (Closes: #841000) * data/cruft/non-distributable-files: + [BR] Add some rapidjson files. * data/debhelper/compat-level: + [NT] Bump the deprecated debhelper compat level to match the one in debhelper. * data/files/privacy-breaker-tag-attr: + [BR] Apply patch from Frederic Bonnard detecting audio tags. (Closes: #840009) * data/spelling/corrections*: + [JW, PW] Add more corrections. * lib/Lintian/Unpacker.pm: + [NT] Use the new "do_fork()" sub to ensure works do not inherit the default signal handler, which could allow any number of workers to promote themselves to independent "masters" - effectively creating a fork-bomb with an ill-timed signal. * lib/Lintian/Util.pm: + [NT] Add a "do_fork()" sub to ensure signal handling is reset for child processes. + [NT] Add $PKGVERSION_REGEX variable containing a regex matching valid versions. * t/tests/shared-libs-non-pic-i386/debian/Makefile: + [JW] Pass -fno-PIE and -fno-pie to GCC, so that the test works even when the compiler enables PIE by default. (Closes: #841442) lintian (2.5.48) unstable; urgency=low * Summary of tag changes: + Added: - file-name-contains-wildcard-character - homepage-for-cran-package-not-canonical - init.d-script-needs-depends-on-lsb-base - maintscript-includes-maint-script-parameters + Removed: - hardening-no-stackprotector * checks/binaries.{desc,pm}: + [NT] Rewrite/embed the necessary bits from hardening-check to implement the default hardening-no-* checks directly in lintian. This is because hardening-check appears to be losing its "home" with the coming removal of hardening-wrapper and hardening-includes. (Closes: #836756) + [JW] Remove the hardening-no-stackprotector tag. + [NT] Allow "golang-any" as an alternative to "golang-go" in Build-Depends for detecting golang binaries. Thanks to Martín Ferrari for the report and the initial patch. (Closes: #839228) * checks/changelog-file.{desc,pm}: + [JW] Bump threshold for improbable bug number to 2000. * checks/control-file.{desc,pm}: + [JW] Add references to tags related to build profiles. + [JW] Relax Build-Profiles syntax check to allow (almost) any characters in profile names. Thanks to Ximin Luo for the bug report. (Closes: #839086) + [JW] Add support for pkg.<srcpkg>.<anything> build profiles. * checks/debhelper.pm: + [JW] Ignore comments in debian/rules. + [JW] Fix parsing rule targets in lines containing multiple colons. Thanks to Andreas Beckmann for the bug report. (Closes: #838246) + [CL] Check for .maintscript files that include "maint-script-parameters". (Closes: #838195) + [NT] Fix typo that prevented lintian from detecting uses of the dhmk build-system. * checks/fields.{desc,pm}: + [JW] Fix typo. + [JW] Add references to tags related to build profiles. + [JW] Add support for pkg.<srcpkg>.<anything> build profiles. + [JW] Demote tags for build-depends related to build profiles to pedantic, as the required packages are available in stable. Thanks to Helmut Grohne for the bug report. (Closes: #831633) + [NT] Apply patch from Dylan Aïssi to tag r-bioc packages not in section "gnu-r". (Closes: #839263) + [NT] Apply patch from Dylan Aïssi to tag non-canonical uses of the cran homepage in the Homepage field. (Closes: #839553) * checks/files.{desc,pm}: + [CL, NT] Tag usages of shell wildcard characters in file names. (Closes: #814326) * checks/init.d.{desc,pm}: + [CL, NT]: Emit a tag for initscripts that source the /lib/lsb/init-functions utility functions without declaring the corresponding dependency on lsb-base (>= 3.0-6). (Closes: #838997) * checks/shared-libs.desc: + [JW] Fix typos. * checks/testsuite.pm: + [JW] Apply patch from Sean Whitton to recognise autopkgtest-pkg-elpa as a valid value for the Testsuite field. (Closes: #837801) * collection/hardening-info: + [NT] Removed. * data/fields/build-profiles: + [JW] Add new profiles: nogolang, nojava, noperl, nopython, noudeb. * data/fields/obsolete-packages: + [NT] Apply patch from Otto Kekäläinen to assist with the transition to the "default-mysql-*" packages. (Closes: #838603) * data/fields/perl-provides: + [NT] Refresh perl provides. * data/files/js-libraries: + [BR] Apply patch from Jean-Michel Vourgère to add detection of libjs-jquery-migrate-1. (Closes: #823627) * data/files/php-libraries: + [JW] Apply patch from Marcelo Jorge Vieira to update package name for php-gettext. (Closes: #837502) * data/spelling/corrections: + [JW, PW] Add more corrections. * debian/control: + [NT] Drop dependencies on hardening-includes as we no longer need hardening-check. * debian/copyright: + [JW] Add Paul Wise. + [JW] Remove now-unneeded separate entry for spellintian.t. + [JW] Update copyright years. + [CL] Add Chris Lamb. * helpers/coll/hardening-info-helper: + [NT] Removed. * helpers/coll/objdump-info-helper: + [NT] Expose a few more bits from readelf needed to implement some of the hardening checks. * lib/Lintian/Collect/Binary.pm: + [NT] Expose a few more bits from readelf needed to implement some of the hardening checks. * profiles/debian/extra-hardening.profile: + [NT] Removed - we no longer support the stackprotector tag. * profiles/debian/ftp-master-auto-reject.profile: + [JW] Refresh against current rule set. * profiles/debian/main.profile: + [JW] Stop disabling the hardening-no-stackprotector tag. * t/scripts/spellintian.t: + [JW] Relicense as GPLv2+, like the rest of Lintian. lintian (2.5.47) unstable; urgency=medium * Summary of tag changes: + Added: - package-contains-python-coverage-file * checks/changelog-file.desc: + [JW] Fix typo. * checks/copyright-file.pm: + [JW] Stop using Data::Alias. Thanks to Niko Tyni for the bug report. (Closes: #834797) * checks/cruft.desc: + [JW] Fix typo. * checks/debhelper.pm: + [NT] Remove logic for CDBS creating a compat file when it is absent as debhelper now requires a compat file unconditionally. + [NT] Support the new named compat levels in debhelper. + [NT] Apply patch from Chris Lamb to improve the tag for typoed debhelper override targets. (Closes: #834370) * checks/duplicate-files.desc: + [JW] Fix typo. * checks/fields.{desc,pm}: + [JW] Fix typos. + [JW] Escape dots in some regexps. + [NT] Apply patch from Chris Lamb to check that libjs-* packages are in the "web" section. (Closes: #798983) * checks/files.{desc,pm}: + [JW] Fix typos. + [NT] Apply patch from Chris Lamb to catch ".coverage" files in packages. (Closes: #831864) * checks/java.desc: + [JW] Fix typo. * checks/patch-systems.desc: + [JW] Fix formatting of some filenames. * checks/phppear.{desc,pm}: + [JW] Fix typo. + [NT] Apply patch from Jochen Sprickerhof to skip this check if the package does not contain any php files. (Closes: #805076) * checks/rules.desc: + [JW] Fix typo. + [JW] Fix tag description formatting. * checks/shared-libs.desc: + [JW] Fix typos. * checks/systemd.{desc,pm}: + [NT] Apply patches from Chris Lamb to fix some false positives with systemd-service-file-missing-install-key. (Closes: #837057) * data/debhelper/compat-level: + [NT] Bump debhelper compat versions with the release of debhelper 10. * data/debhelper/dh_{addons,commands}-manual: + [JW] Add dh-autoreconf, which is now a dependency of debhelper. Thanks to Michael Biebl for the bug report. (Closes: #835449) * data/debhelper/named-compat-levels: + [NT] New file. * data/output/manual-references: + [JW] Refresh. * data/scripts/interpreters: + [JW] Add pypy as a known interpreter. Thanks to Sebastian Ramacher for the bug report. (Closes: #836017) * data/spelling/corrections*: + [JW] Add more corrections. Thanks to Paul Wise for patches for some of them. * debian/control: + [JW] Drop now-unused libdata-alias-perl from (Build-)Depends. * lib/Lintian/Relation/Version.pm: + [NT] Apply change from Brendan O'Dea to avoid (implicitly) messing with the global APT "_config" object. (Closes: #833656) * private/refresh-manual-refs: + [JW] Fix path to Debian policy for Java. * reporting/templates/head.tmpl: + [NT] Add subresource integrity fields to all <link> tags. + [NT] Add Content-Security-Policy header (via <meta http-equiv>). lintian (2.5.46) unstable; urgency=medium * Summary of tag changes: + Added: - systemd-service-file-missing-install-key - typo-in-debhelper-override-target + Removed: - package-depends-on-lower-priority-package * checks/cruft.pm: + [NT] Ignore mentions of /usr/lib/perl5 in patches as they might be a way of fixing said mentions. Thanks to Robert Luberda for reporting the bug. (Closes: #802964) * checks/debhelper.{desc,pm}: + [JW] Apply patch from Chris Lamb to check for common typos in debian/rules target names. (Closes: #832096) + [JW, NT] Add some more (indirect) "dh" build-systems. (Closes: #828773) * checks/files.desc: + [JW] Fix typos. * checks/group-checks.{desc,pm}: + [NT] Drop "lower priorities" check as the general consensus seems to be that priorities changes are mostly busy work. Thanks to Dominic Hargreaves for the report. (Closes: #823326) * checks/infofiles.desc: + [JW] Fix typo. * checks/java.pm: + [JW] Don't emit javalib-but-no-public-jars for transitional packages. Thanks to Jeremy Bicha for the bug report. (Closes: #829047) * checks/manpages.desc: + [JW] Fix typos. * checks/phppear.desc: + [JW] Fix typos. * checks/scripts.pm: + [JW] Fix false positive unusual-interpreter when the script had "#!/usr/bin/env" shebang and the interpreter was shipped in the same package. Thanks to Sergio Durigan Junior for the bug report and the initial patch. (Closes: #828933) * checks/shared-libs.desc: + [JW] Fix typo. * checks/systemd.{desc,pm}: + [JW] Fix typos. + [JW, NT] Apply from Chris Lamb to check for a possibly missing "WantedBy" target in service files. (Closes: #832771) + [JW, NT] Improve wording about the "systemd" sequence of a tag. * checks/version-substvars.desc: + [JW] Make maybe-not-arch-all-binnmuable a classification tag. * checks/watch-file.desc: + [JW] Fix typo. * collection/*: + [JW,NT] Remove "." from Perl's search path. (Mitigates: #588017) * commands/{info.pm,lintian}: + [NT] Drop the necessary bits for supporting translated tag descriptions. * commands/lintian: + [NT,JW] Remove "." from Perl's search path. (Mitigates: #588017) * commands/reporting-html-reports.pm: + [NT] Fix typo in named parameter that made the raw lintian.log unavailable on lintian.debian.org. Thanks to Guillem Jover for reporting the issue. (Closes: #828719) + [NT] Install the lintian log file as a resource so it can be handled (e.g. cached) like other resources. * commands/reporting-lintian-harness.pm: + [NT] Attempt to terminate the run timely if it overruns the time limit. * commands/reporting-sync-state.pm: + [NT] Remove redundant "area" field from all binary packages in the harness state cache. + [NT] Drop existing instances of the "sha1" field from all packages in the harness state cache. * data/common/source-fields: + [NT] Apply patch from Edward Betts to add Testsuite-Triggers as a known source field. (Closes: #829545) * data/debhelper/*: + [NT] Refresh against unstable. * data/debhelper/dh_{addons,commands}-manual: + [JW, NT] Add the systemd sequence and related tools now that debhelper is taking over the dh-systemd helpers. Thanks to Christian Hofstaedtler for the report. (Closes: #830930) * data/fields/essential: + [JW] Add init-system-helpers; remove sysvinit and mktemp. Thanks to Felipe Sateler for the bug report. (Closes: #833015) * data/fields/obsolete-packages: + [NT] Remove "debmake" as the package is now reintroduced with a different purpose. Thanks to Paul Wise for the report. (Closes: #827158) * data/files/fonts: + [NT] Refresh against unstable. * data/java/constants: + [NT] Bump known java-class versions. Thanks to Hideki Yamane for the report. (Closes: #829592) * data/scripts/interpreters: + [JW] Apply patch from Sergio Durigan Junior to add newLISP as a known interpreter. (Closes: #828934) * data/spelling/corrections: + [JW] Add more corrections. * debian/control: + [NT] Drop now unnecessary po4a Build-Dependency. * debian/rules: + [NT] Drop code for handling translations. * doc/lintian.xml: + [JW] Fix typo. * frontend/dplint: + [JW,NT] Remove "." from Perl's search path. (Mitigates: #588017) * helpers/coll/*: + [JW,NT] Remove "." from Perl's search path. (Mitigates: #588017) * lib/*.pm: + [NT] Drop support for translations of tag descriptions. It never got used. * lib/Lintian/*.pm: + [JW] Fix typos. * lib/Lintian/Tags.pm: + [JW, NT] Fix mojibake in UTF-8 encoded comments for overrides. (Closes: #833052) * lib/Lintian/Util.pm: + [NT] Shuffle the harness backlog a bit to reduce the risk of a lot of very large package groups being scheduled in the same run. * man/lintian.pod.in: + [JW] Fix typo. + [JW] Remove unneeded "file:" in front of a pathname. * po4a: + [NT] Drop as it was not used. * t: + [JW,NT] Update tests to work now that dpkg validates debian/tests/control. (Closes: #829635) + [NT] Apply patch from Adam Conrad to make some tests work when the compiler uses -fPIE by default. lintian (2.5.45) unstable; urgency=medium * Summary of tag changes: + Added: - build-depends-arch-without-arch-dependent-binary - debhelper-autoscript-in-maintainer-scripts - no-strong-digests-in-dsc - testsuite-dependency-has-unparsable-elements + Removed: - build-depends-arch-without-arch-dependant-binary - init.d-script-missing-lsb-description * checks/application-not-library.{desc,pm}: + [JW] Use HTTPS for Alioth URLs. + [AB] Don't emit application-in-library-section for packages starting with "cpan", not only "cpanplus" and "cpanminus". * checks/binaries.{desc,pm}: + [NT] Rewrite description for hardening-no-bindnow. There is no references to why bindnow would cause issues. + [AB] Relax regexp for missing-dependency-on-perlapi to allow letters inside the API name. Thanks Niko Tyni! (Closes: #823437) * checks/debhelper.pm: + [NT] The /usr/share/R/debian/r-cran.mk file implies /usr/share/cdbs/1/rules/debhelper.mk. * checks/fields.{desc,pm}: + [JW] Fix typos. + [AB] Add new check for weak checksums in source packages: new tag no-strong-digests-in-dsc (Closes: #824916) * checks/files.desc: + [BR] Do not suggest unsupported Multi-arch: no. (Closes: #816455) + [JW] Fix typos. * checks/files.pm: + [JW] Fix false positive gzip-file-is-not-multi-arch-same-safe when processing multiple debs. (Closes: #738444) * checks/info-files.desc: + [NT] Use "gzip -9n" rather than "gzip -9" in examples. * checks/init.d.{desc,pm}: + [JW] Fix typo. + [NT] Remove tag for missing long LSB description in init scripts. Thanks to Vincent Bernat for the report. (Closes: #825193) * checks/manpages.desc: + [NT] Use "gzip -9n" rather than "gzip -9" in examples. * checks/patch-systems.pm: + [NT] Emit a separate tag for each patched file instead of bundling them all together. This allows individual instances to be overridden. Thanks to Nathan Summers for the report. (Closes: #541491) * checks/scripts.{desc,pm}: + [NT] Add tracking tag to trace auto-generated shell snippets in maintainer scripts. * checks/shared-libs.{desc,pm}: + [NT] Improve the description for missing ldconfig trigger to cover that debhelper will generally add it automatically. Most packages will just need a rebuild. + [JW] Fix false positive dev-pkg-without-shlib-symlink for GCC runtime libraries. Thanks to Matthias Klose for the bug report. (Closes: #823833) * checks/testsuite.{desc,pm}: + [NT] Apply patch from Ondřej Nový to add more known autodep8 test suites. (Closes: #823088) + [JW] Update autopkgtest specification URL. Thanks to Mattia Rizzolo for the bug report. + [NT] Check for broken dependency fields in the autopkgtest control file. Thanks to Jérémy Bobbio for the suggestion. (Closes: #795083) * checks/upstream-metadata.pm: + [JW] Include YAML validation error in the output. * checks/usrmerge.desc: + [JW] Use HTTPS for Alioth URL. * collection/*: + [NT] Always pass "-n" to "gzip". * commands/lintian: + [NT] Add ":utf8" layer to STDOUT. Thanks to Michael Prokop for reporting the issue. (Closes: #801296) * commands/reporting-html-reports.pm: + [NT] Remove "$COPY_DOCS" configuration option. The html_reports now always copies the documentation. * commands/reporting-lintian-harness.pm: + [NT] Re-enable pedantic tags by default. These were disabled in the previous release by mistake. * data/binaries/hardening-tags: + [JW] Refresh with dpkg-architecture 1.18.7. * data/common/{architectures,multiarch-dirs}: + [JW] Refresh with dpkg-architecture 1.18.7. * data/fields/perl-provides: + [NT] Refresh against Perl 5.22. * data/files/triplets: + [JW] Refresh with dpkg-architecture 1.18.7. * data/shared-libs/ldconfig-dirs: + [JW] Refresh with dpkg-architecture 1.18.7. * data/spelling/corrections: + [JW] Add more corrections. Thanks to Paul Wise for patches for some of them. * debian/rules: + [JW] Put "Debian Package Checker" in all manpage headers. + [JW] Put Lintian version in all manpage footers. + [JW] Simplify manpage generation. + [JW] Install Lintian::Tutorial manpages. * doc/tutorial/Lintian/Tutorial.pod: + [JW] Add link to the WritingTests tutorial. + [JW] Add SEE ALSO section (for the man formatter). * doc/tutorial/Lintian/Tutorial/WritingTests.pod: + [JW] Fix formatting error. * frontend/dplint: + [NT] Add ":utf8" layer to STDOUT. * lib/Lintian/DepMap.pm: + [JW] Fix typos. * lib/Lintian/Tags.pm: + [JW,NT]: Always report unused overrides for all packages processed. Thanks to Andreas Beckmann for the report. (Closes: #792191) * man/lintian.pod.in: + [JW] Fix typo. * private/refresh-hwcap: + [JW] Make the ld.so manpage parser work with the current version. * private/refresh-perl-provides: + [NT] Look for a versioned perl-modules package. * reporting/config: + [NT] Remove "$COPY_DOCS" configuration option. The html_reports now always copies the documentation. * reporting/harness: + [NT] Refactored into a "dplint" command and renamed to "commands/reporting-harness.pm". * reporting/html_reports: + [NT] Refactored into a "dplint" command and renamed to "commands/reporting-html-reports.pm". * reporting/templates/tags-severity.tmpl: + [NT] Add sections for "classification" tags. lintian (2.5.44) unstable; urgency=medium * Summary of tag changes: + Added: - build-depends-arch-without-arch-dependant-binary - changelog-references-temp-security-identifier - ctrl-script - debian-build-system - debian-changelog-has-wrong-day-of-week - extra-whitespace-around-name-in-changelog-trailer - invalid-versioned-provides - maintscript-calls-ldconfig - no-ctrl-scripts - package-has-unnecessary-activation-of-ldconfig-trigger - package-must-activate-ldconfig-trigger - source-format + Removed: - debian-changelog-has-wrong-weekday - description-contains-duplicated-word - dh_pysupport-is-obsolete - missing-dependency-on-python-support - postinst-has-useless-call-to-ldconfig - postinst-must-call-ldconfig - postrm-has-useless-call-to-ldconfig - postrm-should-call-ldconfig - postrm-unsafe-ldconfig - preinst-calls-ldconfig - prerm-calls-ldconfig - versioned-provides * checks/changelog-file.{desc,pm}: + [JW,NT] Use "day of week" rather than "weekday". (Closes: #796093) + [JW,NT] Flag references to "TEMP" security identifiers. Thanks to Paul Wise for assisting with the regex. (Closes: #807892) * checks/control-files.{desc,pm}: + [NT] Add classification tags for (absence of) maintscripts. * checks/debhelper.{desc,pm}: + [NT] Add tag for classifying the build system. + [NT] Remove test for dh_pysupport usage. + [NT] Avoid advertising python-support as possible solution for python-depends-but-no-python-helper. Thanks to Gunnar Wolf for the bug report. (Closes: #754315) + [NT] Apply patch from Gergely Nagy to only emit the dh-exec-useless-usage check for install and manpages files. Thanks to Rafael Laboissière for the report. (Closes: #816341) * checks/debian-source-dir.{desc,pm}: + [NT] Add tag for classifying the source format. (Closes: #612610) * checks/description.{desc,pm}: + [NT] Drop duplicate word tag, which is now covered by the spelling error check. * checks/fields.{desc,pm}: + [NT] Add default-jdk-headless and openjdk-X-jdk-headless to the set of known java providers. + [JW] Relax build profile dependency checks to allow versions with trailing tilde. (Closes: #819509) Thanks to Felix Geyer for the bug report. + [NT] Expand the vcs-field-uses-insecure-uri check to check other known insecure protocols (e.g. svn and pserver). Thanks to Paul "(UTF-8) Snowman" Tagliamonte for the report. (Closes: #812962) + [NT] Use https URL in the correction for canonical VCS URLs. (Closes: #813587) + [NT] Bump known python 3 version to include 3.4 and 3.5. + [AB] package-relation-with-perl-modules: Remove "experimental" flag. Asked for by Dominic Hargreaves. + [NT] Apply patch from Mattia Rizzolo to make lintian know and check the Build-Depends-Arch field. (Closes: #822281) + [NT] Stop emitting tags for (valid) versioned provides. Thanks to Thorsten Glaser for the bug report. (Closes: #800438) * checks/files.pm: + [JW] Apply patch from Mathieu Parent to fix directories for PHP INI files. + [NT] Remove code related to python-support. * checks/nmu.{desc,pm}: + [NT] Create a separate tag for extra whitespace around uploader name in the changelog. Thanks to Ben Wiederhake for the suggestion. (Closes: #801647) * checks/phppear.{desc,pm}: + [JW] Apply patch from Mathieu Parent to make dh-php* and php*-dev package names unversioned. * checks/rules.pm: + [NT] Add ":any" to all python dependencies. Thanks to Barry Warsaw for reporting the bug. + [NT] Bump known python 3 version to include 3.4 and 3.5. + [NT] Remove check for python-support and python-central. * checks/scripts.desc: + [NT] Suggest dh_python2 / dh_python3 instead of dh_pysupport and dh_pycentral. Thanks to Neil Williams for the report. (Closes: #818607) * checks/shared-libs.{desc,pm}: + [NT] Rename and clarify some ldconfig related tags to better reflect the use of the ldconfig trigger. Thanks to Rafael Laboissière for reporting this. (Closes: #809577) + [NT] Merge and remove some ldconfig related tags. Notably unconditionally flag all uses of ldconfig in maintainer scripts (outside glibc) as these should be replaced by a trigger. * checks/version-substvars.pm: + [NT] Apply patch from Javier Serrano Polo that makes the check ignore all multi-arch quantifiers (when determining if the dependency is for an external package). (Closes: #822269) * commands/info.pm: + [NT] Accept "--tag" as an alias of "--tags". Thanks to Robert Luberda for the suggestion. (Closes: #816454) * commands/lintian: + [NT] Also check DEBRELEASE_DEBS_DIR for .changes files when no packages are given on the command line. Thanks to Sean Whitton for the suggestion. (Closes: #812568) + [NT] Clean up entries in temporarily labs fully once they have been processed. This avoids accumulating files on the disk for archive- wide runs done in temporary labs. This mitigates some of the excessive disk usage for archive-wide runs (See #779228). * commands/reporting-lintian-harness.pm: + [NT] Add support for classification tags. * data/debhelper/*: + [JW] Refresh against unstable. Thanks to Mathieu Parent for the bug report. * data/debhelper/dh_addons-manual: + [NT] Add ":any" to the dependencies for the python add-ons. Thanks to Barry Warsaw for reporting the bug. (Closes: #803164) + [NT] Remove entry for pysupport. * data/fields/virtual-packages: + [NT] Refresh against unstable main (amd64). * data/files/fonts: + [NT] Refresh against unstable main (amd64). * data/menu-format/known-desktop-keys: + [NT] Accept "DesktopNames" as a known key in desktop files. Thanks to Yves-Alexis Perez for the suggestion. (Closes: #766099) * data/spelling/corrections: + [JW] Add more corrections. * data/standards-version/release-dates: + [AB] Add 3.9.8. * debian/control: + [AB] Declare compliance with Debian Policy 3.9.8. (No other changes required.) * debian/lintian.install: + [NT] Install Test::Lintian modules in Perl5 module path and remove the Lintian::Tutorial files (as they are just POD files). * debian/{manpages,rules}: + [JW,NT] Generate and install manpages of Lintian's perl modules. (Closes: #816862) * doc/lintian.xml: + [NT] Document the new classification tags. * lib/Lintian/*{,/*}.pm: + [NT] Add support for classification tags. * lib/Lintian/Check.pm: + [JW,NT] Flag a duplicate word as a spelling error. This affects several tags plus spellintian. (Closes: #800476) * lib/Lintian/Collect/Binary.pm: + [JW] Apply patch from Ben Hutchings to consider source versions when testing nativeness of binary packages. (Closes: #821902) * lib/Lintian/Relation.pm: + [JW,NT] Fix broken implication with "P (<< V)" relations. (Closes: #819560) * lib/Lintian/Tag/Info.pm: + [JW] Use HTTPS for manpages.debian.org URLs. * lib/Lintian/Unpacker.pm: + [NT] Name the subprocess after what is processing. * private/refresh-debhelper-data: + [JW] Apply patch from Mathieu Parent to fix path to Contents files. * reporting/*: + [NT] Add support for classification tags. * vendors/ubuntu/main/data/changes-file/known-dists: + [NT] Apply patch from Mattia Rizzolo to add yakkety. lintian (2.5.43) unstable; urgency=medium * Summary of tag changes: + Added: - maybe-not-arch-all-binnmuable + Removed: - dh_desktop-is-deprecated - dh_undocumented-is-obsolete - restriction-formula-with-debhelper-with-conflicting-version - restriction-formula-with-versioned-dpkg-dev-conflict * checks/{control-file,fields}.{desc,pm}: + [JW] Remove confusing checks for build-conflicts related to build profiles. * checks/debhelper.{desc,pm}: + [NT] Remove check for dh_undocumented and dh_desktop as debhelper has dropped the helper. * checks/systemd.pm: + [JW] Apply patch from Felipe Sateler to properly remove .sh suffix when checking systemd-initscript matching. (Closes: #819087) * checks/version-substvars.{desc,pm}: + [NT] Add an experimental tag to check for arch:all binNMUability. This is currently not supported at all and there is no known fix for the tag. That said, it is still useful for determining how many packages might be affected by it in case Debian will support arch:all binNMUs. * commands/reporting-sync-state.pm: + [NT] Use the sha256 instead of the sha1 checksum field for finding related files and checking which members have changed. + [NT] Support reading Packages.xz and Sources.xz files. * data/spelling/corrections: + [JW] Add more corrections. Thanks to Mattia Rizzolo for suggesting one of them. * frontend/dplint: + [NT] Put $LINTIAN_VERSION on its own line so the build time substitution works again. Thanks to Stuart Prescott for reporting the issue. * helpers/coll/objdump-info-helper: + [JW] Apply patch from Dan Nicholson to keep TEXTREL entries from the dynamic section. (Closes: #819506) * lib/Lintian/Check.pm: + [JW,ADB] Don't ignore midword punctuation characters when spell-checking. (Closes: #818003) Thanks to Andreas Beckmann for the bug report. * t/tests/binaries-missing-depends-on-libc/debian/debian/rules: + [JW] Apply patch from Dan Nicholson to pass --no-as-needed to the linker. (Closes: #819551) lintian (2.5.42.1) unstable; urgency=medium * checks/binaries.desc: + [NT] Remove the experimental marker from the tags about (partially) unstripped static libraries. + [NT] Remove the experimental marker from the no-pie and no-bindnow hardening tags. * checks/changelog-file.pm: + [JW] Fix use of uninitialized value when checking incorrectly formatted changelog entries. * commands/reporting-lintian-harness.pm: + [NT] Add missing close and seek to the end of the new lintian log file before appending to it. * data/binaries/embedded-libs: + [JW] Apply patch from Sebastian Ramacher to allow ffmpeg as libpostproc provider. (Closes: #817004) * lib/Lintian/Tag/Info.pm: + [JW] Use manpages.debian.org (instead of manpages.debian.net) for manual page hyperlinks. lintian (2.5.42) unstable; urgency=medium * Summary of tag changes: + Added: - systemd-service-file-missing-documentation-key + Removed: - dh_scrollkeeper-is-deprecated - dh_suidregister-is-obsolete * checks/copyright-file.pm: + [NT] Apply patch from Rafael Kitover to avoid some false-positives with the DEP-5 copyright format. (Closes: #795641) * checks/debhelper.{desc,pm}: + [NT] Remove tags for dh_scrollkeeper and dh_suidregister, which are removed in the next version of debhelper. * checks/files.desc: + [JW] Update freedesktop.org specification URL. * checks/menu-format.desc: + [JW] Update freedesktop.org specification URLs. * checks/systemd.{desc,pm}: + [NT] Apply patch from Chris Lamb to flag systemd units without the "Documentation" key. (Closes: #799083) * data/scripts/interpreters: + [JW] Add hhvm as a known interpreter. (Closes: #789878) * data/spelling/corrections: + [JW] Add more corrections. + [JW] Remove correction for "homogenous". (Closes: #816599) Thanks to IOhannes m zmölnig for the bug report. * debian/control: + [NT] Add (Build-)Dependency on libdata-alias-perl due to patch from Rafael Kitover. * doc/lintianrc.example: + [NT] Remove LINTIAN_LAB - most people will never need it. * lib/Lintian/Tag/Info.pm: + [JW] Allow "." characters in manual page references. lintian (2.5.41) unstable; urgency=medium * Summary of tag changes: + Added: - insane-line-length-in-source-file - source-contains-prebuilt-pandoc-documentation - upstream-metadata-is-not-a-file - upstream-metadata-yaml-invalid + Removed: - package-contains-broken-symlink * checks/apache2.desc: + [JW] Remove spurious check name abbreviation. * checks/binaries.pm: + [NT] Update match for detecting numpy linking. * checks/cruft.{desc,pm}: + [BR] Filter some simple comments for long line in source-is-missing (Closes: #798900). + [BR] Detect pandoc docs avoiding source-is-missing warning. + [BR] Fix other source-is-missing FP. (Closes: #813013). * checks/fields.pm: + [NT] Emit "no-homepage-field" only for source packages. * checks/files.pm: + [JW] Treat packages without Multi-Arch field as if they had "Multi-Arch: no". Thanks to Bas Couwenberg for the bug report. * checks/scripts.desc: + [JW] Fix typos. * checks/symlinks.{desc,pm}: + [NT] Retire package-contains-broken-symlink tag. It was too much effort compared to the gain. (Closes: #672297, #683059, #763270, #812723, #661003, #738187) * checks/testsuite.{desc,pm}: + [JW, NT] Apply patch from Christian Seiler to accept DEP-8 tests being symlinks to existing files in the source package. Thanks to Raphaël Hertzog for suggesting it. (Closes: #809440) * checks/upstream-metadata.{desc,pm}: + [NT] Apply patch from Petter Reinholdtsen to check that the upstream metadata file is valid YAML if present. (Closes: #813904) * commands/lab-tool.pm: + [NT] New utility to handle most laboratory operations. * commands/lintian: + [NT] New location for "frontend/lintian". + [NT] Refactored to use "dplint" to compute the include dirs. + [NT] Remove -S, -R and -r, which are now supported in the new lintian-lab-tool command. * data/spelling/corrections: + [JW] Fix some corrections. + [JW] Add more corrections. * data/standards-version/release-dates: + [NT] Add 3.9.7. Thanks to Alf Gaida for the reminder. (Closes: #814041) * debian/control: + [JW] Switch from libyaml-perl to libyaml-libyaml-perl in Build-Depends and Suggests. (Lintian has been using the latter package since 2.5.31.) + [NT] Add dependency on libyaml-libyaml-perl for the new upstream-metadata check. + [NT] Bump Standards-Versions to 3.9.7 - no changes required. * debian/{lintian.links,manpages,rules}: + [NT] Update to install the new lab-tool command. * frontend/lintian: + [NT] Move the code to "commands/lintian" and leave a symlink to dplint to replace it. * helper/coll/objdump-info-helper: + [NT] Avoid collecting unused information. * lib/Lintian/Path.pm: + [NT] Remove the _file_info cache field to avoid paying for all "file(1)" info twice. * lib/Lintian/Collect/Binary.pm: + [NT] Remove unnecessary values on members in the objdump_info table. * lib/Lintian/*.pm: + [JW] Fix typos. * man/lintian-lab-tool.pod: + [NT] New file. * private/generate-lintian-pod: + [JW] Fix formatting pathnames followed by punctuation characters. lintian (2.5.40.2) unstable; urgency=medium * checks/cruft.pm: + [BR] Check package testsuite for license problems. + [BR] Allow multiple full texts for license problems. + [BR] Detect link copyright tag and warn in case of cc-by-nc-sa * data/spelling/corrections*: + [JW] Add more corrections. * debian/post{inst,rm}: + [NT] Remove obsolete maintainer scripts. * debian/tests/testsuite: + [NT] Remove temporary directory after test. * lib/Lintian/Collect/Source.pm: + [JW] Fix typo. * lib/Lintian/Lab/Entry.pm: + [JW] Fix typo. * reports/html_reports: + [NT] Fix uninitialized warnings. + [NT] Remove ""-quotes covering the full maintainer name. This makes "Adam" sort under "A" rather than "Other" on the list of maintainers. lintian (2.5.40.1) unstable; urgency=medium * debian/rules: + [NT] Only run tests from the override_dh_auto_test target. * t/runtests: + [NT] Use a whitelist for cleaning up the environment. Fixes FTBFS / test failures. lintian (2.5.40) unstable; urgency=medium * Summary of tag changes: + Added: - debian-watch-file-uses-deprecated-githubredir - file-in-root-and-usr - hardening-no-bindnow - hardening-no-pie - library-in-root-and-usr - old-style-config-script - old-style-config-script-multiarch-path - old-style-config-script-multiarch-path-arch-all - vcs-field-uses-insecure-uri + Removed: - debian-watch-file-accesses-pypi-over-http - debian-watch-file-unsupported-pypi-url * checks/binaries.{desc,pm}: + [JW] Exclude /usr/lib/debug/.build-id/ from foreign-architecture checks. Thanks to Aurelien Jarno for the bug report. (Closes: #809262) + [BR] Detect old style config scripts and detect Multi-arch errors. + [NT] Add experimental tag for missing "bindnow" and "pie" hardening. Thanks to intrigeri for the suggestion. (Closes: #759363) * checks/changes-file.pm: + [JW] Use "~bpo7+N" as the suffix for wheezy-backports-sloppy uploads. Thanks to Vincent Bernat for the bug report. (Closes: #810028). + [JW] Use "~bpo8+N" as the suffix for jessie backports. * checks/changes-file.desc: + [JW] Fix typo. * checks/cruft.pm: + [BR] Pass information about minified javascript down to tag. (Closes: #804147). * checks/fields.{desc,pm}: + [NT] Apply patch from Dr. Tobias Quathamer <toddy@debian.org> to check for some insecure protocols in Vcs-* fields. (Closes: #810378) * checks/files.pm: + [NT] Fix off-by-one in an "mtime" comparison, which could give false-positive package-contains-timestamped-gzip warnings. + [NT] Downgrade image-file-in-usr-lib to pedantic given the policy has relaxed on this point. (Closes: #415558) * checks/files.desc: + [JW] Fix typo. * checks/source-copyright.{desc,pm}: + [JW] Apply patch from Mattia Rizzolo to update the machine-readable copyright format specification URL. (Closes: #809248) + [BR] Improve description text of tag dep5-copyright-license-name-not-unique. * checks/usrmerge.{desc,pm}: + [BR] Add usrmerge test from Marco d'Itri. (Closes: #767754). * checks/watch-file.{desc,pm}: + [BR] Apply patch from Chris Lamb <lamby@debian.org>, warn if debian/watch uses deprecated githubredir.debian.net scraper (Closes: #803106). + [NT] Apply patch from Dmitry Shachnev <mitya57@debian.org> to remove obsolete check. (Closes: #793149) + [NT] Apply patch from Sylvestre Ledru <sylvestre@debian.org> to support version 4 of the debian/watch. (Closes: #811175) * data/spelling/corrections*: + [JW] Add more corrections. Thanks to Paul Wise for patch for one of them. * debian/control: + [NT] Add ${perl:Depends} to Depends. + [NT] Use https://anonscm.debian.org/git/lintian/lintian.git in the Vcs-* fields. * debian/rules: + [NT] Convert to dh7 style build. * frontend/lintian: + [NT] Limit the number of instances of the same tag when output is a TTY. Add --no-tag-display-limit to disable this feature. Thanks to Thijs Kinkhorst for the report. (Closes: #775667) * lib/Lintian/Check.pm: + [JW] Remove work-around for Email::Valid bug (#663663), which is now fixed even in oldstable. + [JW] Apply patch from Justin B Rye to fix an uninitialized value warning. (Closes: #810649) * reporting/html_reports: + [JW] Add missing "map_maintainer" call, which made the reporting script omit packages on maintainer's pages. Thanks to Charles Plessy for the report and to Dr. Tobias Quathamer for finding the condition for triggering the bug. (Closes: #797178) + [NT] Share more data for a ~15% memory reduction on an old dataset. * t: + [NT] Fix test case relying on removed debhelper compat level. (Closes: #811309) lintian (2.5.39.1) unstable; urgency=medium * checks/menu-format.desc: + [NT] Clarify how to handle a command listed both in a menu file and a desktop file. Thanks to Jörg Frings-Fürst for reporting. (Closes: #806387) * data/binaries/embedded-libs: + [JW] Fix typo in the string used for detecting copies of OpenJPEG. (But continue to recognize the misspelled variant, which might be still present in some copies.) * data/fields/udeb-fields: + [NT] Add Auto-Built-Package and Build-Ids fields. Thanks to Guillem Jover for the report. (Closes: #808566) * data/scripts/interpreters: + [JW] Add perl6-m as a known interpreter. Thanks to Dominique Dumont for the bug report. (Closes: #809057) * data/spelling/corrections: + [JW] Add more corrections. * man/lintian.pod.in: + [NT,JW] Document clarify that "-L +=<value>" is valid. (Closes: #802729) + [NT] Attempt to document --display-level a bit more extensively. Thanks to Matt Zagrabelny for the report. (Closes: #802725) + [NT] Clarify what --default-display-level does and why one might want to use it. * private/refresh-ftp-master-tags: + [JW] Use HTTPS for the ftp-master.debian.org URL. lintian (2.5.39) unstable; urgency=medium * Summary of tag changes: + Added: - dh-exec-useless-usage - systemd-service-alias-without-extension * checks/binaries.pm: + [JW] Fix inconsistent parsing of a data file. * checks/cruft.pm: + [BR] Relax line length for minified javascript. * checks/debhelper.{desc,pm}: + [NT] Apply patches from Gergely Nagy to extend the dh-exec related checks. (Closes: #794296, #801104) * checks/files.{desc,pm}: + [JW] Fix typo. + [JW] Fix inconsistent parsing of a data file. (Closes: #790739) * checks/scripts.desc: + [JW] Fix typo. * checks/systemd.{desc,pm}: + [NT] Apply patch from Evgeni Golov to strip ".service" from aliases before looking for an init.d service of same name. (Closes: #773087) + [NT] Apply patch from Evgeni Golov to check that the Alias field of .service files ends with .service (as required by the systemd.unit specification). (Closes: #808369) * data/binaries/embedded-libs: + [JW] Apply patch from James Cowgill to rename "polarssl" as "mbedtls". (Closes: #808050) * data/binaries/hardening-tags: + [NT] Refresh with dpkg-architecture 1.18.3. * data/common/{architectures,multiarch-dirs}: + [NT] Refresh with dpkg-architecture 1.18.3. * data/fields/binary-fields: + [NT] Add "Auto-Built-Package" as known field in binary packages. It appears in dbgsym packages generated by debhelper. * data/fields/perl-provides: + [NT] Refresh against perl 5.22. * data/files/triplets: + [NT] Refresh with dpkg-architecture 1.18.3. * data/scripts/interpreters: + [JW] Add rake as a known interpreter. Thanks to Cédric Boutillier and Pirate Praveen for the bug reports. (Closes: #795036) * data/shared-libs/ldconfig-dirs: + [NT] Refresh with dpkg-architecture 1.18.3. * data/spelling/corrections*: + [JW, AB] Add more corrections. Thanks to Paul Wise for patch for one of them. * doc/examples/profiles/my-vendor/main.profile: + [JW] Fix typo. * doc/lintian.xml: + [JW] Fix typo. * lib/Lintian/Output.pm: + [JW] Fix typos. * lib/Lintian/Profile.pm: + [JW] Fix typo. * lib/Lintian/Tags.pm: + [JW] Fix typo. + [JW] Make it possible to override tags containing "+" characters, such as "missing-dependency-on-libstdc++". Thanks to Andreas Beckmann for the bug report. (Closes: #806504) * lib/Test/Lintian.pm: + [JW] Fix typo. * private/refresh-insserv-data: + [JW] Fix typo. lintian (2.5.38.1) unstable; urgency=medium No tags were added or removed * checks/binaries.{desc,pm}: + [NT] Check for ".debug_str" section in addition to the ".debug_line" section to determine if an ELF file contains detached debug symbols. * checks/cruft.pm: + [BR] Avoid false positive in minified javascript by detecting line with only one colon. (Closes: #792365). * checks/debconf.desc: + [JW] Fix typo. * checks/files.pm: + [BR] Whitelist pbuilder for dir-or-file-in-build-tree. * checks/scripts.pm: + [NT] Check the syntax of maintainter scripts with "sh" when the script is declared with "#!/bin/sh". Thanks to Ron Lee for spotting this. * checks/shared-libs.pm: + [ADB, NT] Fix false-positive instance of the tag postrm-should-call-ldconfig when the package is using the ldconfig trigger. (Closes: #804256) * checks/source-copyright.desc: + [JW] Use HTTPS for www.debian.org URLs. * commands/spellintian.pm: + [JW,NT] Report non-files as "not a file" rather than claiming them to be directories. (Closes: #802475) * data/cruft/non-free-files: + [JW] Use HTTPS for bugs.debian.org URLs. * data/output/manual-references: + [JW] Refresh. * data/spelling/corrections*: + [JW] Add more corrections. * doc/lintian.xml: + [JW] Use HTTPS for www.debian.org and lintian.debian.org URLs. * doc/README.developers: + [JW] Use HTTPS for wiki.debian.org URLs. * doc/README.release: + [JW] Fix typo. * debian/copyright: + [JW] Use HTTPS for lintian.debian.org URLs. * lib/Lintian/DepMap/Properties.pm: + [JW] Fix typo. * lib/Lintian/Profile.pm: + [JW,NT] Correct include path for default profile when include directories are not given explicitly. (Closes: #802476) + [JW] Fix typo. * lib/Lintian/Unpacker.pm: + [JW] Fix typo. * lib/Lintian/Util.pm: + [NT] Whitelist TMPDIR in "clean_env", so that man and msgfmt will use the user defined TMPDIR (if any). Thanks to Bjarni Ingi Gislason Bjarni for the bug report. (Closes: #801483) * mail-templates/license-problem-non-free-RFC: + [JW] Use HTTPS for debian.org URLs. * man/lintian.pod.in: + [JW] Fix incorrect claim that "pedantic" and "display-info" can't be used together in the config file. * private/refresh-*: + [JW] Use httpredir.debian.org as the default mirror. * private/refresh-manual-refs: + [JW] Use HTTPS for www.debian.org and lintian.debian.org URLs. * reporting/harness: + [JW] Fix typo. * reporting/templates/*.tmpl: + [JW] Use HTTPS for debian.org URLs. * vendors/ubuntu/main/data/changes-file/known-dists: + [JW] Add "wily" and "xenial". * README: + [JW] Use HTTPS for www.debian.org and lintian.debian.org URLs. lintian (2.5.38) unstable; urgency=medium * Summary of tag changes: + Added: - command-in-menu-file-and-desktop-file - misspelled-closes-bug * checks/binaries.desc: + [NT] Update description of a tag now that debhelper properly strips static libraries. + [JW] Relax the regular expression used to used to recognize architecture-specific paths to avoid false positive arch-dependent-file-not-in-arch-specific-directory in Python debug packages. Thanks to Matthias Klose for the bug report. (Closes: #795275) * checks/changelog-files.{desc,pm}: + [BR] Detect misspelled Closes in changelog file (Closes: #798799) * checks/files.{desc,pm}: + [AB] Apply patch by Mattia Rizzolo to also check for files in /build and /tmp/buildd in dir-or-file-in-build-tree. (Closes: #797532) + [NT] Rewrite the description for dir-or-file-in-build-tree. Thanks to Chris Lamb and Jakub Wilk for pointing out issues with the original description. (Closes: #797466) + [BR] Detect pagead2. + [BR] Fix false positive privacy-breach-* for alternate link tag with type application/rdf+xml. (Closes: #799914). * checks/obsolete-sites.pm: + [AB] Stop at <>, $, or " when emitting URLs as tag parameter. * checks/menu-format.{desc,pm}: + [NT] Check for menu files used to provide a command also listed in a desktop file. This tag is based on the verdict in [CTTE #741573]. * checks/rules.desc: + [NT,JW] Improve the wording of one of the tags based on feedback from Chris Lamb. (Closes: #796815) * checks/scripts.desc: + [NT] Apply patch from Chris Lamb to fix a grammatical issue in a tag description. (Closes: #797555) * checks/shared-libs.pm: + [JW] Fix false positive dev-pkg-without-shlib-symlink for GCC runtime libraries. Thanks to Matthias Klose for the bug report. (Closes: #790739) * checks/systemd.desc: + [AB] Apply patch by Chris Lamb to update link to Debian systemd packaging reference. (Closes: #799082) * checks/watch-file.desc: + [JW] Fix typo. * data/binaries/embedded-libs: + [RG] Use a different string to detect the copies of freetype (Closes: #756722) + [RG] Allow ffmpeg to provide libav*. * data/debhelper/dh_{commands,packages}: + [AB] Apply patch by Stefano Rivera to update the home of dh_gstscancodecs. (Closes: #799467) * data/obsolete-sites/obsolete-sites: + [AB] Add patch by Hideki Yamane to add sourceforge.jp (Closes: #798736) + [AB] Sort file alphabetically. * data/spelling/corrections: + [JW] Add more corrections. * doc/lintian.xml: + [JW] Fix typo. * lib/Lintian/Collect.pm: + [JW] Fix typo. * lib/Lintian/Lab.pm: + [JW] Fix typo. * man/lintian.pod.in: + [JW] Fix typo. * private/refresh-debhelper-data: + [NT] Add a "This file is generated" header to all output files. lintian (2.5.37) unstable; urgency=medium * Summary of tag changes: + Added: - obsolete-url-in-packaging - renamed-tag * checks/application-not-library.{desc,pm}: + [AB] Downgrade libapp-perl-package-name to certainty possible. + [AB] Add libapp-options-perl to the package whitelist. * checks/binaries.pm: + [NT] Apply patch from Michael Stapelberg to ignore "no-relro" and "no-fortify-functions" issues in binaries built by the go compiler, as it does not support these features. (Closes: #795667) + [NT] Apply patch from Michael Stapelberg to a common false positive spelling mistake in "go" binaries. (Closes: #795614) + [NT] Apply patch from Guillem Jover to avoid some false positive shared-lib-without-dependency-information tags. (Closes: #798063) * checks/control-file.pm: + [AB] Apply patch by Christoph Biedl for relaxing dependency checks to allow versions with tilde. (Closes: #797951) * checks/copyright.pm: + [BR] Fix FP for copyright-without-copyright-notice tag allow public-domain. (Closes: #786867) * checks/cruft.pm: + [BR] Fix complex regular subexpression recursion limit. Strip comments is only done on first 8192 characters. (Closes: #795955). + [BR] Performance improvement check if line < 1024 before stripping comment. Classify to minified if line > 1024. + [BR] Fix false positive in missing-sources directory search path. * checks/debhelper.pm: + [NT] Unconditionally warn about dh_clean -k usage even when the debhelper compat is less than 7. * checks/description.pm: + [AB] Fix false positives in perl-module-name-not-mentioned-in-description. (Closes: #795779) * checks/fields.{desc,pm}: + [JW] Use "an" (instead of "a") before "HTTP". + [NT] Assert that -dbgsym packages are in the "debug" section. Thanks to Jean-Michel Vourgère for reporting the issue. (Closes: #796896) + [AB] Also emit package-relation-with-perl-module for build-* relations. Thanks gregor herrmann! (Closes: #798385) * checks/obsolete-sites.{desc,pm}: + [AB] New check with tag obsolete-url-in-packaging to check for URLs of hosting sites with frozen contents or (soon to be) closed hosting sites (Google Code, Gitorious, Freshmeat, etc.) inside the packaging. (Closes: #793503) * checks/scripts.pm: + [BR] Fix Unescaped left brace in regex. (Closes: #788926) * checks/shared-libs.{desc,pm}: + [NT] Accept an "activate-noawait ldconfig" trigger instead of explicit calls to "ldconfig". * checks/testsuite.pm: + [AB] Split up restrictions, features and tests by comma as well as space. (Closes: #798359, #792418) * checks/version-substvars.pm: + [BR] Fix Unescaped left brace in regex is deprecated line 68. * checks/watch.desc: + [BR] Upgrade upstream PGP keys location. (Closes: #796311) * data/binaries/embedded-libs: + [RG] Add another matching string for libidn * data/common/source-fields: + [AB] Add patch by Tianon Gravi to add go-import-path as known source field. (Closes: #798422) * data/fields/archive-sections: + [NT] Remove the "debugsym" section as "ddebs" will be put in the regular "debug" section. * data/fields/binary-fields: + [NT] Accept the "Build-Ids" field, which debhelper will start to include in debug packages. * data/scripts/maintainer-script-bad-command: + [AB] Fix maintainer-script-should-not-use-adduser-system-without-home false positive in cases where --system and --home are ordered differently than initially expected. (Closes: #797395) * data/spelling/corrections: + [JW] Add correction for "bellow". (This is an actual English word, but in technical texts, it's almost certainly a misspelling of "below".) + [JW] Add correction for "positve". * debian/control: + [AB] Update Vcs-Browser header to use https and cgit. * lib/Lintian/{Tags.pm,Tag/Override.pm}: + [BR] Support tag renaming. Warn about renamed tags. * t/runtests: + [BR] Apply patch from Chris Lamb improving documentation. (Closes: #796822). * t/scripts/01-critic/runner.pl: + [AB] Fix FTBFS in perlcritic runner with Test::Perl::Critic 1.03 * t/tests/application-not-library/debian/debian/control.in: + [AB] Add a false positive test for libapp-perl-package-name. * t/tests/rules-perl-makemaker/debian/debian/rules: + [NT] Pass DESTDIR to MakeMaker to avoid FTBFS with Perl 5.22. Thanks to Dominic Hargreaves for the report. (Closes: #797600) lintian (2.5.36.1) unstable; urgency=medium * checks/application-not-library.pm: + [NT] Fix invalid import. lintian (2.5.36) unstable; urgency=medium * Summary of tag changes: + Added: - application-in-library-section - dep5-file-paragraph-references-header-paragraph - libapp-perl-package-name - libmodule-build-perl-needs-to-be-in-build-depends - libmodule-build-tiny-perl-needs-to-be-in-build-depends - library-package-name-for-application - maintainer-script-may-use-dir_to_symlink_helper - mentions-deprecated-usr-lib-perl5-directory - package-installs-apt-preferences - package-installs-apt-sources - package-installs-ieee-data - package-installs-into-obsolete-dir - package-relation-with-perl-modules - perl-module-name-not-mentioned-in-description - privacy-breach-uses-embedded-file + Removed: - dep5-file-paragraph-reference-header-paragraph - package-install-apt-preferences - package-install-apt-sources - package-install-ieee-data - package-install-into-obsolete-dir - privacy-breach-may-use-debian-package * checks/application-not-library.{desc,pm}: + [AB] New experimental checks imported from pkg-perl-tools. * checks/changelog-file.pm: + [JW] Fix invalid comparison leading to false positive non-consecutive-debian-revision tags. (Closes: #794995) * checks/cruft.{desc,pm}: + [BR] Avoid a false positive for gfdl detection in krusader. Remove line number before running the detection. + [BR] Avoid another gfdl false positive in oidentd, sdlbasic, smbc package. + [AB] Add new tag mentions-deprecated-usr-lib-perl5-directory based on pkg-perl-tools' usr-lib-perl5-mentioned (multiple authors). + [NT] Replace "funny" dash with regular ASCII dash. + [AB] Fix grammar issue in license-problem-non-free-img-lenna desc. * checks/description.*: + [AB] Add new tag perl-module-name-not-mentioned-in-description based on pkg-perl-tools' no-module-name-in-description by Damyan Ivanov. * checks/fields.pm: + [AB] Add emacs23 to list of obsolete Emacs package names. + [AB] Also check for obsolete emacs package names with common suffixes (-gtk, -el, -nox, lucid) + [AB] Add an imaginary future emacs222 package to the test suite's dummy package to check for depends-on-old-emacs false positives. + [AB] Add libmodule-build(-tiny)-perl-needs-to-be-in-build-depends tags from pkg-perl-tools by gregor herrmann. + [AB] Add new tag package-relation-with-perl-modules based on pkg-perl-tools' depends-on-perl-modules by Damyan Ivanov. * checks/files.desc: + [BR] Correct a few typos. (Closes: #794953) + [BR] Rename files-privacybreach-may-use-debian-package to privacy-breach-uses-embedded-file. Thanks to Guillem Jover for the report. * checks/scripts.desc: + [BR] Detect suspicious use of ln -s that could be replaced by dpkg-maintscript-helper. * checks/systemd.desc: + [NT] Replace a wide-character by spelling out "does not". * data/files/privacy-breaker-websites: + [BR] Detect libjs-bootstrap as privacy-breach-uses-embedded-file + [BR] Improve detection of google plus. + [BR] Improve detection of jquery modules. + [BR] Detect doxygen logo. + [BR] Detect doubleclick.net * debian/compat: + [BR] Use compat version 9. * debian/control: + [AB] Add myself to Uploaders. + [AB] Add Breaks against pkg-perl-tools << 0.23 due to some tags moved over to lintian proper. * lib/Lintian/{CheckScript,CollScript,Profile}.pm: + [NT] Read control files as proper UTF-8 character streams rather than byte streams. (Closes: #793164) * lib/Lintian/Collect.pm: + [AB] Remove outdated note about automatically computed defaults for "$info->field('source')". * lib/Lintian/Util.pm: + [NT] Add read_dpkg_control_utf8 that reads the file as UTF-8 characters (as it ought to be) rather than a byte stream. * private/refresh-fonts-data: + [NT] Prune some duplicates from the generated font file. lintian (2.5.35) unstable; urgency=medium * Summary of tag changes: + Added: - non-consecutive-debian-revision - package-uses-experimental-debhelper-compat-version - package-uses-old-debhelper-compat-version * checks/binaries.pm: + [NT] Apply patch from Sebastian Andrzej Siewior to inhibit binary-file-built-without-LFS-support tags for binaries that contains the "offending" LFS symbol. These tend to come from gnulib and be LFS compliant. Thanks to Guillem Jover for the report. (Closes: #787853) * checks/changelog-file.{desc,pm}: + [BR] Detect non consecutive debian revision. (Closes: #789820) * checks/control-file.{desc,pm}: + [BR] In order to ease the multiarch-support removal the severity of pre-depends-directly-on-multiarch-support tag is raised to important. Thanks to Helmut Grohne for the reminder. + [BR] pre-depends-directly-on-multiarch-support does not need debhelper for being raised. Suggest to build-depends on debhelper >= 9. * checks/debhelper.{desc,pm}: + [BR] Use data file for pedantic warning on debhelper depends version. + [BR] Detect not recommended and experimental debhelper version. * checks/fields.desc: + [JW] Fix spelling of the word "indicate". * checks/scripts.desc: + [BR] Document why adduser --no-create-home is a bad idea for system user. (Closes: #793613). * data/cruft/warn-file-type: + [BR] Detect pascal resource file source. (Closes: #793908). * data/files/fonts: + [BR] Refresh this file. (Closes: #794196) * data/scripts/maintainer-script-bad-command: + [BR] Detect more case of maintainer-script-should-not-use-adduser-system-without-home. + [BR] Print offending line for maintainer-script-should-not-use-adduser-system-without-home. * data/spelling/corrections*: + [JW] Fix correction for "acknowldegement". + [JW] Document that the lists should be sorted. + [JW] Re-sort the correction lists and remove duplicates. + [JW] Add more corrections. + [BR] Add existant||existent correction. * mail-templates/license-problem-*: + [JW] Make the files end with newline character. + [JW] Fix typo in template. * private/refresh-manual-refs: + [JW] Update the list of required packages. * t/scripts/*.t: + [JW] Make all the scripts executable. * t/tests/changelog-file-strange-date/*: + [BR] Create a test with error syntax in changelog date. Run only with dpkg below 1.18.2. (Closes: #794674). * t/tests/binaries-general/*: + [BR] Fix a test suite failure with gcc5 by using compat 9, and removing gets() that does not exist with C11 (used by default by gcc5). (Closes: #794505). * t/tests/legacy-binary/debian/debian/rules: + [BR] Improve clean rule, thanks to Jakub Wilk. lintian (2.5.34) unstable; urgency=medium * Summary of tag changes: + Added: - unstripped-static-library * checks/binaries.{desc,pm}: + [NT] Apply patch from Guillem Jover to improve the tag description of the LFS tag. (Closes: #792167) + [NT] Detect unstripped static libraries (as an experimental tag). * checks/cruft.pm: + [NT] Avoid svn-conflict-file tag for ".r0" files, since there cannot be a conflict involving revision 0. Thanks to Andreas Beckmann for the report. (Closes: #793068) + [BR] Detect pdf, ps, and eps lenna file. * checks/files.{desc,pm}: + [BR] Fix detection of sources.list file. (Closes: #792237) * checks/systemd.pm: + [NT] Apply patches from Felipe Sateler to ignore known masked init.d scripts. (Closes: #792501) * commands/info -> info.pm: + [NT] Renamed info to info.pm to remove some boilerplate code. + [NT] Forbid late --user-dirs and --include-dir options. * frontend/lintian: + [NT] Forbid late --user-dirs and --include-dir options. + [NT] Remove the following obsolete command line options: --root, --all, --binary, --source, --udeb. They are no longer useful. * lib/Lintian/Collect{,/*}.pm: + [NT] Add a shared memory cache that can be used to reduce memory consumption a bit for sharable objects. (Closes: #715035) * lib/Lintian/Data.pm: + [NT] Remove references to LINTIAN_ROOT as Lintian::Data no longer uses it. * lib/Lintian/Path.pm: + [NT] Rework some implementation details to reduce memory consumption slightly. + [NT] The undocumented "type" and "time" methods have been removed from the API. + [NT] The "uid" and "gid" methods now return 0 rather than undef when numeric ownership is not collected. * reporting/templates: + [NT] Remove (uses of) the "invisible-anchor" css class as invisible (display: none) elements cannot be used as anchors. lintian (2.5.33) unstable; urgency=medium * Summary of tag changes: + Added: - systemd-no-service-for-init-rcS-script - trailing-slash-for-dpkg-maintscript-helper-symlink_to_dir + Removed: - binary-file-compressed-with-upx * checks/binaries.pm: + [NT] Ignore "v5" suffixes in package names when matching SONAMES with package names. The "v5" suffix is the recommended suffix for packages affected by the GCC-5 libstc++6 C11 ABI breakage. + [NT] Drop binary-file-compressed-with-upx as it was not working. (Closes: #790932) * checks/cruft.pm: + [BR] Increase windows size to 16384 bytes. Gain about 10% in cruft. * checks/description.desc: + [NT] Clarify that the empty-line control statement " ." permits no other characters on the same line. Thanks to Riley Baird for the report. (Closes: #789577) * checks/files.desc: + [JW, NT] Clarify that the ISO 639-1 language codes are preferred to the ISO 639-2 variant. Thanks to Jonas Smedegaard for the report. (Closes: #790693) * checks/infofiles.pm: + [NT] Fix use of undefined variable in some cases. * checks/scripts.{desc,pm}: + [BR] Detects problem with dpkg-maintscript-helper symlink_to_dir. * checks/systemd.{desc,pm}: + [NT] Apply patches from Felipe Sateler to refactor the systemd checks. Notably this also fixes some duplicate tags. + [NT] Apply patch from Felipe Sateler to warn about rcS init scripts without a native systemd unit file. (Closes: #790323) * checks/source-copyright.pm: + [NT] Fix use of undefined variable in some cases. + [NT] Avoid triggering a tag for a DEP-5 paragraph referencing the license of the header paragraph when said paragraph is *the* header paragraph. (Closes: #769818) * data/cruft/non-free-files: + [BR] Add a few lenna image. Thanks to Norbert Preining <preining@logic.at> (Closes: #790915). * data/spelling/corrections-multiword: + [JW] Correct spelling for "GNU Public Licence". (Closes: #790369) * frontend/lintian: + [JW, NT] Add "--hide-overrides" option to contrast the "--show-overrides" option. (Closes: #770643) * helpers/coll/objdump-info-helper: + [NT] Fix use of undefined variable in some cases. + [JW,NT] Gracefully cope with upstreams storing poems in valid ar archives with the file extension ".a" and possibly also corrupt ar files. (Closes: #790493) + [NT] Remove slow "head + grep" pipeline on all ELF binaries, which is no longer used. * helpers/coll/strings-helper: + [NT] Avoid an unnecessary overhead in using L::Command's spawn+reap. In some cases, this can reduce the runtime of this command by ~50%. * lib/Lintian/Check.pm: + [NT] Optimise out some calls to Lintian::Data, which in a few cases adds up to a couple of seconds in total runtime. * profiles/debian/ftp-master-auto-reject.profile: + [NT] Drop binary-file-compressed-with-upx as it no longer exists. * reporting/harness: + [NT] Add a --[no-]generate-reports option as alias of the -r mode. The option can now be used together with "-i", "-f" or "-c" to control whether the reports should generated at the end of the run. Without any of these, harness will only generate reports like it used to do. * reporting/templates/*.tmpl: + [NT] Change from XHTML 1.1 to HTML5. lintian (2.5.32) unstable; urgency=medium * Summary of tag changes: + Added: - changelog-empty-entry - dh-manual-sequence-control-obsolete - license-problem-non-free-img-lenna - missing-intermediate-directory - package-contains-cmake-private-file - package-contains-mime-file-outside-package-dir - package-install-apt-preferences - package-install-apt-sources - package-install-ieee-data - service-key-has-whitespace - source-contains-autogenerated-gperf-data - source-contains-data-from-ieee-data-oui-db - static-library-has-unneeded-section + Removed: - hyphen-used-as-minus-sign * checks/*.pm: + [NT] Rewrite to handle new check_spelling{,_picky} * checks/binaries.pm: + [NT] Also apply the binary-has-unneeded-section check on static libs. (See #662998) * checks/cruft.{desc,pm}: + [BR] Detect non free lenna file based on filename and filetype. (Closes: #771191). + [BR] Avoid a false positive for autogenerated index in dx package for source-is-missing. * checks/changes-file.{desc,pm}: + [NT] Downgrade backports-changes-missing to a wishlist (I) tag. Thanks to Vincent Cheng for the report. (Closes: #785084) * checks/changelog-file.{desc,pm}: + [BR] Detect empty changelog entry. (Closes: #763457) * checks/debhelper.{desc,pm}: + [NT] Warn about using dh --{until,before,after,remaining} as these are deprecated and have been since debhelper/8.9.4. + [NT] Permit the use of dh-exec-install in ".manpages" as well since dh-exec now advertises this as acceptable. Thanks to Andreas Henriksson for reporting this. (Closes: #788796) * checks/fields.pm: + [BR] Detect double comma in uploaders fields. (Closes: #783628). * checks/files.{desc,pm}: + [NT] Apply patch from Tomasz Buchert to avoid false-positive package-contains-timestamped-gzip in some cases. (Closes: #762105) + [BR] Detects // tricks in privacy breach test. (Closes: #786362) + [BR] Apply patch from Lisandro Damián Nicanor Pérez Meyer for detecting private cmake file. (Closes: #785329). + [BR] Detect package shipping apt_preferences(5) file. (Closes: #786533). + [BR] Detect package shipping oui or iab ieee database. (Closes: #785662). + [NT] Add a check for packages without intermediate directories. + [BR] Avoid a false positive in jsom for defaultpresets.xml from openmapstreet. + [NT] Tweak the "extra-license-file" check to avoid some common false-positives. + [BR] Raise severity of package-contains-timestamped-gzip. (Closes: #778328). + [BR] Detect package shipping apt_sources(5) file. (Closes: #646965). + [BR] Warn about files installed in /usr/share/mime/ other than in packages/. (Closes: #761649). * checks/java.pm: + [NT] Fix "off-by-one" in the check for the maximum permitted Java major version. * checks/manpages.{desc,pm}: + [NT] Retire the hyphen-used-as-minus-sign tag as upstream now renders both "-" and "\-" as HYPHEN-MINUS. (Closes: #785353) * checks/po-debconf.pm: + [JW] Use TMPDIR rather than TEMPDIR for temporary files. (Closes: #787930) * checks/source-copyright.pm: + [NT] Apply patch from Evgeni Golov to permit multiple different "public-domain licenses", as they are expected to describe why the affected files are in public domain. (Closes: #787248) * checks/systemd.{desc,pm}: + [NT] Apply patch from Felipe Sateler to mark service files in /usr/lib as invalid. (Closes: #788629) + [NT] Apply patch from Felipe Sateler to detect service files that use spaces around the = in the key definition. (Closes: #786421) * collection/{debfiles,doc-base-files,init.d,menu-files}{,.desc}: + [NT] Remove deprecated and unused collections. These were deprecated in 2.5.28. Note that debfiles was omitted in the deprecation list by mistake in the original 2.5.28 release. * collection/objdump-info: + [NT] Also analyse static libraries. * collection/unpacked: + [NT] Apply patch from Tomasz Buchert to extract the full time in UTC. * commands/reporting-sync-state.pm: + [NT] Read mirror files as UTF-8 files to avoid mojibake in maintainer names. Once again, thanks to Andreas Rönnquist for the report. * commands/spellintian.pm: + [JW,NT] Import Jakub Wilk's spellintian tool with minor modifications. * data/binaries/embedded-libs: + [BR] Detect embedded ieee-data package. * data/cruft/non-free-license: + [BR] Detect autogenerated gperf data. (Closes: #762179). + [BR] Detect ieee oui db in source files. * data/cruft/missing-dir-search-path: + [BR] Fix a false positive in fspy for source-is-missing. * data/cruft/warn-file-type: + [BR] Fix a false positive source-is-missing by checking -nc.js suffix. + [BR] Fix a false positive source-is-missing in zivot package by adding .e as binary suffix. + [BR] Fix a false positive source-is-missing by adding yorick source file as source. + [BR] Fix a false positive source-is-missing in haskell-pretty-show by adding -src.js suffix. + [BR] Fix a false positive source-is-missing in iceweasel by adding -prod.js suffix. * data/debhelper/*: + [NT] Refresh against unstable to pick up the rename of libaqbanking-dev. Thanks to Micha Lenk for the reminder. (Closes: #787937) * data/debhelper/filename-config-files: + [NT] Add "links" file. * data/fields/archive-sections: + [NT] Pre-emptively support the "debugsym" section, which is expected to be used by debhelper for "ddebs". * data/files/js-libraries: + [NT] Apply patch from Jean-Michael Vourgère to detect embedded versions of libjs-raphael. (Closes: #788839) * data/files/privacy-breaker-websites: + [BR] Detect mascot as logos. * data/java/constants: + [NT] Accept Java7 class files without warning as OpenJDK-7 is now the default implementation. Thanks to Markus Koschany for the report. (Closes: #786895) * debian/changelog: + [NT] Add missing list of new / removed tags to the entry for the previous release. + [NT] Add missing "debfiles" in the list of collections deprecated in 2.5.28. It was deprecated in that release despite the omission. * debian/copyright: + [NT] Document new text case being under the Expat license. * debian/{lintian.links,manpages}: + [NT] Install spellintian in PATH and install its manpage. Thanks to Paul Wise for the suggestion. (Closes: #767867) * debian/rules: + [NT] Generate the spellintian manpage during build. * frontend/spellintian: + [NT] Add symlink to dplint. * helpers/coll/objdump-info-helper: + [NT] Collect readelf output from static libraries. + [NT] Fix bug that caused lintian to ignore the up to 10 valid named sections. * lib/Lintian/Check.pm: + [NT] Rewrite check_spelling{,_picky} with a new interface, which is better suited for additional purposes than just emitting Lintian tags. + [JW, NT] Normalise spaces a bit better in check_spelling to catch some "multi-word" misspellings, where said words are not on the same line. (Closes: #763456) * lib/Lintian/Collect/Binary.pm: + [JW, NT] Make is_pkg_class case-insensitive to avoid some false-positive "empty-binary-package" warnings. (Closes: #789151) + [NT] Make data from static libraries available. * lib/Lintian/Collect/Package.pm: + [NT] Create "faux" Lintian::Path entries for missing intermediate directories. This avoids a crash and made some checks work correctly even in the absence of such immediate directories. (Closes: LP: #1351380) * lib/Lintian/Path.pm: + [NT] Apply patch from Tomasz Buchert to add "timestamp" method. + [NT] Add "faux" method that returns at truth value for path entries, which Lintian has created from templates to fully connect all path entries in the package. * lib/Lintian/Tag/Info.pm: + [NT] Expand BTS links using https rather than http. * lib/Test/Lintian.pm: + [NT] Output spelling mistakes as "diag()" messages now. * mail-templates/source-is-missing: + [BR] Apply patch from Holger Levsen improving language. * profiles/debian/ftp-master-auto-reject.profile: + [NT] Refresh against current rule set. * t/scripts/spellintian.t: + [JW,NT] Import spellintian test case. lintian (2.5.31) unstable; urgency=medium * Summary of tag changes: + Added: - bad-intended-distribution - dbus-policy-excessively-broad - debian-pycompat-is-obsolete - debian-watch-file-accesses-pypi-over-http - debian-watch-file-unsupported-pypi-url - dep5-copyright-license-name-not-unique - dep5-file-paragraph-reference-header-paragraph - file-should-not-be-compressed - multiline-architecture-field - python-version-current-is-deprecated - uses-no-compression-for-control-tarball - uses-no-compression-for-data-tarball - xs-testsuite-header-in-debian-control + Removed: - bad-intended-distibution - compressed-objects.inv * checks/binaries.pm: + [BR] Do not tag with library-in-debug-or-profile-should-not-be-stripped when file add "not stripped, too many notes" to its output. Thanks to Jakub Wilk. (Closes: #775760). + [AB] Ignore tEH and tEh for spelling-error-in-binary. (Closes: #782902; bug report and patch by Tomasz Buchert, thanks!) * checks/changelog-file.{desc,pm}: + [BR] Correct a typo on tag name and do not raise bad-intended-distribution if distribution is still set to UNRELEASED. (Closes: #765344). + [NT] Apply patches from Ben Finney to permit quotes around the distribution name in the "to unstable" entries. (Closes: #784012) * checks/control-file.{desc,pm}: + [BR] Apply patch from Johannes Schauer in order to detect obsolete XS-Testsuite header. (Closes: #770068). + [AB] New check for multiline architecture fields in debian/control. (Closes: #780474) + [NT] Apply patch from Guillem Jover to update the description of the xs-testsuite-header-in-debian-control tag. (Closes: #781397) * checks/copyright-file.pm: + [NT] Permit the use of "pkg:arch" dependencies when packages use symlinked doc-dirs. * checks/cruft.{desc,pm}: + [NT] Import "d/pycompat is deprecated" check from lintian4python. * checks/dbus.{desc,pm}: + [NT] Apply patch series from Simon McVittie to improve the dbus check. In particular, detect dbus policy files that exposes CVE-2014-8148 and CVE-2014-8156. (Closes: #776480) * checks/deb-format.{desc,pm}: + [BR] Support all format described in deb(5) but manually reject until dak is ready. * checks/debian-source-dir.pm: + [NT] Fix regression where "missing-debian-source-format" was not emitted if "debian/source" was missing. Thanks to Jean-Michel Nirgal Vourgère for finding this bug. (Closes: #781235) * checks/description.pm: + [NT] Allow debug packages without an extended description. * checks/fields.{desc,pm}: + [BR] Add reference to build-depends-on-metapackage (Closes: #767107). + [BR] Check source version (Closes: #749103). + [NT] Import check of "Python-version: current" being deprecated from lintian4python. + [AB] Remove "dev" from list of suffixes to trigger rc-version-greater-than-expected-version (Closes: #732246) + [AB] Recognize user@host:path.git URIs in Vcs-Git (Closes: #778323) * checks/files.{desc,pm}: + [BR] Rename compressed-objects.inv to file-should-not-be-compressed and use it for doxygen map.gz. (Closes: #751949). + [NT] Merge patch from Nicolas Boulenguez to remove some partially redundant code. (Closes: #784277) + [NT] Allow "-dbgsym" as an alternative name to "-dbg" for packages containing debug symbols. * checks/init.d.desc: + [BR] Add reference to #DEBHELPER# token for script-in-etc-init.d-not-registered-via-update-rc.d. (Closes: #775467). * checks/patch-systems.pm: + [NT] Avoid crashing on debian/patches being a file. (Closes: #778556) * checks/po-debconf.pm: + [NT] Avoid errors from intltool-update. (Closes: #778558) * checks/script.{desc,pm}: + [BR] Fix some false negatives for command-with-path-in-maintainer-script tag. (Closes: #769845). * checks/shared-libs.{desc,pm}: + [NT] Apply patch from Guillem Jover to recognise the "Ignore-Blacklist-Groups" meta field in symbols files. (Closes: #781396) * checks/source-copyright.{desc,pm}: + [BR] Fix a false positive for missing-license-paragraph-in-dep5-copyright tag. Emit a new specific tag for references to the header paragraph as a license paragraph. (Closes: #766118). + [BR] Detect if license short name are unique. + [BR] Avoid false positive license-problem-undefined-license for - in short license. + [BR] Warn when using reference to header license. (related to bug #769818). * checks/symlinks.desc: + [AB] package-contains-broken-symlink: Mention in the tag description that only direct dependencies built from the same source package can be checked by lintian. (Closes: #776535) * checks/watch-file.{desc,pm}: + [NT] Check for watch files accessing PyPI over HTTP instead of HTTPS. This check has been imported from lintian4python (with a different tag name). + [AB] Check for watch files accessing unsupported PyPI URLs (Check written by James McCoy and Ben Finney; Closes: #776267) * collection/strings: + [NT] Pass "-a" to strings to avoid possible security issues in strings. * commands/reporting-{lintian-harness,sync-state}: + [NT] New files (internal commands for the reporting framework). * data/binaries/arch-regex: + [NT] Add arm64 and ppc64el regex. + [NT] Correct armel and armhf regex to cope with statically linked binaries. (Closes: #768884) * data/binaries/embedded-libs: + [RG] Do not warn about libpng1.6 embedding libpng + [RG] Add a new string to detect embedders of libpng * data/changes-file/known-dists: + [ADB] Add "stretch". * data/cruft/rfc-whitelist: + [BR] Whitelist dual licensed vorbis rfc5215. * data/debhelper/dh_addons-manual: + [BR] Apply patch from Jean-Michel Nirgal Vourgère for detecting missing-build-dependency-for-dh-addon apache2. (Closes: #778820). * data/fields/binary-fields: + [AB] Add ghc-package (Source: /usr/share/cdbs/1/class/hlibrary.mk) + [AB] Add gstreamer-* fields as generated by dh_gstscancodecs + [AB] Add lua-versions as mandated by the Debian Lua Policy * data/fields/perl-provides: + [NT] Update perl-provides for perl 5.20.2. * data/files/js-libraries: + [AB] Use "tinymce" instead of "tinymce2?" (Closes: #783327) * data/files/obsolete-paths: + [BR] Add /etc/bash_completion.d (Closes: #776954). * data/files/privacy-breaker-websites: + [BR] Add specific test for privacy breach with modernizr.js (Closes: #769679). + [BR] Add /logos/ to privacy-breach-logo. + [BR] Add specific test for libjs-openlayer. + [BR] Detect twitter logo. + [BR] Detect libjs-jquery-flot. + [BR] Detect libjs-jquery-mobile. + [BR] Detect beta of libjs-query. + [BR] Detect libjs-prototype. * data/spelling/corrections: + [BR] Add portugese||Portuguese. (Closes: #764015). * data/spelling/corrections-multiword: + [BR] Add "allow one to" and "permit one to". (Closes: #756128). * debian/control: + [NT] Recommend dpkg (>= 1.17.14) for the --ctrl-tarfile option in dpkg-deb. Lintian relies on it to support (u)deb files without a gzip compressed control.tar file. + [AB] Promote xz-utils from Suggests to Depends. (Closes: #774729) * debian/copyright: + [AB] Update copyright years. * debian/rules: + [NT] Add CLEAN_TEST_WORK_DIR to be able to control whether the test artifact directory should be cleaned during a call to "debian/rules clean" (defaulting to do the clean). * doc/CREDITS: + [AB] Add contributors from 2014 and 2015. * frontend/lintian: + [NT] Produce a better error message for lintian detects that a check has a dependency on an unknown collection. * helpers/coll/objdump-info-helper: + [NT] Apply patch from Matt Kraai that adjusts the regex used for parsing readelf output. Thanks to Martin Pitt for reporting the issues. (Closes: #771054) * lib/Lintian/Collect/Binary.pm: + [NT] Add "debug" class for "is_pkg_class". This uses the package name to guess if the package is expected to contain debug symbols. * lib/Lintian/Command.pm: + [NT] Use croak() rather than L::Util's fail() on errors. The issues are generally not "internal errors". * lib/Lintian/Internal/FrontendUtil.pm: + [NT] Work around a bug in autodie, where an fdopen of a file-descriptor always failed with "bad file descriptor". * lib/Lintian/Lab.pm: + [NT] Null fields extra metadata fields in the lab storage that are no longer used. These were previously used by the reporting framework. + [NT] Automatically correct lab metadata, when the lab discovers an entry does not exist. Any remains of the entry will be removed as well. Previously, the lab would just throw an error and require a manual correction of the lab. * lib/Lintian/Reporting/ResourceManager.pm: + [NT] Only preserve the last extension of the installed resource. Previously it would keep all "extensions", including long parts of the original name if it happened to contain a period. * lib/Lintian/Util.pm: + [NT] Prefer dpkg-deb --ctrl-tarfile to "ar p" when dpkg is recent enough. + [NT] Stricten the permitted whitespace at the end of GPG marker lines. This is the same issue as CVE-2015-0840, except lintian never attempted to validate the signature. + [NT] Explicitly use YAML::XS for reading and writing YAML files. YAML::Any does not specify an interface for reliably read YAML files in UTF-8 encoding leading to "mojibake" in some cases. Thanks to Andreas Rönnquist for reporting the issue. (Closes: #784639) * profiles/ubuntu/main.profile: + [BR] Exclude no-human-maintainers (Closes: #769036). * reporting/config: + [NT] Include and briefly document new configuration options. * reporting/{harness,html_reports}: + [NT] Rewrite harness and remove the hard dependency on a functional permanent laboratory in the reporting framework. - The framework now relies on the "harness state cache" (a YAML file), which can be updated atomically. - The harness framework now avoids stat(2)ing all artefacts on the mirror just to check if they are unchanged. - The harness frontends use less memory and now releases most of it before calling html_reports. This should reduce the peak memory requirements considerably for the html_reports part of the run. * reporting/{html_reports,templates/*}: + [NT] Reorder the datastructures shared with templates for better data sharing. This reduces the memory consumption of html_reports by ~25% on lintian.d.o. * reporting/html_reports: + [NT] Templates are now always read and (their output) written in the UTF-8 encoding. + [NT] Stop reading $statistics_file from the config file. * t: + [NT] Apply patch from Matt Kraai to fix test case on i386. (Closes: #771113) * t/scripts/pod-spelling.t: + [AB] Hardcode aspell as spelling command since Test::Spelling prefers spell over aspell if installed, too. This avoids having to add a "Build-Conflicts: spell". * t/tests/files-embedded/: + [AB] Add test case for #783327. lintian (2.5.30) unstable; urgency=medium The "welcome Axel Beckert!" release. * Summary of tag changes: + Removed: - deprecated-kdelnk-file * checks/menu-format.{desc,pm}: + [NT] Retire check for "kdelnk" files. * collection/unpacked: + [NT] Correct handling of files with 2 or more consecutive backslashes. * debian/control: + [AB] Add a Homepage header pointing to https://lintian.debian.org/ * debian/copyright: + [AB] Add myself to debian/copyright. * debian/rules: + [NT] Ensure that po4a/*.cfg are always up to date during releases builds. * helpers/coll/strings-helper: + [NT] Filter out duplicate strings. This applies to the majority of all ELF binaries (except ones with very exotic file names with glyphs like ":"). * lib/Lintian/Internal/FrontendUtil.pm: + [AB] Don't clean HOME and some XDG_* variables when sanitizing the environment. (Closes: #766737) * t: + [JW,NT] Apply patch from Johannes Schauer to fix FTBFS with newer dpkg that have stricter checking of build-profiles. lintian (2.5.29) unstable; urgency=medium * Summary of tag changes: + Added: - dbus-policy-at-console - dbus-policy-without-send-destination - dbus-session-service-wrong-name - dbus-system-service-wrong-name - invalid-profile-name-in-build-profiles-field - invalid-profile-name-in-source-relation - invalid-restriction-formula-in-build-profiles-field - restriction-formula-with-debhelper-with-conflicting-version - restriction-formula-with-debhelper-without-debhelper-version - restriction-formula-with-versioned-dpkg-dev-conflict - restriction-formula-without-versioned-dpkg-dev-dependency + Removed: - invalid-restriction-label-in-source-relation - invalid-restriction-namespace-in-source-relation - invalid-restriction-term-in-source-relation - restriction-list-with-debhelper-with-conflicting-debhelper-version - restriction-list-with-debhelper-without-debhelper-version - restriction-list-with-versioned-dpkg-dev-conflict - restriction-list-without-versioned-dpkg-dev-dependency - stageX-profile-used-but-no-binary-package-dropped * checks/{control-file,fields}.{desc,pm}: + [NT] Apply patch from Johannes Schauer to support the new build profile syntax. (Closes: #763773) * checks/dbus.{desc,pm}: + [NT] New check by Simon McVittie to discover some dbus related issues. (Closes: #762609) * checks/nmu.pm: + [JW] Avoid chopping off trailing ">" in emails in the canonicalize subroutine. (Closes: #766468) * checks/rules.pm: + [JW,NT] Fix undef warning for packages with empty an empty d/rules file. (Closes: #766033) * checks/source-copyright.pm: + [NT] Apply patch from Johannes Schauer to optimise the check. + [NT] Optimise for "dir/*" wildcards in DEP-5 copyright files. * checks/watch-file.pm: + [NT] Fix undef warning with some watch files. Thanks to Axel Beckert for reporting the bug. (Closes: #765995) * collection/{bin-pkg-control,unpacked}: + [NT] Pass "-m" to tar to make it avoid "correcting" the timestamp of the extracted files. Lintian does not need it for correctness, so it can make tar save a few syscalls here. + [NT] Explicitly pass tar options to make it extract files as the current user and applying the users umask. This is mostly to be explicit about how things are extracted. * collection/file-info: + [NT] Stop collecting file-info for "non-files". The output is not used and often trivial / predictable from other data input already available. * collection/strings: + [NT] Stop creating "elf-index" file as nothing uses it. * collection/unpacked: + [NT] Gracefully handle when symlink targets contains newlines. Thanks to Faheem Mitha for reporting the bug. (Closes: #765311) * frontend/lintian: + [NT] Aggressively reset the environment a well-defined state at start up. Only ENV variables starting with "LINTIAN_" (and a select few well known variables) are preserved. + [NT] Runtime for collections and checks now only requires a single --debug option. Lintian will now also show runtime for other things (e.g. total runtimes). + [NT] Add --perf-debug and --perf-output options to enable logging for performance data. This is mostly intended to allow collecting performance data from archive-wide runs. + [NT] Hide some options in the default output for --help. These can now be shown with "--help=extended". + [NT] Add a new "Developer/special usage options" section in the --help output for some options (e.g. --debug). This section is hidden by default. * lib/Lintian/Relation.pm: + [NT] Unparsable entries are now included in relation objects rather than being silently discarded. * lib/Lintian/Util.pm: + [NT] Purge even more ENV variables in clean_env. + [NT] Add "pipe_tee" subroutine for tee'ing data from one input file descriptors to one or more output file descriptors. * man/lintian.pod.in: + [NT] Document the performance logging options. + [NT] Add a new "Developer/special usage options" section in the --help output for some options (e.g. --debug). * private/generate-html-docs: + [NT] Add doctype and encoding to generated files. * reporting/harness: + [NT] Add missing import. * reporting/html_reports: + [NT] Correct the command line in the creation of the lintian.log.gz. * reporting/{html_reports,templates/*}: + [NT] Correct the generated HTML, which was invalid in some cases. * reporting/templates/{head,lintian.css}.tmpl: + [NT] Define a default "viewport". This slightly improves the output on some mobile devices. + [NT] Add some special cases for "smaller" viewports in the style sheet. * reporting/templates/maintainer.tmpl: + [NT] Correct name of variable to avoid using an undefined variable. * vendors/ubuntu/main/data/changes-file/known-dists: + [NT] Add "vivid" per request of Iain Lane. lintian (2.5.28) unstable; urgency=medium * Summary of tag changes: + Added: - license-problem-cc-by-nc-sa * checks/*: + [NT] Remove all uses of "control", "debfiles" and "unpacked". * checks/*: + [NT] Remove all uses of the "doc-base-files", "init.d" and "menu-files" collections. * checks/changes-file.pm: + [NT] Add "-lts" as common suffix for distribution, which makes "squeeze-lts" a valid distribution. Thanks to Holger Levsen for the report. (Closes: #763339) * checks/description.pm: + [SL] show the actual description when it is too short. * checks/files.pm: + [NT] Only flag the Doxygen generated "md5" file as useless. Thanks to Mathieu Malaterre for reporting. (Closes: #762660) * checks/patch-systems.pm: + [NT] Rewrite using index rather than debfiles to analyse the package. A side-effect of that means that Lintian can now check patches stored in the upstream part of the packages. (Closes: #563773) * checks/po-debconf.pm: + [NT] Avoid writing test.pot to the unpacked package. (Closes: #699022) * checks/testsuite.pm: + [NT] Recognise autopkgtest-pkg-{perl,ruby} values for the "Testsuite" field. Extended validation is not implemented though. Thanks to Niko Tyni for reporting the issue. (Closes: #762177) * collection/*: + [NT] Remove all uses of "debfiles" and "control". * collection/{debfiles,doc-base-files,init.d,menu-files}{,.desc}: + [NT] Deprecated, will be removed in a future release. They will now be now auto-removed at the end of the processing if they have been collected previously. * data/*: + [NT] Refresh some of the data against unstable. * data/cruft/non-free-license: + [BR] Detect cc-by-nc-sa license. (Closes: #749768). * data/standards-version/release-dates: + [NT] Add 3.9.6. (Closes: #762460) * debian/control: + [NT] Bump Standards-Versions to 3.9.6 - no changes required. * debian/dirs: + [NT] Stop installing /var/spool/lintian * debian/lintian.install: + [NT] Install Lintian::Tutorial POD documents into /usr/share/perl5. (Closes: #761930) * debian/postinst: + [NT] Remove empty Lintian labs in /var/spool/lintian on upgrade. * debian/postrm: + [NT] Remove the "changes" folder when purging the Lintian lab in /var/spool/lintian. * debian/source/lintian-overrides: + [NT] Remove obsolete lintian overrides. * doc/tutorial/Lintian/Tutorial/WritingChecks.pod: + [NT] Mention "safe_qx" as alternative to qx/`` in the tutorial. * lib/Lintian/Collect{,/*}.pm: + [NT] Deprecate the use of "control", "debfiles" and "unpacked". Consumers are recommended to use index_resolved_path and control_index_resolved_path instead. + [NT] Remove all uses of debfiles (both the method and the collection). All methods (except "debfiles") now depend on "unpacked" instead. + [NT] Remove all uses of the "control" and the "unpacked" method. * lib/Lintian/Command.pm: + [NT] Add support for running a sub in the child before it calls exec. + [NT] Add support for shell-like (e.g. &2) redirects of stdout and stderr. + [NT] Add safe_qx sub for replacing qx() that supports most of the features of spawn(). * lib/Lintian/Path.pm: + [NT] Add support for fetching and (where it makes sense) opening the underlying file system object. It also adds a few minor safety guards to common issues with symlinks. (Closes: #698930) * lib/Lintian/Path/FSInfo.pm: + [NT] New file. * reporting/*: + [NT] Avoid forking a shell when invoking commands. This has the side effect of allowing some paths from the configuration to contain spaces (among other), where it previously would not work. * reporting/templates/maintainer.tmpl: + [NT] Use https:// in links to other resources/sites and add link to tracker.debian.org. lintian (2.5.27) unstable; urgency=medium * Summary of tag changes: + Added: - bad-exception-format-in-dep5-copyright - changed-by-address-is-root-user - exclusive-runtime-tests-field - maintainer-address-is-root-user - source-contains-prebuilt-doxygen-documentation - uploader-address-is-root-user - useless-autogenerated-doxygen-file * checks/cruft.pm: + [BR] Fix a few false positives is for javascript source-is-missing. + [BR] Detect prebuilt doxygen documentation. * checks/fields.pm: + [JW] Fix incorrectly anchored regexps. (Closes: #760987) * checks/files.pm: + [BR] Detect useless doxygen generated file. (Closes: #751945) * checks/manpages.desc: + [BR] Improve documentation of manpage-has-errors-from-man. (Closes: #757068). * checks/menu-format.pm: + [BR] Fix a false positive in desktop-mime-but-no-exec-code. (Closes: #760677). * checks/source-copyright.pm: + [BR] Fix false positive for space-in-std-shortname-in-dep5-copyright with alternative licenses. (Closes: #760642). + [BR] Fix false positive for with exception syntax. + [BR] Fix false positive of wildcard-matches-nothing-in-dep5-copyright. (Closes: 761125) * checks/testsuite.{desc,pm}: + [BR] Fix false positive missing-runtime-tests-field. (Closes: #760714). + [BR] Print line in case of error. * data/fields/metapackages: + [BR] Add qt4-default and qt5-default as metapackage. (Closes: #756158). * lib/Lintian/Check.pm: + [BR] Detect package being built as user root. (Closes: #612583). lintian (2.5.26) unstable; urgency=medium * Summary of tag changes: + Added: - backports-changes-missing - backports-upload-has-incorrect-version-number - debian-upstream-obsolete-path - description-is-pkg-name - description-too-short - desktop-mime-but-no-exec-code - empty-short-license-in-dep5-copyright - file-without-copyright-information - invalid-escape-sequence-in-dep5-copyright - invalid-short-name-in-dep5-copyright - license-problem-bad-php-license - license-problem-php-license - license-problem-undefined-license - no-dep5-copyright - package-contains-timestamped-gzip - pipe-symbol-used-as-license-disjunction - privacy-breach-may-use-debian-package - source-contains-autogenerated-visual-c++-file - space-in-std-shortname-in-dep5-copyright - unused-file-paragraph-in-dep5-copyright - wildcard-matches-nothing-in-dep5-copyright + Removed: - copyright-refers-to-bad-php-license - copyright-refers-to-problematic-php-license * checks/binaries.{desc,pm}: + [NT] Apply patch from Damyan Ivanov to handle the new Perl5 library path location. * checks/changes-file.{desc,pm}: + [BR] Add patch from Ivo De Decker, add check for backports changes file. (Closes: #732225). + [BR] Apply patch from Tomasz Buchert, add check for timestamped gzip files. (Closes: #738591). * checks/cruft.{desc,pm}: + [BR] Use license checking framework for checking php license. (Closes: #752540). + [BR] Add a pedantic tag for autogenerated file made by Visual C++. + [BR] Fix another false positive for gfdl invariants in php-elisp, doc-linux-fr and in clisp. + [BR] Detect old path for upstream metadata. * checks/description.{desc,pm}: + [SL] Check for one word short description. (Closes: #756643). + [SL] Check if the short description is the same as the package name. (Closes: #757398). * checks/fields.pm: + [NT] Apply patch from Salvatore Bonaccorso to recommend the new cgit URLs for anonscm.debian.org over the webgit URLs. (Closes: #756940) * checks/files.pm: + [BR] Fix false positive in detection of cross arch pkgconfig. (Closes: #755902). + [BR] Detect privacy breach fixable by using existing debian package. + [BR] Whitelist <link rel="generator-home"...> in privacy breach checker. + [NT] Apply patch from Damyan Ivanov to handle the new Perl5 library path location. (Closes: #757921) * checks/init.d.pm: + [NT] Allow usage of /lib/init/init-d-scripts as alternative to implementing init.d targets in the script itself. Thanks to Yaroslav Halchenko for the report. (Closes: #758236) * checks/menu-format.pm: + [BR] Add new desktop keys files. Move key list to data. (Closes: #755266). + [NT] Apply patch from Niklas Fiekas to check for desktop files with MimeType-field but no format code in the Exec-field. (Closes: #757383) * checks/phppear.pm: + [BR] Fix a false positive for missing-pkg-php-tools-addon phpcomposer, thanks to David Prévot (Closes: #754738). * checks/source-copyright.{desc,pm}: + [BR] Add a pedantic warning about non dep-5 debian/copyright. + [BR] Detect empty required fields. (Closes: #748452, #656801). + [BR] Detect undefined license. (Closes: #733659). + [BR] Apply patch from Johannes Schauer in order to warn if the pipe symbol is used in license. (Closes: #757583). + [BR] Apply patch from Johannes Schauer in order to check if DEP-5 debian/copyright covers all files in the unpacked sources. (Closes: #757551). + [BR] Detect bad short name and space in license. Thanks to Clint Adams and Johannes Schauer. (Closes: #747248, #757615). + [BR] Avoid to raise file-without-copyright-information for .pc directory. * checks/systemd.pm: + [NT] Allow usage of /lib/init/init-d-scripts as alternative to sourcing /lib/lsb/init-functions. * checks/testsuite.desc: + [BR] Update ref url. (Closes: #755275). * data: + [NT] Refresh several data files against sid. * data/cruft/gfdl-license-fragments-checks: + [BR] Add tla false positive for gfdl license text. * data/cruft/non-distributable-files: + [BR] Detect play boy Lenna test image. * data/cruft/non-free-files: + [BR] Add non free icc profile HP5000_UVDuraImageGlossMaxQ.icc from nips2 package. * data/cruft/warn-file-type: + [BR] Add debug source suffix for detecting javascript source-is-missing and improve test suite. Fix a false positive in mono and in jenkins. * data/debhelper/dh_commands: + [BR] Add patch from Piotr Ożarowski, dh-python2 moved to dh-python package (Closes: #740161). * data/debhelper/dh_commands-manual: + [JW] Add dh_apache2 relations to avoid a false-positive. Thanks to Axel Beckert for reporting the issue. (Closes: #748688) + [NT] Add ":any" to all python related dependencies. Thanks to Matthias Klose for reporting the issue. (Closes: #733733) * data/debhelper/*: + [NT] Refresh against sid. Thanks to Christian Marillat for reporting the out of date data. (Closes: #758891) * data/fields/obsolete-packages: + [NT] Add ruby1.9.1, ruby1.9.1-dev and libruby1.9.1 per request of the Ruby team. * data/files/js-libraries: + [BR] Apply patch from Paul Wise for detection of libjs-excanvas. * data/files/privacy-breaker-website: + [BR] Improve detection of sourceforge logos. + [BR] Detect libjs-jquery use. + [BR] Detect libjs-mathjax use. + [BR] Add count.digitalpoint.com to statistics website. + [BR] Add xoom.com to privacy-breach-donation (used by freesci-doc package). + [BR] Detect libjs-jquery-ui use. + [BR] Detect pledgie.com as a donation website. * data/source-copyright/bad-short-licenses: + [BR] Add unspecified and - as bad license. + [BR] Detect some invalid short name. Thanks to Johannes Schauer. * debian/control: + [NT] Update recommendation on libautodie-perl to include perl 5.20 as alternative. * debian/rules: + [NT] Gracefully handle the case where there are no translations of tag descriptions. * doc/tutorial/Lintian/Tutorial/WritingChecks.pod: + [NT] Correct tutorial now that the "index" collection is gone. * lib/Lintian/Internal/FrontendUtil.pm: + [NT] Ignore set, but empty locale environment variables. Thanks to Michael Prokop for the report. (Closes: #759726) * reporting/{config,html_reports}: + [NT] Add support for copying the documentation rather than symlinking to it. Thanks to Nicolas Sévelin-Radiguet for reporting the issue. (Closes: #756301) * t: + [BR] Fix FTBFS on !amd64. (Closes: #757802). lintian (2.5.25) unstable; urgency=medium * Summary of tag changes: + Added: - capitalization-error-in-description-synopsis - incorrect-naming-of-pkcs11-module - package-contains-thumbnails-dir - pkg-config-bad-directive - source-contains-prebuilt-ms-help-file - spelling-error-in-description-synopsis * checks/*.desc: + [NT] Replaced "index" with "unpacked" in Needs-Info. * checks/cruft.{desc,pm}: + [BR] Add a forgotten return statement, and avoid false positive for deployJava.js (Closes: #745152). + [BR] Fix another false positive in GFDL detection. + [BR] Use whitelist for know good RFC (Closes: #753970). + [BR] Detect and warn about *.chm file (MS Windows HtmlHelp Data). (Closes: #653910). * checks/description.{desc,pm}: + [NT] Apply patch from Anders Jonsson to check spelling of the package synopsis. (Closes: #747266) * checks/files.{desc,pm}: + [RG,NT] Check for invalid named p11-kit modules in /usr/share/p11-kit modules. (Closes: #741346) + [BR] Detect cross architecture pkg-config file. (Closes: #539225). + [BR] Add a sanity check for pkg-config files. (Closes: #676803, #657699). + [BR] Detect .thumbnails dir (Closes: #660797). * collection/*.desc: + [NT] Replace "index" with "unpacked" in Needs-Info. * collection/index{,.desc}: + [NT] Removed file. * collection/unpacked{,.desc}: + [NT] Have unpacked create indices when the package is being unpacked. This is done using a pipeline to avoid decompressing the data.tar file multiple times. * data/cruft/missing-dir-search-path: + [BR] Close false positive for mathjax, search under /unpacked. + [BR] Fix another false positive for emscripten. * data/cruft/warn-file-type: + [BR] add yc suffix for detecting javascript source-is-missing and improve test suite. Fix a false positive in libdevel-nytprof-perl. * data/files/js-libraries: + [NT] Apply patch from Marcelo Jorge Vieira to correct a regular expression for finding embedded copies of libjs-jquery-history. (Closes: #753077) * data/init.d/virtual_facilities: + [NT] Apply patch from Guillem Jover to fix a typo. * data/scripts/interpreters: + [NT] The texlua binary is now provided by texlive-binaries (>= 2014.20140512.33982) instead of luatex. Thanks to Norbert Preining for reporting this. (Closes: #752611) * data/symlinks/well-known-symlinks-target: + [NT] Apply patch from Guillem Jover to fix a typo in a regex. (Closes: #752229) * debian/control: + [NT] Add Breaks/Replaces for funny-manpages due to a bug in funny-manpages before 1.3-5.1. Thanks to Adrian Bunk for reporting. (Closes: #753165) * lib/Lintian/Collect{,/*}.pm: + [NT] Replace "index" with "unpacked" in Needs-Info requirements. * reporting/config: + [NT] Remove "$statistics_file" from the sample config. * reporting/harness: + [NT] Set the state cache to 0644 after creating it. * reporting/html_reports: + [NT] Move the statistics file to the harness state cache dir. It only contains information about the last run and is re-generated as needed. If the file exists, it will be moved to its new location if possible. lintian (2.5.24) unstable; urgency=medium * Summary of tag changes: + Added: - uses-deprecated-compression-for-data-tarball * checks/file.pm: + [BR] Speed-up privacy check (Closes: #745877). + [BR] Fix false positive for detecting minified javascript (Closes: #745877). + [BR] Fix false positive due to cpython name encoded in compiled python file name (Closes: #752218). + [BR] Add another suffix to source-is-missing for javascript file. + [BR] Add url if possible for privacy breach. * checks/changelog-file.pm: + [BR] Use lower case for bad intended distribution. * checks/deb-format.{desc,pm}: + [NT] Apply patch from Guillem Jover to check for deprecated compressions on data.tar-members. (Closes: #745740) * checks/menu-format.pm: + [JW] Also validate desktop files in usr/share/xsessions. (Closes: #746402) * data/files/privacy-breaker-{fragments,websites}: + [BR] Improve detection rules. * debian/rules: + [NT] Extract some tasks from the build-stamp target, so they can be run independently. + [NT] Create a "rebuild-lintian.debian.org" target that only (re-)builds/regenerates the needed parts for the lintian.debian.org checkout. (Closes: #751926) * frontend/{dplint,lintian}: + [NT] Fix a bug in command-line parsing, where "--" was interpreted as a literal file-name rather than the "end of options" marker. Thanks to Luca Falavigna for spotting it. (Closes: #746790) * vendors/ubuntu/main/data/changes-file/known-dists: + [NT] Add utopic as valid Ubuntu distribution. lintian (2.5.23.1) unstable; urgency=medium * debian/rules: + [NT] Avoid regenerating po4a files if not needed. * debian/source/lintian.overrides: + [NT] Add overrides for false-positive "evil JSON" license problem, which is triggered by the current Lintian on the FTP master host. lintian (2.5.23) unstable; urgency=medium * Summary of tag changes: + Added: - init.d-script-depends-on-all-virtual-facility - maven-plugin-in-usr-share-java - needless-suggest-recommend-libservlet-java - pre-depends-directly-on-multiarch-support - quilt-series-without-trailing-newline - source-contains-prebuilt-sphinx-documentation * checks/binaries.{desc,pm}: + [NT] Apply patch from Samuel Bronson to improve the description of the debug-symbols-directly-in-usr-lib-debug tag. + [BR] Extend eglibc whitelist to glibc. (Closes: #748881). * checks/changelog-file.pm: + [BR] Allow to sid for experimental to unstable comment. (Closes: #747407). * checks/control.{desc,pm}: + [BR] Apply patch from Helmut Grohne to warn about Pre-Depends: multiarch-support in debian/control. (Closes: #747439). * checks/cruft.{desc,pm}: + [BR] Detect sphinx generated documentation and avoid a false positive for minified javascript and missing sources. (Closes: #742693). + [BR] Do not remove newline with c++ comments. Fix a false positive. + [BR] Fix a GFDL detection false positive in texlive. Thanks to Norbert Preining. (Closes: #743754). + [BR] Fix another false positives in GFDL detection. + [BR] Fix a false positive for source-is-missing for deployJava.js. (Closes: #745152). + [BR] Fix a false positive for GFDL detection in soundjuicer. (Closes: #748375). + [BR] Fix a false positive for source-is-missing in e2fsprogs. (Closes: #748421). * checks/files.pm: + [BR] Use Lintian::Data for detecting embedded library. + [BR] Add context in embedded lib tagging. + [BR] Avoid to warn on bookmark link. (Closes: #746656). * checks/fields.{desc,pm}: + [NT] Apply patch from Johannes Schauer to rename "notest" build-profile to "nocheck". (Closes: #743840) + [NT] Support giving replacements for obsolete packages. + [NT] Fix a bug with versioned dependencies on obsolete packages with non-obsolete alternatives. * checks/infofiles.desc: + [NT] Apply patch from Samuel Bronson to improve some of the examples. + [NT] Apply patch from Don Armstrong to ignore jpg/jpeg images beneath /usr/share/info. (Closes: #748167) * checks/init.d.{desc,pm}: + [BR] Detect $all virtual dependency in legacy init scripts. Thanks to Holger Levsen. (Closes: #737867). * checks/java.{desc,pm}: + [SL] Do not trigger a warning when a jar is not in /usr/share/java and the package name matches. (Closes: #746744). lib.*maven.*plugin.*java. (Closes: #743446). + [SL] Catch uses of Java8 byte code. (Closes: #743384). + [SL] Warn that the suggests/recommends on libservlet[\d\.]+-java is needless (Closes: #743453) + [SL] missing-classpath should be disabled on Java binaries + [NT] Exclude some jar files from "codeless-jar" tag based on the basename of the jar file. This is intended to reduce the number of codeless jars for source/doc jars in eclipse(-based) packages. * checks/patch-systems.{desc,pm}: + [BR] Warn against trailing newline in debian/patches/series. (Closes: #746362). * checks/source-copyright.pm: + [NT] Permit the use of "https://" in DEP-5 format URIs even if the policy suggests that they have to use "http://". (Closes: #744981) * checks/testsuite.pm: + [JW] Add new restrictions for DEP-8 tests. (Closes: #746305) * data/binary/embedded-libs: + [RG] Detect embedded copies of lcms, lcms2, libmms, libminiupnpc, libupnp, and libyaml, polarssl. + [RG] Don't detect mariadb as embedder of mysql. + [BR] Detect libidn*, and libsrtp. + [NT] Apply patch from Samuel Bronson to detect mpfr and gmp. + [BR] Extend eglibc whitelist to glibc. * data/cruft/non-distributable-files: + [BR] Add a file comes from the Novell libc Software Development Kit. (Closes: #745802) * data/cruft/non-free-files: + [BR] Add all profiles from icc-profiles non free package. + [BR] Add icc profiles from Adobe. + [BR] Add icc profiles from http://www.color.org/srgbprofiles.xalter. + [BR] Add Apple icc profile: Color LCD Calibrated, Copyright Apple Computer, Inc., 2003 + [BR] Add old srgb profile from HP: IEC 61966-2.1 Default RGB colour space - sRGB, Copyright (c) 1998 Hewlett-Packard Company * data/fields/obsolete-packages: + [NT] Add hardening-includes and hardening-wrapper on request of Thijs Kinkhorst. (Closes: #711193) + [NT] Add python-support on request of Luca Falavigna. (Closes: #746563) * data/java/constants: + [SL] introduce this file to specify JDK values * data/scripts/maintainer-script-bad-command: + [BR] Avoid a false positive for maintainer-script-should-not-use-update-alternatives-set. (Closes: #745568). * debian/control: + [NT] Add Build-Depends on po4a. * debian/lintian.install: + [NT] Install translations. * debian/{lintian.,source/}lintian-overrides: + [NT] Add overrides for using hardening-includes. * debian/rules: + [NT] Add rules for handling translations. + [NT] Run dh_lintian during binary-indep target. * frontend/lintian{,-info}: + [NT] Use localized version of tag descriptions. (Closes: #663155) * lib/Lintian/{CheckScript,Profile}.pm: + [NT] Add support for translations of tag descriptions. * po4a: + [NT] New directory for translations. * private/private/gen-po4a-conf: + [NT] New file. * README: + [NT] Document how to make and contribute translations. lintian (2.5.22.1) unstable; urgency=medium * checks/ocaml.{desc,pm}: + [NT] Replace unnecessary uses of file_info with index. * data/binary/embedded-libs: + [RG] Detect embedded copies of libmpg123. * data/fields/perl-provides: + [NT] Refresh against Perl 5.18.2. * data/spelling/corrections: + [RG] Add "functiosn" to the list of spelling mistakes. * frontend/lintian: + [NT] Fix a regression that completely broke the command-line argument "--packages-from-file", when the file was "-". * lib/Lintian/Relation.pm: + [JW,NT] Fix dependency-testing issues caused by too greedy regular expressions in the dependency parser. (Closes: #742989) * reporting/templates/tags.tmpl: + [JW,NT] Fix grammatical error in a template. (Closes: #742985) lintian (2.5.22) unstable; urgency=medium * Summary of tag changes: + Added: - invalid-restriction-label-in-source-relation - invalid-restriction-namespace-in-source-relation - invalid-restriction-term-in-source-relation - license-problem-gfdl-non-official-text - license-problem-non-free-RFC-BCP78 - privacy-breach-google-plus - privacy-breach-twitter - restriction-list-with-debhelper-with-conflicting-debhelper-version - restriction-list-with-debhelper-without-debhelper-version - restriction-list-with-versioned-dpkg-dev-conflict - restriction-list-without-versioned-dpkg-dev-dependency - source-is-missing - stageX-profile-used-but-no-binary-package-dropped * checks/*: + [NT] Avoid using "I" or "we" in tag descriptions. + [NT] When looping over the names of binary packages, prefer the order they are listed in the control file. Previously they were either sorted by name or ordered by Perl's hash iterator. * checks/control-file.{desc,pm}: + [NT] Apply patch from Johannes Schauer to validate build-profile usage. * checks/control-files.pm: + [NT] Remove special case for udebs on empty control files. Thanks to Cyril Brulebois for testing it. * checks/cruft.pm: + [BR,NT] Optimise the GFDL check considerably in some cases (e.g. the linux source). (Closes: #738342) + [BR] Factorize GFDL detection. Detect non official wordings of GFDL invariant section. (Closes: #717916). Fix some old false positives. (Closes: #742260, #741212). + [BR] Add opentoken non official wording for GFDL invariant section, thanks to Nicolas Boulenguez. (Closes: #740183). + [BR] Detect minified js based on line length. (Closes: #735348). + [BR] Detect missing sources for minified javascript, flash project, flash files, and elf binary. * checks/fields.{desc,pm}: + [NT] Apply patch from Johannes Schauer to validate build-profile usage. (Closes: #740607) * checks/files.desc: + [BR] Raise file-name-in-PATH-is-not-ASCII and file-name-in-PATH-is-not-ASCII to error (see policy 10.10), thanks to Helmut Grohne. (Closes: #739347) + [BR] Improve privacy-breach tags wording, thanks to Paul Wise. (Closes: #738176) * checks/menu-format.desc: + [NT] Apply patch from Charles Plessy to correct an URL in a tag reference. (Closes: #738454) * checks/symlinks.pm: + [BR] Use Lintian::Data for safe symlinks list. Add /dev/null to this list. (Closes: #740339). * checks/systemd.pm: + [BR] Allow spaces around = in service files. (Closes: #739366). * checks/watch-file.{desc,pm}: + [BR] Allow debian/upstream-signing-key.asc, thanks to Nicolas Boulenguez (Closes: #736711). + [NT] Apply patch from Daniel Kahn Gillmor to check for the upstream signing key in debian/upstream. Thanks to Hideki Yamane for the bug report. (Closes: #738597) * collection/java-info: + [NT] Update the conditional using file(1) to cope with the new output for JAR files. * data: + [NT] Refresh several architecture data files against dpkg 1.17.5. Thanks to James Hunt for the reminder. (Closes: #735266) + [NT] Refresh several data files with data from sid. * data/binary/embedded-libs: + [RG] Detect embedded copies of liblivemedia, libgadu, libssh, libssh2, freetype, nss, and nspr. + [RG] Adjust the detection of embedded copies of libmagic. + [RG] Detect embedded copies of an ancient tinyxml. Thanks to Andreas Rönnquist for the report. (Closes: #733318) * data/cruft/non-free-files: + [BR] "id3v22-tda.mp3 considered non-free", thanks to Charlie Smotherman (Closes: #736203). * data/files/privacy*: + [BR] Improve detection of privacy-breach-google-cse, thanks to Paul Wise (Closes: #739247). + [BR] Detect google+, thanks to Paul Wise. (Closes: #738175). + [BR] Detect twitter, thanks to Paul Wise. (Closes: #738174). * data/scripts/maintainer-script-bad-command: + [BR] Fix false positive maintainer-script-should-not-use-adduser-system-without-home due to quoting, thanks to Andreas Beckmann <anbe@debian.org> (Closes: #739109). * debian/source/lintian-overrides: + [NT] Override false-positive for license checks. * debian/tests/control: + [NT] Use the new @builddeps@ from autopkgtest/2.5.5 instead of duplicating the values. * frontend/lintian: + [NT] Fix a regression in argument handling after the first non-option. This problem was introduced in 2.5.18. + [NT] Let --color default to "auto". + [NT] Discard STDERR when running git describe to guess the version of Lintian. Avoids a warning from git tags are absent from the repository. * lib/Lintian/Collect/Source.pm: + [NT] Apply patch from Mathieu Parent to make "binaries" return the package name in the same order as they are listed in the control file. (Closes: #739671) * lib/Lintian/Reporting/ResourceManager.pm: + [NT] New file. * lib/Lintian/Util.pm: + [NT] Extend the "Continuation line outside a paragraph" parse error on Deb822 files with a possible suggestion for fixing the problem. * lib/Test/Lintian/Harness.pm: + [NT] New file - mostly for internal use during testing. * profiles/debian/ftp-master-auto-reject.profile: + [BR] Refresh with new tags. * reporting/config: + [NT] Fix typo of HARNESS_STATE_DIR config variable. * reporting/harness: + [NT] Avoid writing state-cache during dry-run. + [NT] Add timestamps to the log output. * reporting/{html_reports,templates/*.tmpl}: + [NT] Show the same statistics on the tag page as shown on the tag index pages. Thanks to Guillem Jover for the suggestion. (Closes: #738349) + [NT] Remove the second argument to the "head" sub in the templates. Its value is now computed automatically by html_reports based on the name of the output file. + [NT] Install "lintian.css" and all files in "reporting/images" and "reporting/resources" into "HTML_DIR/resources". These will be named after their content to allow more aggressive public caching. * reporting/html_reports: + [NT] Link to the library API docs from the index page. (Closes: #639974) + [NT] Optimise the graph generation by only calling gnuplot twice (rather than once plus once per tag). + [NT] Show the number of package groups and the size of the harness backlog on the index page. * reporting/{lintian.css => templates/lintian.css.tmpl}: + [NT] Rename file and make it a template. * t/runtests: + [NT] Cache test artifacts and reuse them in subsequent runs. This removes the majority of the runtime overhead of running the test suite on subsequent runs. (Closes: #699083) + [NT,BR] Fix test suite issues caused by a regression in tar 1.27. (Closes: #739744) lintian (2.5.21) unstable; urgency=medium * Summary of tag changes: + Added: - bad-intended-distibution - debian-rules-should-not-automatically-update-control - debian-rules-should-not-use-DEB_BUILD_OPTS - debian-rules-should-not-use-or-modify-user-only-variable - debian-rules-should-not-use-pwd - debian-rules-should-not-use-underscore-variable - license-problem-md5sum-non-distributable-file - license-problem-md5sum-non-free-file - license-problem-non-free-RFC - maintainer-script-should-not-use-service - privacy-breach-donation - privacy-breach-facebook - privacy-breach-google-cse - privacy-breach-logo - privacy-breach-piwik - privacy-breach-statistics-website - privacy-breach-w3c-valid-html - source-contains-prebuilt-flash-object - source-contains-prebuilt-flash-project - source-contains-prebuilt-java-object - source-contains-prebuilt-javascript-object - source-contains-prebuilt-python-object - source-contains-prebuilt-silverlight-object + Removed: - debian-rules-automatically-updates-control - debian-rules-uses-DEB_BUILD_OPTS - debian-rules-uses-or-modifies-user-only-variable - debian-rules-uses-pwd * checks/changelog-file.{desc,pm}: + [BR] Warn when an upload erroneously targeted at distribution that is not intended (Closes: #661990). * checks/cruft.{desc,pm}: + [BR] Detect non free rfc (Closes: #365213). + [BR] Check md5sums on source package. + [BR] Detect prebuilt jar file. + [BR] Detect prebuilt silverlight file. + [BR] Detect prebuilt flash file (Closes: #733883). * checks/fields.{desc,pm}: + [BR] Increase severity of vcs-field-uses-not-recommended-uri-format (Closes: #670323). * checks/files.{desc,pm}: + [BR] Add xz and zip to duplicated-compressed-file regexp. + [BR] Use Lintian::Data for compressed file extension. + [BR] Use Lintian::Data for vcs files list. Add a few more VCS files (Closes: #731904). + [BR] Remove long obsolete reference to rc.boot(5) manpage in package-installs-into-etc-rc.boot description. Thanks to Jakub Wilk (Closes: #729034). + [BR] Add a moreinfo field to obsolete path. + [BR] Fix non-conf-file-in-modprobe.d description (Closes: #729037). + [BR] Check privacy breach only in regular file. + [BR] Add link tag as potential privacy breaker. + [BR] Add <div data-href="http://website" to potential privacy breaker. * checks/md5sums.pm: + [BR] In case of strange filename, md5sum(1) prefix the md5sum by backslash and escape the name using backslash encoding. Handle this case properly. * checks/rules.{desc,pm}: + [BR] Use Lintian::Data for forbidden construct in rules file. + [BR] Rename debian-rules-automatically-updates-control to debian-rules-should-not-automatically-update-control. + [BR] Rename debian-rules-uses-pwd to debian-rules-should-not-use-pwd. + [BR] Rename debian-rules-uses-DEB_BUILD_OPTS to debian-rules-should-not-use-DEB_BUILD_OPTS. + [BR] Rename debian-rules-uses-or-modifies-user-only-variable to debian-rules-should-not-use-or-modify-user-only-variable. * checks/watch.{desc,pm}: + [BR] Fix the description of debian-watch-may-check-gpg-signature tag. Thanks to Gregor Herrmann for the bug report and patch (Closes: #732799). * data/cruft/non-free-files: + [BR] Add sRGB.icm to non-free files (Closes: #699369). + [BR] Add a few non-free font files (Closes: #298545). + [BR] Add non-free w3c valid icons. * data/cruft/warn-file-type: + [BR] Add this file. + [BR] Detect minified javascript (by extension). + [BR] Detect python prebuilt object (Closes: #734280). * data/fields/obsolete-packages: + [BR] Apply patch from Jonas Genannt to render obsolete ruby 1.8. * data/files/obsolete-paths: + [BR] Add /etc/X11/fonts/X11R7 as obsolete path (Closes: #646872). * data/files/privacy-breaker-{fragments,websites}: + [BR] Add w3c website valid x?html icons. + [BR] Add piwik detection. + [BR] Add detection of well known statistics websites. + [BR] Detect facebook. + [BR] Detect google custom search engine. * data/rules/rules-should-not-use: + [BR] Detect use of $(_) variable in debian/rules (Closes: #585495). * data/scripts/maintainer-script-bad-command: + [BR] Service is reserved to system admin (Closes: #656229). + [BR] Fix false positive for maintainer-script-should-not-use-adduser-system-without-home by allowing shell variable (Closes: #733595). * debian/control: + [NT] Add relevant relations on libyaml-perl, which is now used by harness. * reporting/harness: + [NT] Fix typo in --schedule-chunk-size command-line argument. + [NT] Require a new configuration variable $HARNESS_STATE_DIR. This variable tells harness where it can store state information and caches. + [NT] Track which version of lintian a given package group was processed by. Using this information, harness will now slowly reprocess groups processed by another version of Lintian than the current. * t: + [NT] Apply patch from Adam Conrad to fix issue with a test when run in an Ubuntu environment. Also thanks to Benjamin Drung for forwarding the patch to the Debian BTS. (Closes: #725139) lintian (2.5.20) unstable; urgency=low * Summary of tag changes: + Added: - build-depends-on-an-obsolete-java-package - debian-watch-file-pubkey-file-is-missing - debian-watch-may-check-gpg-signature - license-problem-nvidia-intellectual - maintainer-script-should-not-hide-init-failure - maintainer-script-should-not-modify-ld-so-conf - maintainer-script-should-not-modify-netbase-managed-file - maintainer-script-should-not-use-adduser-system-without-home - maintainer-script-should-not-use-ancient-dpkg-epoch-check - maintainer-script-should-not-use-ancient-dpkg-multi-conrep-check - maintainer-script-should-not-use-deprecated-chown-usage - maintainer-script-should-not-use-dpkg-status-directly - maintainer-script-should-not-use-fc-cache - maintainer-script-should-not-use-gconftool - maintainer-script-should-not-use-install-sgmlcatalog - maintainer-script-should-not-use-start-stop-daemon - maintainer-script-should-not-use-update-alternatives-remove - maintainer-script-should-not-use-update-alternatives-set - package-install-into-obsolete-dir - privacy-breach-generic - privacy-breach-google-adsense + Removed: - ancient-dpkg-epoch-check - ancient-dpkg-multi-conrep-check - deprecated-chown-usage - fc-cache-used-in-maintainer-script - gconftool-used-in-maintainer-script - install-sgmlcatalog-deprecated - maintainer-script-hides-init-failure - maintainer-script-modifies-ld-so-conf - maintainer-script-modifies-netbase-managed-file - maintainer-script-uses-dpkg-status-directly - start-stop-daemon-in-maintainer-script - update-alternatives-remove-called-in-postrm * checks/cruft.{desc,pm}: + [BR] Check files for under a non-distributable Nvidia license. (Closes: #724930) + [BR] Abstract sliding window algorithm and use it for license check. (Closes: #720348) + [BR] Filter (x?ht|x)ml comments for license check. (Closes: #729226). * checks/fields.pm: + [SL] Returns a warning when a package build-deps on java-compiler instead of default-jdk. (Closes: #730714) * checks/files.desc: + [BR] Improve description of pkg-config-multi-arch-wrong-dir tag. Add debhelper > 9 on non multi-arched package as a likely cause (Closes: #723886). + [BR] Add a generic check for obsolete path. + [BR] Detect privacy breaker html/css files (Closes: #637580) particularly Google Adsense (Closes: #718427). * checks/scripts.{desc,pm}: + [BR] Detect update-alternatives --set in maintainer scripts. (Closes: #643602). + [BR] Use Lintian::Data for bad shell construction in maintainer scripts. + [BR] Detect use of adduser --system without --home or with --home inside /home. (Closes: #730456). + [BR] install-sgmlcatalog is deprecated for a long time. Warn now in all use case. Rename the tag to maintainer-script-should-not-use-install-sgmlcatalog + [BR] Rename gconftool-used-in-maintainer-script to maintainer-script-should-not-use-gconftool. Add gconf\d package to exception list. + [BR] Rename fc-cache-used-in-maintainer-script to maintainer-script-should-not-use-fc-cache. Add fontconfig package to exception list. + [BR] Rename (ancient-dpkg-.*) to maintainer-script-should-not-use-$1. + [BR] Rename (deprecated-chown-usage) to maintainer-script-should-not-use-$1. + [BR] Rename maintainer-script-hides-init-failure to maintainer-script-should-not-hide-init-failure. + [BR] Rename maintainer-script-modifies-ld-so-conf to maintainer-script-should-not-modify-ld-so-conf. + [BR] Rename maintainer-script-modifies-netbase-managed-file to maintainer-script-should-not-modify-netbase-managed-file. + [BR] Rename maintainer-script-uses-dpkg-status-directly to maintainer-script-should-not-use-dpkg-status-directly. + [BR] Rename update-alternatives detection in maintainer script to maintainer-script-should-not-use convention. + [BR] Rename start-stop-daemon-in-maintainer-script to maintainer-script-should-not-use-start-stop-daemon * checks/standards-version: + [BR] Use Lintian::Data for ancient date check. * checks/watch.{desc,pm}: + [BR] Detect lack of uscan support for gpg signature. (Closes: #711553). * data/binary/embedded-libs: + [RG] Detect embedded copies of poppler/xpdf. (Closes: #724733) * data/files/obsolete-paths: + [BR] Add this file to generically check obsolete path. + [BR] Check obsolete /etc/dhcp3 path. (Closes: #673029) * data/fields/obsolete-packages: + [NT] Apply patch from Eric Dorland to mark various versions of automake as obsolete. + [SL] Tag openjdk-6-jdk, openjdk-6-jre and openjdk-6-jre-headless as obsolete (See ##720911). (Closes: #730714) * data/fields/virtual-packages: + [NT] Refresh against sid. Thanks to Nicholas Breen for the reminder. (Closes: #724866) * data/spelling/corrections: + [RG] Detect some typos of "establishment" and "contains". + [SL] Detect some typos of "suppress". * data/standards-version/ancient-date: + [BR] Set ancient date to 14 Jan 2012. * data/standards-version/release-dates: + [NT] Add release date for 3.9.5. * debian/control: + [NT] Bump Standards-Versions to 3.9.5 - no changes required. + [BR] Add myself as uploader. * lib/Lintian/Collect/Binary.pm: + [GN] Add support for multi-component RPATHs. (Closes: #727683) * lib/Lintian/Collect/Package.pm: + [BR] Globally replace \\ by \ in _dequote_name(). This bug was masked by old buggy tar (Closes: #727665). * t/debs/deb-format-wrong-order/.*: + [BR] Recent dpkg detect this error and bail out. Do not run with dpkg >= 1.17.2. See dpkg git commit cb8ed03bbffe892165620ed1ddf753a6b0c1ee62 and 547dca4c3ff23df5dfa554f1943b371cd7056ee4. * vendors/ubuntu/main/data/changes-file/known-dists: + [NT] Add "trusty". Thanks to Stéphane Graber for the reminder. lintian (2.5.19) unstable; urgency=low * Summary of tag changes: + Added: - homepage-in-binary-package * checks/fields.{desc,pm}: + [NT] Add check for "Homepage"-field missing in the source, when one of the binary packages has the field. Thanks to Ricardo Mones for the bug report. (Closes: #693117) * checks/files.pm: + [NT] Apply patch from Samuel Thibault to fix a false-positive non-standard-toplevel-dir for the directories /hurd and /servers. (Closes: #724524) + [NT] Work around bug #724571 in t1disasm by ignoring failures caused by segmentation faults and bus errors. Though, Lintian will emit a warning when such an error occurs. Thanks to Ansgar Burchardt for the report. (Closes: #724319) * checks/testsuite.pm: + [NT] Allow uppercase letters in the names of DEP-8 tests, now that the DEP-8 officially "tolerates" them. (see #711844) * lib/Lintian/Util.pm: + [NT] Add drain_pipe(FD). * reporting/{config,harness}: + [NT] Determine the html_reports command automatically instead of allowing it to be configurable. + [NT] Stop allowing config script to name individual log files. The directory in which they are put is still configurable. + [NT] Replace LINTIAN_CFG with passing "--no-cfg" to lintian. + [NT] Replace $lintian_cmd config option with a @EXTRA_LINTIAN_OPTIONS. Also stop forking a shell to run lintian. + [NT] Remove LINTIAN_BIN_DIR; it is no longer used to avoid signature checking. + [NT] Fix a bug where harness would not remove entries in the Lintian log for removed packages if no packages were to be processed. * reporting/lintian-dummy.cfg: + [NT] Remove file as it is now obsolete. lintian (2.5.18.1) unstable; urgency=low * checks/application-not-library.desc: + [JW] Fix typo. * checks/files.pm: + [NT] Only open .pc files if they are regular files. This fixes a possible DoS introduced in 2.5.17. * checks/shared-libs.pm: + [NT] Correct the name of the multiarch-dirs data file, which was renamed in 2.5.17. * lib/{Test/Lintian,Lintian/Data}.pm: + [NT] Load data files eagerly during tests to ensure missing or typo'ed data files are spotted earlier. * debian/changelog: + [NT] Mention in the 2.5.17 entry that multiarch-dirs data file was renamed. + [NT] Consistently spell "typos" without an "e". lintian (2.5.18) unstable; urgency=low * Summary of tag changes: + Added: - debian-changelog-has-wrong-weekday - debian-rules-missing-good-practice-target-dfsg - empty-udeb-package - file-name-in-PATH-is-not-ASCII - misplaced-extra-member-in-deb * checks/apache2.pm: + [NT] Fix false-positive warning about non-standard package name when the Apache2 module contained uppercase letters. Thanks to Jonas Smedegaard for the report. (Closes: #723003) * checks/changelog.{desc,pm}: + [NT] Check that the weekday of the latest changelog entry is consistent with the date. Thanks to Raphael Champeimont for the report. (Closes: #703407) * checks/cruft.{desc,pm}: + [BR] Fix false-positive for license-problem-gfdl-invariants. (Closes: #721252) + [BR] Extend tag description of the gfdl-invariants tag. (Closes: #722102) * checks/deb-format.{desc,pm}: + [NT] Support (but tag) unofficial members after the "debian-binary" member where allowed by dpkg. These members will trigger misplaced-extra-member-in-deb tag. Thanks to Guillem Jover for the report and the feedback. (Closes: #718349) * checks/fields.{desc,pm}: + [NT] Warn about "?op=log" in svn.d.o browser links. Thanks to Paul Wise for the report. (Closes: #707700) + [NT] Fix false-positive dbg-package-missing-depends for transitional dbg packages. Thanks to Paul Wise for the report. (Closes: #665694) + [NT] Remind people that packages named gir1.2-foo-X.Y should be in the introspection section. Thanks to Michael Biebl for the report (part of #695345) * checks/files.{desc,pm}: + [BR] Fix false-positive dir-or-file-in-build-tree for the sbuild source package. (Closes: #720910) + [NT] Add check for empty udeb packages. Thanks to Cyril Brulebois for the suggestion. (Closes: #672664) + [NT] Remove exception for "/selinux" top-level directory. Thanks to Laurent Bigonville for the report. (Closes: #723730) + [NT] Add a check for files in PATH being representable using only ASCII characters. (Closes: #723732) * checks/menu-format.desc: + [BR] Rewrite description of the tag for desktop files without a keywords entry based on a wording from Gaudenz Steinlin. (Closes: #706966) + [NT] Apply patch from Lucas Nussbaum to add an additional reference to the desktop-entry-lacks-keywords-entry tag. (Closes: #722582) * checks/rules.{desc,pm}: + [BR] Refactor the check for known targets in d/rules. + [BR] Add check for missing for recommended "get-orig-source" target in d/rules for packages that look like they have been repacked. (Closes: #460174) * checks/scripts.desc: + [NT] Demote the certainty of shell-script-fails-syntax-check due to "extglob" in bash. Thanks To Trent W. Buck for the report. (Closes: #699410) * checks/testsuite.pm: + [NT] Add "allow-stderr" as known autopkgtest "restriction". Thanks to Jérémy Bobbio for the report and the initial patch. (Closes: #721179) * checks/version-substvars{.desc,.pm}: + [NT] Mention that version-substvar-for-external-package can happen if the package name used in the relation has a typo. Thanks to Joachim Reichel for reporting this. (Closes: #708576) + [NT] Ignore ":any" qualifiers in dependencies. Thanks to Scott Ritchie for the report. (Closes: #658320) * commands/info: + [NT] New file (replacing lintian-info). + [NT] Emit a deprecation warning for --include-dir and --[no-]user-dirs when they are not the first arguments and called as lintian-info. * doc/README.in: + [NT] Replaced by top-level README. * data/common/source-fields: + [NT] Allow the "Dgit" field in source packages. Thanks to Ian Jackson for the report. (Closes: #721205) * data/fields/perl-provides: + [NT] Refresh against perl 5.18. * data/rules/policy-rules: + [BR] New file. * data/scripts/{,versioned-}interpreters: + [NT] Apply patch from Gunnar Wolf to update which package is providing "rackup". (Closes: #721268) * data/scripts/interpreters: + [NT] Use "python:any | python-minimal:any" as dependency for python scripts. This fixes a false-positive for python-script-but-no-python-dep when dh_python2 generates a dependency of "python:any". Thanks to Francois Gouget for the report. (Closes: #711988) * data/scripts/versioned-interpreters: + [NT] Add python 2.7 and remove 2.4, 2.5 and 2.6. Also add ":any" the dependency template like with the unversioned interpreters (see above). * debian/docs: + [NT] Install "README" instead "doc/README" * debian/lintian.install: + [NT] Install dplint and commands/*. * debian/lintian.links: + [NT] New file. * debian/rules: + [NT] Add code for substituting some placeholder values in dplint and lintian. + [NT] Invoke dh_link. + [NT] Remove code for auto-generating README from README.in * debian/tests/control: + [NT] Remove reference to testsuite-legacy. * debian/tests/testsuite-legacy: + [NT] Removed; no longer useful. * doc/README.developers: + [NT] Update the section on running Lintian from a source tree to mention that setting LINTIAN_ROOT is no longer needed. + [NT] Remove references to the legacy testsuite. * doc/tutorial/Lintian/Tutorial/TestSuite.pod: + [NT] Remove references to the legacy testsuite. * frontend/dplint: + [NT] New file. * frontend/lintian: + [NT] Automatically determine the LINTIAN_ROOT when run from the extracted source dir. + [NT] Deprecate --root and LINTIAN_ROOT. These are largely obsolete as Lintian can now automatically determine the proper LINTIAN_ROOT. To avoid surprises, lintian will now exit with an error if requested to use a different LINTIAN_ROOT than the one lintian expected to use. + [NT] Emit a deprecation warning for --include-dir and --[no-]user-dirs when they are not the first arguments and called as lintian-info. * frontend/lintian-info: + [NT] Replace with symlink to dplint. The implementation of lintian-info is now handled by commands/info. * lib/Lintian/Collect/Package.pm: + [NT] If the index file does not include a "root" directory, then create a fake one. * lib/Lintian/Data.pm: + [NT] Make a special case to allow "original-maintainer" by default in all non-"Debian" profiles. Thanks to Nick Black for the report. (Closes: #697565) * lib/Lintian/Relation.pm: + [NT] Allow "pkg" to imply "pkg:any", but without permitting "pkg:any" to imply "pkg". * private/runtests: + [NT] Remove file; merge the relevant parts into t/runtests. * README: + [NT] New file for basic information about Lintian and where to find more information. * reporting/harness: + [NT] Fix bug that caused harness to not remove old log entries on incremental runs. + [NT] Clear LINTIAN_ROOT environment variable if set. * reporting/html_reports: + [NT] Copy (rather than symlink) the lintian.log to the generated website. * t/runtests: + [NT] Assume dpkg (>= 1.16.1) is present. + [NT] Work around bug in Perl (#723805) when using "glob" within threads. Thanks to Brian "hugmeir" Fraser for finding the underlying cause. * t/tests/binaries-spelling/{debian/basic.c,tags}: + [AB] Add subtest which verifies that the additional exception list (teh vs tEh) for spelling-error-in-binary works. * t/tests/legacy-debug/debian/debian/control: + [NT] Mark some packages "arch:any" to avoid test failures on kfreebsd-amd64. (Closes: #688524) * testset/*: + [NT] All tests moved to t/tests/legacy-* and the test runner removed. * vendors/ubuntu/main/data/{common,fields}/*: + [NT] Retire now redundant files. lintian (2.5.17) unstable; urgency=low * Summary of tag changes: + Added: - apache2-unparsable-dependency - deprecated-configure-filename - doc-base-abstract-field-separator-extra-whitespace - doc-base-abstract-might-contain-extra-leading-whitespace - doc-base-file-separator-extra-whitespace - md5sums-lists-nonexistent-file - non-multi-arch-lib-dir - pkg-config-multi-arch-wrong-dir + Removed: - apache2-unparseable-dependency - doc-base-abstract-field-separator-extra-whitespaces - doc-base-abstract-might-contain-extra-leading-whitespaces - doc-base-file-separator-extra-whitespaces - md5sums-lists-nonexisting-file * checks/apache2.{desc,pm}: + [JW,NT] Rename a tag for consistent spelling of "unparsable" in tag names. The tag has no known overrides. * checks/automake.{desc,pm}: + [NT] Apply patch from Gautier Minster to detect usage of configure.in with automake. Thanks to Paul Wise for the report. (Closes: #708482) * checks/cruft.pm: + [NT] Avoid given/when which was demoted to an experimental feature. (Closes: #720835) * checks/files.{desc,pm}: + [BR] Add check for architecture pkg-config files using multi-arch paths but being installed in a non-multi-arch location. Thanks to Ivo De Decker for the report. (Closes: #674469) + [BR] Add check for using the old bi-arch directories (/usr/lib64) instead of multi-arch dirs. Thanks to Kurt Roeckx for the report. (Closes: #528975) + [BR] Remove "emul/" as a recognised top-level directory. * checks/md5sums.{desc,pm}: + [JW,NT] Rename a tag due to a typo in the tag name. The tag has no known overrides. * checks/menus.{desc,pm}: + [JW,NT] Rename tags due to a typo in their tag name. These tags have no known overrides. * checks/source-copyright.pm: + [NT] Avoid accidental use of an experimental feature. * data/{binaries => common}/multiarch-dirs: + [BR] Moved multiarch-dirs from binaries to common, since it is used from multiple checks. * debian/control: + [NT] Add Build-Depends on aspell, aspell-en and libtest-spelling-perl. * lib/Lintian/Tag/TextUtil.pm: + [NT] Prevent very long URLs from being split into two lines. Thanks to Jari Aalto for the report. (Closes: #719769) * lib/Lintian/Util.pm: + [NT] Prefer paths without leading slash in the documentation for normalize_pkg_path. Thanks to Kevin Ryde for spotting this inconsistency. + [NT] The first argument of normalize_pkg_path is now unconditionally normalized. Furthermore, allow the function to be called with only one argument like Cwd::realpath. * t/*: + [NT] Adapt several tests to work under perl 5.18. lintian (2.5.16) unstable; urgency=low * Summary of tag changes: + Added: - changelog-is-dh_make-template - copyright-should-refer-to-common-license-file-for-apache-2 - debian-control-repeats-field-name-in-value - info-document-missing-image-file - license-problem-font-adobe-copyrighted-fragment - license-problem-font-adobe-copyrighted-fragment-no-credit - missing-dependency-on-libstdc++ - quilt-patch-using-template-description + Removed: - dh_pycentral-is-obsolete - dh_python-is-obsolete - font-adobe-copyrighted-fragment - font-adobe-copyrighted-fragment-no-credit - init.d-script-call-internal-API - missing-dependency-on-python-central * checks/apache2.pm: + [NT] Fix F-P apache2-deprecated-auth-config for "AllowOverride". Thanks to Jean-Michel Vourgère for the report and an initial patch. (Closes: #717621) * checks/binaries.pm: + [NT] Apply patch from Michael Stapelberg to exempt golang-go binaries from statically-linked-binary tag. (Closes: #718404) + [NT] Permit shared libraries to not link against libc as long as they link against libstdc++. This fixes a lot of false positive warnings for some c++ libraries when the linker (with --as-needed) determines that the libc link is superfluous. Thanks to Maximiliano Curia for the report. (This is a partial fix for #719806) + [NT] Add experimental tag for missing dependency on libstdc++. * checks/changelog-file.{desc,pm}: + [BR] Add check for dh-make reminder to insert the bug number of the ITP bug. (Closes: #690273) * checks/control-file.{desc,pm}: + [BR] Add check for field name being duplicated in the value of the field. (Closes: #711069) * checks/copyright-file.{desc,pm}: + [BR] Extend check for "reference to compressed common-license" to include all current common-licenses. + [BR] Add check for use of Apache-2.0 in d/copyright without references common-licenses. (Closes: #713012) * checks/cruft.pm: + [NT] Skip d/README.Debian and d/README.source when checking for non-free licenses. Mentions here are presumably just false-positives. Thanks to Marcelo Jorge Vieira for the report and the initial patch. (Closes: #718575) * checks/deb-format.pm: + [NT] Apply patch from Guillem Jover to fix a wrong tag being emitted on lzma compressed udebs. (Closes: #718337) * checks/debhelper.{desc,pm}: + [NT] Remove tag for dh_pycentral and dh_python being obsolete. Thanks to Luca Falavigna for the report. (Closes: #720337) + [BR] Fix false-negative in the brace expansion check when the comma was next to one of the braces. (Closes: #708381) * checks/files.{desc,pm}: + [NT] Remove tag for missing dependency on python-central. Thanks to Luca Falavigna for the report. (Closes: #718690) + [BR] Rename font-adobe-copyrighted-fragment tags. (Closes: #718820) + [NT] Fix false positive warning about embedded feedparser for python3-feedparser. Thanks to Etienne Millon for the report. (Closes: #719163) * checks/infofiles.{desc,pm}: + [NT] Apply patches from Kevin Ryde to find info files references non-existent images. (Closes: #719450) * checks/init.d.{desc,pm}: + [NT] Revert init.d-script-call-internal-API for now. Refer to #710559 for more information. * checks/patch-systems.{desc,pm}: + [BR] Add tag for DEP-3 template descriptions. (Closes: #717633) * checks/phppear.{desc,pm}: + [NT] Apply patch from Mathieu Parent to fix false positive missing-pkg-php-tools-addon. Thanks to Thijs Kinkhorst for the report. (Closes: #718167) + [NT] Apply patch form Mathieu Parent to reduce the severity of a "composer package" not using pkg-php-tools to wishlist. Thanks to Thijs Kinkhorst for the report. (Closes: #718862) + [NT] Apply patch from Vincent Bernat to downgrade severity of not using phppear substvars for description and synopsis plus explain that they should not be used blindly. Thanks to Mathieu Parent for the review of the patch. (Closes: #719788) * checks/po-debconf.{desc,pm}: + [NT] Fix false-positive translated-default-field for fields preceded by a "true" Deb822 comment. Thanks to Ron Lee for the report. (Closes: #637881) * checks/scripts.pm: + [NT] Stop emitting package-uses-local-diversion for calls to dpkg-divert without --package as dpkg 1.16.0 (Wheezy) handles this case correctly. Thanks to Raphaël Hertzog for the report. (Closes: #679132) + [NT] Apply patch from Vincent Cheng to fix warning for executable jar files. Thanks to Matthew Johnson for the report. (Closes: #539315) * checks/systemd.pm: + [NT] Apply patch from Stig Sandbeck Mathisen to allow systemd files being symlinks to /dev/null. (Closes: #718563) * debian/changelog: + [NT] Correct some older tag summaries to include some missing tags in the entry for 2.5.11 and 2.5.12. * debian/copyright: + [NT] Add Bastien ROUCARIÈS to maintainers (as BR). * frontend/lintian: + [NT] Move some handling of overrides to Lintian::Tags. * lib/Lintian/Processable/Package.pm: + [NT] Refuse to process .dsc files that are missing the Source field. This prevents some warnings about using undefined values. Thanks to Guillem Jover for the report. (Closes: #718351) * lib/Lintian/Tags.pm: + [NT] Take over some handling of overrides from the frontend. * lib/Lintian/Util.pm: + [NT] Fix problem in normalize_pkg_path, where "."-entries were not properly filtered out. * profiles/debian/ftp-master-auto-reject.profile: + [NT] Refresh with new tags. Thanks to Gregor Herrmann for the reminder. lintian (2.5.15) unstable; urgency=low "use less qw(memory);" * Summary of tag changes: + Added: - composer-package-without-pkg-php-tools-builddep - init-script-is-not-a-file - init.d-script-does-not-source-init-functions - maintainer-script-calls-systemctl - manpage-named-after-build-path - missing-pkg-php-tools-addon - missing-pkg-php-tools-buildsystem - pear-channel-without-pkg-php-tools-builddep - pear-package-but-missing-dependency - pear-package-feature-requires-newer-pkg-php-tools - pear-package-not-using-substvar - pear-package-without-pkg-php-tools-builddep - pecl-package-requires-build-dependency - service-file-is-not-a-file - systemd-no-service-for-init-script - systemd-service-file-outside-lib - systemd-service-file-refers-to-obsolete-target - systemd-tmpfiles.d-outside-usr-lib * checks/*.pm: + [NT] Add final return to all subs in checks and ensure that the "run" sub complies with Lintian's own recommendation. * checks/binary.pm: + [NT] Apply patch from Bastien Roucariès to fix false- negatives for debug files in usr/lib/debug/.build-id. (Closes: #714191) + [NT] Apply patch from Bastien Roucariès to fix false- positive debug-file-with-no-debug-symbols for files using compressed debug sections. * checks/fields.pm: + [NT] Apply patch from Niko Tyni to fix false-positive package-superseded-by-perl for packages with epochs. (Closes: #710919) * checks/files.pm: + [NT] Fix some false-negative extra-license-file. Thanks to Helmut Grohne for the report and the advices. (Closes: #701177) * checks/manpages.{desc,pm}: + [NT] Apply patch from Bastien Roucariès to test for manpages named after their build path. (Closes: #713884) + [NT] Skip some checks on empty manpages. (Closes: #700502) * checks/phppear.{desc,pm}: + [NT] New check based on patches from Mathieu Parent. (Closes: #708551) * checks/source-copyright.pm: + [NT] Some tags now refer to the line number of the field with an issue instead of the line number of the paragraph. * checks/systemd.{desc,pm}: + [NT] New check for systemd related files. Thanks to Michael Stapelberg for providing the check and the tests. (Closes: #704197) * collection/copyright-file: + [NT] Avoid creating an empty copyright file when it is not needed. * collection/unpacked: + [NT] Skip signature checking of source packages. (Closes: #707534) * data/binary/embedded-libs: + [NT] Rename libgd2 to libgd. (Closes: #708367) * data/fields/virtual-packages: + [NT] Refresh. Thanks to Laurent Bigonville for the reminder. (Closes: #712641) * data/files/{fonts,locale-codes}: + [NT] Refresh. * data/menu-format/add-categories: + [NT] Apply patch from Bastien Roucariès to include newer categories. Thanks to Yves-Alexis Perez for the report. (Closes: #712932) * data/output/manual-references: + [NT] Refresh. * data/scripts/interpreters: + [NT] Apply patch from Bastien Roucariès to include gjs. Thanks to Andreas Henriksson for the report. (Closes: #712607) * debian/control: + [NT] Add Build-Depends on pkg-php-tools for a new test. * debian/dirs: + [NT] Remove /var/lib/lintian, we no longer use it. * debian/docs: + [NT] Add auto-generated API documentation. * debian/lintian.examples: + [NT] New file to install examples. (Closes: #707906) * debian/rules: + [NT] Generate API documentation during build. + [NT] Call dh_installexamples. * doc/examples/*: + [NT] New example files. * doc/lintian.xml: + [NT] Add small example vendor profile to the user manual. * frontend/lintian: + [NT] Add information about memory usage with -ddd if Devel::Size is available. A more detailed breakdown of the memory usage with -dddd. * lib/Lintian/Collect/Package.pm: + [NT] Share some string values in the file_info and in the (X_)index methods. This reduces memory usage a bit. * lib/Lintian/Collect/Source.pm: + [NT] "binaries" and "binary_field" now only exposes data about entries in d/control with a valid package name. + [NT] Document that "binaries" return an unordered list. + [NT] relation and relation_noarch now recognises "Build-Depends-Arch". * lib/Lintian/Path.pm: + [NT] Fix bug in the overloaded qr// operator. * lib/Lintian/ProcessablePool.pm: + [NT] Fix a bug that could cause .changes files to be silently skipped. This only occurred if a related package was passed on the command line before the .changes file. Thanks to Salvo Tomaselli for reporting the bug. (Closes: #714437) * lib/Lintian/Relation.pm: + [NT] Apply some memory optimisations to some common cases. * lib/Lintian/Tags.pm: + [NT] Use croak instead of die when a check emits an unknown tag. This gives the check writer a better chance of finding where the problem occurred. * lib/Lintian/Util.pm: + [NT] Have parse_dpkg_control and visit_dpkg_control give a more detailed line number information about paragraphs. * reporting/harness: + [NT] Clear some variables before running Lintian in the hope it will reduce the memory pressure on "long runs". + [NT] Remove support for "$LINTIAN_GPG_CHECK" config variable. Lintian no longer checks any signatures. lintian (2.5.14) unstable; urgency=low * Summary of tag changes: + Removed: - upstream-version-not-numeric * checks/*: + [NT] Rename all checks to include the extension ".pm". (Closes: #710405) + [JW] Fix typos in several files. * checks/binaries.pm: + [NT] Also check for the presence of "mcount" to detect whether a binary was compiled with profiling. (Closes: #712124) + [NT] Ignore "teH" when checking for spelling mistakes in ELF binaries. Thanks to Ryan Kavanagh for the report. (Closes: #711207) * checks/cruft.pm: + [NT] Revise a few tests that relied on file(1) on text files. + [NT] Apply patches from Bastien Roucariès to fix some false positives in the GDFL related checks. (Closes: #711119) + [NT] Show the full path with source-contains-unsafe-symlink rather than just the "basename". * checks/fields.{desc,pm}: + [NT] Fix typo, thanks to Adrien Cunin. + [NT] Retire upstream-version-not-numeric which can no longer be emitted. Versions that would previously trigger this tag will now trigger bad-version-number instead. + [NT] Properly quote package names used in regular expressions. Thanks to Mattias Ellert for the report. (Closes: #714427) * checks/menus.pm: + [NT] Fix a bug in checking for symlinks that could possibly make lintian follow an unsafe symlink. (CVE-2013-1429) * coll/*: + [NT] Set "Auto-Remove: yes" on several collections to reduce the "inode pressure" on lintian.d.o. + [NT] Reduce the number of inodes used by removing or not creating some empty files and directories. * coll/debfiles: + [NT] Remove test of the presence of unpacked. * coll/file-info{,.desc}: + [NT] Disable "ascii" test in file(1). For some packages this may greatly reduce the overhead of running the file-info collection. * coll/hardening-info: + [NT] Skip files in usr/lib/debug/. * data/binaries/embedded-libs: + [RG] Check for embedded copies of libraw. (Closes: #711090) * data/fields/obsolete-packages: + [NT] Add texi2html. Thanks to Ryan Kavanagh for the report. (Closes: #710466) * data/scripts/interpreters: + [NT] Add plackup (libplack-perl) as a known interpreter. Thanks to Robert James Clay for the report. (Closes: #712405) * doc/{lintian.xml,README.in}: + [JW] Fix typos. * lib/Lintian/CheckScript.pm: + [NT] Prefer loading checks with ".pm", but fall back to loading checks without the extension (with a deprecation warning). * lib/Lintian/Collect/Package.pm: + [NT] sorted_index (etc.) now returns L::Path objects rather than just file names. * lib/Lintian/{Path,Util}.pm: + [NT] Remove deprecated methods. * lib/Lintian/Path.pm: + [NT] Overload some operators. * man/lintian.pod.in: + [JW] Fix typos. * reporting/config: + [NT] Replace /org with /srv. * reporting/harness: + [NT] Fix bug where harness might schedule the same group multiple times. (Closes: #710380) * t/runtests: + [NT] Include a summary of all skipped and failed tests. lintian (2.5.13) unstable; urgency=low Upload to unstable. * Summary of tag changes: + Added: - conffile-is-not-in-package - debconf-translation-using-general-list - dh_pysupport-is-obsolete - init.d-script-call-internal-API + Removed: - debhelper-maintscript-needs-versioned-build-depends - debhelper-script-needs-versioned-build-depends - missing-pre-dependency-on-multiarch-support * checks/*: + [NT] Use Lintian::Path objects as arguments to unpacked and control where these objects are available. * checks/binaries: + [RA] Do not complain about kernel modules with no shared library dependency information. Patch from Guillem Jover. (Closes: #706242) + [NT] Demote the certainty of hardening-no-fortify-functions to "wild-guess". (Closes: #709415) * checks/changes: + [NT] Recognise "<dist>-backports-sloppy" as a valid distribution. Thanks to Romain Francoise for the report and the patch. (Closes: #705170) * checks/conffiles: + [NT] Strip whitespace from conffiles similar to how dpkg does it. + [NT] When emitting duplicate-conffile, avoid repeating other tags related to that conffile. The exception to this is relative-conffile where the original file might not have triggered that tag. + [NT] Test that all paths listed in the "conffiles" control file is actually in the package being tested. * checks/cruft{,.desc}: + [JW] Correct the name of the architecture listed in description of the tag outdated-autotools-helper-file. (Closes: #706166) + [NT] Flag all absolute symlinks in source packages as "unsafe". (Closes: #697164) + [NT] Fix false-positive source-contains-unsafe-symlink for symlinks ascending one or more levels without escaping the package root. Thanks to Michael Schutte for the report and the patch. (Closes: #707742) + [NT] Add a series of patches from Bastien Roucariès to reduce the number of false positives and negatives in the GDFL related checks. (Closes: #708957, #708881, #709379, #709886) * checks/debhelper{,.desc}: + [NT] Retire some tags that are no longer relevant in the Jessie development cycle. + [NT] Apply patch from Luca Falavigna to detect uses of the deprecated tool, dh_pysupport. (Closes: #709615) * checks/description: + [NT] Skip extended-description-is-probably-too-short for -dbg packages. Thanks to Paul Wise for the suggestion. (Closes: #705441) * checks/fields.desc: + [NT] Clarify that the "canonical URI" for Vcs fields is based on an announcement from the Alioth admins. Thanks to Torquil Sørensen for the report. (Closes: #705835) + [NT] Clarify in the tag description of some tags related to "Vcs-*" fields that the tags are based on a data list (and is not a result of an HTTP request while checking the package). * checks/files{,.desc}: + [JW,NT] Drop missing-pre-dependency-on-multiarch-support now that multiarch-support is in stable. (Closes: #709121) + [JW] Fix typo in a tag description. (Closes: #709455) + [NT] Change the "ancient-file" cut-off date to 1975 from 1984. Thanks to Ole Streicher and Ansgar Burchardt for the report. (Closes: #710086) * checks/group-checks.desc: + [NT] Add missing semi-colon in tag description. Thanks to Andrey Rahmatullin for the report. (Closes: #706827) * checks/init.d{,.desc}: + [NT] Add missing import of utility function that could cause Lintian to crash in some cases. + [NT] Add check for uses of /lib/init in maintainer scripts. Thanks to Josh Triplett for the report and to Bastien Roucariès for the patch. (Closes: #670092) * checks/menu-format: + [NT] Fix use of uninitialized variable when menu file uses a section of "/". (Closes: #708755) * checks/po-debconf{,.desc}: + [NT] Remove tests for commands that are provided by Lintian's dependencies. + [RA] Add new check for a Language-Team field in a translation pointing to the debian-i18n mailing list. Based on work by victory. (Closes: #705197) * checks/rules: + [NT] Remove check for "dpkg-dev (>= 1.16.1~)" build-dependency, since this is trivially satisfied in Wheezy and Jessie. * collection/*-helper: + [NT] Move all collection helpers to helpers/coll. * collection/debfiles: + [NT] Replace makeshift "is_ancestor_of" check with the one from L::Util. * collection/java-info: + [NT] Update a regex to cope with file(1) now calling JAR files for "Java Jar file" rather than "Zip archive". (Closes: #707400) * data/changes-file/known-dists: + [NT] Add jessie and remove lenny. * data/debhelper/dh_{addons,commands}-manual: + [NT] Remove entries/versions that are no longer relevant. * data/fields/perl-provides: + [NT] Refresh against sid. (Closes: #708178) * data/spelling/corrections: + [NT] Add correction for unnecessarily. Thanks to Guillem Jover for the suggestion. (Closes: #706241) * debian/control: + [NT] Remove irrelevant (versioned) dependencies that are now trivially satisfied in stable. + [NT] Recommend libautodie-perl (>= 2.18) and libperlio-gzip-perl as these can greatly effect performance of Lintian. * debian/lintian.install: + [NT] Install "helpers" as /usr/share/lintian/helpers * debian/{postinst,prerm}: + [NT] Remove unused maintainer scripts now that stable's libc-bin provides a C.UTF-8. * debian/triggers: + [NT] Remove unused trigger now that stable's libc-bin provides a C.UTF-8. * doc/tutorial/**/*.pod: + [NT] Fix a number of spelling mistakes in the POD. * doc/tutorial/Lintian/Tutorial/WritingChecks.pod: + [NT] Add a section about how to avoid some common ways of introducing security issues. * frontend/lintian: + [NT] Ignore LINTIAN_ROOT/locale and /var/lib/lintian/locale. + [NT] Export LINTIAN_INCLUDE_DIRS and LINTIAN_HELPERS_DIR to subprocesses. These are ":"-separated lists of dirs used by Lintian. The first being a list of raw include dirs and the second being a list of helpers dirs in these include dirs. + [NT] Fix a bug where the exit code from lintian would sometimes be an undocumented value (>= 3). * helpers/coll: + [NT] New directory containing some helpers that used to be in directly collection. * lib/*: + [NT] Fix a number of spelling mistakes in the POD. * lib/Lintian/Collect/{Package,Binary}.pm: + [NT] Accept Lintian::Path objects to unpacked and control. * lib/Lintian/Collect/Source.pm: + [NT] Provide a "source" specific is_non_free method that reads the "Section"-field from d/control instead of the .dsc. This fixes false-positives "problematic licenses" for non-free packages. Thanks to Bastien Roucariès for the report. (Closes: #709041) * lib/Lintian/Path.pm: + [NT] Rename link_resolved to link_normalized. * lib/Lintian/Unpacker.pm: + [NT] On platform that support it, change the "name" of the process running the collection. This makes it easier to see what collections are currently being run (like in the versions prior to 2.5.12). For platforms, where it is not possible to change the name of a running process, the unpack jobs will simply be named "lintian" like its parent. * lib/Lintian/Util.pm: + [NT] Fix a race condition in touch_file. + [NT] Add sanity check in perm2oct for bad permission strings and throw errors when they are seen (instead of returning 0). + [NT] Require that the input file is present for read_dpkg_control and get_deb_control. + [NT] In copy_dir, pass --reflink=auto to cp. + [NT] Replace resolve_pkg_path with to normalize_pkg_path. The latter has slightly different return values in some cases. + [NT] Avoid the LOCPATH dance to find the path to an UTF-8 locale now that stable's libc-bin provides C.UTF-8 for us. + [NT] Add new function, locate_helper_tool, to find helper tools. * private/refresh-perl-provides: + [NT] Apply patch from Niko Tyni to improve Lintian's data file about Perl modules provided by perl-base. * profiles/debian/extra-apache2.profile: + [NT] Removed, merged into debian/main.profile. * profiles/debian/ftp-master-auto-reject.profile: + [NT] Include md5sums-mismatch and non-standard-toplevel-dir as an overridable tag. * profiles/debian/main.profile: + [NT] Include the apache2 check. Thanks to Arno Töll for the report. (Closes: #708943) * reporting/harness: + [NT] Stop exporting ENV variables that lintian no longer cares about. * vendors/ubuntu/main/data/changes-file/known-dists: + [NT] Add "saucy" as known Ubuntu distribution. Thanks to Iain Lane for the report. lintian (2.5.12) experimental; urgency=medium * Summary of tag changes: + Added: - ambiguous-paragraph-in-dep5-copyright - binary-file-built-without-LFS-support - debian-tests-control-is-not-a-regular-file - debian-tests-control-uses-national-encoding - debug-file-with-no-debug-symbols - desktop-entry-lacks-keywords-entry - dir-or-file-in-build-tree - dir-or-file-in-etc-opt - dir-or-file-in-home - file-name-is-not-valid-UTF-8 - font-adobe-copyrighted-fragment-no-credit - font-package-not-multi-arch-foreign - illegal-runtime-test-name - inconsistent-testsuite-field - license-problem-gfdl-invariants - license-problem-gfdl-invariants-empty - menu-icon-uses-relative-path - missing-runtime-test-file - missing-runtime-tests-field - package-contains-broken-symlink-wildcard - package-contains-unsafe-symlink - runtime-test-file-is-not-a-regular-file - source-contains-unsafe-symlink - syntax-error-in-debian-tests-control - unknown-runtime-tests-feature - unknown-runtime-tests-field - unknown-runtime-tests-restriction - unknown-testsuite - vcs-field-bitrotted - vcs-git-uses-invalid-user-uri - zip-parse-error + Removed: - unneeded-build-dep-on-quilt * checks/*: + [NT] Avoid following unsafe symlinks. (CVE-2013-1429) * checks/binaries{,.desc}: + [NT] Accept libx32 as a bi-arch directory. + [NT] Correct reference policy reference. Thanks to Samuel Bronson for the correction. (Closes: #698234) + [NT] Detect debug ELF binaries with no debug symbols. Thanks to Nelson A. de Oliveira for the report. (Closes: #668437) + [NT] Check for binaries built without LFS. This can only be checked for 32bit binaries as 64bit binaries have LFS by definition. Thanks to Guillem Jover for the report and patches. (Closes: #670963) + [NT] Apply patch from Samuel Bronson to bump severity (but decrease certainty) of the "not linked against libc" tags. (Closes: #698720) * checks/copyright: + [NT] Apply patch from Evgeni Golov to avoid false positive tag when the MPL-2.0 license appears in the copyright file. (See #626454) * checks/cruft{,.desc}: + [NT] Do not emit the license-problem-json-evil tag for non-free packages. + [NT] Apply patch from Bastien Roucariès to catch GFDL licenses with invariants (etc.). (Closes: #695967) + [NT] Correct description of an autotools tag. Thanks to Alberto Garcia and Timo Juhani Lindfors for the report and patch. (Closes: #703490) + [NT] Check for unsafe symlinks (outside common testsuite paths). * checks/debconf: + [NT] Fix several path traversal issues that could leak information about the host system. (CVE-2013-1429) * checks/debhelper{,.desc}: + [JW] Assume the proper python helpers are called if a (Makefile) variable is used. (Closes: #659335) + [JW] Promote python-depends-but-no-python-helper and python3-depends-but-no-python3-helper to non-experimental. * checks/description: + [NT] Ignore "extended-description-is-probably-too-short" for metapackages. Thanks to Axel Beckert for the report. * checks/duplicate-files.desc: + [NT] Demote severity of "duplicate-files" tag to pedantic. * checks/fields{,.desc}: + [NT] Apply patch from Samuel Bronson to detect some broken or poor Vcs URLs. Also thanks to James McCoy for his report. (Closes: #652595) + [JW] Reduce severity of b-d-on-python-dev-with-no-arch-any to minor. + [NT] Skip "depends-on-packaging-dev" for metapackages. + [NT] Apply patch from Gregor Herrmann to catch metacpan homepage links with versions. (Closes: #700110) + [NT] Apply patch from Vasudev Kamath to detect fonts packages without a Multi-Arch foreign (or allowed) field. (Closes: #701061) * checks/files{,.desc}: + [NT] Apply patch from Bastien Roucariès to catch paths in (common) build dirs. (Closes: #678857) + [NT] Do not suggest the use of "virtual package" as a way to suppress empty-binary-package. Lintian will still accept it the phrase for now. + [NT] Accept libx32 as a bi-arch directory. + [NT] Ignore gzipped lintian overrides when checking whether a package is empty. + [NT] Fix typo of Pre-Depends, thanks to Raúl Benencia for spotting it. (Closes: #699452) + [NT] Add patch from Bastien Roucariès to check for another adobe font license issues. (Closes: #705175) + [NT] Test for use of file names that are contain invalid UTF-8 byte sequences. Thanks to Helmut Grohne for the suggestion. (Closes: #704446) * checks/init.d: + [NT] Fix regression where Lintian would not properly match init.d passed to update-rc.d. Thanks to Michael Meskes for reporting. (Closes: #698602) + [NT] Fix possible symlink traversal that could leak information about the host system. (CVE-2013-1429) * checks/java{,.desc}: + [NT] Report possibly broken jar files. * checks/md5sums: + [NT] Fix path traversal issue that could leak information about the host system. * checks/menu-format{,.desc}: + [NT] Apply patch from Bastien Roucariès to detect missing "Keywords" in desktop files. Thanks to Jeremy Bicha for the report. (Closes: #693918) + [NT] Apply patch from Matthias Klumpp to add missing "Science" category. (Closes: #697693) + [NT] Apply patch from Thomas Preud'homme to detect uses of relative icons in menu files. (Closes: #697916) + [NT] Document why only XPM are allowed in the tag description of menu-icon-not-in-xpm-format. (Closes: 591812) * checks/menus: + [NT] Fix path traversal issue that could leak information about the host system. (CVE-2013-1429) * checks/patch-systems{,.desc}: + [NT] Retire unneeded-build-dep-on-quilt, it is only a pedantic tag and apparently not too accurate. Thanks to Charles Plessy and Frank Kuester for the reports. (Closes: #615516, #681061) * checks/po-debconf: + [NT] Unconditionally set INTLTOOL_EXTRACT. * checks/rules: + [NT] Remove ant1.7 as alternative to ant as ant1.7 has been removed from Wheezy. * checks/scripts: + [NT] Treat scripts in /usr/src/ like they were documentation. * checks/shared-libs: + [NT] Special case gcc packages when looking for dev symlinks. gcc stores its dev symlinks in some special directories. + [NT] Fix path traversal issue that could leak information about the host system. (CVE-2013-1429) * checks/source-copyright{,.desc}: + [JW,NT] Add a separate tag for ambiguous DEP-5 paragraphs, where Lintian cannot reliably figure out what is intended. Thanks to Julian Taylor for the report. (Closes: #652380) + [NT] Add paragraph line number to the "field typo" tag. * checks/symlinks{,.desc}: + [NT] Warn about broken symlinks that contains a literal "*" in their target. This is usually a sign that a wildcard did not properly expand. Thanks to Bernd Zeimetz for the report. (Closes: #683737) + [NT] Demote certainty of package-contains-broken-symlink to wild-guess. + [NT] Check for unsafe symlinks in binary packages. * checks/testsuite{,.desc}: + [NT] New check written by Nicolas Boulenguez to catch some mistakes with the new autopkgtest tests. * collection/*: + [NT] Avoid reading files outside the package root. (CVE-2013-1429) * collection/{changelog-file,debian-readme}: + [NT] Ignore files in usr/doc/<pkg>. + [NT] Skip collection if usr/share/doc/<pkg> is not contained within the package root. (CVE-2013-1429) * collection/hardening-info{,-helper,.desc}: + [NT] Whitelist "memset" and "memmove" as "always safe" functions. Thanks to Sebastian Ramacher for the suggestion and Roland Stigge for the report. (Closes: #685299) + [NT] Remove work around for #677530 * collection/index{,.desc}: + [NT] Fix missing trailing slash on dirnames and bump index version accordingly. Thanks to Nicolas Boulenguez for noticing. * collection/java-info: + [NT] Gracefully handle broken Jar files. Thanks to Paul Tagliamonte for the report. (Closes: #700543) * collection/strings: + [NT] Fix a regression in filtering out "debug" ELF binaries. * data/binaries/arch-regex: + [NT] Recognise x32 as an ELF32 binary. * data/fields/obsolete-packages: + [NT] Apply patch from Guillem Jover to add fuse-utils as an obsolete package. (Closes: #697534) * data/files/locale-codes: + [NT] Refresh against sid data files. * data/menu-format/add-categories: + [NT] Apply patch from Matthias Klumpp to add missing subcategories. * data/output/manual-references: + [NT] Refresh with Policy 3.9.4. * data/scripts/interpreter: + [NT] Add cfagent as a known interpreter. Thanks to Andreas Mundt for the suggestion. (Closes: #699670) * data/scripts/versioned-interpreters: + [NT] Apply patch from Thijs Kinkhorst to add lua5.2 as a versioned alternative to lua. (Closes: #698704) * data/shared-libs/ldconfig-dirs: + [NT] Add libx32 and usr/libx32 used by some gcc x32 bi-arch packages. * data/spelling/corrections{,-case}: + [JW] Add correction for "privileges". (Closes: #700882) + [NT] Warn about incorrect case of "OpenStreetMap". Thanks to Paul Wise for the patch. * debian/control: + [NT] Bump dependency on hardening-includes to avoid having to work around #677530. + [NT] Add XS-Testsuite for autopkgtest tests. + [NT] Add Build-Depends on libtest-perl-critic-perl. + [NT] Add (Build-)Depends on liblist-moreutils-perl and libfile-basedir-perl. + [NT] Add versioned (Build)-Depends on perl | libautodie-perl. * debian/lintian.install: + [NT] Install Test::Lintian in /usr/share/lintian/lib. * debian/rules: + [NT] Include the new Tutorial pods in the "api-doc" target. * debian/tests/{control,testsuite,testsuite-legacy}: + [NT] New file. * doc/tutorial/Lintian/Tutorial{/WritingChecks}.pod: + [NT] Add POD tutorial on writing checks. * frontend/lintian{,-info}: + [NT] Add --include-dir command line option. This can be used to load additional Lintian checks, profiles, libraries or data. (Closes: #359059) * frontend/lintian: + [NT] Remove "make-shift" lab-query support now that Lintian::Lab supports it. + [NT] Add new command line option "--[no-]user-dirs" to disable loading from $HOME/.lintian{rc,/} and /etc/lintian{rc,/}. + [NT] Error out early if a check cannot be loaded. + [NT] Make --suppress-tags{,--from-file} do something when used with --check-part and document that --tags causes the option to be ignored. + [NT] Accept the magic token "{VENDOR}" as a part of the value to --profile. + [NT] Add new command line option "--ignore-lintian-env" to make lintian ignore all environment variables starting with LINTIAN_. + [NT] Add a new command line option --no-display-experimental and --default-display-level. These options can be used to override some display options from the config file. (Closes: #703985) + [NT] Also search for the lintianrc file in XDG_CONFIG_{HOME,DIRS}. The default paths are now ~/.config/lintian/lintianrc and /etc/xdg/lintian/lintianrc. The previous lintianrc paths are still accepted. + [NT] Stop looking for lintianrc files in the LINTIAN_ROOT. + [NT] Stop exporting LINTIAN_LAB to processes run by lintian. + [NT] Use of --root (or setting LINTIAN_ROOT) will now imply the option --no-user-dirs by default. * lib/*: + [NT] Use "parent" instead of the "base" pragma. * lib/Lintian/Collect.pm: + [NT] Add "is_non_free" method to easily check of a given package appears to be non-free. * lib/Lintian/Collect/Binary.pm: + [NT] Re-instate the "TEXTREL" marker. This fixes a regression where shared-libs compiled without pic was not reported. Thanks to Dmitry Shachnev for the assistance in debugging this. + [NT] Recognise packages in section "metapackages" as a metapackage. Thanks to Axel Beckert for the report. (Closes: #698610) * lib/Lintian/Collect/Package.pm: + [NT] Ensure the "root" entry of indices do not contain itself. (Closes: #695866) + [NT] Add warning to unpacked and debfiles when they are given a path with leading slash or dot-slash. + [NT] When a check requests access to a raw file (or dir) in the package, ensure that the resulting path does not "escape" the top level directory. This should preemptively guard against some (but not all) traversal attempts. * lib/Lintian/Path.pm: + [NT] Document that link_resolved is not sufficient to test the "safeness" of a symlink. * lib/Lintian/Command/Simple.pm: + [NT] Use constant time lookup access instead of linear scan with "hashref" wait. * lib/Lintian/Lab.pm: + [NT] Add lab_query method to handle lab-queries directly. + [NT] Fix bitrot of repair_lab and rename it to repair for consistency. * lib/Lintian/Lab{,/Manifest}.pm: + [NT] Add support for grouping of manifests. * lib/Lintian/Lab/Manifest.pm: + [NT] Fix an error in visit_all when sufficient keys for an exact look up was given. * lib/Lintian/Processable.pm: + [NT] Fix issue where packages loaded from the lab indices would sometimes get a wrong source-version. * lib/Lintian/Relation/Version.pm: + [NT] Add and export "versions_comparator" that can be used for sorting purposes. * lib/Lintian/Tag/Info.pm: + [NT] Use "&" in the manpage ref URLs to generate proper HTML. Thanks to Vasudev Kamath for reporting the issue. + [NT] Produce a more helpful error message when a tag has an invalid severity or certainty. (Closes: #703978) * lib/Lintian/Tags.pm: + [NT] Deal with parsing an ambiguous override a bit better. This solves false-positive malformed-override, where Lintian misparsed the tag name as a package name. (Closes: #699628) * lib/Lintian/Util.pm: + [NT] Reject partially signed Deb822 files. Most Deb822 files are not signed at all; but those that are should be completely covered by a signature. (Closes: #696230) + [ADB] Fix a typo in the matching of expected delimiters for some signed messages; thanks Samuel Bronson. + [NT] Add sub to check if a path is contained within a given dir. + [NT] Fix bug in resolve_pkg_path that made it resolve some links incorrectly. + [NT] Document that resolve_pkg_path is not sufficient to test the "safeness" of a symlink. * man/lintian.pod.in: + [NT] Document that --pedantic is the same as "-L +=pedantic". (Closes: #703989) + [NT] Fix typo of the "override" variable in the config example. * private/refresh-locale-codes: + [JW,NT] Ignore the "zxx" locale code, which means "No linguistic content". (Closes: #692548) * reporting/config: + [JP] Remove unused $GRAPH_DIR configuration option. * reporting/graphs/{statistics,tags}.gpi: + [JP] Tweak graph size to allow longer labels, and force font family. * reporting/harness: + [NT] Add --to-stdout option to emit log information to stdout as well as the log files. + [NT] Always schedule packages in groups. Otherwise, binNMU'ed binaries would not be tested together with their source package (and architecture independent packages). + [NT] Schedule groups in chunks (default 512 per chunk). This makes the Lintian processes shorter and makes memory reclaimable sooner. (Closes: #695839) + [NT] Remove "make-shift" lab-query support now that Lintian::Lab supports it. * reporting/html_reports: + [NT] Update xrefs to include source version. + [NT] Generate a text file suitable for Apache's RewriteMap to map source packages to the full report for that source. Thanks to Joerg "Ganneff" Jaspert for the suggestion to use RewriteMap. (Closes: #696960) + [JP] Fix version labels glitches. + [JP] Use global $GRAPHS_RANGE_DAYS. + [JP] Pass graph variables to index and tag templates. * reporting/lintian.css: + [JP] Tweak graph alignment. * reporting/templates/{packages,maintainer,tag}.tmpl: + [NT] Properly handle multiple versions of the same source and add versioned anchors to them. * reporting/templates/{index,tag}.tmpl: + [JP] Include history graphs in HTML templates. * reporting/templates/tag.tmpl: + [NT] Fix "empty <ul>" tag when tag has no "extra" information. Thanks to Vasudev Kamath for reporting the issue. lintian (2.5.11) experimental; urgency=low * Summary of tag changes: + Added: - conffile-has-bad-file-type - debug-package-for-multi-arch-same-pkg-not-coinstallable - dm-upload-allowed-is-obsolete - field-name-typo-in-dep5-copyright - font-adobe-copyrighted-fragment - license-problem-json-evil - maintainer-script-has-unexpanded-debhelper-token - shlibs-uses-obsolete-relation - untranslatable-debconf-templates - vcs-field-has-unexpected-spaces - vcs-field-not-canonical + Removed: - apparently-truncated-elf-binary - data.tar.xz-member-without-dpkg-pre-depends - debhelper-overrides-need-versioned-build-depends - no-source-field - preinst-uses-dpkg-maintscript-helper-without-predepends * checks/*: + [NT] Remove assumption that lintian will chdir into the lab before calling the check. + [NT] Be better at avoiding false-positive spelling errors for references to packages that also happen to be common spelling mistake. Thanks to Paul Tagliamonte for the report. (Closes: #687464) * checks/binaries{,.desc}: + [NT] Merge apparently-truncated-elf-binary into apparently-corrupted-elf-binary. + [NT] Remove some references to objdump in tag descriptions as Lintian uses readelf. + [JW,NT] Update the "extract SONAME" shell snippet to properly handle SONAMEs with uppercase letters. + [JW] Recognise any path with matching the GNU multi-arch triplet as a "Multi-arch: same"-safe directory. Thanks to Matthias Klose for the report. (Closes: #681410) * checks/changelog-file: + [NT] Emit "missing changelog" for packages that are missing their usr/share/doc/<pkg>/ dir and do not have a doc symlink. Thanks to Faheem Mitha for the report. (Closes: #683224) * checks/conffiles{,.desc}: + [NT] Remove leading slash on the filename when emitting file-in-etc-rc.d-marked-as-conffile. + [NT] Add check for "non-file" conffiles. Thanks to Guillem Jover for the report. (Closes: #690910) * checks/control-file.desc: + [NT] Bump obsolete-relation-form-in-source to serious as these forms are now "must not" instead of "should not". * checks/copyright.desc: + [NT] Bump debian-copyright-file-uses-obsolete-national-encoding to serious as copyright files must now be UTF-8 encoded. * checks/cruft{,.desc}: + [NT] Detect MS-DOS executables as windows binaries. + [NT] Bump the version of config.{guess,sub} needed for triggering the "outdated-autotools-helper-file" tag for arm64 support. Thanks to Paul Wise for the report and the investigative work. (Closes: #690014) + [RA,NT] Extend the description of the tags {outdated,ancient}- autotools-helper-file to mention that dh-autoreconf might be helpful tool. + [NT] Apply patch from Bastien Roucariès to detect file licensed under the "Good, not Evil"-JSON license. (Closes: #692616) * checks/deb-format{,.desc}: + [NT] Retire data.tar.xz tag. (Closes: #680391) * checks/debhelper{,.desc}: + [JW,NT] Consider missing versioned build-depends on debhelper for compat 8 (or less) a pedantic issue. (Closes: #681894) + [NT] Retire debhelper-overrides-need-versioned-build-depends. * checks/fields{,.desc}: + [NT] Retire no-source-field since Lintian cannot emit it any more due to dpkg-source refusing to extract such source packages. + [NT] Add tag for using the obsolete DMUA field. Thanks to Ansgar Burchardt for the report. (Closes: #688494) + [NT] Apply patches from Bernhard R. Link to check for unintentional whitespace and use of non-canonical URIs in Vcs-* fields. (Closes: #681769) + [NT] Fix false-positive caused by insignificant whitespace. Thanks to Dima Kogan for the report. (Closes: #693589) * checks/files: + [RG] Recognise smarty3 as smarty itself. + [NT] Consider "tasksel tasks" as a meta package. (Closes: #691489) + [NT] Add patch from Bastien Roucariès to check for adobe font license issues. (Closes: #694328) * checks/group-checks{,.desc}: + [NT] Detect debug packages not co-installable with itself, when it provides debug symbols for a Multi-Arch: same package. Thanks to Carsten Hey for the report. (Closes: #678896) * checks/infofiles: + [NT] Use L::Util's gzip decompressor rather than zcat. * checks/init.d{,.desc}: + [NT] Move file-in-etc-rc.d-marked-as-conffile to conffiles check. + [NT] Use L::Collect's conffile API instead of accessing the "conffiles" control file directly. * checks/java.desc: + [NT] Remove the "experimental" marker of the Java byte-code check. * checks/manpages{,.desc}: + [CW,NT] Manually do redirects and chdir rather than invoking a shell when calling man and lexgrog. + [CW,NT] Be stricter with missing roff preprocessors by setting MANROFFSEQ to the empty string when calling man. + [CW,NT] Pass -Tutf8 -Z to man to skip an unused part of the groff pipeline. (Closes: #677874) + [CW,NT] Use the L::Util gzip decompressor to open gzipped manpages. * checks/menu-format{,.desc}: + [NT] Move a table of categories to a data file. + [NT] Update description of menu-icon-missing. Lintian is now sometimes able to find the icon in dependencies (if they are built from the same source). Thanks to Ryan Kavanagh for the report and the suggested patch. (Closes: #683516) * checks/md5sums: + [NT] Use L::Collect's conffile API instead of accessing the "conffiles" control file directly. * checks/po-debconf{,.desc}: + [NT] Check for untranslatable templates that should be translatable. Thanks to David Prévot for the report and the patch. (Closes: #686179) * checks/scripts{,.desc}: + [NT] Retire check for dpkg-maintscript-helper in preinst. (Closes: #685497) + [NT] Fix false positive "executable-not-elf-or-script" when the file is an executable hardlink to a script. + [NT] Check maintainer scripts for unexpanded #DEBHELPER# tokens. Thanks to Cyril "KiBi" Brulebois for the suggestion. + [NT] Fix false-positive for removal of device files as /dev/shm is not a device. Thanks to Steve Langasek for the report and Roger Leigh for the extra info. (Closes: #693442) * checks/shared-libs{,.desc}: + [NT] Clarify the description of dev-pkg-without-shlib-symlink to mention that the dev symlink is always expected in /usr. + [NT] Add missing "+" in libtool regex. Thanks to Leo 'costela' Antunes for the report. + [RA,NT] Check for use of obsolete "<" and ">" in shlibs control files. (Closes: #660655) * checks/source-copyright{,.desc}: + [NT] Check for possible misspellings of known field names. (Closes: #678639) + [NT] Fix typo of paragraph. Thanks to Logan Rosen for spotting it. (Closes: #693013) * checks/version-substvars{,.desc}: + [JW,NT] Extend version-substvar-for-external-package to all relations. Previously it was only triggered for strong dependency relations. (Closes: #658474) * collection/deb-format.desc: + [NT] Remove unneeded changelog-file from "Needs-Info". * collection/objdump-info{,-helper,.desc}: + [NT] Change the output format for the collection and bump the version of the collection accordingly. + [NT] Apply patch from Peter Pentchev to ensure set{u,g}id ELF binaries are properly processed, even when Lintian is run as root. (Closes: #686352) * data/binaries/embedded-libs: + [RG] Check for embedded copies of jsoncpp. * data/fields/archive-sections: + [NT] Add new "tasks" section. * data/menu-format/add-categories: + [NT] New file. * data/output/ftp-master-{,non}fatal: + [NT] Removed, not used at run time. * data/scripts/interpreters: + [NT] Add nodejs and Rscript as a known interpreter. Thanks to Marcelo Jorge Vieira and Sébastien Boisvert for the report. (Closes: #623265, #692232) * data/spelling/corrections: + [NT,RG] Add more corrections. + [RG] Re-sort the corrections. * debian/control: + [NT] Add (Build-)Depends on libtext-levenshtein-perl. + [NT] Use anonscm.d.o in the Vcs-* fields instead of git.d.o. * debian/lintian.install: + [NT] Install Lintian perl modules in /usr/share/perl5. * debian/rules: + [NT] Add target to generate HTML API doc. Currently this is only run manually. * frontend/lintian: + [NT] Remove chdir calls for checks. + [NT] Retire depreciated command line and config options. + [NT] Refactor unpacking into Lintian::Unpacker. + [NT] Make parameter for --jobs optional. In its absence Lintian will not limit the number of parallel jobs. + [JW,NT] During the unpack phase, emit the name of the group currently being unpacked when --verbose is given. (Closes: #677890) + [JW] Fix typo of Parallelization. + [NT] Fix regression where --suppress-tags{,-from-file} was ignored if -C or -X was passed. Thanks to Thorsten Glaser for reporting it. (Closes: #688320) * lib/Lintian/Collect{,/Source}.pm: + [NT] Add optional parameter to field (and X_field) methods that denotes the default value if a field is missing. This avoid some boiler plate for callers of the methods. * lib/Lintian/Collect/Binary.pm: + [NT] Bump API for objdump method. + [NT] Add API for checking if a file is considered a conffile. * lib/Lintian/Collect/Package.pm: + [NT] Strip leading slash off files extracted from tar. * lib/Lintian/Command.pm: + [NT] Work around a leak in IPC::Run (see #301774). * lib/Lintian/Internal/FrontendUtil.pm: + [NT] Always use Dpkg::Vendor to determine the default vendor. Previously dpkg-vendor would be preferred if available. * lib/Lintian/Lab/Entry.pm: + [NT] Use the L::Collect during creation instead of manually reading the dsc for source packages. * lib/Lintian/Profile.pm: + [NT] Add support for the new optional "Load-Checks" field in profiles. + [NT] Ensure that the "lintian" check is always loaded as these tags are not emitted by check modules. Also enable the tags from the check by default. * lib/Lintian/Tags.pm: + [NT] Be explicit about the reason when rejecting an override. Thanks to Yves-Alexis Perez for the report. (Closes: #673073) * lib/Lintian/Unpacker.pm: + [NT] New file. * man/lintian.pod.in: + [NT] Remove documentation about removed options. * reporting/graphs/{statistics,tags}.gpi: + [JP] New file. * reporting/html_reports: + [JP,NT] Generate graphs of the collected history data. (Closes: #672273) + [NT] Make the mirror name configurable. * vendors/ubuntu/main/data/changes-file/known-dists: + [NT] Add "raring" as known Ubuntu distribution. Thanks to Dmitry Shachnev. (LP: #1068208) lintian (2.5.10.2) unstable; urgency=low * checks/po-debconf: + [NT] Fix dirhandle leak. * checks/source-copyright{,.desc}: + [NT] Report the correct line number for the use of commas in the "Files" field in DEP-5 copyright files. Thanks to Faheem Mitha for the report. (Closes: #683946) + [NT] Mention that syntax-error-in-dep5-copyright may hide other issues as Lintian skips some DEP-5 checks in this case. Thanks to Faheem Mitha for the report. * frontend/lintian: + [NT] Fix typo of identifier method, which causes Lintian to crash in case a "coll" cannot be started or it fails. * lib/Lintian/Profile.pm: + [NT] Use "closedir" rather than "close" to close a dir handle. lintian (2.5.10.1) unstable; urgency=low * checks/fields.desc: + [NT] Mention that cme can automate fixing some perl related tags. Thanks to gregor herrmann for the report and patch. (Closes: #680446) * checks/manpages: + [NT] Ignore wrapping issues on lines containing "file://" as those are probably also URLs. Thanks to Faheem Mitha for the report. (Closes: #682701) * data/binaries/embedded-libs: + [NT] Update source-regex for libmysqlclient. Thanks to Nicholas Bamber for the report. (Closes: #682022) * data/doc-base/sections: + [NT] Update section list. (Closes: #678650) * data/spelling/corrections: + [NT] Add new corrections. Thanks to Justin B Rye. (Closes: #681527) * debian/changelog: + [NT] Fix some typos in earlier entries. * frontend/lintian: + [NT] Fix synopsis for --no-cfg option in the help output. * lib/Lintian/Architecture.pm: + [NT] Properly handle cases like "linux-amd64" being an alias of "amd64". * lib/Lintian/Path.pm: + [NT] Always resolve hardlinks relative to the package root. * lib/Lintian/Relation.pm: + [NT] Fix handling of VISIT_OR_CLAUSE_FULL bit mask in a condition. * lib/Lintian/Tag/Info.pm: + [NT] Fix poor error message due to the wrong variable being unused. Thanks to Christoph Biedl for the report (Closes: #682941) lintian (2.5.10) unstable; urgency=low * Summary of tag changes: + Added: - incompatible-java-bytecode-format - unknown-java-class-version * checks/changes-file.desc: + [NT] Fix typo in tag description. Thanks to Luca Falavigna for spotting it. * checks/files: + [NT] Use new gzip decompressor from L::Util. * checks/java{,.desc}: + [NT] Catch unknown Java class versions. + [NT] Catch uses of Java7 byte code as an experimental check. It lacks the proper checks for cases where packages have the proper dependencies for Java7 byte code. (Closes: #673276) * collection/*: + [NT] Add missing load of the FileHandle module. * collection/java-info{,.desc}: + [NT] Use Archive::Zip instead of zipinfo + unzip to extract information from Jar files. + [NT] Limit java-info to files classified as "Zip Archive" by file(1). * collection/objdump-info: + [NT] Only call readelf once per binary. + [NT] Use xargs + a new helper to reduce the number of readelf calls even further. * collection/objdump-info-helper: + [NT] New file. * collection/strings: + [NT] Optimize for the "common case" file names with a fall-back to previous behaviour with special file names. * collection/strings-helper: + [NT] New file. * debian/control: + [NT] Add (Build-)Dependency on libarchive-zip-perl. + [NT] Remove runtime dependency on unzip (replaced by libarchive-zip-perl). + [NT] Add explicit Build-Dependency on xz-utils instead of relying on dpkg-dev's dependency on it. + [NT] Add versioned xz-utils as alternative to xz-lzma or lzma. (Closes: #678775) + [NT] Add missing suggests for lzma packages. lzma is only used for source packages compressed with lzma. + [NT] Add suggests on libperlio-gzip-perl. * frontend/lintian: + [NT] Check if some collections can be skipped for existing entries. This is mostly useful for static labs, where certain checks can be now be rerun without having to run "unpacked". + [NT] Emit run times of collections and checks with debug level 2 (or higher). + [NT] Load lintian's libraries earlier. + [NT] Add new option "--jobs" to control the number of unpacking jobs Lintian will schedule in parallel. + [NT] Improve Lintian's job scheduler to schedule unpacking jobs on a group level rather than just a package level. * lib/Lintian/Collect/{Binary,Package}.pm: + [NT] Use new gzip decompressor from L::Util. * lib/Lintian/CollScript.pm: + [NT] New file. * lib/Lintian/Util.pm: + [NT] Add gzip decompressor preferring libperlio-perl if available, but with fallback to a "fork+exec" of gzip. + [NT] Load Digest::SHA immediately like Digest::MD5. lintian (2.5.9) unstable; urgency=low * Summary of tag changes: + Added: - run-parts-cron-filename-contains-illegal-chars + Removed: - run-parts-cron-filename-contains-full-stop * checks/*: + [NT] Migrate to new Lintian::Path API. * checks/fields: + [NT] Also classify lib*-cli-dev as belonging to the section cli-mono (rather than libdevel). Thanks to Chow Loong Jin for the report and the patch. (Closes: #675358) * checks/files{,.desc}: + [NT] Rename run-parts-cron-filename-contains-full-stop and have it catch "+" in the filename as well. Add reference to policy 9.5.1 in the tag description. * checks/init.d: + [NT] Use the proper regex for matching package names rather than an ad-hoc regex. Thanks to Thorsten Alteholz for the report and suggested patch. (Closes: #677142) * checks/shared-libs: + [NT] Reverse order of two subst expressions to prevent dev-pkg-without-shlib-symlink false positives. Thanks to Aurelien Jarno, Yves-Alexis Perez and Stephen M. Webb for the reports and the patch. (Closes: #675826, #677310, #675832) + [NT] Clarify that dev-pkg-without-shlib-symlink is emitted on library and not "-dev" packages. * collection/hardening-info: + [NT] Process binaries with hardening-check via xargs. This greatly reduces the processing time for packages with many binaries (like some of the linux binaries). Thanks to Bastian Blank for the heads up. + [NT] Skip kernel modules (.ko files). * collection/hardening-info-helper: + [NT] New file. * data/*: + [NT] Refresh with tools/data from sid. * data/scripts/interpreters: + [NT] Replace ngp2 with ngraph. Thanks to Koichi Akabe for the report. (Closes: #675139) * data/spelling/corrections: + [NT] Add corrections for usage, invocation(s) and ancient. * debian/changelog: + [NT] raster-image-in-scalable-directory was added in 2.5.7, not removed. * frontend/lintian{,-info}: + [NT] Remove assumption that $ENV{HOME} is set/defined. If $ENV{HOME} is not sent, user specific profiles will simply be ignored. * frontend/lintian: + [NT] Attempt to automatically determine what to process, if no packages are given and debian/changelog exists. Thanks to Gilles Filippini for the suggestion. (Closes: #676799) * lib/Lintian/Collect/Package.pm: + [NT] sorted_index now returns a list rather than a list ref. + [NT] Represent files (from index) as Lintian::Path objects. * lib/Lintian/Collect/Source.pm: + [NT] Recognise "Package-Type" as an alternative of the "X-" field of same name. Thanks to Christian Perrier for the report. (Closes: #677649) * lib/Lintian/Data.pm: + [NT] Gracefully handle the absence of $ENV{HOME}. * lib/Lintian/Path.pm: + [NT] New file. * lib/Lintian/Util.pm: + [NT] Add regex to match valid package names. lintian (2.5.8) unstable; urgency=low Its like 2.5.7, only with less false positives and no FTBFS. * checks/binaries{,.desc}: + [NT] Fix a too strict regex causing false-positives for biarch packages. This was a regression introduced in version 2.5.7. Thanks to Sven Joachim for reporting it. (Closes: #673106) + [NT] Demote certainty of hardening-no-stackprotector to wild-guess and move it to debian/extra-hardening profile. + [NT] Skip hardening-no-fortify-functions for binaries only using the unprotected memcpy. This greatly reduces the number of false positives for binaries compiled with gcc-4.7 -O2 (or higher optimization). (Closes: #673112) * checks/files: + [NT] Properly handle symlinks in icon directories. Thanks to Nicholas Breen for the report and Felix Geyer for the patches. (Closes: #673352) + [NT] Ignore wrong sizes on images in animations as it may be a method to implement the animation. Thanks to Matthias Klumpp for the report and Felix Geyer for the patch. (Closes: #673862) + [NT] Ignore wrong icon sizes if the size difference is at most 2px. Thanks to Felix Geyer for the patch. * checks/scripts: + [NT] Refactor the %versioned_interpreters into a new data file. * checks/shared-libs: + [NT] Fix false positive "dev-pkg-without-shlib-symlink" for shared libraries using "libtool -release X.Y". Thanks to Sven Joachim for the report. (Closes: #673109) + [NT] Fix false positive "dev-pkg-without-shlib-symlink" for shared libraries installed in /lib. Lintian now correctly expects the dev-symlink beneath /usr/lib. Thanks to Guillem Jover for the report. * checks/source-copyright: + [NT] Use the in-memory contents of the copyright file instead of re-reading the file when parsing it as a DEP-5 copyright file. * collection/objdump-info{,.desc}: + [NT] Drop -D flag for readelf when looking for symbols. This makes some checks more reliable in Ubuntu. Thanks to Marc Deslauriers for the report and the patch. (Closes: #673451) * debian/control: + [NT] Add versioned Build-Depends on dpkg-dev (>= 1.16.1~) as the test suite relies on it. Thanks to Luca Falavigna for reporting it. + [NT] Update the description to mention that the version of Lintian is calibrated for version 3.9.3 of the Policy. * debian/lintian.install: + [NT] Remove usr/share/lintian/data - Lintian does not need it and dpkg will not replace the dir with a symlink. * data/scripts/interpreters: + [NT] Add falcon, gbr3, jython and ngp2 as known interpreters. (Closes: #669911, #671387, #662134, #667895) * data/scripts/versioned-interpreters: + [NT] New file. + [NT] Added python2.7 to the list of known Python 2 interpreters. * data/spelling/corrections: + [RA] Remove corrections for "writeable" and "overwriteable". These spellings are permitted by the OED in UK English. (Closes: #673611) + [NT] Add correction for "pointer". * lib/Lintian/Collect/*.pm: + [NT] Localize "$_" to avoid truncating caller's variable. (Closes: #673613) * t: + [NT] Generate empty ".so" files used in the test. This resolves an issue where dpkg-source would exclude them causing a FTBFS. (Closes: #673198) + [NT] Fix test failure in derivatives where some hardening flags are enabled by default. Thanks to Marc Deslauriers for the report and the patch. (Closes: #673449) lintian (2.5.7) unstable; urgency=low * Summary of tag changes: + Added: - apache2-configuration-files-need-conf-suffix - apache2-deprecated-auth-config - apache2-module-depends-on-real-apache2-package - apache2-module-does-not-depend-on-apache2-api - apache2-module-does-not-ship-load-file - apache2-reverse-dependency-calls-invoke-rc.d - apache2-reverse-dependency-calls-wrapper-script - apache2-reverse-dependency-ships-file-in-not-allowed-directory - apache2-reverse-dependency-uses-obsolete-directory - apache2-unparseable-dependency - apache2-unsupported-dependency - diff-contains-quilt-control-dir - hardening-no-fortify-functions - hardening-no-relro - hardening-no-stackprotector - non-standard-apache2-configuration-name - non-standard-apache2-module-package-name - raster-image-in-scalable-directory - rc-version-greater-than-expected-version - udeb-uses-unsupported-compression-for-data-tarball - web-application-depends-on-apache2-data-package - web-application-should-not-depend-unconditionally-on-apache2 + Removed: - ancient-dpkg-long-filenames-check - ancient-dpkg-predepends-check - bad-ubuntu-distribution-in-changes-file - binary-nmu-uses-old-version-style - debian-control-with-duplicate-fields - doc-base-file-references-usr-doc - duplicate-fields-in-templates - manpage-for-non-x11-binary-in-wrong-directory - manpage-for-x11-binary-in-wrong-directory - missing-dependency-on-install-info - obsolete-field - old-app-defaults-directory - old-style-copyright-file - old-style-example-dir - package-installs-file-to-usr-x11r6-bin - package-installs-font-to-usr-x11r6 - package-uses-obsolete-file - postinst-should-not-set-usr-doc-link - udeb-uses-non-gzip-data-tarball - x11-games-should-be-in-usr-games * checks/*: + [NT] Remove some old tags that are no longer useful. (Closes: #663516) + [NT] Migrate to sorted_index from sorted_file_info. + [NT] Explicitly import needed subs from L::Util. * checks/apache2{,.desc}: + [NT] New files to check for apache2 related packages. Thanks to Arno Töll and Stefan Fritsch for the patches. (Closes: #668546) + [NT] This check is not enabled by default. It can be used via the debian/extra-apache2 profile. * checks/binaries{,.desc}: + [NT] Move embedded library data to a data file. + [NT] Add ELF hardening checks. Thanks to Kees Cook for report and the patches. (Closes: 650536) + [NT] Replace architecture tables with data files. + [JW] Check for missing Python3 numpy ABI dependency. (Closes: #671024) * checks/changelog-file: + [NT] Output the correct line number for the "line-too-long" tag. Thanks to Arno Töll for the report. (Closes: #657402) * checks/changes-file{,.desc}: + [NT] Remove Ubuntu specific handling of distribution names. Instead replace it with a more generalized one that derivatives can reuse by extending vendor specific data files. Thanks to Daniel Dehennin for the suggestion. (Closes: #648777) * checks/control-file: + [NT] Rewrote parts to use Lintian::Collect for fetching data. * checks/cruft{,.desc}: + [NT] Check for quilt control dirs in the debian packaging files. * checks/deb-format{,.desc}: + [NT] Replace old udeb compression tag with a more general one. (Closes: #664600) + [NT] Remove logic for checking if a deb is meant for Ubuntu. Instead unconditionally emit the tag and let the vendor profiles handle it. * checks/debconf: + [NT] Special case debconf providers for purge-debconf tag. Generally they cannot use db_purge in postrm (for obvious reasons), so the tag will be a false-positive in such cases. * checks/fields{,.desc}: + [NT] Add devref reference. + [NT] Remove special handling of the Ubuntu specific field, "original-maintainer". This field is now handled by vendor specific data files. (Closes: #649852) + [JW,NT] Check for common mistakes with preview release and release candidate versions. For non-native packages, this check is only done on initial uploads of new upstream releases. Thanks to Stefano Rivera and Julian Taylor for their additional suggestions. (Closes: #649277) * checks/filename-length.desc: + [ADB, NT] Reword description of package-has-long-file-name. Thanks to Andreas Beckmann for suggestion. * checks/files{,.desc}: + [NT] Remove "manual" lazy loads of data files. + [NT] Remove code for the uses-FHS-doc-dir tag. + [NT] Extend icon checks to all icon directories and look for raster images in "scalable" icon directories. Thanks to Paul Wise for the report and Felix Geyer for the patches. (Closes: #628189) * checks/group-checks: + [NT] Include Provides when checking for conflict relations. Thanks to Damyan Ivanov for the report. (Closes: #672615) * checks/java: + [NT] Ignore "codeless" jars if they appear to be maven javadoc jars. Thanks to Ludovic Claude for the patch. (Closes: #660845) * checks/lintian.desc: + [NT] Updated the description of the override tags. * checks/manpages{,.desc}: + [RA] Detect hyphen used as minus sign following a groff \f[C] font change. Thanks, Iustin Pop. (Closes: #664471) * checks/menu-format: + [NT] Move menu section lists into a data file. + [NT] If a package is missing a menu icon, check its direct strong dependencies built from the same source (if any) for the icon. This fixes false-positives menu-icon-missing in some cases. * checks/menus{,.desc}: + [NT] Remove "manual" lazy load of data file. * checks/nmu: + [NT] Remove Ubuntu specific code to handle their (lack of) NMUs. These tags are instead suppressed by the Ubuntu profile. * checks/rules: + [NT] Fix false-positive "ignores-make-clean-error" tag caused by using make with -C and a dir containing the letter "i". Thanks to Tobias Hansen for the report. (Closes: #671537) * checks/scripts{,.desc}: + [NT] Mention devref 6.4 in command-with-path-in-maintainer-script. Thanks to Arno Töll for the patch. + [NT] Do not emit unusual-interpreter if the package provides the interpreter itself. + [NT] Ignore the lack of exec bit on the debconf shell modules. * checks/standards-version.desc: + [NT] Add references to the Policy upgrading checklist. Thanks to Simon Paillard for the patch. * collection/*: + [NT] Use Lintian::Collect to access the package index. * collection/bin-pkg-control{,.desc}: + [NT] Compress control-index file and bump version of bin-pkg-control. * collection/copyright-file: + [NT] Remove code to look for old-style copyright file. * collection/file-info{,.desc}: + [NT] Compress file-info output and bump version of file-info. * collection/hardening-info{,.desc}: + [NT] New files. Thanks to Kees Cook for the patch. * collection/index{,.desc}: + [NT] Compress index output and bump version of index. * collection/java-info{,.desc}: + [NT] Compress java-info output and bump version of java-info. * collection/objdump-info: + [NT] Use "fail" from Lintian::Util.pm rather than embedding a copy of it. + [NT] Use Lintian::Collect to find ELF files. + [NT] Replace all usage of objdump with readelf. (Closes: #614034) + [NT] Compress objdump-info output and bump version of objdump-info. * collection/strings{,.desc}: + [NT] Compress strings output and bump version of strings. * data: + [NT] Move to vendors/debian/ftp-master-auto-reject and replace it with a symlink. * data/binaries/{arch-{64bit-equivs,regex},hardening-tags}: + [NT] New file. * data/binaries/embedded-libs: + [NT] New file. + [NT] Add libav libraries. Thanks to Andres Mejia for the suggestion and the suggested patch. (Closes: #666765) * data/changes-file/{debian-dists -> known-dists}: + [NT] Renamed file. * data/menu-format/menu-sections: + [NT] New file. * debian/changelog: + [NT] Amend the 2.5.5 to mention that it also added the tag binaries-have-file-conflict. * frontend/lintian: + [JW] Fix typo in error message. + [JW,NT] Fix handling of "override" option in the lintianrc file. (Closes: #666207) * lib/Lintian/Architecture.pm: + [NT] Lazily evaluate the data file. * lib/Lintian/Collect/Package.pm: + [NT] Remove an extra level of quoting in index. + [NT] Remove root dir from sorted_index. + [NT] Keep trailing slash in dir names for file_info. * lib/Lintian/Collect/Binary.pm: + [NT] Remove sorted_file_info as sorted_index now produces an identical list. * lib/Lintian/Data.pm: + [NT] Lazily load data files. + [NT] Allow pre-process sub to alter existing value for a key by passing the previous value as third argument. + [NT] Allow vendor specific data files. They will be loaded from LINTIAN_ROOT/vendors/$profile/data. * lib/Lintian/Output{,/*}.pm: + [NT] Replace non-printables with "?" in output. * lib/Lintian/Profile.pm: + [NT] Normalize profile name and replace "parents" with "profile_list". The latter also includes the current profile name. * lib/Lintian/Tag/Info.pm: + [NT] Use Lintian::Data to load the manual-references data file instead using an ad-hoc parser. * lib/{Text_utils => Lintian/Tag/TextUtil}.pm: + [NT] Renamed module. * lib/{Util => Lintian/Util}.pm: + [NT] Renamed Util to Lintian::Util. + [JW] Consider duplicate fields a syntax error in dctrl files. Previously, duplicate fields were silently ignored (except when a separate tag would check for it). (Closes: #664061) + [NT] Stop exported a majority of all subs by default. * profiles/ubuntu/main.profile: + [NT] Add a number of NMU related tags to the list of disabled tags. * vendors/ubuntu/main/data/changes-file/known-dists: + [NT] New file based on data/changes-file/ubuntu-dists. + [ADB] Add "quantal" (Quetzal) * vendors/ubuntu/main/data/common/source-fields: + [NT] New file. * vendors/ubuntu/main/data/fields/{binary,udeb}-fields: + [NT] New files. lintian (2.5.6) unstable; urgency=low * checks/*: + [NT] Simplified some bit operations done on file permissions. * checks/binaries: + [NT] Fix false-negative missing-dependency-on-phpapi when the binary included a "SOVERSION" in its name. Thanks to Ondřej Surý for the report. (Closes: #662936) * checks/changelog-file: + [NT] Do not emit "no-upstream-changelog" for transitional packages. Thanks to Paul Wise for the report. (Closes: #660076) * checks/cruft: + [NT] Added missing "unless" in the code. Fixes false positive "source-contains-waf-binary". Thanks to Dmitrijs Ledkovs for the report. (Closes: #661561) * checks/debhelper: + [NT] Fix FP executable-debhelper-file-without-being-executable emitted for directories. Thanks to Felix Geyer for the report and the patch. (Closes: #663447) * checks/files.desc: + [NT] Fix a typo in a tag description. Thanks to Ludovic Rousseau for spotting it. (Closes: #663759) * checks/scripts: + [NT] Allow fontforge-nox as (alternative) provider for the fontforge interpreter. Thanks to Martin Erik Werner for the report. (Closes: #661363) + [NT] Move %interpreters map to a separate data file. * checks/source-copyright.desc: + [NT] Update references for copyright-format checks. Thanks to Thijs Kinkhorst for the report and the patch. (Closes: #661778) + [NT] Added trailing slash to copyright-format URLs in tag descriptions for consistency with the policy. * collection/*: + [NT] Removed assumption that "cwd" is the same as the directory for the package being examined. * collection/java-info: + [NT] Added missing "use Util". * collection/scripts: + [NT] Use "fail" from Util.pm rather than using an embedded copy. * collection/strings: + [NT] Use Lintian::Collect to find ELF files. * data/scripts/interpreters: + [NT] New file. * frontend/lintian: + [NT] Pass directory of the package to the collections. * lib/Lintian/Check.pm: + [NT] Fixed false positive "*-address-malformed" if the local part of the email was "0". Thanks to Christopher Vollick for the report. (Closes: #663659) * lib/Lintian/Tag/Info.pm: + [NT] Fixed issue where "Experimental: no" was handled as a "yes" when generating a tag description. * lib/Util.pm: + [NT] If no locale can be found, just set LC_ALL to en_US.UTF-8. This fixes an issue with Lintian in backports when only locales-all is installed. Thanks to Peter Palfrader for the report. (Closes: #663459) * private/runtests: + [NT] Support using en_US.UTF-8 from locales-all, when that is available. This allows locales-all to be used as a substitute for locales when compiling Lintian on Squeeze. * reporting/harness: + [NT] Corrected inverted logic when checking for dry-run. lintian (2.5.5) unstable; urgency=low The "Policy 3.9.3" release. * Summary of tag changes: + Added: - arch-dependent-file-not-in-arch-specific-directory - binaries-have-file-conflict - control-file-contains-dh_make-vcs-comment - debhelper-compat-file-is-missing - dependency-is-not-multi-archified - dh-exec-install-not-allowed-here - dh-exec-private-helper - dh-exec-script-without-dh-exec-features - dh-exec-subst-unknown-variable - executable-debhelper-file-without-being-executable - missing-dependency-on-numpy-abi - package-file-is-executable - package-uses-dh-exec-but-lacks-build-depends - preinst-uses-dpkg-maintscript-helper-without-predepends - shlib-in-multi-arch-foreign-package - source-contains-waf-binary - syntax-error-in-control-file - syntax-error-in-debconf-template + Removed: - dh_dhelp-is-deprecated - maintainer-not-full-name - maintainer-script-calls-deprecated-wm-menu-config - maintainer-script-does-not-check-for-existence-of-wm-menu-config - uploader-address-missing - uploader-not-full-name * checks/*: + [NT] Fixed assumptions about certain fields being present. Where needed, Lintian will make guesses to the most likely value (or the least "broken" value). * checks/binaries{,.desc}: + [NT] Allow libnss_* plugins in usr/lib. + [JW] Check for ELF binaries installed in unsafe paths in Multi-Arch: same packages. (Closes: #650445) + [JW] Added check numpy ABI dependency. (Closes: #658311) + [NT] Fixed embedded-library false-positive for tiff3. Thanks to Jay Berkenbilt for the report. (Closes: #660675) * checks/control-file{,.desc}: + [NT] Allow "pkg (= ${source:Version})" versioned dependency if pkg is architecture all. This fixes a false-positive "weak-library-dev-dependency" for some mono packages. Thanks to David Bremner for the report. (Closes: #652602) + [NT] Emit a tag if there is a syntax error in d/control rather than just aborting the rest of the check. + [NT] Accepted patch from Gergely Nagy to catch dh-make vcs templates in comments. Thanks to Paul Wise for suggesting this check. (Closes: #657110) * checks/copyright.desc: + [RA] Rephrase copyright-with-old-dh-make-debian-copyright long description to be clearer about the legal status of copyright notices. (Closes: #659574) + [RA,NT] Make copyright-with-old-dh-make-debian-copyright a pedantic tag. * checks/cruft{,.desc}: + [NT] Added dh-autoreconf as a build-depends alternative to libtool for suppressing ancient-libtool warning. Thanks to Felix Geyer for the report. (Closes: #650325) + [NT] Accepted patch from Paul Wise to detect COFF object files as Win32 binaries. + [NT] Properly handle unpacked being a symlink. + [NT] Accepted patch from Luca Falavigna to detect waf files with a binary payload. (Closes: #654523) * checks/debconf: + [RA] Recognize Perl uses of debconf templates via metaget or settitle. * checks/debhelper{,.desc}: + [NT] Do not check executable debhelper files for brace expansion if compat is 9 (or greater). It may be allowed by tool interpreting the file. + [NT] Added checks for handling executable files in the debian dir. Thanks to Joey Hess and Arno Töll for the reports. (Closes: #651572, #651330) + [NT] Added various dh-exec related checks. Thanks to Gergely Nagy for the patches. (Closes: #653071) + [NT] Removed tag for using dh_dhelp. It is not shipped in debhelper anymore (not even Squeeze) and the tag is not emitted anymore (according to lintian.d.o). + [NT] Added check for missing compat file. (Closes: #656885) * checks/fields{,.desc}: + [JW] Properly handle uploader names with commas. (Closes: #485705) + [NT] Removed uploader-address-missing tag. + [NT] Added section-mapping for (some) zope packages. This fixes some false-positives where python-zope packages were wrongly identified as belong to the python section. + [NT] Fixed an issue where "doc-pkg-depends-on-main-pkg" would only be triggered if it was a "pre-depends" relation. + [NT] Use new Lintian::Architecture API. + [JW] Include ssh:// as a valid protocol for hg. (Closes: #655907) + [NT] Ignore self relations in Replaces and Provides. This is allowed according to Policy §7.6.2. (Closes: #657034) + [NT] Applied patch from intrigeri to remove "not-full-name" tags. (Closes: #658031) * checks/files: + [JW,NT] Skip "Multi-Arch: same" check of gzip files if their install path contains the architecture. (Closes: #650665) + [JW] Fixed a false-negative "empty-binary-package" if the package contained the /u/s/doc/$pkg symlink. (Closes: #650959) + [NT] Allow fonts in packages starting with "fonts-". This completes the fix for #646838. Thanks to أحمد المحمودي for the follow up report. (Closes: #651045) + [NT] Re-added swfobject.js to the list of known javascript libraries. Thanks to Paul Wise for noticing it had been uploaded. * checks/group-check{,.desc}: + [NT] Check for file conflicts in binaries built from the same source package. (Closes: #293838) + [JW] Added check for incomplete Multi-arch'ification. (Closes: #650838) * checks/menus{,.desc}: + [NT] Remove obsolete checks for wm-menu/wm-menu-config use in maintainer scripts. The executables are not shipped in menu in Squeeze nor sid. Furthermore the tags are not emitted in any package (according to lintian.d.o). * checks/nmu: + [JW] Properly handle uploader names with commas. * checks/po-debconf: + [NT] Remove special handling for packages using yada. * checks/rules: + [NT] Remove check for missing build-depends on yada. * checks/scripts: + [NT] Accepted patch from Evan Broder to check for missing versioned pre-depends on dpkg when using maintscript helper. This dependency is trivially satisfied in Debian, but may complicate Ubuntu LTS upgrades. (Closes: #602249) + [NT] Accepted patch from James McCoy to recognize "racket" as a known interpreter. (Closes: #652594) + [NT] Accepted patch from Martin Erik Werner to recognize "fontforge" as a known interpreter. (Closes: #652736) * checks/shared-libs{,.desc}: + [JW] Check for Multi-Arch foreign packages shipping shared libraries in public library directories. (Closes: #650444) + [NT] Use the new hwcap-dirs data file to determine hwcap dirs. + [NT] Ignore missing symbols/shlibs files for libc libnss plugins. * checks/source-copyright{,.desc}: + [JW] Allow a trailing slash in the DEP-5 1.0 URL. (Closes: #649813) + [NT] Use line numbers rather than "0-indexed" paragraph numbers in the emitted tags. Thanks to Jari Aalto for the suggestion. + [NT] Recommend the URI to the copyright-format subpolicy as DEP-5 format specification URI. Thanks to Helmut Grohne for the report. (Closes: #651392) * checks/symlinks: + [NT] Ignore langpack symlinks if they appear to be consistent. Thanks to Evan Broder for the report. (Closes: #650793) * collection/ar-info: + [NT] Properly handle unpacked being a symlink. * collection/index: + [NT] Use Lintian::Processable::Package to determine source name and version. * collection/file-info{,-helper}: + [NT] Do not open non-files when double-checking gzip files. + [NT] Pass "-N" to file as Lintian does not need the aligned output. * collection/md5sums: + [NT] Properly handle unpacked being a symlink. * collection/source-control-file{,.desc}: + [NT] Removed as they are no longer needed. They have been replaced by a smarter Lintian::Collect. * collection/unpacked: + [NT] Pass --no-check to dpkg-source when requested not to check signatures (via reporting/harness). * data/{fields => common}/architectures: + [NT] Moved architectures to data/common. * data/debhelper/dh_addons-manual: + [JW] Add python3-sphinx as provider of sphinxdoc dh sequence. * data/debhelper/dh_commands-manual: + [JW] Add python3-sphinx as provider of dh_sphinxdoc. (Closes: #649640) + [NT] Added libxine-dev | libxine2-dev as provider of dh_xine. (Closes: #659285) * data/fields/archive-sections: + [NT] Added new sections. Thanks to Michael Biebl for the reminder. (Closes: #652123) * data/fields/virtual-packages: + [NT] Refreshed against sid. (Closes: #657155) * data/files/fonts: + [NT] Refreshed against sid. * data/init.d/virtual_facilities: + [NT] Refreshed against sid. * data/output/ftp-master-{,non}fatal: + [NT] Refreshed. * data/output/manual-references: + [NT] Refreshed. * data/shared-libs/hwcap-dirs: + [JW] New data file for listing known hwcap dirs. * data/shared-libs/ldconfig-dirs: + [NT] Auto-generate file with help from dpkg-architecture. (Closes: #653832) * data/spelling/corrections: + [NT] Added corrections for deprecate(d) and pedantic. * data/standards-version/release-dates: + [NT] Added release date for Standards-Version 3.9.3. * debian/control: + [NT] Prefer libc-bin (>= 2.13) to locales. Thanks to Josh Triplett for the suggestion, investigative work and the proposed patch to make this possible. (Closes: #636086) + [JW] Add Build-Dependency on python-numpy and python-all-dev for the test suite. + [NT] Bumped Lintian's Standards-Version to 3.9.3. No changes required. * debian/{postinst,prerm}: + [JW,NT] Remove the internal Lintian locale if a C.UTF-8 locale is found in /usr/lib/locale. * debian/source/lintian-overrides: + [NT] Added override for python-dev tag. We need python-all-dev for the test suite. * debian/triggers: + [JW] Added trigger for libc-bin C.UTF-8 locale. This ensures the internal Lintian locale can removed if libc-bin is upgraded after Lintian. * doc/lintian.xml: + [NT] Corrected the runtime estimate for an archive-wide run. With 35 000+ packages, it can no longer be done in "a few hours". + [NT] Documented architecture specific overrides. (Closes: #651816) * doc/lintianrc.example: + [NT] Removed deprecated variables and added sample TMPDIR usage. * frontend/lintian: + [NT] Allow -U to be given more than once. + [JW,NT] If using a temporary lab, print its location when using --verbose option. (Closes: #650433) + [NT] Fixed an issue where auto-clean would not see the real status of some collections. + [NT] Keep auto-cleaned collections until all processables in the group has been checked. + [NT] Attempt guess the version number when running in a git checkout or unpacked source dir. Based on patch from Evan Broder. (Closes: #650701) + [NT] Added support for the virtual "GROUP" type in Lab Queries. This will make Lintian select all packages related to a given source (and version). + [NT] Removed check loading code. This has been moved into Lintian::Profile. + [NT] Always load a profile. + [NT] Allow TMPDIR in the configuration file. + [NT] Treat "pedantic" as a normal severity. In previous release, pedantic tags were not affected by --display-level. A side-effect of this is that "pedantic" can no longer be used with "display-level" in the configuration file. + [NT] Produce a better error message when asked to process an URL or a path that is definitely not a valid lab query. Thanks to Nicholas Bamber for the report. (Closes: #651332) * frontend/lintian-info: + [NT] Support new lintian.log format. + [NT] Support new override file format with -a. + [NT] Fixed the --profile argument, which now accepts the mandatory parameter it is supposed to. * lib/Checker.pm: + [NT] Removed, merged into frontend/lintian. * lib/Lintian/Architecture.pm: + [NT] New file. * lib/Lintian/Check.pm: + [NT] Do not check for missing uploader address as it cannot be done reliably anymore. + [NT] Applied patch from intrigeri to remove the "not-full-name" tags. + [NT] Only emit a spelling tag once for each spelling error in each field/file/text. * lib/Lintian/CheckScript.pm: + [NT] New file. * lib/Lintian/Collect/{Binary,Source}.pm: + [NT] Assume packages to be non-native when it cannot be accurately determined due to missing version field. * lib/Lintian/Collect/Binary.pm: + [NT] Fixed an error in parsing symbol names when using readelf as replacement for objdump. * lib/Lintian/Collect/Group.pm: + [NT] Made direct_dependencies properly handle udebs. This fixes an error that would cause lintian to skip some checks for udebs. * lib/Lintian/Collect/Package.pm: + [NT] Map an owner/group of "0/0" to "root/root". This avoids a number of false-positive ownership tags if only numerical ownership is available in the tarball. Thanks to Thorsten Glaser for the report. (Closes: #638278) * lib/Lintian/Collect/Source.pm: + [NT] Removed assumption that source packages always have a format field. * lib/Lintian/Lab.pm: + [NT] Added "is_temp" method to identify temp labs from static labs. + [NT] Corrected issue where the lab would record binaries as being from "main", even if their "section" field implied otherwise. * lib/Lintian/Lab/Entry.pm: + [NT] Properly strip whitespace when loading collection status. * lib/Lintian/Processable/Package.pm: + [NT] Use part of the file name as package name if the mandatory "Package" or "Source" fields are missing rather than choking. * lib/Lintian/Profile.pm: + [NT] Catch recursively defined profiles when the Profile field contains a (slightly) different name than the Extends field of its parent. (Closes: #655469) + [NT] Handle loading of checks and tags. * lib/Lintian/Tag/Info.pm: + [NT] Accepted patch from Evan Broder to always output effective severity in tag descriptions. + [NT] Removed code to load tags from checks. This has moved to Lintian::Profile. * lib/Lintian/Tags.pm: + [NT] Support architecture wildcards in overrides. + [NT] Emit "malformed-override" for architecture specific tags for unknown architectures and for "arch:all" packages. + [NT] Use a Profile to determine if a tag is suppressed or not. + [NT] Handle "pedantic" like the other severities. + [NT] Count experimental tags as a separate group of tags. This fixes an issue where lintian would exit 1 if the only error tags emitted were experimental. (Closes: #658971) * lib/Util.pm: + [NT] Create clean_env function to handle cleaning of the environment for children processes and finding a suitable UTF-8 locale (when needed). + [NT] Report line number instead of "0-indexed" paragraph number in syntax errors. Thanks to Jari Aalto for the suggestion. (Closes: #659909) * man/lintian.pod.in: + [NT] Removed the notes that some options disable loading of a profile. Lintian now always loads a profile when doing checks. * private/refresh-archs: + [NT] Rewritten. * private/refresh-hwcap: + [JW] New file. * profiles/debian/ftp-master-auto-reject.profile: + [NT] Refreshed. * reporting/harness: + [NT] Removed useless "TODO" message from the log output. + [NT] Added -h/--help option to print usage information. + [NT] Added --dry-run option. + [NT] A source package is now only processed if one (or more) of its binaries are processed as well. + [NT] Also symlink $LINTIAN_BIN_DIR/gpgv to /bin/true when skipping signature checks. This avoids issues when some tools prefers gpgv to gpg. * reporting/html_reports: + [JW] Properly handle uploader names with commas. + [NT] Use the severities from profiles when generating tag pages. Based on patches from Evan Broder. (Closes: #650712) + [NT] Removed tag loading code, which has moved into Lintian::Profile. + [NT] Pass a profile to the templates (as $profile) instead of the old %all hash. + [NT] List only source packages on the "packages_X.html" pages. * reporting/templates/tags-all.tmpl: + [NT] Use $profile instead of the %all hash. lintian (2.5.4) unstable; urgency=medium The "perl5.14 (+ misc) fix"-upload. Medium as perl 5.14 deprecation warnings tend to make Lintian output unreadable. * Summary of tag changes: + Added: - data.tar.xz-member-without-dpkg-pre-depends - gzip-file-is-not-multi-arch-same-safe - init.d-script-does-not-implement-optional-option - init.d-script-missing-lsb-description - maintainer-address-causes-mail-loops-or-bounces - missing-build-dependency-for-dh-addon - package-depends-on-lower-priority-package - package-would-benefit-from-build-arch-targets - python-depends-but-no-python-helper - python3-depends-but-no-python3-helper - transitional-package-should-be-oldlibs-extra - uploader-address-causes-mail-loops-or-bounces * checks/*: + [JW] Replace common_data.pm with Lintian::Check. + [NT] Remove some unused "use lib <expr>" from various checks. + [NT] Use Lintian::Collect::Group to find direct dependencies. * checks/binaries: + [JW] Allow binaries to use "/usr/lib/$srcpkg/" in RPATHs. (Closes: #642092) + [JW] Fixed a false-positive when using the multiarch dir in RPATH. (Closes: #646817) * checks/changes-file{,.desc}: + [NT] Added "precise" to the list of Ubuntu distributions. Thanks to Loïc Minier for the patch. + [NT] Accept release codename in the changes file. Thanks to Julien Cristau for the report. (Closes: #637540) * checks/circular-deps{,.desc}: + [NT] Renamed to group-checks{,.desc}. * checks/group-checks{,.desc}: + [NT] Added check for depending on lower priority packages built from the same source. Only strong dependencies are considered. Thanks to Neil Williams for the report. (Closes: #387166) * checks/common_data.pm: + [JW] Merged into Lintian::Check. * checks/cruft{,.desc}: + [NT] Escape path when using them in regexes. (Closes: #642902) + [NT] Extended the description of the tag for non-native packages with native versions. Thanks to Jari Aalto for the report. (Closes: #580048) * checks/copyright.desc: + [RG,NT] Clarified that the PHP 2.x license is only for the PHP interpreter and PEAR modules cannot use it. Thanks to Thomas Goirand for the report. (Closes: #616436) * checks/deb-format{,.desc}: + [NT] Added check for using .xz compression in deb files without versioned Pre-Depends on dpkg. The severity is pedantic for Debian and serious for Ubuntu. Thanks to Aaron M. Ucko for the report. (Closes: #648350) * checks/dehelper{,.desc}: + [JW,NT] Check for versioned dependencies for some dh_commands. (Closes: #641035) + [JW] Detect missing dependencies for using dh sequences. (Closes: #613327) + [JW] Parse continuation lines in d/rules. + [JW] Only emit brace-expansion-in-debhelper-config-file at most once per file. (Closes: #644344) + [JW] Replaced "=" with " => " in the tag extra for missing- build-dependency-for-dh_-command to improve readability. This breaks overrides, but according to lintian.d.o there are none of these. (Closes: #644339) + [JW] Added check for missing python helpers when using python substvars in d/control. (Closes: #582511) * checks/fields{,.desc}: + [NT] Fixed source-field-does-not-match-pkg-name. + [NT] Newlines from URIs in Vcs-* fields are stripped before they are checked. These will fields will also cause a "multiline- field" tag if they contain newlines. + [JW,NT] Clarified that build-depends-on-metapackage is not only triggered by X11 metapackages. (Closes: #642125) + [NT] Ensure transitional packages are in section oldlibs and priority extra. Thanks to Josh Triplett for the report. (Closes: #645438) + [NT] Check for bouncing and looping email addresses. Thanks to Ansgar Burchardt and Arno Töll for the bug report and patch. (Closes: #636599) * checks/files{,.desc}: + [JW] Suggest the usage of "-delete" rather than "| xargs rm -f". (Closes: #641983) + [JW] Improve "linked against libvga.so" test. This avoid setuid-binary false-positives. (Closes: #642038) + [NT] Skip package-contains-no-arch-dependent-files for transitional packages. Thanks to Andreas Beckmann for the patch. (Closes: #642339) + [NT] Applied patch from Andrew Starr-Bochicchio to update the description of font-in-non-font-package to better reflect current font policy. (Closes: #646838) + [JW,NT] Check that gzip files are compressed with -n in "Multi-Arch: same" packages. (Closes: #649329) + [NT] Corrected perl4 check, thanks to Dominic Hargreaves for the report and the patch. * checks/init.d{,.desc}: + [NT] Applied patch from Peter Eisentraut to detect init.d scripts without support for the optional "status" option. (Closes: #647250) + [NT] Fixed deprecation warning when using perl 5.14. (Closes: #649133) + [NT] Added tag for missing LSB Description keyword. Thanks to Michael Biebl and Petter Reinholdtsen for the bug report. (Closes: #604620) * checks/rules{,.desc}: + [JW] Fixed false negative "missing-build-dependency" when using "dh --with=X" rather than "dh --with X". (Closes: #643714) + [NT] Do not emit missing-build-dependency for missing dh sequences, since the new tag will handle those. + [JW] Parse continuation lines in d/rules. (Closes: #644021) + [JW] Check for versioned dependency on dpkg-dev when using the new dpkg makefiles. (Closes: #646495) + [NT] Added tracker tag for the build-arch target goal. (Closes: #647227) + [JW] Fixed duplicate tags about missing dependency for dh_pycentral/dh_pysupport. (Closes: #633507) * checks/scripts: + [RA] Exclude files ending in *.erb from several shell script checks. ERB is a Ruby templating language, so these will probably have mixed shell and Ruby code and may not be executable. Thanks, Laurent Arnoud. + [NT] Corrected perl4 check, thanks to Dominic Hargreaves for the report and the patch. (Closes: #648532) * checks/source-copyright: + [JW] Added some more DEP-5 URLs. (Closes: #642027) + [JW] Improved the wording of the extra information for the tag syntax-error-in-dep5-copyright. (Closes: #644556) * checks/symlinks: + [NT] Ignore broken links that appears to point to fonts. * collection/index: + [NT] Fixed an "uninitialized variable" warning if no tarballs were present or the tarball is empty. (Closes: #645660, LP: #886487) + [NT] Fixed deprecation warning when using perl 5.14. * collection/debfiles: + [NT] Bail if the debian dir is a symlink. * data/changelog-file/debian-dists: + [NT] New file. * data/changelog-file/ubuntu-dists: + [NT] Added the "precise". Thanks to Loïc Minier for the patch. (Closes: #644488) * data/debhelper/{dh_commands,maint_commands,miscDepends_commands}: + [NT] Refreshed. * data/debhelper/alt-dh_commands: + [NT] Renamed to dh_commands-manual. * data/debhelper/dh_commands-manual: + [NT] Support arbitrary dependency relations. This new change also fixes a "duplicate" in the dependency output. (Closes: #643716) * data/fields/essential: + [NT] Add libc-bin to the list of known essential packages. * data/fields/obsolete-packages: + [NT] Added dpatch per request of the maintainer. Thanks to Gergely Nagy for the report. (Closes: #646420) * data/fields/virtual-packages: + [NT] Refreshed against sid. Thanks to Gregor Herrmann for the report. (Closes: #646604) * data/rules/deprecated-makefiles: + [JW] Added dbs makefiles, since dbs maintainer deprecated the package in 0.47. (Closes: #646126) * data/shared-libs/ldconfig-dirs: + [NT] Add multi-arch dirs for hurd-i386. Thanks to Julien Cristau for noticing that they were missing. * data/spelling/corrections: + [NT] Added a correction for "propagate" and "separate", thanks to Guillem Jover for the suggestions. (Closes: #644793, #646529) + [JW] Added a number of corrections. (Closes: #645393) * debian/control: + [CW] Mark lintian Multi-Arch: foreign (there does exist one Architecture: any package that Build-Depends: lintian, so this helps multiarch cross-building slightly). * debian/lintian.install: + [NT] Removed unpack which was removed. * frontend/lintian: + [NT] Collections explicitly requested (by -U) are no longer auto-removed. Previously the only way to prevent auto-removal was to use --keep-lab. + [NT] Removed all archive-wide testing code. This has been moved into reporting/harness. This deprecates a lot options and config variables (--arch, --archivedir, --area, --dist, --section and LINTIAN_{ARCH,ARCHIVEDIR,AREA,DIST}). + [NT] Support new lab query format, replacing the old "package name"-based search. * lib/Lab{,/Package}.pm: + [NT] Removed, replaced by Lintian::Lab{,::Entry}. * lib/Lintian/Check.pm: + [JW] Merged with common_data.pm. * lib/Lintian/Collect/Group.pm: + [NT] New file - Collect like API for group data. * lib/Lintian/Collect/Source.pm: + [JW] Fixed call to binary_field in binary_relation. (Closes: #641609) * lib/Lintian/Data.pm: + [NT] Fixed a file descriptor leak. * lib/Lintian/Lab{,/Entry,/Manifest,/ManifestDiff}.pm: + [NT] New files. Replaces the Read_pkglists, Lab and Lab::Package modules. * lib/Lintian/Lab.pm: + [JW,NT] Correctly handle $TMPDIR not being an absolute path. (Closes: #642113) + [NT] New lab layout style resembling the "pool" dirs of the Debian mirrors. This allows more than 32 000 packages of a given type in the laboratory. It also allows multiple versions/architectures of the same package in static labs. A feature previously only enabled in temporary labs. The new layout is incompatible with the old format. (Closes: #641468) * lib/Lintian/Output.pm: + [NT] Minor refactoring to simplify creation of the FullEWI module. * lib/Lintian/Output/FullEWI.pm: + [NT] New experimental output. More machine-friendly version of the normal Lintian output format. * lib/Lintian/Output/XML.pm: + [NT] Use self-closing tags (if possible) and do not write attributes with an empty value. * lib/Lintian/Processable.pm: + [NT] Reduced to an abstract class. The "old" implementation has been put into Lintian::Processable::Package. * lib/Lintian/Processable/Package.pm: + [NT] New file. + [NT] Changed the "name" of changes files. It is now equal to the name of the source package. Previously it was the filename (without extension and without the dir part). * lib/Read_pkglists.pm: + [NT] Removed - replaced by Lintian::Lab::Manifest. * lib/Util.pm: + [NT] Stricten the parser to not accept a field name with a ":". This could cause the parser to eat the first part of the value, if it contained a colon and there was no space before the value. Thanks to Pino Toscano for reporting the issue. + [JW] Explicitly check that files are not encoded using ISO-2022, when they should be encoded with UTF-8. (Closes: #643009) + [JW] Use "paragraph" and "field" rather than "section" and "tag" when referring to a Debian control file. * man/lintian.pod.in: + [NT] Fixed a typo, thanks to Evgeni Golov for spotting it, * private/generate-lintian-pod: + [NT] Document which collections are auto-removed by default in static labs. * profiles/ubuntu/main.profile: + [NT] Disable no-upstream-changelog and lzma-deb-archive for Ubuntu. Thanks to Evan Broder for the report and patch. (Closes: #648117) * reporting/*: + [NT] Recognise and display pedantic tags. + [JW] Only emit "plus X overrides" if there any overrides. * reporting/{harness,html_reports}: + [NT] Do not accept LINTIAN_UNPACK_LEVEL nor LINTIAN_SECTION anymore. The lintian frontend lost support for these in 2.5.0~rc3. * reporting/harness: + [NT] Refactored to handle the archive-wide checking directly. + [NT] Use the new FullEWI output format for the archive-wide logs. * reporting/html_reports: + [NT] Ensure source tags appear before binary tags. (Closes: #580945) + [NT] Supports the FullEWI output format. * t/*: + [NT] Skip some tests broken by a recent dpkg upload. (Closes: #643205) * unpack/*: + [NT] Removed, no longer used. lintian (2.5.3) unstable; urgency=low The "Another 51 bites the dust. 169 left to go." release. * Summary of tag changes: + Added: - boilerplate-copyright-format-uri - control-file-is-not-a-file - comma-separated-files-in-dep5-copyright - copyright-has-crs - debian-copyright-is-symlink - depends-on-packaging-dev - dh_installmanpages-is-obsolete - missing-field-in-dep5-copyright - missing-license-paragraph-in-dep5-copyright - missing-license-text-in-dep5-copyright - no-debian-copyright - obsolete-field-in-dep5-copyright - out-of-date-copyright-format-uri - package-contains-no-arch-dependent-files - perl-module-uses-perl4-libs-without-dep - readme-debian-contains-invalid-email-address - script-uses-perl4-libs-without-dep - syntax-error-in-dep5-copyright - unknown-copyright-format-uri - unknown-paragraph-in-dep5-copyright - unused-license-paragraph-in-dep5-copyright - unversioned-copyright-format-uri - vim-addon-within-vim-runtime-path - wiki-copyright-format-uri + Removed: - debian-changelog-file-contains-debmake-default-email-address - readme-debian-contains-debmake-default-email-address - script-calls-init-script-directly * checks/*: + [NT] Dropped fields from Needs-Info, it is no longer needed. + [JW] Use LC_ALL rather than LANG, since LC_ALL overrules LANG. (Closes: #637595) + [JW] Removed all whitespace lines to avoid confusing some dctrl parsers (notably grep-dctrl). (Closes: #639928) + [JW] Fix a number of broken references in the tag descriptions. (Closes: #639923) + [JW] Rewrote Debian Bug references using #nnnnnn notation. * checks/binaries.desc: + [NT] Remove the reference to the Library Packaging Guide, since it is no longer available (in Debian). (Closes: #640228) * checks/changelog-file{,.desc}: + [JW] Remove debmake-specific tag in favour of more general debian-changelog-file-contains-invalid-email-address. (Closes: #639946) + [JW,NT] Fixed use of uninitialized value as hash key. (Closes: #640238) + [NT] Mention that the missing native changelog tag can, in some cases, be emitted if it does not look like a Debian changelog. * checks/{conffile,etcfiles}{,.desc}: + [JW] Merged etcfiles into conffile. (Closes: #637590) * checks/conffile: + [NT] Skip all checks if "conffiles" is a symlink. * checks/control-files{,.desc}: + [NT] Check that all members of the control.tar.gz are either regular files or directories. * checks/copyright-file{,.desc}: + [JW] Check for CRLF line endings in copyright files. (Closes: #634191) + [JW] Extended helper-templates-in-copyright and ensure it is only emitted once per package. * checks/debhelper{,.desc}: + [NT] Recognise /usr/share/R/debian/r-cran.mk as a cdbs-based build. This prevents false-positive "unneeded cdbs" warning. + [JW] Check for use of the obsolete dh_installmanpages debhelper program. Thanks to Joey Hess for the report. (Closes: #634112). * checks/debian-readme{,.desc}: + [JW] Replace debmake-specific tag with more general readme-debian-contains-invalid-email-address. * checks/description.desc: + [JW] Added references to some tags. (Closes: #640853) * checks/duplicate-files{,.desc}: + [NT] Replace the exception for "__init__.py" files by excluding all empty files from the check. The bug (#632789) only requests an exception for "empty __init__.py" files and generally empty files are unlikely to cause a serious size-waste. * checks/fields{,.desc}: + [NT] Mention that perl modules included in perl itself should be the first dependency if it is only included in the perl from experimental. Thanks to Dominic Hargreaves for the report and the patch. (Closes: #637793) + [NT] Warn about (build)depending/recommending on packaging-dev. Thanks to Luk Claes for the report and the initial patch. (Closes: #629308) + [NT] Also emit bad-homepage if the Homepage URL does not seem to be using a known protocol (for homepages). (Closes: #580427) + [JW] Bumped the severity of "no-human-maintainers", since it is now a Policy "must" directive. (Closes: #640856) + [JW,NT] If superfluous-clutter-in-homepage has been emitted, ignore the surrounding "<>" for the rest of the homepage checks. (Closes: #640947) + [NT] Added check for Build-Depending on libdbX.Y-dev (and related packages. Most packages should be able to use unversioned -dev packages. Thanks to Ondřej Surý for the report and the initial tag description. (Closes: #624434) * checks/{filename-length,rules}.desc: + [NT] Improved the descriptions of some tags. (Closes: #639018) * checks/files{,.desc}: + [NT] Added exceptions to "extra-license-file" for manpages, static libraries, .pc-, elf and pyshared-data-files. This covers all the false-positives currently found in the liblicense package. (Closes: #617901) + [NT] Ignore non-ELF files in multiarch paths, when checking for a missing pre-depends on multiarch-support. Thanks to Sven Joachim for the report. (Closes: #639735) + [NT] Added check for packages that only ships files in /usr/share and are not marked "Architecture: all". Thanks to Evgeni Golov, Carl Fürstenberg and Jari Aalto for the suggestions. (Closes: #574689) + [JW] Do not emit third-party-package-in-python-dir for packages built from python{,3}-{stdlib-extensions,profiler,old-doctools} sources. Add reference to Python Policy in the tag description. (Closes: #640211) + [JW] Add check for Vim addons installing files into a directory within Vim runtime path. (Closes: #640371) + [NT] Added check for Perl modules using perl4 libs without depending on libperl4-core-libs-perl. Thanks to Dominic Hargreaves for the initial patch. * checks/menus.desc: + [NT] Added reference to the doc-base manual to help people find the list of valid doc-base sections. (Closes: #584280) * checks/patch-systems: + [NT] Use lsdiff to determine if a patch modifies the debian dir as it is more accurate than diffstat for this. (Closes: #640131) * checks/rules: + [NT] Do a simple and minimal variable tracking. In very simple cases, it can determine which targets a variable contains (when the variable is used as a target). (Closes: #638411) * checks/scripts{,.desc}: + [NT] Remove script-calls-init-script-directly. (Closes: #617959) + [NT] Added check for Perl scripts using perl4 libs without depending on libperl4-core-libs-perl. Thanks to Dominic Hargreaves for the initial patch. (Closes: #636994) * checks/shared-libs{,.desc}: + [JW] Fixed a typo in a tag description. (Closes: #639177) + [NT] Do not emit shlib-calls-exit for libraries that have an INTERP section. (Closes: #607399) * checks/source-copyright{,.desc}: + [JW] Added check for DEP-5 copyright files. (Closes: #633779) * checks/standards-version: + [NT] Made the ancient-standards-version independent of the system time. * checks/version-substvars{,.desc}: + [NT] Also emit the any-depends-all tag if the ">=" relation is used. Thanks to Konstantinos Margaritis and Cyril Brulebois for the report and the research. (Closes: #639144) * collection/fields{,.desc}: + [NT] Removed, no longer used. * collection/changelog-file: + [NT] Double check changelogs that does not explicitly contains "debian" in the filename. This should avoid a myriad of syntax error tags in some cases (such as perl), where the Debian changelog is not present and there is an upstream changelog. * data/fields/archive-sections: + [NT] Fixed a typo in "otherosfs" section name. Thanks to Stefan Potyra for the report. (Closes: #637596) * data/fields/perl-provides: + [NT] Refreshed with perl 5.14 in sid. * data/files/fonts: + [NT] Refreshed against sid and now includes packages starting with "fonts-" as well. Thanks to Paul Wise for the patches. (Closes: #622149) * data/output/ftp-master-{,non}fatal: + [NT] Refreshed. * data/output/manual-references: + [JW] Refreshed. * data/rules/known-makefiles: + [JW] Added Makefiles from (the future) dpkg. (Closes: #640921) * data/spelling/corrections{,-multiword}: + [NT] Added some corrections for "remove" etc. Thanks to Jakub Wilk for spotting those. + [JW,NT] Added more corrections. (Closes: #639367, #640149, #613604) * debian/control: + [NT] (Build-)Depends on patchutils for lsdiff. * debian/copyright: + [NT] Added Jakub Wilk to maintainers. * debian/rules: + [JW] Use LC_ALL rather than LANG, since LC_ALL overrules LANG. * doc/lintian.xml: + [NT] Removed duplicate "allowed to" in same sentence. + [NT] Added a paragraph on some of the constrains in design of Lintian. * doc/lintianrc.example: + [NT] Add an example on how to enable "--quiet" via lintianrc. * doc/README.developers: + [NT] New file. Thanks to Jeremiah C. Foster for the initial contribution. * frontend/lintian: + [NT] Lintian now mentions if overrides may have been ignored. This happens if a package contains an override for a tag that has been marked "non-overridable" by the current vendor profile. + [NT] Mention ".changes" as a valid file type in the "unknown file" error. Thanks to Michael Gilbert for the report and the patch. (Closes: #639430) + [NT] Always display a given tag if requested with --tags or --tags-from-file. Previously, pedantic and experimental tags were not shown unless the relevant options were also passed. + [JW,NT] Fixed a regression where --check-part ignored display settings (such as --display-info). (Closes: #640694) + [NT] If both --verbose and --quiet is used together, then use the last of them to appear rather than "both at the same time". (Closes: #640366) + [NT] Accept --quiet in lintianrc as "quiet". This option may not be used together with "verbose" in the config file. * lib/Lintian/Check.pm: + [NT] Catch "Name <Name <Email>>" as a malformed email address. (Closes: #640489) + [JW] Catch misspellings of the "Debian QA Group" maintainer email (used for orphaned packages). (Closes: #640834) * lib/Lintian/Collect.pm: + [JW,NT] Create the source field from the package field if the former is not present. This fixes a number of false-positives introduced in 2.5.2. (Closes: #640186) * lib/Lintian/Collect/Source.pm: + [NT] Removed a requirement for fields that was not needed. + [NT] Fixed "index" method for source packages. * lib/Lintian/Collect/Package.pm: + [JW,NT] Replace use of fail with croak. (Closes: #637741) * lib/Lintian/Output.pm: + [NT] Merged "quiet" and "verbose" into "verbosity_level". * lib/Lintian/Profile.pm: + [NT] Reject profiles containing an unknown field. * lib/Lintian/Tag/Info.pm: + [JW] Create links for references pointing to files in html output. + [JW] Parse "#nnnnnn" references as links to Debian bugs. + [NT] Check severity and certainty when loading checks. This causes Lintian to reject checks with broken/incomplete tags even if the tag was never used. * lib/Lintian/Tag/Override.pm: + [NT] New file. * lib/Lintian/Tags.pm: + [NT] Track which tags had overrides that have been dropped. + [NT,RG] Collect override comments and print the comments above the overridden tag (with --show-overrides). Thanks to Carl Fürstenberg for the report. (Closes: #474590) + [NT] Remove the "respect-display-level" code. It is not as useful as intended. * lib/Text_utils.pm: + [NT] Close <p>-tags in dtml_to_html since the output is used in xhtml (xml), where all tags must be closed properly. (Closes: #639292) + [NT] Remove the last new line (if any) before a </pre> in tag to reduce the empty space to the next paragraph. * lib/Util.pm: + [JW] Use LC_ALL rather than LANG, since LC_ALL overrules LANG. + [JW] Stricten the DCtrl parser to choke on some syntax errors that were silently ignored. (Closes: #639516) * man/lintian.pod.in: + [JW] Fixed some stray POD markup. (Closes: #640705) + [JW,NT] Clarified that --tags and --tags-from-file ignores display settings. + [NT] Documented how lintian behaves if --quiet is used together with --verbose or --debug. + [NT] Documented how --verbose and --quiet can be enabled via the config file. Only one of "verbose" and "quiet" may appear in the config file. * profiles/debian/ftp-master-auto-reject.profile: + [NT] Refreshed to include udeb-uses-non-gzip-data-tarball. * private/*: + [JW] Use LC_ALL rather than LANG, since LC_ALL overrules LANG. * private/refresh-manual-refs: + [NT] Remove code to refresh refs to the Library Packaging Guide. + [JW] Added the java-policy and fixed the lintian ref. + [JW] Don't strip newlines from titles, but treat them as regular whitespace characters. + [JW] Strip some superfluous HTML markup from titles. * reporting/{config,html_reports,templates/foot.tmpl}: + [NT] Added a link to the Lintian source code. * reporting/harness: + [NT] Added missing import statement. * reporting/html_reports: + [JW,NT] Create a gzip'ed version of the raw lintian.log. (Closes: #637819) * reporting/templates/head.tmpl: + [NT] Show the list of all tags in the page header. Thanks to Arno Töll for the suggestion and the patch. (Closes: #640962) * reporting/templates/index.tmpl: + [NT] Added link to the new gzip'ed lintian.log. * t/*: + [JW,NT] Fixed test failures caused by unpacking the source with a umask different from 0022. (Closes: #637649) lintian (2.5.2) unstable; urgency=low * Summary of tag changes: + Added: - debian-rules-uses-deprecated-makefile - debian-rules-uses-or-modifies-user-only-variable - duplicate-changelog-files - package-has-long-file-name - source-package-component-has-long-file-name - udeb-uses-non-gzip-data-tarball - upstart-job-in-etc-init.d-not-registered-via-update-rc.d + Removed: - calls-suidperl-directly - suid-perl-script-but-no-perl-suid-dep * checks/*: + [NT] Migrated to use new methods in the Lintian::Collect interfaces rather than accessing the Lab directly. + [NT] Removed "fields" from Needs-Info. * checks/{debconf,conffiles}.desc: + [NT] Added missing bin-pkg-control Needs-Info. * checks/{cruft,fields}{,.desc}: + [NT] Relocated doc pkg not arch all tag; it was never triggered since cruft was a source check and the tag could only be triggered for binary packages. * checks/binaries: + [NT] Added lib/${MULTIARCH_DIR} to the list of paths to check for public shared libraries. Thanks to Sven Joachim for the report and the patch. (Closes: #630698) + [NT] Recognise .gox files as object files that cannot be stripped. Thanks to Matthias Klose for the report. (Closes: #624521) + [NT] Do not assume that the architecture field is present. + [NT] Emit "arch-dependent-file-in-usr-share" and "binary-in-etc" also for static compiled files. Thanks to Jakub Wilk for the report and the patch. (Closes: #635354) + [NT] Fixed false-negative for rpath, if the rpath included the multi-arch dir. Thanks to Jakub Wilk for the report and the patch. (Closes: #637259) * checks/changelog-file: + [NT] Removed exception for symlinked changelogs if the package had an Ubuntu version. This exception is now handled by the profile. Thanks to Benjamin Drung for the heads up. * checks/circular-deps.desc: + [NT] Fixed typo; thanks to Nicolás Alvarez for the report and patch. (Closes: #630925) * checks/control-files: + [NT] Refactored static tables into data-files. * checks/copyright-file: + [NT] Stricten one of the regexes for catching left over helper templates. This should prevent false-positives for some license texts. Thanks to Charles Plessy for the report. (Closes: #631674) + [NT] Use group data to determine if a package is foreign or not for symlinked /usr/share/doc/<pkg> dirs. This avoids the need for symlinks between packages in the lab. * checks/deb-format{,.desc}: + [NT] Allow data.tar.xz as the third member. Thanks to Ansgar Burchardt for the report and patch. (Closes: #632556) + [NT] Added test for udebs having non-gzip data members, since the debian-installer does not support them. Thanks to Luk Claes. (Closes: #634874) * checks/debhelper: + [NT] Do not trigger deprecation warning for dh_python if it is followed by a "$". This prevents false-positives when a Makefile variable is used to choose between dh_python2 and dh_python3. Thanks to Leonid Borisenko for the report. (Closes: #631662) + [NT] Do not trigger deprecation warning for dh_python-ply, which Lintian incorrectly identified as dh_python. Thanks to Daniele Tricoli for the report. (Closes: #632693) + [NT] Fix a broken regex that caused Lintian skip brace expansion checks for some debhelper files. Thanks to Jakub Wilk for the report and the patch. (Closes: #632883) + [NT] Do not consider "debian/debhelper" a temporary debhelper file. Some packages uses this a directory to store their debhelper files. * checks/debian-source-dir{,.desc}: + [NT] Added missing word in the tag description for git-patches-not-exported. + [NT] Fixed information disclosure issue, where Lintian could be tricked into disclosing the present of files on the host system via specially crafted source packages. * checks/duplicate-files: + [NT] Exclude __init__.py files from the check as they are required even if they are empty. Thanks to Daniele Tricoli for the report. (Closes: #632789) + [NT] Report duplicate changelogs as a separate tag. * checks/fields: + [NT] Refactored to use Lintian::Data and use new data files from data/fields. + [NT] Added python3-dev and removed python2.{4,5} from $PYTHON_DEV. Thanks to Jakub Wilk for the report and the patch. (Closes: #633044) + [NT] Fixed a bug where the libdb1-compat tag only triggered if libdb1-compat was listed in Pre-Depends. + [NT] Updated list of python "dev" packages. Thanks to Jakub Wilk for the patch. * checks/filename-length{,.desc}: + [NT] New file that checks the length of the package file names. (Closes: #631656) * checks/files: + [NT] Check for embedded copies of the underscore javascript library. Thanks to Jakub Wilk for report and the patch. (Closes: #631513) + [NT] Removed a leading slash from the filename part of the extra for python-debug-in-wrong-location. Thanks to Jakub Wilk for the report and the patch. (Closes: #631530) + [NT] Accepted patch from Marcelo Jorge Vieira to catch four additional embedded javascript libraries. (Closes: #635447) + [NT] Stricten the regex for finding .xvpics dirs. + [NT] Shipping a lintian override is no longer enough to make lintian consider the package for "non-empty". * checks/init.d{,.desc}: + [NT] Provide a separate tag for upstart-jobs not registered via update-rc.d in postinst. This allows vendors (such as Ubuntu) to disable this tag for upstart-jobs only using the new vendor profiles. While this would break overrides, all existing overrides appears to be for normal scripts rather than upstart-jobs. (Closes: #631872) * checks/java{,.desc}: + [NT] Jar files containing clojure files are no longer considered to be codeless. + [NT] Exclude jar files in /usr/lib/xul{-ext,runner} from the "jar-not-in-usr-share" check. (Closes: #635495) + [NT] Fixed a typo in a tag description. * checks/menu-format.desc: + [NT] Mentioned how to get rid of the CR characters in the desktop file. Thanks to Jakub Wilk. * checks/nmu: + [NT] "LowThresholdNMU" will now work as an alternative to "NMU" in changelogs for suppressing changelog-should-mention-nmu. Thanks to Jordi Mallach for the report. (Closes: #620418) * checks/po-debconf: + [NT] Allow po-files with an "@modifier", which works with debconf (>= 1.5.34). (Closes: #617905) * checks/rules: + [NT] Check included files in d/rules against a limited number of common makefile snippets, which are known not to implement all the required targets. This prevents false negatives of missing targets. Thanks to Jakub Wilk for the suggestion and the initial makefile list. (Closes: #631711) + [NT] Warn about including the CDBS simple-patchsys and dpatch as they are both deprecated by source format 3.0 (quilt). Thanks to Nelson A. de Oliveira for reporting and Luk Claes for providing an initial patch. (Closes: #624201) + [NT] Added check for using DEB_*FLAGS_{SET,APPEND} in d/rules. Thanks to Raphaël Hertzog for the report. (Closes: #631786) * checks/scripts{,.desc}: + [NT] Removed perl-suid related tags as the package is no longer available and we have no known packages triggering the tags at the moment. (Closes: #631432) + [NT] Added perl6/rakudo as a known interpreter. Thanks to Alessandro Ghedini for the report and patch. (Closes: #636354) * checks/shared-libs{,.desc}: + [NT] Fixed broken sentence. Thanks to Norbert Preining for reporting the issue. + [NT] Applied patch from Peter Pentchev to correct the logic for testing for shlib-calls-exit. (Closes: #633976) + [NT] Mention that some of the tags may be triggered due to the debhelper bug #204975. Thanks to Jakub Wilk for the report. (Closes: #633853) * checks/symlinks: + [NT] Symlink checking extended to relative paths as well. (Closes: #217023) * collection/*: + [NT] Removed all Needs-Info on "fields" and all checks that used the "fields" dir (or files therein) to determine if the scripts had been called in the wrong dir. * collection/diffstat: + [NT] No longer unconditionally creates a diffstat file, since the Lintian::Collect interface will fall back to using /dev/null in its absence. * collection/fields: + [NT] Removed creation of cross package symlinks. They have been replaced by the group information that checks are passed. + [NT] Deprecated it in favour of a smarter Lintian::Collect. It will be removed in a later release; for now it will just remove the "fields" directory in the lab. * collection/file-info: + [NT] Double check the output of file(1) when it says a ".gz" file is not gzip compressed. This should reduce the number of false-positives gz-file-not-gzip tags. (Closes: #620289) + [NT] Open files before using chdir. In the future unpacked may be a symlink. * collection/index{,.desc}: + [NT] Updated to handle source packages and with support for multi tarball source packages. * data/control-files/{,u}deb-permissions: + [NT] Added files. * data/fields/*: + [NT] Added new files based on data variables from checks/fields. * data/fields/obsolete-packages: + [NT] Added libdigest-sha1-perl on request of the Perl Team. Thanks to Salvatore Bonaccorso for the report and patch. (Closes: #635441) * data/fields/perl-provides: + [NT] Refreshed against perl 5.12.4. * data/files/standard-files: + [NT] Added file. * data/rules/{deprecated,known}-makefiles: + [NT] Added file. * data/spelling/corrections: + [RA] Remove discontiguous correction. The OED lists this as valid. Thanks, Charles Plessy. (Closes: #632159) + [NT] Added another correction for "specification". Thanks to Jakub Wilk for the hint. (Closes: #634222) + [NT] Added another correction for "development" and "misspelt". Thanks to Pino Toscano and Jakub Wilk for the suggestion. * debian/control: + [NT] Bumped debhelper version to 8.1.0 due to the build-arch and build-indep targets. Thanks to Mark Hymers for the heads up and a patch. (Closes: #632550) + [NT] Added Build-Depends on cdbs, it is needed for some of the tests. + [NT] Pruned the Uploaders list a bit. We would like to thank Jeroen van Wolffelaar, Frank Lichtenheld and Marc 'HE' Brockschmidt for their work on Lintian in the past. * debian/lintian.install: + [NT] Added the profiles directory. * debian/rules: + [NT] Added target to update the profiles. * doc/lintian.xml: + [NT] Added information about the new Vendor profiles. + [NT] Improved various parts of the User Manual. Especially mention that Lintian can be run on changes files and this processes all packages related to the changes file. * doc/lintianrc.example: + [NT] Added more sample options. * frontend/{lintian,lintian-info}: + [NT] Added profile support (new option --profile), please refer to the Lintian User Manual for more information. * frontend/lintian: + [NT] Ensure that all dependency collections of a check are loaded. Previously Lintian would only load direct dependencies of a collection and assume that was enough. + [NT] Allow "verbose" to appear in the lintianrc file. + [NT] Added new "--packages-from-file" option. Lintian will read packages from the file (one package per line) and process these. Unlike "--packages-file" it allows its argument to be "-" for stdin and the format is simpler. + [NT] Deprecated "--packages-file" in favour of the new "--packages-from-file" option. + [NT] Allow "y" as short form of "yes" in the configuration file. Furthermore, ignore case when doing the check for boolean values. * lib/Lab.pm: + [NT] Removed $dist argument to lab creation, since we rely on LINTIAN_DIST being exported anyway. + [NT] Allow temporary labs to contain the same package twice if the version or/and architecture differs. (Closes: #632115) * lib/Lab/Package.pm: + [NT] Symlink in all components of the source package when creating the source entry in the lab. Also removed legacy code for using the old unpack scripts. * lib/Lintian/Collect/{Binary,Source}.pm: + [NT] Refactored code from these files into the module Lintian::Collect::Package. * lib/Lintian/Collect/Package.pm: + [NT] New file. This serves as a base for Lintian::Collect modules that can be unpacked. * lib/Lintian/Command.pm: + [NT] Added support for appending output to files without truncating them first via the new out_append and err_append options. * lib/Lintian/Data.pm: + [NT] Let new take an optional fourth argument, a code sub, that can be used to pre-process the value. * lib/Lintian/{Internal/FrontendUtil,Profile}.pm: + [NT] New files. * lib/Lintian/ProcessablePool.pm: + [NT] Made the pool consider two packages with the same name as duplicates even if their version or architecture differs, when the underlying Lab does not support this run. This causes lintian to drop one of the packages rather than ending up with an internal error. * lib/Lintian/{Tag/Info,Tags}.pm: + [NT] Updated for profile support. * lib/Read_pkglists.pm: + [NT] Merged the binary and udeb format since they were essentially the same. Old udeb files can still be parsed as binary ones. * man/lintian.pod.in: + [NT] Documented the new --profile option. Note that the options --suppress-tags{,-from-file} now suppresses tags in the active profile. + [NT] Removed all references to "unpack-level". All unpack levels have been replaced by collections. + [NT] Clarified that some command-line arguments are only useful when using a static lintian lab. + [NT] Described the configuration file format. Thanks to Sven Joachim for the report. (Closes: #636681) * man/lintian-info.pod: + [NT] Documented the new --profile option. * profiles/*: + [NT] Added default profiles for Debian and Ubuntu. Note that these profiles will silently ignore overrides for "fatal" (non-overridable) tags. (Closes: #536364) * reporting/harness: + [NT] Use --packages-from-file instead of --packages-file. * reporting/{html_reports,templates/index.tmpl}: + [NT] Always emit a page for tags, even if they are not emitted. It will also include a link to the entire list of known tags. (Closes: #631763) * reporting/templates/{tag-not-seen,tags-all}.tmpl: + [NT] New files. * unpack/list-binpkg: + [NT] Added a -u option to make it fetch udebs instead of regular binaries. This and the udeb/bin format merge makes list-udebpkg obsolete. * unpack/list-udebpkg: + [NT] Removed in favour of list-binpkg. * unpack/unpack-srcpkg-l1: + [NT] Removed in favour of the collection system. lintian (2.5.1) unstable; urgency=low * Summary of tag changes: + Added: - bad-perm-for-file-in-etc-sudoers.d - debian-rules-missing-recommended-target - dh_pycentral-is-obsolete - dh_python-is-obsolete - illegal-multi-arch-value - non-empty-dependency_libs-in-la-file + Removed: - uses-dh-python-with-no-pycompat - ldconfig-symlink-before-shlib-in-deb * checks/binaries: + [NT] Applied patch from Paul Wise to detect binaries embedding glee, glew and libtheora. (Closes: #629288) + [NT] Also consider multiarch dirs when looking for public shared libraries. (Closes: #630164) * checks/debhelper{,.desc}: + [NT] Recognise that dh_python and dh_pycentral are now obsolete. (Closes: #496902, #541978) * checks/changes-file: + [NT] Always verify the checksums of changes-files. * checks/copyright-file: + [NT] Extended current dh_make template checks. Thanks to Nelson A. de Oliveira for the patch. (Closes: #598412) * checks/fields{,.desc}: + [NT] Allow "all" and "any" to appear together in the Architecture field of a .dsc file. (Closes: #626775) + [NT] Added illegal-multi-arch-value. (Closes: #616493) * checks/files: + [NT] Fixed two misnamed udeb tags, which lead to an internal error if triggered. Thanks to Guillem Jover for the report. (Closes: #628754) + [NT] Added bad-perm-for-file-in-etc-sudoers.d tag. (Closes: #588831) + [CW] Do not issue missing-pre-dependency-on-multiarch-support for udebs. + [NT] Limit missing-pre-dependency-on-multiarch-support to real files only. Previously it would also check symlinks. (Closes: #629648) * checks/java{,.desc}: + [NT] Sort the jar files by name, so they are checked in the same order. + [NT] Improved the description of classpath-contains-relative-path. (Closes: #629189) + [NT] Reduced false-positives of classpath-contains-relative-path. Relative classpaths are now okay if they point to jar files in /usr/share/java (but not subdirs thereof) and there is a strong libX-java dependency. Alternatively if the classpath points to a file or a symlink in the package itself, then it is also okay. + [NT] Allow maven plugins to be without classpaths. (Closes: #629056) * checks/manpages.desc: + [ADB] Don't suggest using debmake's output as a reference. The package is not even in oldstable any more. * checks/md5sums.desc: + [ADB] Drop references to obsolete debstd. Thanks to Steve Langasek for the pointer. * checks/rules: + [NT] Removed code for handling packages with dh_python. + [NT] Fixed the code for determining Build-Depends for python packages. Thanks to Jakub Wilk for the patch. (Closes: #614876, #616553) + [NT] Applied patch from Roger Leigh to implement the check for rules files missing the build-arch and build-indep targets. (Closes: #605012) * checks/shared-libs{,.desc}: + [NT] Added non-empty-dependency_libs-in-la-file. (Closes: #628673) + [NT] Removed ldconfig-symlink-before-shlib-in-deb. * collection/java: + [NT] Fixed a regex that would accept any file ending with "jar" to be a jar file rather than only accepting ".jar". This fixes a number of false-positives java checks. * collection/unpacked: + [NT] Added support for unpacking source packages using libdpkg-perl, instead of dpkg-source, if the latter is not present. (Closes: #626476) * data/binaries/multiarch-dirs: + [NT] New file - maps architectures to multiarch dirs. * data/fields/{perl-provides,virtual-packages}: + [NT] Refreshed. (Closes: #627082, #627431) * data/output/ftp-master-*: + [NT] Refreshed. * data/shared-libs/ldconfig-dirs: + [NT] Updated ldconfig path for i386 multiarch paths. Thanks to Raphaël Hertzog for the reminder. * data/spelling/corrections-multiword: + [CW] Remove the "requires to" correction; it has too many common false positives, especially involving relative clauses. (Closes: #625886) * debian/control: + [NT] (Build-)Dependency changes. - xz-lzma is now preferred to lzma as Build-Dependency - Added depends on libdpkg-perl - Reduced dpkg-dev to a suggests, we can use libdpkg-perl as fallback. - Explicitly depends on bzip2 to always support bz2 source packages. - Added xz-utils as suggests - needed for .xz source packages. * debian/rules: + [NT] Added recommended targets build-arch and build-indep. * doc/lintian.xml: + [NT] Clarify that the package type is not listed in the output for binary packages. (Closes: #629193) * frontend/lintian: + [NT] Allow some options to be put into the lintianrc file. (Closes: #460350) + [NT] Added --no-cfg option that can be specified if no config file should be read. + [NT] Deprecated --checksums (also known as --md5sums and -m). Lintian will now always verify the checksums in changes files. The options will be accepted with a warning for now, but may be removed in a later release. (Closes: #629453) + [NT] Fixed an issue where fail was called before it was available. Thanks to Toby Corkindale for the report. (Closes: #630560, LP: #797553) * lib/Lintian/Tag/Info.pm: + [NT] Output the name of the check and the type of the check along with the description of the tag. * lib/Lintian/Tags.pm: + [NT] Fixed a flaw in logic that gave incorrect results for architecture dependent overrides. Thanks to Andreas Beckmann for the report and the patch. (Closes: #626587) * man/lintian.pod.in: + [NT] Mentioned that --checksums and aliases are deprecated. * unpack/list-srcpkg: + [ADB] Don't rely on the order of fields in the Sources file. The files produced by the Debian archive no longer follow the order which the code previously assumed, and we shouldn't assume that the order won't change again in the future. (Closes: #626597) lintian (2.5.0) unstable; urgency=low * Summary of tag changes: + Added: - duplicate-files - format-3.0-but-debian-changes-patch - extended-description-contains-empty-paragraph - git-patches-not-exported * checks/binaries: + [NT] Fixed false-positive embedded-library. Lintian incorrectly assumed that none of these binary packages would contain a source version in their source field. (Closes: #626038) * checks/copyright-file.desc: + [ADB] Correct a spelling mistake ("coypright" -> "copyright") in the description of copyright-refers-to-deprecated-bsd-license-file; thanks, Kees Cook. (Closes: #623780) * checks/description{,.desc}: + [NT] Check for empty paragraphs in extended description. Thanks to Gerfried Fuchs for the patch. * checks/duplicate-files{,.desc}: + [NT] Added to check for duplicate files in usr/share/doc. Thanks to Axel Beckert for the suggestion. (Closes: #614715) * check/fields: + [NT] Accepted patch from Antonio Terceiro to add Ruby-Version as an accepted field in binary packages. Thanks to Vincent Carmona for the report. (Closes: #623390) * check/files: + [NT] Accepted multiple patches (merged into one) from Marcelo Jorge Vieira to detect a number of new javascript libraries. (Closes: #623878) * checks/patch-systems{,.desc}: + [NT] Detect when 3.0 (quilt) packages have a debian-changes-VERSION patch without a patch header. Thanks to Iain Lane for suggestion and patch. (Closes: #588873) * checks/debian-source-dir{,.desc}: + [NT] Applied patch from David Bremner to enable git-patches-not-exported. (Closes: #607694) * checks/java: + [NT] Tightened the regex for finding java libraries and restricted missing-classpath tag to only be emitted for packages that actually contain at least one jar file we check. This fixes false-positives for packages that depended on libX-java-doc packages or packages that only contain jar files we ignore. * check/scripts{,.desc}: + [NT] Accepted patch from Antonio Terceiro to allow ruby-interpreter as alternative to ruby for /usr/bin/ruby scripts. (Closes: #626210) * data/common/source-fields: + [NT] Accepted patch from Antonio Terceiro to add Ruby-Version as an accepted field in binary packages. Thanks to Vincent Carmona for the report. * lib/Lintian/ProcessableGroup.pm: + [NT] Properly handle if the changes file is located directly in the file system root. Thanks to Trent W. Buck for the bug report. (Closes: #624149) * lib/Lintian/Tags.pm: + [NT] Allow overrides to use wildcards anywhere instead of only in the beginning or the end. Thanks to Steve R. Langasek for the report. (Closes: #617991) + [NT] Allow simple architecture overrides such as [i386] or [!i386]. Architecture wildcards are not supported yet. The actual syntax for the architecture the same as the one used in the Build-Depends. Thanks to Andreas Beckmann for the bug report and the solution proposal. (Closes: #622888) lintian (2.5.0~rc3) unstable; urgency=low * Summary of tag changes: + Added: - dir-or-file-in-run - intra-source-package-circular-dependency - package-contains-broken-symlink - classpath-contains-relative-path - jar-not-in-usr-share - executable-jar-without-main-class - missing-dep-on-jarwrapper - missing-classpath - javalib-but-no-public-jars - missing-manifest - codeless-jar - missing-pre-dependency-on-multiarch-support * checks/*.desc: + [NT] Updated the Needs-Info field to include the new collections where needed. * checks/binaries: + [NT] Accepted patch from Loïc Minier to support the armhf architecture. (Closes: #618587) + [NT] Drop wrong checks for multiarch directories. Multiarch directories are only allowed in packages of the given architecture. Thanks to Steve R. Langasek for the patch. * checks/circular-deps{,.desc}: + [NT] Added to check for circular dependencies between binaries from the same source. It requires all binaries packages to be present as well as the source package to be effective. Thanks to Bill Allombert for the suggestion. (Closes: #316283) * checks/debhelper: + [NT] Use new alt-dh_commands data file to fetch alternative dependencies for dh_commands, which are sometimes provided indirectly by meta or API packages. * checks/fields: + [NT] Do not emit needless-dependency-on-jre for libX-gcj packages and only emit the tag at most once per package. Thanks to Rene Engelhard for the report. (Closes: #622396) * checks/files{,.desc}: + [NT] Added dir-or-file-in-run tag. (Closes: #623031) + [NT] New tag missing-pre-dependency-on-multiarch-support, Severity: serious, to warn when a package installs libraries to the multiarch directory without taking care of upgrades. Thanks to Steve R. Langasek for the patch. * checks/java{,.desc}: + [NT] Added file based on patches submitted by Vincent Fourmond. This new file checks for jar files in weird locations. (Closes: #620829, #575447) * checks/manpages: + [NT] Fixed false-positive binary-without-manpage when the manpage is in a direct dependency of the package and the package is checked together with its dependency. (Closes: #120323) * checks/scripts: + [NT] Fixed false positive missing-dep-for-interpreter, if the interpreter was dash, since dash is now essential. (Closes: #620120) * checks/symlinks{,.desc}: + [NT] New file that checks for broken symlinks. A symlink is considered broken if it does not exist in the package itself or in its direct dependencies. Since only absolute symlinks are checked at the moment, this only partly fixes #217023. * collection/*.desc: + [NT] Updated the Needs-Info field to include the new collections where needed. * collection/{bin-pkg-control,fields,index}{,.desc}: + [NT] Added to replace various unpack scripts. * collection/java-info{,.desc}: + [NT] Accepted patch from Vincent Fourmond to implement Java related data collection. * data/binaries/multiarch: + [NT] Removed by patch from Steve R. Langasek. * data/debhelper/alt-dh_commands: + [NT] New file; contains alternative dependencies for dh_python2 and dh_python3. (Closes: #614879) * data/fields/architectures: + [NT] Updated to include armhf. * data/files/triplets: + [NT] Updated to include armhf triplet. + [NT] Refresh with the final approved multiarch paths by patch from Steve R. Langasek. * data/output/manual-references: + [NT] Accepted patch from Vincent Fourmond to add the links to the Java Policy. * data/spelling/corrections: + [NT] Added a lot of spelling mistakes with corrections. Kudos to Kevin Ryde for these. (Closes: #619075) * data/spelling/corrections-multiword: + [NT] Removed "helps to" as a spelling mistake. Thanks to Nicholas Bamber for the report. (Closes: #622124) * data/standards-version/release-dates: + [NT] Added 3.9.2 as the newest Standards-Version. Thanks to Sven Joachim for the report. (Closes: #621667) * debian/control: + [NT] Bumped Standards-Version to 3.9.2. + [NT] Updated Build-Depends for debiandoc -> docbook change of the manual. + [NT] Added missing Build-Depends on libhtml-parser-perl. Also added it to suggests, since it is used for XML output. * debian/{docs,rules}: + [NT] Updated to use/install docbook instead of debiandoc. * doc/lintianrc.example: + [NT] Removed reference to LINTIAN_UNPACK_LEVEL. * doc/lintian.sgml: + [RG] Removed file - replaced by doc/lintian.xml. * doc/lintian.xml: + [RG] Added to migrate away from debiandoc. (Closes: #587925) * frontend/lintian: + [NT] Removed the deprecated --unpack-level argument. Only two unpack levels were available and they were equal to the --remove and --unpack options. + [NT] Stopped accepting the environment/config variables LINTIAN_UNPACK_LEVEL and LINTIAN_SECTION. The former is redundant as explained above and the latter was deprecated in favor of LINTIAN_AREA. + [NT] Refactored the frontend to group packages together based on their source package. This allows for cross-package checks. (Closes: #513663) * lib/{Lab/Package,Lintian/Processable*}.pm: + [NT] Added files to assist in package grouping. * lib/Lintian/Command/Simple.pm: + [NT] Added support for changing directory before running the command. * lib/Lintian/Collect.pm,lib/Lintian/Collect/*.pm: + [NT] Removed assumption that all the information handled by these are available in the current directory. * lib/Lintian/Schedule.pm: + [NT] Removed file, replaced by Lintian::ProcessablePool. * private/refresh-archs: + [SRL] update to output directory mappings based on DEB_HOST_MULTIARCH instead of DEB_HOST_GNU_TYPE. * private/runtests: + [NT] Added support for dumping build logs if a test fails. (Closes: #621658) + [NT] Disabled pkgbinarymangler during tests. (Closes: #621681) * t/tests/binaries-from-other-arch: + [NT] Accepted patch from Benjamin Drung to accept i686-linux-gnu as a valid triplet. This fixes test failure in Ubuntu. (Closes: #622974) * unpack/unpack-{binpkg,changes}-l1: + [NT] Removed unpack scripts for binpkg and changes as these have been replaced by collections. lintian (2.5.0~rc2) unstable; urgency=low Uploading to unstable. * Summary of tag changes: + Added: - unknown-multi-arch-value - package-needs-versioned-debhelper-build-depends + Removed: - old-versioned-python-dependency * checks/binaries: + [ADB] Update binary-from-other-architecture's tests in line with the changes to filename output introduced in 2.5.0~rc1. (Closes: #614906) * checks/changes-file.desc: + [NT] Added oneiric as valid Ubuntu distribution. Thanks to Benjamin Drung for the patch. (Closes: #617227) * checks/deb-format: + [NT] Removed assumption that there was always a changelog in a binary with a data.tar.lzma member. * checks/debhelper: + [NT] Reduced package-lacks-versioned-build-depends-on-debhelper to a pedantic tag. It is now only emitted for debhelper compat levels of 7 or less, since even oldstable ships with debhelper 7. + [NT] Added package-needs-versioned-debhelper-build-depends, which replaces package-lacks-versioned-build-depends-on-debhelper old task of warning if a missing versioned depends may lead to a build failure. Currently this is only emitted for compat 8 (or higher). + [NT] Stopped emitting tags for using dh_* (and dh) if these scripts is in debhelper 7 (or earlier). * checks/fields{,.desc}: + [NT] Recognise Multi-Arch as a known binary field. (Closes: #617816) + [NT] Fixed typo in a tag description. + [NT] Removed old-versioned-python-dependency per request of the Python team. The tag was outdated and most instances of it was false positives. Thanks to Piotr Ożarowski and Jakub Wilk for the report and clarification. (Closes: #619487) + [NT] Accepted patch from Joachim Breitner to support new Haskell package naming scheme. + [NT] Added Built-Using as a known binary and udeb field. This field is supported with dpkg 1.16.0. * checks/files: + [NT] Also check files in /etc/cron.d for dots in filenames. Thanks to Thijs Kinkhorst for the report and patch. (Closes: #615072) + [NT] Applied patch to also detect copies of CKEditor. Thanks to Jeroen Dekkers for the report and the patch. (Closes: #616505) + [NT] Fixed a regression in caused by inconsistent prefixes. * checks/huge-usr-share: + [NT] Removed assumption that there is always files in usr/share. * checks/menu-format: + [NT] Fixed an inconsistency in output of file names. Thanks to أحمد المحمودي (Ahmed El-Mahmoudy) for the report. (Closes: #618921) * checks/menus: + [NT] Fixed check for special files that does not need to be registered with doc-base (e.g. README.html). Thanks to Tanguy Ortolo for the report. (Closes: #617266) + [NT] Accepted patch from Joachim Breitner to support new Haskell package naming scheme. (Closes: #616403) * checks/patch-systems.desc: + [NT] Reduced unneeded-build-dep-on-quilt to a pedantic tag, since some people keep the dependency on quilt to ease backporting for older releases. * data/changelog-file/ubuntu-dists: + [NT] Added oneiric as valid Ubuntu distribution. Thanks to Benjamin Drung for the patch. * data/common/source-fields: + [NT] Added 'package-list' field, which is emitted by dpkg 1.16.0. * data/spelling/corrections: + [NT] Added more misspellings. * t/tests/shared-libs-la-files: + [NT] Fixed an issue where files would not be included in the tarball due to dpkg-source's exclude patterns. (Closes: #619287) * t/tests/*: + [NT] Modified some versioned dependencies that the new dpkg will not consider valid from 1.16.0. (Closes: #619290) lintian (2.5.0~rc1) experimental; urgency=low The "welcome Niels Thykier!" release. * Summary of tag changes: + Added: - build-depends-on-specific-java-doc-package - depends-on-specific-java-doc-package - unneeded-build-dep-on-quilt - description-synopsis-starts-with-article - needless-dependency-on-jre - temporary-debhelper-file - compressed-objects.inv - unused-build-dependency-on-cdbs - python-debug-in-wrong-location - debian-watch-contains-dh_make-template - missing-dependency-on-python-central - python-module-in-wrong-location - missing-dependency-on-python-support - package-installs-python-bytecode - debhelper-maintscript-needs-versioned-build-depends + Removed: - embedded-zlib (now in embedded-library) - embedded-libpng (now in embedded-library) - embedded-libjpeg (now in embedded-library) - embedded-libopenjpeg (now in embedded-library) - package-installs-python-pyc (replaced by package-installs-python-bytecode) * checks/*: + [NT] Use the new pre-sorted file {index,info} when iterating over files. + [NT] All checks now report files without any "./" or "/" prefix. This may break existing overrides. (Closes: #534940) * checks/binaries: + [RA] Exclude kfreebsd-kernel-di-{amd64,i386} from the embedded-zlib check since it's in the kernel. (Closes: #593397) + [RG] Add swipl to the list of known interpreters. (Closes: #591316) + [RG] Detect embedded copies of ftgl, t1lib, gl2ps, libgd2, ncurses, openssl (libcrypto), sqlite/3, libm, ltdl, curl, libmng, libmsn, libmikmod, libmysqlclient, and tinyxml. + [RG] Merge embedded-{zlib,lib{png,jpeg,openjpeg}} into embedded-library. + [RG] Find directories based on the file's type instead of file(1)'s unforgiving output. Thanks, Gabriele Giacone. (Closes: #597990) * checks/cruft{,.desc}: + [NT] Extended the diff-contains-substvars check to also catch files prefixed with a package name. + [NT] Corrected the description of diff-contains-$vcs-control-dir. It incorrectly assumed that -i worked for native packages. (Closes: #609153) + [NT] Moved the list of autotools packages into data/cruft/autotools. + [NT] Clarified that dpkg-source looks for <package>_<upstreamversion> and not <package>_<version> in the description of native-package-with-dash-version. Thanks to Daniel Thomas for the report. (Closes: #594254) * checks/debhelper{,.desc}: + [NT] Fix dependency check for dh_nativejava, default-jdk has never provided dh_nativejava. (Closes: #606506) + [NT] Added check for temporary debhelper files that ought to have been removed by dh_clean. (Closes: #598251) + [NT] Added check for unused build dependency on cdbs. Thanks to Jari Aalto for suggesting this. (Closes: #582769) + [NT] Added check for incorrect debhelper version when using the maintscript feature from debhelper 8.1.0. * checks/debian-source-dir: + [NT] Added missing import of "Util" perl module. Thanks to David Bremner for the patch. * checks/description{,.desc}: + [NT] Add a check for synopsis starting with articles. Thanks to Nelson A. de Oliveira for the patch. (Closes: #603053) + [NT] Fixed false positive description-contains-duplicated-word caused by Lintian ignoring quoted words. Thanks to Gregor Herrmann for report. (Closes: #590723) * checks/fields{,.desc}: + [NT] Added check for packages (build) depending on openjdk-X-doc or classpath-doc instead of the default-jdk-doc metapackage. (Closes: #593837) + [NT] Fixed spelling of metapackage in tag descriptions. + [NT] Added needless-dependency-on-jre tag. + [NT] Corrected Policy references for the uploader tags. Thanks to David Prévot for spotting this issue and providing a patch. (Closes: #602632) + [NT] Fixed false positives for breaks-without-version. The tag will no longer be emitted if the package listed in Breaks is also listed in Replaces. Thanks to Modestas Vainius for the report. (Closes: #605744) + [NT] Clarified that old-versioned-python-dependency can also be triggered if dh_python2 is used and the package is missing ${python:Breaks}. Thanks to Piotr Ożarowski for the report. (Closes: #604167) + [RG] Mention the package's original area in wrong-section-according-to-package-name. (Closes: #608554) * checks/files{,.desc}: + [NT] Fixed false-positive extra-license-file for license.ui files. Thanks to Jeremy Sanders for the report. (Closes: #595941) + [NT] Added hurd-udeb to the list of packages allowed to ship unusual top-level directories. Thanks to Samuel Thibault for the patch. (Closes: #591331) + [NT] Fixed spelling of metapackage in empty-binary-package tag description. (Closes: #591300) + [NT] Fixed false-positive extra-license-file for games. Instead of skipping PATH directories Lintian now ignores all executable files. (Closes: #608866) + [NT] Added compressed-objects.inv tag to catch compressed objects.inv files in python documentation. Thanks to Fladischer Michael for the report and a partial patch. (Closes: #608810) + [NT] Added check for misplaced python debug files. Thanks to Jakub Wilk for the report. (Closes: #576014) + [NT] Added check for missing dependency on python-central. Thanks to Jakub Wilk for the report. (Closes: #592533) + [NT] Added check for misplaced Python modules. Thanks to Jakub Wilk for the report. (Closes: #576012) + [NT] Removed the "!= 0755" part from the out of the tag executable-is-not-world-readable, since there are other valid world readable file permissions. + [NT] Added check for missing dependency on python-support. Thanks to Jakub Wilk for the report. (Closes: #592491) + [NT] Added check for packages installing Python eggs and __pycache__ directories. Also extended existing Python bytecode check to include ".pyo" files. Thanks to Piotr Ożarowski, Jakub Wilk and the people in #debian-python for the report and help with implementing this. (Closes: #576005) * checks/init.d.desc: + [RG] Raise severity of init.d-script-starts-in-stop-runlevel. (Closes: #603800) * checks/manpages: + [NT] Fixed typo in locale name. Thanks to Christoph Biedl for spotting this. (Closes: #606933) * checks/menu-format.desc: + [CW] Fix several typos. * checks/menus.desc: + [RA] Rephrase doc-base-uses-applications-section to be clearer that its advice is to remove the "Applications/" part of the section. * checks/nmu: + [RG] Completely abort if debian/changelog is a symlink. (Closes: #582408) * checks/patch-systems{,.desc}: + [NT] Added check for new unneeded-build-dep-on-quilt. (Closes: #582767) * checks/rules: + [RG] Drop some checks for versioned dependencies that can now be satisfied in stable (squeeze). Thanks, Cyril Brulebois. (Closes: #612137) + [RG] Correctly handle include directives preceded by a tab. (Closes: #607281) + [RG] Allow 'ocaml' as an alternative to 'ocaml-nox'. Thanks, Ralf Treinen. (Closes: #612568) * checks/scripts: + [NT] Added mscgen as interpreter. * checks/standards-version: + [RG] Correctly handle cases where debian/changelog is a symlink. * checks/watch-file{,.desc}: + [NT] Added check for dh_make(1) templates in the watch file. Thanks to Nelson A. de Oliveira for the report. (Closes: #600866) + [RG] Document that relying on SourceForge's webpages for finding new versions is not recommended either. (Closes: #593603) * collection/objdump-info: + [RG] Support stricter parameter handling of objdump-info from binutils 2.21. Thanks, Andreas Beckmann. (Closes: #604047, LP: #683347) * data/changelog-file/ubuntu-dists: + [CW] Add natty as a valid Ubuntu distribution, and remove the EOLed intrepid and jaunty. (Closes: #611439) * data/cruft/autotools: + [NT] Added the file which is a list of all packages that will suppress the {ancient,outdated}-autotools-helper-file tags. Currently this is manually updated. This new list includes dh-autoreconf, thanks to Felix Geyer. (Closes: #592358) * data/debhelper/*: + [RG] Refresh against unstable. * data/debian-source-dir/known-files: + [NT] Added the file and included git-patches in it. Thanks to Ron for the report and David Bremner for the initial patch. (Closes: #607502) * data/fields/essential: + [RG] Add hurd. (Closes: #591323) * data/fields/obsolete-packages: + [NT] Added default-jdk-builddep. See README.gcj-native-transition in java-common for the replacement. * data/fields/perl-provides: + [RG] Refresh against perl 5.10.1. * data/files/fonts: + [NT] Made tipa replace xfonts-tipa as font provider. (Closes: #595530) + [RG] Refresh against unstable. * data/files/locale-codes: + [RG] Refresh against isoquery 1.4. * data/shared-libs/ldconfig-dirs: + [NT] Removed the emul/ia32-linux directories as they are no longer used. (Closes: #596848) * data/spelling/corrections: + [NT] Added more corrections. * data/spelling/corrections-case: + [NT] Added DocBook corrections. Thanks to Jakub Wilk. (Closes: #611349) * data/spelling/corrections-multiword: + [NT] Added "allows to" and other similar misspellings. Thanks to Matthew Paul Thomas for the report. (LP: #608231) * debian/control: + [RA] Add the build dependencies required to run the test suite during the build. Many thanks to Niels Thykier for the investigative work to determine which packages are required. (Closes: #593832) + [RA] Remove versions from dependencies when those versions are satisfied by oldstable (lenny). + [NT] Bump debhelper build dependency to 7.0.50~, since some tests depend on using dh7 with override targets. (Closes: #607730) + [NT] Added Niels Thykier to uploaders. + [NT] Introduce (build) dependency on libemail-valid-perl. + [RG] Add a versioned build dependency on libtest-simple-perl or a recent Perl that has Test::More with subtests support. * debian/copyright: + [NT] Added Niels Thykier to maintainers. * debian/rules: + [RA] Run the test suite during the package build. + [NT] Replace dh_clean -k with dh_prep. + [NT] Add support for skipping the test suite per policy 4.9.1. Many thanks to David Bremner for the patch. * debian/compat: + [NT] Bump debhelper compat to 7. * debian/source/lintian-overrides: + [RG] Add overrides for quilt-related checks. * frontend/lintian: + [NT] Ensure that Lintian always reaps processes it started before exiting. In some cases these jobs would attempt to modify the lab while Lintian was trying to remove it. Thanks to Andreas Beckmann for reporting this issue. (Closes: #610218) + [NT] Sorted related options alphabetically. Thanks to Jari Aalto for the initial patch. (Closes: #600905) * lib/Lintian/Check.pm: + [NT] Use Email::Valid to validate email addresses. (Closes: #602655) + [NT] Allow package names to be excluded from regular spelling checks. They are still subject to multi word and case sensitive spelling checks. Thanks to syq for the suggestion. (Closes: #576283) * lib/Lintian/Collect/Binary.pm: + [NT] Pre-sort file index and file info to avoid sorting it repeatedly in the checks. (Closes: #605844) * man/*: + [NT] Rewrote the man pages in pod. (Closes: #600906) * t/runtests: + [RG] Run blackbox tests in parallel too. * t/tests/{rules-not-makefile,scripts-missing-dep}: + [NT] Added new tests. (Closes: #607731) lintian (2.4.3) unstable; urgency=low The "Policy 3.9.1" release. * Summary of tag changes: + Added: - embedded-library + Removed: - debian-news-entry-without-blank-line - dh_testversion-is-deprecated * checks/binaries{,.desc}: + [RG] Detect embedded copies of expat, libbz2, libmagic, libxml2, pcre3, and tiff. + [RG] Recognise powerpcspe and sh4 ELF objects. + [RA] Warn that spelling-error-in-binary may produce false positives for words containing non-ASCII characters. (See #588661) * checks/changelog-file{,.desc}: + [RA] apt-listchanges has been fixed, so drop the check for NEWS files ending in a trailing blank line. (Closes: #586816) * checks/control-files.desc: + [RA] Add references to Policy requirements added in 3.9.1. * checks/copyright-file{,.desc}: + [RA] Add examples for copyright-without-copyright-notice. Based on a patch by Jari Aalto. (Closes: #580767) + [RA] Remove exceptions for GPL v1, which is now in common-licenses and mentioned in Policy 3.9.1. * checks/cruft.desc: + [RA] Add some hints to the ancient-libtool long description on how to update the libtool files oneself. (Closes: #580767) * checks/debhelper{,.desc}: + [RA] package-lacks-versioned-build-depends-on-debhelper can also trigger if the dependency is present but not tight enough. Thanks, gregor herrmann. (Closes: #588156) + [RA] Allow a tilde after the compatibility level in the debhelper dependency. Thanks, Axel Beckert. (Closes: #583777) + [RA] Remove dh_testversion-is-deprecated. The command is no longer part of debhelper, so using it now just results in a build failure, and there are no instances in the archive. * checks/description.desc: + [RA] Downgrade description-too-long to minor severity to match bug reporting standards for formatting bugs. (Closes: #587837) * checks/files{,.desc}: + [RG] Detect embedded copies of HTMLPurifier. + [RG] Detect embedded copies of the Strophe javascript library. + [RA] Add references to Policy requirements added in 3.9.1. * checks/patch-systems.desc: + [RA] Improve the more-than-one-patch-system long description to explicitly mention the case of packages that depend on dpatch but are in 3.0 (quilt) format and to provide more rationale for the tag. Thanks, Robert Luberda. (Closes: #585657) * checks/po-debconf: + [RA] Ignore comments in po/POTFILES.in. (Closes: #586036) * checks/rules.desc: + [RA] Rephrase the debian-rules-calls-debhelper-in-odd-order long description to try to be clearer about the ordering requirements. (Closes: #579964) * checks/scripts{,.desc}: + [RA] Improve python-script-but-no-python-dep tag description to be clearer about the requirement for a versioned dependency for versioned scripts and to mention ${python:Depends}, created by the various Python debhelper scripts. (Closes: #575590, #582763) + [RA] Add runhaskell and runghc. (Closes: #589266) + [RA] Add references to Policy requirements added in 3.9.1. + [RA] Allow kill -<signal> and kill and trap with signal numbers in /bin/sh scrips, now allowed by Policy 3.9.1. * debian/changelog: + [RA] Fix Policy 3.9.0 reference in 2.4.2. (Closes: #587549) * debian/control: + [RA] Update standards version to 3.9.1. * data/output/manual-references: + [RA] Update for Policy 3.9.1. * data/standards-version/release-dates: + [RA] Add release date for Policy 3.9.1. * lib/Lintian/Check.pm: + [RA] More correctly handle hyphenated words to avoid triggering spelling error false positives. (Closes: #588896) * lib/Lintian/Relation.pm: + [RA] Don't require a package name component after a substvar to follow the rules of the beginning of a package name. Fixes stronger-dependency-implies-weaker false positives containing substvars. (Closes: #580494) * lib/Lintian/Schedule.pm: + [ADB] Import "warning" from Lintian::Output, really fixing the error caused by a non-existent file referenced in a .changes file. (Closes: #583555, again) * private/refresh-insserv-data: + [RG] Hardcode the '$all' virtual facility. * reporting/html_reports: + [RA] Stop attempting to report unknown tags with a fake description. This was failing with an error later, and the tag was probably removed from Lintian and is now erroneous. * t/runtests: + [RA] Add support for skipping raw Debian package and source package tests. lintian (2.4.2) unstable; urgency=low The "Policy 3.9.0" release. * Summary of tag changes: + Added: - arch-wildcard-in-binary-package - bad-provided-package-name - conflicts-with-version - copyright-refers-to-deprecated-bsd-license-file - init.d-script-depends-on-unknown-virtual-facility - team-upload-has-incorrect-version-number - xc-package-type-in-debian-control (pedantic) + Removed: - arch-any-in-binary-pkg (now in arch-wildcard-in-binary-package) - package-type-in-debian-control * checks/changes-file.desc: + [RA] Add references for file-size-mismatch-in-changes-file and checksum-mismatch-in-changes-file. * checks/control-file{,.desc}: + [RA] Remove package-type-in-debian-control now that dpkg-dev handles it as desired by the d-i team. xc-package-type-in-debian-control replaces it as a pedantic check to encourage switching to the official name. Thanks, Raphael Hertzog. + [RA] Add reference for debian-control-with-duplicate-fields. * checks/copyright-file{,.desc}: + [RA] Deprecate references to /usr/share/common-licenses/BSD in debian/copyright following the change in Policy 3.9.0. * checks/fields{,.desc}: + [RA] Allow Breaks without a version if the broken package is a virtual package. + [RG] Check for invalid package names in provided (virtual) packages. + [RG] Exclude dash from the depends-on-essential-package checks, as per discussion in debian-devel. (Closes: #587209) + [RA] Allow architecture wildcards in build relations and in the Architecture field of binary and source packages. (Closes: #582804) + [RA] Rename arch-any-in-binary-pkg to arch-wildcard-in-binary-package and diagnose any architecture wildcard, not just "any". + [RA] Warn of using Conflicts with a version, which should normally be Breaks instead, but only at wild-guess certainty for now. * checks/huge-usr-share{,.desc}: + [RA] Count file size from the tar listing rather than using du. The results of du vary based on file system and other factors and make the tag difficult to test. * checks/init.d{,.desc}: + [RG] Check for init.d scripts depending on unknown virtual facilities. + [RA] Remove checkroot from the list of scripts that should use a virtual dependency since $local_fs is not quite the same and some packages (cryptsetup) care about the difference. (Closes: #580082) * checks/manpages{,.desc}: + [RA] Run man page checks using the en_US.UTF-8 locale now that we guarantee it exists. Should hopefully fix occasional problems with col complaining about bad multibyte characters. (Closes: #575661) * checks/menu-format.desc: + [RA] Fix typo in long description of duplicated-key-in-desktop-entry. Thanks, Niels Thykier. (Closes: #580700) * checks/menus: + [RG] Recognise call to update-menus when using 'exec.' + [RA] Skip Haskell library documentation when warning about documentation not registered with doc-base. Patch from Erik de Castro Lopo. (Closes: #586877) * checks/nmu{,.desc}: + [RA] Recognize team uploads and do not treat them like NMUs. Patch from Charles Plessy. (Closes: #582741) * checks/rules.desc: + [RA] Add reference for debian-rules-makemaker-prefix-is-deprecated. * checks/scripts: + [RG] Correctly handle variables at the beginning of a call to dpkg-divert. Thanks, Andreas Beckmann. (Closes: #586984) * collection/objdump-info: + [RG] Disable etch compatibility code. * collection/strings: + [RG] Correctly handle ELF binaries with whitespaces in their name. (LP: #540342) * data/fields/architectures: + [RG] Refresh against dpkg 1.15.7.2. (Closes: #581314, #584743) * data/fields/virtual-packages: + [RA] Update to current unstable and add the old xserver-xorg video and input virtual packages. * data/files/locale-codes: + [RG] Refresh to reflect change to private/refresh-locale-codes. * data/files/triplets: + [RG] Refresh against dpkg 1.15.7.2. * data/init.d/virtual_facilities + [RG] New list of virtual facilities that exist in the archive. * data/output/ftp-master-fatal: + [RA] Remove arch-any-in-binary-pkg. * data/output/manual-references: + [RA] Update against latest Debian Policy and devref. * data/spelling/corrections: + [RG] Add more spelling corrections. * data/spelling/corrections-case: + [RG] Add capitalization correction for OAuth. (Closes: #582353) * data/standards-version/release-dates: + [RA] Add Debian Policy 3.9.0. * frontend/lintian: + [RA] Set a PATH of /bin:/usr/bin if PATH is completely unset. Thanks, Carsten Hey. * lib/Lintian/Collect/Binary.pm: + [RG] Correctly handle ELF binaries with whitespaces in their name. * lib/Lintian/Relation.pm: + [RA] Rather than allowing only a package name or a substvar, allow substvars mixed into the package name. (Closes: #580494) * lib/Lintian/Schedule.pm: + [ADB] Add missing "use Lintian::Output", required for the use of warning(). (Closes: #583555) * private/refresh-insserv-data: + [RG] New script to collect insserv data from the archive. * private/refresh-locale-codes: + [RG] Print elements with values only once. * private/refresh-virtual-packages-data: + [RA] Fix handling of # Keep: lines to work correctly now that virtual packages mentioned only once are excluded. lintian (2.4.1) unstable; urgency=low The "there's always a hidden bug" release. * checks/manpages: + [RG] Use "use" instead of "require" for Text::ParseWords and move it outside a loop. * collection/debfiles: + [RG] Properly handle cases where debian is a symlink. * data/spelling/corrections: + [RG] Add more spelling corrections. * frontend/lintian: + [RG] Remove finished processes from the processes hash to avoid trying to kill dead processes. + [ADB] Don't add the dependencies of the override-file check script to the list of checks to run if --no-override was specified. (Closes: #579211) lintian (2.4.0) unstable; urgency=low The "and this is just the beginning" release. * Summary of tag changes: + Added: - embedded-libjpeg - embedded-libopenjpeg - embedded-libpng * checks/binaries{,.desc}: + [ADB] Use Lintian::Check::check_spelling() + [RG] Detect embedded copies of libpng, lib{,open}jpeg. + [RA] Suppress embedded-zlib if the zlib implementation is the Pascal version. FPC doesn't support dynamic linking at this time, and this isn't the problem the tag was designed to catch. * checks/changelog-file: + [ADB] Use Lintian::Check::check_spelling() * checks/changes-file{,.desc}: + [ADB] New check script for .changes file tests + [RA] Add maverick as a valid Ubuntu distribution. + [ADB] Recognise *-volatile as valid distributions. * checks/copyright-file: + [ADB] Use Lintian::Check::check_spelling() * checks/deb-format.desc: + [RG] deb-format needs changelog-file. * checks/debconf.desc: + [RG] Add missing dependency on debfiles collection script. * checks/debian-readme: + [ADB] Use Lintian::Check::check_spelling() * checks/debian-source-dir.desc: + [RA] Downgrade missing-debian-source-format to wishlist and tone down the long description a bit. * checks/description: + [ADB] Use Lintian::Check::check_spelling{,_picky}() * checks/fields: + [RA] Add an exception for diffutils for depending on an essential package without a version, since diff was renamed to diffutils and depending on diffutils effectively is a versioned dependency. Thanks, Santiago Vila. (Closes: #575073) * checks/files{,.desc}: + [RA] The simplepie class can begin with class[.-]. Patch from Marcelo Jorge Vieira (metal). (Closes: #575879) + [RG] Fix typo in empty-binary-package's description. Thanks, Jakub Wilk. (Closes: #576804) + [RG] Exclude udebs from empty-binary-package check. Thanks, Vagrant Cascadian. (Closes: #576581) + [RG] Also warn about bmp files in /usr/lib. Thanks, Rene Engelhard. (Closes: #578776) * checks/init.d: + [RA] Allow $all to satisfy a $remote_fs or $local_fs requirement for Required-Stop, since this has now been implemented. Thanks, Michael Meskes. + [RA] Recognize negated file checks when checking for file sourcing without a test. Thanks, Jérémie Corbier. (Closes: #575363) + [ADB] Use == for numeric comparison. * checks/lintian.desc: + [ADB] Remove information about .changes-related tags, now included in checks/changes-file.desc * checks/manpages: + [ADB] Replace Spelling::spelling_check() call with the new Lintian::Check::check_spelling() * checks/menus: + [ADB] Use Lintian::Check::check_spelling{,_picky}() * checks/nmu: + [RA] Skip leading changelog lines that do not begin with * when looking for things like non-maintainer upload notes at the start of the changelog entry. Patch from Gunnar Wolf. Thanks, Vincent Danjean. (Closes: #575192) * checks/rules: + [RG] Warn about missing versioned build dependencies for ocaml-related packages. (Closes: #567949) * checks/scripts: + [RA] Track local diversions like other diversions for the purposes of checking for orphans and diversions of unknown files. Partly addresses #575361. * checks/watch-file{,.desc}: + [RA] Warn about use of dversionmangle instead of uversionmangle to handle tildes for upstream pre-releases. Patch from Peter Eisentraut. (Closes: #575064) * collection/*.desc: + [RG] Remove now-unneeded Order keys. * data/changelog-file/ubuntu-dists: + [RA] Add maverick as a valid Ubuntu distribution. (Closes: #576282) * data/fields/virtual-packages: + [RG] Refresh against unstable. * data/files/fonts: + [RG] Refresh against unstable. * data/files/locale-codes: + [RG] Refresh to include ISO 639-3 codes. * data/output/ftp-master-{,non}fatal: + [RG] Refresh, without changes. * data/spelling/corrections{,-case,-multiword}: + [ADB] New files to contain the various types of spelling corrections made by Lintian's spelling checks. + [RG] Detect "pleaes" -> "please" typo. + [RG] Add more spelling corrections. * doc/desc-files: + [ADB] Add "changes" as an acceptable type for collection and check scripts. + [RG] Document Sort and Output-Format fields of the tests' desc files. * frontend/lintian: + [ADB] Add "changes" as a valid type for collection and check scripts + [ADB] Replace the special-cased parsing of .changes files with calls to unpack-changes-l1 and Lintian::Schedule::add_changes() + [ADB] Bump lab format to 10 for the addition of the "changes" lab directory + [ADB] Remove import of Lintian::Check which is no longer required after the .changes parsing code was removed + [RG] Support running collection and check scripts in parallel as soon as their prerequisites are satisfied. * frontend/lintian-info: + [ADB] Add support for .changes tags to --annotate * lib/Lab.pm: + [ADB] Add a "changes" directory to the lab structure. For static labs, the directory is automatically added the first time a .changes-aware Lintian accesses the lab. * lib/Lintian/Check.pm: + [ADB] Add new check_spelling and check_spelling_picky methods, based on the spelling_check and spelling_check_picky methods from lib/Spelling.pm (renamed for consistency with check_maintainer). * lib/Lintian/Collect.pm: + [ADB] Add support for Lintian::Collect::Changes * lib/Lintian/Collect/Binary.pm: + [ADB] The STACK element of objdump_info's result is a string not a number; treat it as such consistently * lib/Lintian/Collect/Changes.pm: + [ADB] New module providing information about .changes files and the files referenced therein * lib/Lintian/Command.pm: + [RG] Add done() method to check whether a process can be reaped without blocking. * lib/Lintian/Command/Simple.pm: + [RG] New simple command interface which supports backgrounded commands and easier waiting on commands without the full features of Lintian::Command. * lib/Lintian/DepMap.pm: + [RG] New module to manipulate dependency maps. * lib/Lintian/DepMap/Properties.pm: + [RG] New subclass of Lintian::DepMap that allows properties to be associated with Lintian::DepMap nodes. * lib/Lintian/Schedule.pm: + [ADB] Add support for scheduling .changes files + [ADB] Fix an uninitialised value warning caused by .changes files by treating a missing Version: field as being empty * lib/Lintian/Tags.pm: + [ADB] Remove the special-casing of .changes files in the output from file_start() + [ADB] Don't refer to .changes files as "packages" * lib/Spelling.pm: + [ADB] Removed as its functionality has been replaced by new methods in Lintian::Check. * man/lintian.1: + [ADB] Add changes-file to the list of check scripts. * private/refresh-locale-codes: + [RG] Include ISO 639-3 codes. * private/refresh-virtual-packages-data: + [ADB] Use "==" for numeric comparison, not "eq". * private/update-coverage: + [ADB] Support .changes file tags * t/runtests: + [ADB] Don't flag lintian output lines for .changes tags as invalid + [ADB] When checking the number of jobs to run in parallel, use "==" for numeric comparison rather than "eq". * t/scripts/tags.t: + [ADB] Use Lintian::Check::check_spelling() rather than Spelling.pm. * t/tests/README: + [ADB] Update the example .changes sed script to match the new output format. * testset/runtests: + [ADB] Don't flag lintian output lines for .changes tags as invalid * unpack/unpack-changes-l1: + [ADB] New script to "unpack" a .changes file, creating a fields/ hierarchy * unpack/unpack-srcpkg-l1: + [ADB] Support tarballs in the .tar.xz format. (Closes: #575633) lintian (2.3.4) unstable; urgency=low The "miscellaneous bug fix" release. * Summary of tag changes: + Added: - control-file-with-CRLF-EOLs - debian-rules-makemaker-prefix-is-deprecated - empty-binary-package - incorrect-locale-code - missing-debian-source-format - package-type-in-debian-control - possible-new-upstream-release-without-new-version - star-file - unknown-file-in-debian-source - unknown-source-format - unknown-locale-code * checks/binaries: + [RA] Exclude packages from the klibc source package from the embedded zlib check since klibc legitimately includes its own copy. Thanks, maximilian attems. (Closes: #573914) * checks/changelog-file{,.desc}: + [RA] New check for a changelog entry indicating a new upstream release but no change in the upstream portion of the package version. Idea from Emilio Pozuelo Monfort. (Closes: #569129) * checks/control-file: + [RG] Update package-depends-on-hardcoded-libc exception to also exclude eglibc. Based on a patch from Cyril Brulebois. (Closes: #573398) + [RA] Also exclude *-common packages from weak-library-dev-dependency checks. Thanks, Emilio Pozuelo Monfort. (Closes: #570408) + [RA] Suppress missing-separator-between-items if either of the items contain substvars other than *:Depends substvars, since substvars may be used to assemble the components of a dependency. Thanks, Matthias Klose. (Closes: #573815) + [RA] Warn about Package-Type instead of XC-Package-Type in debian/control. Patch from Cyril Brulebois. (Closes: #573399) * checks/cruft{,.desc}: + [RA] Provide more information in native-package-with-dash-version long description about how native packages can be created by mistake. Thanks, Jari Aalto. (Closes: #573839) + [RA] Reword source-contains-prebuilt-windows-binary long description. (Closes: #574515) + [RG] Warn about control and changelog files with CRLF end of line terminators. Thanks, Michal Čihař. (Closes: #564713) * checks/debconf: + [RA] Don't warn about the length of the short description for templates of type text in udebs, since they're frequently used by including them into other templates at runtime. Patch from Frans Pop. (Closes: #560414) * checks/debian-source-dir{,.desc}: + [RA] New check script from Raphaël Hertzog checking various things about debian/source/* control files including checking for a source format control file. (Closes: #566820) * checks/fields.desc: + [RA] Correct the supported source formats in the long description of unsupported-source-format. Patch from Raphaël Hertzog. + [RA] Stop recommending a dependency on perl-modules. Patch from Niko Tyni. (Closes: #568749) * checks/files{,.desc}: + [RA] New check for binary packages that are empty except for standard files and don't declare themselves to be metapackages or other types of dummy packages. Based on a patch from Luca Falavigna. (Closes: #569220) + [RG] New check for packages shipping files literally called '*' (star symbol). Thanks, Niels Thykier. (Closes: #574771) + [RG] New checks for incorrect and unknown locale codes in /usr/share/locale subdirectories. * checks/init.d{,.desc}: + [RA] Exclude symlinks to upstart-job from init script syntax checks. Based on a patch by Jos Boumans. (Closes: #569492) + [RA] Allow umountnfs to satisfy a $remote_fs requirement and umountnfs or umountfs to satisfy a $local_fs requirement in LSB headers, avoiding false positives in unusual situations such as rsyslog. Thanks, Michael Biebl. (Closes: #571280) + [RA] Allow $all to satisfy a $remote_fs or $local_fs requirement in Required-Start, but (per the wiki) not Required-Stop. Thanks, Michael Meskes. (Closes: #574970) * checks/manpages.desc: + [RA] Clarify the long description for manpage-has-bad-whatis-entry. Thanks, Jari Aalto. (Closes: #573837) * checks/rules: + [RA] Allow ant1.7 to satisfy a build requirement for ant. Thanks, Rene Engelhard. (Closes: #572430) + [RG] Require a versioned build-dependency on cdbs if scons.mk or perl-build.mk are used. (Closes: #574744) + [RG] Warn about installing files specifying the destination directory with PREFIX when Perl's MakeMaker build system is used. Based on a patch by Niko Tyni. (Closes: #568748) + [RA] Also check binary-independent, wildcard, and override rules for programs requiring build dependencies, but accept them in either Build-Depends or Build-Depends-Indep. + [RA] Check for a quilt dependency when the debhelper 7 quilt module is used. Thanks, Martin Meredith. (Closes: #548094) + [RA] Allow python2.6 packages to satisfy Python build dependencies. * checks/scripts{,.desc}: + [ADB] Update the list of octave interpreters, adding octave3.2 (Closes: #574048) and removing octave2.1 (only available in lenny and earlier) and octave3.1. + [RA] Allow non-executable *.pm files in the examples directory to start with a line like #!perl. This is probably just an editor hint. Thanks, Thijs Kinkhorst. (Closes: #574826) + [RA] Mention #!@BASH@ and similar cases in the long tag description of example-interpreter-not-absolute. + [RA] Add Python 2.6 to recognized Python versions. + [RA] Add liquidsoap and texlua to known interpreters. * checks/shared-libs: + [RA] symbols-declares-dependency-on-other-package should not have trailing whitespace for unversioned dependencies. Patch from Modestas Vainius. (Closes: #570380) * checks/standards-version: + [RG] Don't warn about timewarp-standards-version when the changelog's distribution is "UNRELEASED." Thanks, Raphaël Hertzog. (Closes: #571616) * collection/debfiles: + [RA] Simplify the logic since the entire debian directory is always copied. Patch from Raphaël Hertzog. * data/debhelper/*: + [RG] Refresh against unstable. * data/fields/{perl-provides,virtual-packages}: + [RG] Refresh against unstable. * data/files/architectures: + [RG] Refreshed against dpkg 1.15.6. (Closes: #563495) * data/files/fonts: + [RG] Refresh against unstable. * data/files/incorrect-locale-codes: + [RG] New list of common incorrect locale names * data/files/locale-codes: + [RG] Generated from unstable's iso-codes. * data/files/triplets: + [RG] Refreshed against dpkg 1.15.6. * debian/control: + [RG] Update package description to mention Policy version 3.8.4 instead of 3.8.3. Should have been done on the previous release. * debian/source/format: + [RA] Switch package format to 3.0 (native). * debian/postinst: + [RG] Use triggers to ensure an up-to-date locale in all cases. (Closes: #567451) * frontend/lintian: + [RA] Globally ignore SIGPIPE, forcing error return codes from write. Hopefully will resolve some unreproducible occasional crashes. (Closes: #558360) * lib/Lintian/Tag/Info.pm: + [JP] Don't link to references with no URL. (Closes: #572297) * lib/Spelling.pm: + [ADB] Remove duplicate entries from the correction list. Thanks, Jakub Wilk. (Closes: #572260) + [ADB] Add a spelling correction for "unecessary". Thanks, Jakub Wilk. (Closes: #572456) * man/lintian-info.1: + [CW] Fix typo. + [RA] Document new debian-source-dir check script. * private/refresh-locale-codes: + [RG] New script to generate a list of locale codes. * reporting/templates/foot.tmpl: + [ADB] Replace the "please mail comments to the maintainer" request with a pointer to reportbug. (Closes: #572298) * testset/etcfiles/: + [RA] Fix problems with the md5sums test suite construction in the legacy etcfiles test. Thanks, Frank Lin PIAT. (Closes: #573081) * t/runtests: + [RG] Add support for architecture-specific tests. + [RG] Add support for To-Do tests. * t/tests/binaries-multiarch/: + [RG] Fix test failure in non-i386 architectures by normalising the expected output. Thanks, Niko Tyni. (Closes: #568680) lintian (2.3.3) unstable; urgency=low The "Policy 3.8.4" release. * Summary of tag changes: + Added: - missing-dependency-on-phpapi - obsolete-comments-style-in-php-ini - package-contains-mime-cache-file - package-contains-mimeinfo.cache-file - triplet-dir-and-architecture-mismatch * checks/binaries{,.desc}: + [RG] Warn about packages shipping PHP extensions but not depending on phpapi-*. * checks/debconf.desc: + [RG] There are legitimate uses of db_input on the postinst script, downgrading the certainty of the check. (Closes: #543418) * checks/fields{,.desc}: + [RG] Don't warn about depending on the phpapi-* virtual package. * checks/files{,.desc}: + [RG] Warn about packages shipping PHP .ini files using old-style (#) comments separators. + [RG] Warn about packages embedding the dojo and dijit javascript libraries. + [RG] Don't warn about packages containing /sys or /selinux directories. Policy 3.8.4 grants an exception to the FHS. + [RG] Warn about packages containing (/usr)/lib/<triplet> directories for a <triplet> that isn't the one of the architecture of the package, per Policy 3.8.4 requirement. + [RG] Warn about packages shipping cache files generated by update-mime-database. Thanks, Jakub Wilk. (Closes: #563685) + [RG] Warn about packages shipping mimeinfo.cache files, generated by update-desktop-database. Thanks, Raphaël Hertzog. (Closes: #567753) * checks/init.d: + [RG] Warn about init scripts depending on checkroot instead of $local_fs. + [RG] Remove experimental flag from remote_fs and local_fs checks. + [RG] Skip rc and rcS from the init script checks. * data/debhelper/*: + [RG] Refresh against unstable. * data/fields/{perl-provides,virtual-packages}: + [RG] Refresh against unstable. * data/files/fonts: + [RG] Refresh against unstable. * data/files/triplets: + [RG] New file with a list of triplet<->architecture relationships. * data/output/ftp-master-{,non}fatal: + [RG] Refresh, without changes. * data/standards-version/release-dates: + [RG] Add the release date for Policy 3.8.4. * debian/control: + [RG] Update standards version to 3.8.4 (no changes required). * debian/postinst: + [RG] Generate the locale under the correct directory. * debian/prerm: + [RG] Don't ignore errors on shell commands failures. * frontend/lintian: + [RG] Fix path to the locale directory passed to LOCPATH. (Closes: #555408) * private/refresh-archs: + [RG] Generate a list of triplet<->architecture relationships too. * t/runtests: + [RG] Update standards version to 3.8.4. lintian (2.3.2) unstable; urgency=high * Summary of tag changes: + Added: - conflicting-negation-in-source-relation * checks/{control-files,files,menu-format,menus}: + [RG] Fix CVE-2009-4014: format string vulnerabilities. * checks/{fields,patch-systems}: + [RG] Fix CVE-2009-4013: missing control files sanitation. * checks/{files,patch-systems,po-debconf}: + [RG] Fix CVE-2009-4015: arbitrary command execution. * checks/changelog-file: + [RA] Avoid Perl warning when the NEWS file ends immediately after the most recent entry. (Closes: #563585) * checks/copyright-file: + [RA] Relax the regex for matching dh-make-perl boilerplate to catch the current text. Thanks, gregor herrmann. (Closes: #563571) * checks/fields{,.desc}: + [RA] Reject "all" and "any" in architecture qualifications for build dependencies. Thanks, Jonathan Yu. + [RA] Warn if some architectures in a build relation are negated and others are not. * checks/files.desc: + [JP] Fix outdated reference in file-in-usr-lib-site-python. * checks/infofiles: + [RA] Pass LOCPATH to subprocesses. + [ADB] Don't flag info files with filenames of info-N.gz as having an incorrect extension if N contains multiple digits. (Closes: #564900) * checks/manpages: + [RA] Pass LOCPATH to subprocesses. * collection/objdump-info: + [RG] Fix CVE-2009-4015: arbitrary command execution. * collection/source-control-file: + [RG] Fix CVE-2009-4013: missing control files sanitation. * data/output/manual-references: + [JP] Refresh reference data against Policy 3.8.3, doc-base 0.9.5, developers-reference 3.4.3, and Python Policy 0.9.0. * debian/control: + [RA] Depend on locales. * debian/prerm: + [RA] Remove /var/lib/lintian/locale on any removal except upgrades. * debian/postinst: + [RA] Generate an en_US.UTF-8 locale in /var/lib/lintian/locale for use for tests, particularly man page tests. (Closes: #555408) * frontend/lintian: + [RA] Set LOCPATH to LINTIAN_ROOT/locale or /var/lib/lintian/locale, whichever exist. + [RG] Fix CVE-2009-4013: missing control files sanitation. * lib/Lintian/Collect.pm: + [ADB] Update the documentation to reflect the existence of Lintian::Collect::Binary. * lib/Lintian/Collect/Binary.pm: + [ADB] Correct a reference in the documentation indicating that the module collects data for source packages. * lib/Lintian/Schedule.pm: + [RG] Fix CVE-2009-4013: missing control files sanitation. + [RG] Fix CVE-2009-4014: format string vulnerabilities. * lib/Spelling.pm: + [RA] Add additional spelling corrections. + [RA] Remove spelling correction for parameterize. This is the correct US spelling. Thanks, Jonathan Yu. (Closes: #564523) + [RA] Remove spelling correction for useable, a variant permitted by the OED. Thanks, Vagrant Cascadian. (Closes: #564740) + [RG] Add more spelling corrections. * lib/Util.pm: + [RA] Pass LOCPATH to subprocesses. + [RG] Fix CVE-2009-4015: arbitrary command execution. * man/lintian.1: + [RA] Spelling fix. Thanks, A. Costa. (Closes: #564017) * private/refresh-manual-refs: + [RG] Fix CVE-2009-4015: arbitrary command execution. * reporting/{config,html_reports}: + [JP] Make it possible to keep a record of statistics of previous archive-wide Lintian executions. * reporting/templates/maintainer.tmpl: + [RA] Really fix the logic to optionally display the archive area of additional package entries under the same source package. * unpack/unpack-{bin,src}pkg-l1: + [RG] Fix CVE-2009-4013: missing control files sanitation. lintian (2.3.1) unstable; urgency=low The "goodbye to unpack level 2" release. * Summary of tag changes: + Added: - init.d-script-missing-start - debian-news-entry-has-unknown-version - debian-news-entry-uses-asterisk - debian-news-entry-without-blank-line - non-native-package-with-native-version - udev-rule-in-etc * {checks,collection}/*.desc: + [RG] Remove Unpack-Level fields and depend on the 'unpacked' collection script as needed. * checks/binaries: + [RG] Recognise hppa64 binaries and ignore them on the binary-from-other-architecture check for hppa. Thanks, Matthias Klose. (Closes: #562788) * checks/changelog-file{,.desc}: + [RA] Per devref, recommend against NEWS.Debian entries formatted with asterisks like changelog entries. + [RA] Check that the most recent NEWS.Debian entry is followed by a blank line for apt-listchanges. Thanks, Adeodato Simó. (Addresses the Lintian part of #523436) + [RA] Warn if the version of the latest NEWS.Debian entry doesn't appear in the changelog. Thanks, Christoph Berg. (Closes: #550594) * checks/control-file: + [RA] Fix parsing of dependencies for weak-library-dev-dependency when the content of Depends begins with a newline. Thanks, Julien Cristau. (Closes: #563370) * checks/cruft: + [RA] Fix the regex to properly ignore CMakeCache.txt in the debian directory. Thanks, Aaron M. Ucko. (Closes: #553264) + [RA] Check for a non-native package with a native version. Thanks, Andreas Beckmann. * checks/debhelper: + [RA] Always warn if debhelper is in use but no ${misc:Depends} dependency is present rather than checking which specific debhelper commands use it. Any debhelper command may start adding dependencies to ${misc:Depends} at any time. Lower the certainty to possible, since a missing ${misc:Depends} may not cause problems. * checks/fields.desc: + [RA] Fix spelling error in dfsg-version-with-period tag description. Thanks, Jakub Wilk. (Closes: #563185) * checks/files{,.desc}: + [RG] Add a missing 'it' to the description of duplicate-font-file. + [RG] Add detection of nusoap to the embedded PHP libraries check. + [RG] Check that udev rules are not installed in /etc/udev/rules.d. Thanks, Marco d'Itri. (Closes: #559208) * checks/init.d{,.desc}: + [RG] Bump severity of init.d-script-sourcing-without-test to serious. + [RG] Lower the severity of init.d-script-does-not-provide-itself to minor. + [RG] Fix an init.d-script-possible-missing-stop false positive when stopping on runlevels 2-5. + [RG] Mention 'killprocs' in init.d-script-possible-missing-stop's description. Thanks, Kurt Roeckx. (Closes: #562608) + [RG] Warn about init scripts with incomplete start runlevels. + [RG] Tighten check for missing dependency on local_fs or remote_fs when using files with a name of 'var*' or 'usr*'. + [RG] Also recognise the use of the -r test as a file test, and the test command when determining whether a /etc/default file is being sourced unconditionally. + [RG] Correct the description of the missing-dependency-on-{remote,local_fs} tags where 'is' was meant to be used instead of 'are'. * checks/manpages.desc: + [RA] Downgrade spelling-error-in-manpage to minor severity. (Closes: #563039) * checks/patch-systems: + [RA] Avoid false positives for patches modifying files in debian/* when the parent directory in which the patch was created is named debian. Thanks, Mark Brown. (Closes: #562875) * collection/ar-info: + [RA] Skip *.a files that are dangling symlinks and discard error output from ar. Correctly handle file names that contain shell metacharacters. * collection/unpacked{,.desc}: + [RG] New scripts to replace the unpack level 2. * frontend/lintian: + [RG] Deprecate and replace unpack levels with the use of collection scripts. + [ADB] Remove an unused variable declaration. * lib/Spelling.pm: + [ADB] Add corrections for "nam" (name) and "nams" (names). + [RG] Add some more spelling errors. + [RG] Uppercase every character of the correction if every character of the original word is too. + [RA] Superceded is an acceptable alternative spelling of superseded. * man/lintian.1: + [RG] Document deprecation of unpack levels. + [ADB] Add the new "unpacked" collection script to the list of such scripts. + [ADB] Correct the documentation of --tags-from-file to indicate that the file contains tags to issue, not suppress. * reporting/html_reports: + [RA] Sort the tags so that the maintainer view will group repeated instances of the same tag and display extra information in sorted order. (Closes: #563126) + [RA] Better handle missing information for packages in the package lists and default the package area to main. * reporting/templates/maintainer.tmpl: + [RA] Fix the logic to optionally display the archive area of additional package entries under the same source package. * unpack/unpack-{src,bin}pkg-l2: + [RG] Dropped in favour of collection/unpacked. lintian (2.3.0) unstable; urgency=low The "welcome Raphael Geissert!" release. * Summary of tag changes: + Added: - capitalization-error-in-description (split from spelling-error-in-description) - debian-rules-automatically-updates-control - duplicate-in-relation-field (pedantic) - duplicated-compressed-file - init.d-script-missing-dependency-on-local_fs (experimental) - init.d-script-missing-dependency-on-remote_fs (experimental) - obsolete-relation-form-in-source - ocaml-dangling-cmi - ocaml-dangling-cmx - ocaml-dangling-cmxa - ocaml-dangling-cmxs - ocaml-dev-file-in-nondev-package (pedantic) - ocaml-dev-file-not-in-usr-lib-ocaml (pedantic) - ocaml-meta-without-suggesting-findlib (pedantic) - ocaml-stray-cmo - spelling-error-in-manpage + Removed: - build-depends-without-arch-dep * checks/*: + [RA] Use Lintian::Tags instead of Tags. * checks/binaries{,.desc}: + [RA] Allow any RPATH containing $ORIGIN or ${ORIGIN}, not just the literal value $ORIGIN. (Closes: #557511) + [ADB] Exempt all binary packages built from the zlib source from the embedded-zlib test, not just those with binary package names matching zlib.+. Thanks, Mark Brown. + [RA] Spelling errors are no longer normalized to lowercase. * checks/changelog-file: + [RA] Suppress latest-debian-changelog-entry-without-new-date if the distribution is UNRELEASED. Thanks, Raphaël Hertzog. (Closes: #560149) + [RA] Also ignore too-long lines that consist of "See" followed by an unbreakable word. Thanks, Jari Aalto. (Closes: #560005) + [RA] Downgrade spelling tags to severity: minor. * checks/control-file{,.desc}: + [RA] Check for < and > version dependencies in debian/control since dpkg-source helpfully rewrites and fixes them in binary packages. Thanks, Jakub Wilk. (Closes: #557971) + [RA] Add a pedantic check for duplicates in relation fields in debian/control prior to the fixes applied by dpkg-dev. Thanks, Nelson A. de Oliveira. (Closes: #548819) + [RA] Fix a typo that skipped checks on the Build-Conflicts field. + [RA] Rework weak-library-dev-dependency to allow more approaches to bounding the shared library version. Skip complex cases with or'd dependencies and assume the maintainer knows what they're doing. Add more explanation to the long tag description. Thanks, Reinhard Tartler and Mike Hommey. (Closes: #557449) * checks/copyright-file.desc: + [RA] Downgrade spelling-error-in-copyright to minor and mention false positive possibilities and an override in the tag description. * checks/cruft: + [RA] Allow an automake or libtool dependency in Build-Depends-Indep to also satisfy the check for outdated helper files. Thanks, Guillaume Delacour. (Closes: #557530) + [RA] Ignore files in .pc, created by unpacking 3.0 (quilt) packages. Thanks, Ahmed El-Mahmoudy. (Closes: #556022) * checks/debian-readme.desc: + [RA] Downgrade spelling tag to severity: minor. * checks/description{,.desc}: + [RA] Downgrade spelling tag to severity: minor. + [RA] Split capitalization-error-in-description to a separate tag and downgrade its certainty to wild-guess. * checks/fields{,.desc}: + [ADB] Re-order the fields of build-depends-on-build-essential so that all of the descriptive text is included. Thanks, Jonathan Wiltshire. (Closes: #557786) + [RA] For lib-recommends-documentation, exclude packages ending in -tools or -bin. Thanks, Jay Berkenbilt. (Closes: #557883) + [RA] Warn of build dependencies on python*-dev if no architecture- dependent packages are being built. Patch from Luca Falavigna. (Closes: #551793) + [RA] Add emacs22 to obsolete emacs versions. Thanks, Sven Joachim. (Closes: #560053) * checks/files{,.desc}: + [RA] New check for files present in both compressed and uncompressed form. Patch from Raphael Geissert. (Closes: #546174) + [RA] Allow /etc/sudoers.d files to be mode 0440 as recommended by sudo. Thanks, Thijs Kinkhorst. (Closes: #557353) * checks/huge-usr-share{,.desc}: + [RA] Increase the thresholds to 2MB (over 50%) and 4MB (any percentage), and mention the thresholds in the tag description. Thanks, Christoph Egger. (Closes: #561720) * checks/init.d{,.desc}: + [RA] Add checks for missing dependencies on $local_fs or $remote_fs based on what files appear to be used in the init scripts. Patch from Raphael Geissert. (Partly addresses #405454) * checks/manpages{,.desc}: + [RG] Check for spelling errors in English manpages. * checks/manpages.desc: + [RA] Clarify the long description of hyphen-used-as-minus-sign. Note that Debian groff is currently patched to avoid this problem, but hopefully that divergence can be removed. Reference groff-base's README.Debian for more information. (Closes: #548844) * checks/menus.desc: + [RA] Change spelling tags to severity: minor and certainty: certain since there are few false positives but minor is the correct severity. * checks/ocaml{,.desc}: + [RA] New checks for OCaml packaging. Contributed by Stéphane Glondu. (Closes: #528367) * checks/patch-systems{,.desc}: + [RA] Recommend DEP-3 in {dpatch,quilt}-patch-missing-description and reference the document. Thanks, Raphaël Hertzog. (Closes: #554025) + [RA] Allow DEP-3 headers in dpatch patches to satisfy the description requirement. Thanks, Paul Gevers. (Closes: #548640) * checks/rules{,.desc}: + [RA] Remove build-depends-without-arch-dep. If the package only builds architecture-independent packages, the distinction between Build-Depends and Build-Depends-Indep is meaningless and there's no reason, even pedantically, to worry about the separation. Thanks, Charles Plessy. (Closes: #552200, #555667) + [RA] Add a new check for DEB_AUTO_UPDATE_DEBIAN_CONTROL = yes. Thanks, Nelson A. de Oliveira. (Closes: #557120) * collection/ar-info{,.desc}: + [RA] Collects the results of ar t on all *.a files, used by the new OCaml checks. Contributed by Stéphane Glondu. * collection/override-file: + [RA] Check debian/source/lintian-overrides before debian/source.lintian-overrides for source package overrides. Thanks, martin f krafft. (Closes: #554617) * data/debhelper/*: + [ADB] Refresh against unstable. * data/fields/{perl-provides,virtual-packages}: + [ADB] Refresh against unstable. * data/files/fonts: + [ADB] Refresh against unstable. * data/output/ftp-master-{non,}fatal: + [RA] New data files listing tags that may result in an automated upload reject. * doc/lintian.sgml: + [RA] Document debian/source/lintian-overrides as the new preferred location for source overrides. * debian/control: + [RG] Add Raphael Geissert to Uploaders. + [RA] Add ${misc:Depends} to dependencies. * debian/copyright: + [RG] Add Raphael Geissert to maintainers. * frontend/lintian: + [RA] Add options --suppress-tags and --suppress-tags-from-file to completely suppress the given tags. + [RA] Support comments and blank lines in --tags-from-file files. + [RA] Run the check modules in sorted order. + [RA] Create a global Lintian::Tags object and use it instead of setting variables in the Tags namespace. Move display level code from here to Lintian::Tags. Adjust calls for the new Lintian::Tags module. + [RA] Add option -F or --ftp-master-rejects which only checks tags that could result in an automatic upload reject. * frontend/lintian-info: + [RA] Add -h/--help option. Patch from gregor herrmann. (Closes: #558214) * lib/Lintian/Check.pm: + [RA] Use Lintian::Tags instead of Tags. * lib/Lintian/Output.pm: + [RA] print_tag() now takes an additional argument containing override data and expects a Lintian::Tag::Info object as the tag info instead of a hash. + [RA] Adjust for the renaming of pkg in the file information hash. * lib/Lintian/Output/*.pm: + [RA] Adjust for print_tag() and file information hash changes. * lib/Lintian/Output/XML.pm: + [RA] Rewrite to be more readable and fix the tags attribute for overridden experimental tags. * lib/Lintian/Relation.pm: + [RA] Fix bugs in unparse() and duplicates() that caused duplicates() to crash when processing duplicates between an alternative and a regular package. Thanks, Jonathan Yu. (Closes: #559625) * lib/Lintian/Tag/Info.pm: + [RA] Add a code method that returns the tag code corresponding to the severity and certainty for a tag, based on get_tag_code from Tags.pm. + [RA] Add certainty, severity, and tag accessor methods. + [RA] Add a method saying whether a tag is experimental. + [RA] Record the check script corresponding to each tag and add an accessor method for it. + [RA] Add a sources method returning a list of sources referenced by a tag, based on the get_tag_source method from Tags.pm. * lib/Lintian/Tags.pm: + [RA] New module in a proper namespace replacing Tags.pm. A global Lintian::Tags object replaces the static variables in the Tags namespace, with new accessor functions, except for the tag metadata functions (which have moved to Lintian::Tag::Info). All handling of display levels is now here instead of in frontend/lintian. + [RA] Support suppressing a list of tags. + [RA] Suppress calling Lintian::Output::print_end_pkg for changes files, where we don't call print_start_pkg. This fixes an unmatched closing tag in the experimental XML output. * lib/Spelling.pm: + [RA] Use Lintian::Tags instead of Tags. + [RA] Ignore all-caps words of five characters or less for spelling corrections, since they are probably acronyms. Thanks, Michal Čihař. (Closes: #556456) + [RA] Report the original word in spelling errors rather than the normalized form. + [RG] Detect some multi-word spelling errors. + [RA] Remove the als to also correction. This is a word in several European languages, and the many hits on the archive are nearly all false positives. * lib/Tags.pm: + [RA] Removed in favor of Lintian::Tags. * lib/Util.pm: + [RA] Consume all output from extracting the control file of a binary package before closing the pipe. * man/lintian.1: + [RA] Document --suppress-tags and --suppress-tags-from-file. + [RA] Document format of --tags-from-file. + [RA] Document -F (--ftp-master-rejects). + [RA] Add ocaml checker script. + [RA] Add ar-info collection script. + [RA] Document the override locations in the FILES section. Thanks, Jakub Wilk. (Closes: #558649) + [RA] Remove obsolete spelling checker script. + [RA] Mention /usr/share/lintian/data under FILES. + [RA] Clarify that errors are not necessarily policy violations. + [RA] Remove bug that Lintian doesn't handle packages with different binary and source versions correctly. I don't believe this is still an issue. * man/lintian-info.1: + [RA] Add -h (--help). + [RA] lintian -i no longer pipes output through lintian-info. Adjust the man page accordingly. * private/refresh-ftp-master-tags: + [RA] Script to refresh data about automatic package rejects. * reporting/html_reports: + [RA] Never use O as the code for the tag on the per-tag page even if all instances in the archive are overridden. (Closes: #562630) * t/runtests: + [RA] Unwrap the Options field so that it can be continued. + [RA] Replace TESTSET in Options with the root of the test suite so that lintian options referring to files can be tested with files in the test suite directory. + [RA] Support a new Sort: no field in package test metadata to suppress sorting of lintian output, for testing output formatting. + [RA] Use Lintian::Command::spawn to run Lintian for package tests so that the lintian options may contain shell metacharacters. + [RA] Put all error output from lintian unsorted before the regular output, making it easier to diagnose errors. + [RA] Suppress checking the syntax of the lintian output if neither Test-For nor Test-Against are set and Sort: no is set. * unpack/list-{bin,src,udeb}pkg: + [RA] Support multiple versions of a package in the archive and include only the latest version in the Lintian package list. * unpack/unpack-binpkg-l2: + [RA] Report errors from dpkg-deb or tar on stderr if either exit with non-zero status. * unpack/unpack-srcpkg-l2: + [RA] Report errors from dpkg-source -x on stderr if it exits with non-zero status. (Closes: #557717) lintian (2.2.18) unstable; urgency=low The "synchronize severities with ftpmaster's Lintian checks" release. * Summary of tag changes: + Removed: - copyright-lists-upstream-authors-with-dh_make-boilerplate + Promoted from experimental: - spelling-error-in-binary - template-uses-unsplit-choices * checks/binaries.desc: + [RA] Remove experimental marker on spelling-error-in-binary. Change severity to minor; spelling errors are minor bugs. + [RA] library-in-debug-or-profile-should-not-be-stripped, binary-or-shlib-defines-rpath, arch-dependent-file-in-usr-share, and binary-in-etc, binary-file-compressed-with-upx, binary-with-bad-dynamic-table, and embedded-zlib are now serious since they can result in ftpmaster rejects. embedded-zlib, missing-dependency-on-libc, and binary-or-shlib-defines-rpath are possible rather than certain since overrides are allowed. * checks/changelog-file: + [FL] Avoid various Perl warnings which can be caused by completely broken changelog files. * checks/conffiles.desc: + [RA] file-in-usr-marked-as-conffile is serious (ftpmaster reject). Add a Policy reference and improve the description. + [RA] non-etc-file-marked-as-conffile is serious/possible rather than important/certain (ftpmaster reject unless overridden). * checks/control-file{,.desc}: + [RA] Say to use (= ${binary:Version}) to fix weak dependencies between a library dev package and the shared library. Thanks, Norbert Preining. (Closes: #548218) + [ADB] Fix an uninitialised value warning when processing a -dev package which has no Depends: fields. Thanks, Lucas Nussbaum. + [RA] build-info-in-binary-control-file-section and debian-control-with-duplicate-fields are now serious (ftpmaster reject). + [RA] Allow -dev dependencies based on source:Upstream-Version or source:Version if the -dev package is architecture: all. Thanks, Mike Hommey. (Closes: #552729) * checks/control-files.desc: + [RA] not-allowed-control-file, control-file-has-bad-permissions, and control-file-has-bad-owner are now serious (ftpmaster reject). Mention that the config control file should also be executable. * checks/copyright-file{,.desc}: + [FL] Add special exception to no-copyright-file for perl. See #522827 for discussion. (Closes: #553262) + [FL] Extend match for exceptions to copyright-refers-to-symlink-license to catch more ways to specify Perl's license. Patch from Salvatore Bonaccorso. (Closes: #549596) + [RA] copyright-lists-upstream-authors-with-dh_make-boilerplate removed, as some package maintainers prefer to use Author(s) and have filled out the copyright file. (Closes: #553469) + [RA] Add additional dh_make template strings to the helper-templates-in-copyright check, including the templates for upstream author or copyright holder, which effectively replaces copyright-lists-upstream-authors-with-dh_make-boilerplate with far fewer false positives. + [RA] Remove a duplication of the check for "This copyright info was automatically extracted from the perl module" by dh-make-perl, and ensure that this is copyright-contains-dh-make-perl-boilerplate and not helper-templates-in-copyright, since it is lower severity. + [RA] copyright-refers-to-old-directory, old-style-copyright-file, usr-share-doc-symlink-without-dependency, usr-share-doc-symlink-to-foreign-package, copyright-refers-to-incorrect-directory, and copyright-contains-dh_make-todo-boilerplate are now serious (ftpmaster reject). copyright-contains-dh_make-todo-boilerplate is possible (overrides allowed). Significantly improve the description of usr-share-doc-symlink-without-dependency to mention that Lintian doesn't look at transitive dependencies, and change to possible. * checks/cruft: + [FL] Add automake1.11 to list of autotools packages. Thanks, Laurent Bigonville. (Closes: #551051) + [RA] Allow CMakeCache.txt files in the debian directory. Thanks, Aaron M. Ucko. (Closes: #553264) * checks/debconf.desc: + [FL] Remove experimental flag from template-uses-unsplit-choices. This was only done to not disrupt the lenny freeze. Thanks, Raphael Geissert. (Closes: #553487) * checks/description.desc: + [RA] Downgrade description-synopsis-might-not-be-phrased-properly to minor and fix the cross-reference to point to devref, not Policy. + [RA] description-is-dh_make-template is serious (ftpmaster reject). * checks/etcfiles.desc: + [RA] file-in-etc-not-marked-as-conffile is serious (ftpmaster reject). * checks/fields{,.desc}: + [RA] Fix lib-recommends-documentation tag to correctly exclude dev and doc packages. Patch from Stéphane Glondu. (Closes: #548210) + [FL] Allow source formats 3.0 (quilt) and 3.0 (native). (Closes: #552707) + [RA] Multiple maintainer-* and uploader-* tags for syntax errors or localhost addresses are now serious (ftpmaster reject), as are section-is-dh_make-template and bad-relation. * checks/files.desc: + [RA] Add a note to wrong-file-owner-uid-or-gid that it's possible to construct a Policy-compliant package that triggers this tag by creating users in preinst, and asking package maintainers to file a bug against Lintian if they encounter a case where this appears to be necessary. + [RA] package-contains-ancient-file, package-installs-python-pyc symlink-has-too-many-up-segments, and package-contains-info-dir-file are now serious (ftpmaster reject). + [RA] dir-or-file-in-var-www is now serious/possible (ftpmaster reject unless overridden). + [RA] dir-or-file-in-{tmp,mnt,opt,srv} are now serious and have the proper File Hierarchy Standard cross-references and descriptions. + [RA] Don't suggest creating a symlink to the python-feedparser library. Just use the normal Python import mechanism. Thanks, Jakub Wilk. (Closes: #555617) * checks/lintian.desc: + [CW] Add lucid as an allowable distribution for Ubuntu, and remove gutsy. * checks/manpages.desc: + [ADB] Mention in the description for manpage-has-errors-from-man that Lintian passes "-E UTF-8" to man when running checks. Thanks, Raphaël Hertzog. (Closes: #555320) + [RA] Also suppress failures to break lines if the reported line is a .UE macro, which marks the end of a block defining a URL. Thanks, Martin Stigge. * checks/patch-systems: + [RA] Do not issue patch-system-but-no-source-readme for packages in 3.0 (quilt) format. Patch from Stéphane Glondu. (Closes: #553207) + [RA] Don't consider the "index <sha1>..<sha1>" line added by git diff to be a patch description. (Closes: #553697) + [RA] If a diff outside of the patch system only creates new files that can be copied into place by the package build rules, suggest just putting them in the debian directory rather than using a patch system. Thanks, Charles Plessy. (Closes: #550924) * checks/rules.desc: + [RA] missing-build-dependency is now serious/possible (ftpmaster reject unless overridden). * checks/scripts{,.desc}: + [RA] Add some more details to executable-not-elf-or-script about possible causes and how to correct them. + [RA] Suggest mkfifo in mknod-in-maintainer-script if the script was creating a named pipe. + [RA] Add rep. Thanks, Rodrigo Gallardo. (Closes: #510954) + [RA] Add r. Thanks, Dirk Eddelbuettel. (Closes: #555278) + [RA] Add rackup. Thanks, Sebastien Delafond. (Closes: #552013) * checks/shared-libs: + [FL] Add /usr/lib/python*/dist-packages to exception list for incorrect-libdir-in-la-file. Thanks, Mathieu Trudel. (Closes: #551134) * data/changelog-file/ubuntu-dists: + [CW] Add lucid as an allowable distribution for Ubuntu, and remove gutsy. * data/doc-base/sections: + [FL] Update from doc-base 0.9.5. Adds Typesetting section. Thanks Julian Gilbey. (Closes: #552526) * data/fields/architectures: + [ADB] Refresh against unstable. * data/fields/perl-provides: + [ADB] Refresh against unstable. * data/fields/virtual-packages: + [ADB] Refresh against unstable. * data/files/fonts: + [ADB] Refresh against unstable. * man/lintian.1: + [RA] Add additional explanation of experimental tags. Remove the comment that pedantic tags are frequently wrong; that's not what they're for. Improve the explanation for -i to not imply that everything Lintian finds is a Policy violation. * private/refresh-perl-provides: + [ADB] Special-case libio-compress-perl; the package contains the modules which used to be in libio-compress-* but does not contain IO::Compress. Patch from Niko Tyni. (Closes: #554393) lintian (2.2.17) unstable; urgency=medium * Urgency medium to beat libclass-accessor-perl into testing. * checks/control-file: + [RA] Correctly exclude lib*-dev dependencies on other lib*-dev packages that contain a version number. Thanks, Yves-Alexis Perez. (Closes: #547773) * debian/control: + [RA] Explicitly depend on libclass-accessor-perl, since we use it directly. (libparse-debianchangelog-perl was implicitly ensuring it was installed.) lintian (2.2.16) unstable; urgency=low * Summary of tag changes: + Added: - dh_undocumented-is-obsolete - lib-recommends-documentation - weak-library-dev-dependency * checks/control-file{,.desc}: + [RA] Check that -dev packages depend on exactly the same version of the shared library package. (Closes: #537768) * checks/debhelper{,.desc}: + [RA] Check for use of the obsolete dh_undocumented debhelper program. Patch from Raphael Geissert. (Closes: #541977) * checks/fields{,.desc}: + [RA] Check for library packages that recommend documentation packages. Patch from Raphael Geissert. (Closes: #527363) + [RA] Fix regex for recognizing CVS repositories available via anonymous ssh. Thanks, Thorsten Glaser. (Closes: #546927) * checks/menus{,.desc}: + [RA] Exclude examples from documentation that may require doc-base registration. Thanks, Mikhail Gusarov. (Closes: #547345) * checks/scripts{,.desc}: + [RA] Add /usr/bin/ir as an interpreter provided by the ironruby package. Thanks, Matthias Klose. (Closes: #547555) + [ADB] Fix a typo in the description of example-script-uses-bin-env (pth -> path). Thanks, Jakub Wilk. (Closes: #547670) * lib/Lintian/Output.pm: + [ADB] Import Exporter before Class::Accessor to avoid accidentally calling Class::Accessor::import(). Thanks, Niko Tyni. (Closes: #547631) * lib/Spelling.pm: + [RA] Additional spelling corrections from Raphael Geissert. + [RA] Return the count of spelling errors and support suppressing the tag by passing undef for the tag name so that the spell checking functions can be used to test tag descriptions for spelling errors. (Closes: #546641) * reporting/html_reports: + [RA] Include all tag types in the qa-list.txt file instead of just errors and warnings. The new order of columns is errors, warnings, info tags, pedantic tags, experimental tags, and overridden tags. lintian (2.2.15) unstable; urgency=low The "BTS cleanup" release. * Summary of tag changes: + Added: - build-depends-on-non-build-package - desktop-entry-limited-to-environments - example-interpreter-in-usr-local (pedantic) - example-interpreter-not-absolute - example-script-without-interpreter - example-script-uses-bin-env - example-shell-script-fails-syntax-check (pedantic) - example-wrong-path-for-interpreter - example-unusual-interpreter (pedantic) - global-data-in-games-directory - init.d-script-does-not-provide-itself - init.d-script-possible-missing-stop - init.d-script-provides-virtual-facility - init.d-script-should-depend-on-virtual-facility - init.d-script-starts-in-stop-runlevel - ocaml-custom-executable * checks/binaries{,.desc}: + [RA] Add a new check for OCaml bytecode executables. Patch from Stéphane Glondu. (Closes: #498138) + [RA] Allow ldconfig to be statically linked. * checks/changelog-file: + [RA] Don't warn about a symlinked changelog file if the version contains ubuntu. Thanks, Benjamin Drung. (Closes: #536434) * checks/common_data.pm: + [RA] Moved the essential package list to data/fields. * checks/copyright-file: + [RA] Use Lintian::Data to read the essential package list. * checks/debhelper: + [RA] Ignore whitespace when checking debian/compat, since Perl will when converting it to a number. Thanks, Niels Thykier. (Closes: #545430) * checks/fields{,.desc}: + [RA] Exclude base-files from the needlessly-depends-on-awk tag and from the warning about depending on a virtual package without a real package for the awk virtual package. + [RA] Use Lintian::Data to read the essential package list. + [RA] Stop allowing unversioned build dependencies on coreutils. The migration from fileutils is long since finished. + [RA] Check for build dependencies on packages that should not be used for builds. (Closes: #540594) + [RA] Allow architecture-dependent metapackages, since it can be useful for metapackages to change dependencies based on the architecture. Thanks, Vagrant Cascadian. (Closes: #544004) * checks/files{,.desc}: + [RA] Suppress non-standard-dir-perm for /tmp, /var/tmp, /var/local, /var/lock, and /usr/src if they have their normal owner and permissions. This suppresses some Lintian tags for base-files. + [RA] Allow base-files to ship /var/backups and /var/local. + [RA] Remove swfobject.js from the known packaged Javascript libraries. The version in libjs-yui is old and the new version is not packaged. Thanks, Giuseppe Iuculano. (Closes: #542046) + [RA] Allow t1- and xfonts- as prefixes for font packages since the font regex is also looking for Type 1 fonts. Thanks, Rogério Brito. (Closes: #542389) + [RA] Stop looking for *.pcf files outside font packages. The check wasn't triggering since PCF files are always compressed, and the situation for PCF font packages is more complex and not suitable for the same check. + [RA] Add mootools.js to embedded-javascript-library. Patch from Marcelo Jorge Vieira (metal). (Closes: #545716) + [RA] Check for putting data that should be in /usr/share under /usr/share/games. Patch from Raphael Geissert. (Closes: #534486) * checks/init.d{,.desc}: + [RA] Add new checks for starting in runlevels 0 and 6, providing a virtual facility, not providing a facility matching the script, not depending on a virtual facility, and inconsistent stop runlevels. Patch from Raphael Geissert. (Closes: #544221) * checks/manpages{,.desc}: + [ADB] Add HTTPS to the list of recognised protocols for URLs in manpages which should not cause manpage-has-errors-from-man to be emitted. (Closes: #543641) + [RA] Document the MANWIDTH variable when running man by hand to check for man page errors. (Closes: #542584) + [RA] Adjust the exclusion of pod2man's .IX macro for the new output format from groff. * checks/menu-format{,.desc}: + [RA] Add a pointer to desktop-file-validate in many of the tag descriptions for desktop tags. (Closes: #539403) + [RA] Mention in the description of desktop-entry-invalid-category that whitespace isn't allowed and categories are case-sensitive. + [RA] Add a new check for desktop entries that are limited to multiple environments. NotShowIn was probably intended instead. Thanks, Andrew Lee. (Closes: #537737) * checks/rules: + [RA] Anchor the dh_quilt regex to not trigger on commented-out calls. Patch from Cesare Tirabassi. (Closes: #543259) + [RA] When checking for out-of-order debhelper calls, take into account the -p flag and only check within each package. Thanks, Michael Koch. (Closes: #545219) * checks/scripts{,.desc}: + [RA] Don't warn about missing dependencies on programs if the program invocation is followed by || true. Thanks, Aurelien Jarno. (Closes: #541372) + [RA] Permit diversion of a man page as long as the package is installing a man page by the same name in the same numeric section, even if the specific section is different. Thanks, Niko Tyni. (Closes: #543781) + [RA] Check example scripts for most of the same issues as scripts elsewhere in the package, but report problems with a different set of tags with info or pedantic severity. Patch from Damyan Ivanov. (Closes: #543873) + [RA] Add seed. Thanks, Josselin Mouette. (Closes: #543779) + [RA] Add pike 7.8. Thanks, Magnus Holmgren. (Closes: #543262) * checks/shared-libs: + [RA] Allow ld.so to be executable. (Closes: #538716) * data/fields/essential: + [RA] New list of essential packages. + [RA] Add dash. (Closes: #541744) + [RA] Add diffutils and remove diff. (Closes: #544277) * data/fields/no-build-depends: + [RA] New list of packages that should not be used as build dependencies, currently containing only java-propose-classpath. Thanks, Josh Triplett. * data/files/fonts: + [RA] Refresh and include Type 1 fonts and packages as well. * lib/Lintian/Collect/Binary.pm: + [RA] Stop looking for the special OCaml symbol. OCaml custom binaries are now detected another way. Patch from Stéphane Glondu. * lib/Lintian/Schedule.pm: + [RA] If declining to add a duplicate file to the Lintian check schedule, return success to avoid a spurious error message. Patch from Raphael Geissert. (Closes: #542072) * lib/Spelling.pm: + [RA] Add spelling correction for "aplication." (Closes: #546404) * private/refresh-fonts-data: + [RA] To match what checks/files looks for, also look for *.pfb files and packages starting with t1-. * reporting/{html_reports,templates/clean.tmpl}: + [JP] Don't link to full report if the maintainer only has clean packages. (Closes: #545781) lintian (2.2.14) unstable; urgency=low The "Policy 3.8.3" release. * Summary of tag changes: + Added: - debhelper-overrides-need-versioned-build-depends - maintainer-script-modifies-ld-so-conf - missing-dependency-on-install-info - multiple-distributions-in-changes-file - patch-system-but-no-source-readme - package-modifies-ld.so-search-path - possible-documentation-but-no-doc-base-registration + Removed: - file-in-usr-something-x11-without-pre-depends + Renamed: - build-depends-on-x-metapackage => build-depends-on-metapackage - depends-on-x-metapackage => depends-on-metapackage * checks/changelog-file.desc: + [RA] Document the "Old Changelog" way of marking historic changelog entries that shouldn't be syntax-checked in the long description for syntax-error-in-debian-changelog. (Closes: #541119) * checks/debconf: + [CW] Permit Help: in .templates files, which is supported as of cdebconf 0.143 and used in the installer. * checks/debhelper{,.desc}: + [CW] Check for the use of debhelper override targets, which require debhelper 7.0.50. + [RA] Don't warn about recently deprecated debhelper commands in possibly optional portions of debian/rules. (Closes: #537607) + [RA] Don't warn about missing build dependencies for commands in possibly optional portions of debian/rules. (Closes: #537608) * checks/description: + [RA] Decode descriptions from UTF-8 before checking length. Thanks, Charles Plessy. (Closes: #537207) + [RA] Avoid duplicated word false positives from words that contain punctuation. Thanks, Nelson A. de Oliveira. (Closes: #540348) * checks/fields{,.desc}: + [FL] packages named lib*-camlp4-dev should be in section ocaml + [RA] Move debian/rules parsing to check build dependencies to checks/rules. + [RA] Allow any package to be in section oldlibs without triggering warnings. Thanks, Rene Engelhard. (Closes: #537606) + [RA] Lower wrong-section-according-to-package-name to possible. + [RA] Recognize packages as metapackages even if they contain Lintian overrides, thus fixing two packages that added a Lintian override for having dependencies only permitted for metapackages, which in turn ensures that they keep getting that tag. + [RA] Recognize packages as metapackages even if they contain files in /usr/share/cdd. + [RA] Renamed the tags for depending or build-depending on X metapackages to make them generic and load the list of metapackages from data/fields/metapackages. Always consider known metapackages to be metapackages for the dependency check. + [RA] Don't require a tilde after lp: in bzr URLs. Thanks, Benjamin Drung. (Closes: #541143) + [RA] Fix spelling of xfonts-encodings in the xfont dependency exception. (Closes: #540425) + [RA] Allow :ext: CVS repository references if the username looks like it won't require authentication. Thanks, Thorsten Glaser. * checks/files{,.desc}: + [CW] /var/lock and /var/run are not temporary filesystems in d-i, so don't emit errors about their use in udebs. + [RA] Warn about packages containing files in /etc/ld.so.conf.d that don't appear to be part of libc. Policy 3.8.3 no longer permits modification of ld.so.conf. + [RA] Remove the check for x11-common pre-depends before installing files in /usr/{include,lib}/X11. Policy 3.8.3 removes this requirement. * checks/infofiles{,.desc}: + [RA] Add missing leading * to example info directory entry. + [RA] Check that packages with info files depend on dpkg or install-info as recommended by Policy 3.8.3. * checks/lintian.desc: + [RA] Expand multiple-distributions-in-changes-file description and add a reference to the Policy section. Change certainty to possible, since this may be fine for non-Debian uploads. * checks/menus{,.desc}: + [RA] Add info-level tag for packages with apparent HTML or PDF documentation in /usr/share/doc but no doc-base registration. Based on a patch from Raphael Geissert. (Closes: #469018) * checks/patch-systems{,.desc}: + [RA] Check for a patch system in use but no debian/README.source. Based on a patch from Jonathan Yu. (Closes: #537969) * checks/po-debconf: + [CW] Don't emit not-using-po-debconf if all templates are marked "for internal use". (Closes: #492626) * checks/rules{,.desc}: + [RA] Moved checking of build dependencies based on programs invoked in debian/rules from checks/fields to here. + [RA] Expand Lintian's understanding of which targets are run for the clean target to include targets invoked via pattern variable expansion. (Closes: #536405) + [RA] Make the handling of make variables as rule names more robust and avoid generating invalid regexes. + [RA] Packages including /usr/share/mozilla-devscripts makefile fragments in debian/rules must Build-Depend on mozilla-devscripts. Thanks, Benjamin Drung. (Closes: #541144) * checks/scripts: + [RA] Fix parsing of dpkg-divert commands diverting a file ending in a number, followed by a redirection. Thanks, Andreas Beckmann. (Closes: #534942) + [RA] Warn about maintainter scripts that modify /etc/ld.so.conf. Policy 3.8.3 no longer permits this. + [RA] Avoid command-with-path-in-maintainer-script false positives with backtick expressions as arguments to commands. Thanks, Stefan Fritsch. (Closes: #536397) * checks/watch-file: + [RA] Fix false positives in debian-watch-file-should-mangle-version when an upstream version is specified in the watch file and give the line number of mangling issues. Patch from Raphael Geissert. (Closes: #536404) * data/debhelper/*: + [ADB] Refresh against unstable. * data/fields/architectures: + [RA] Refresh architecture list against dpkg 1.15.3.1, adding avr32 and kopensolaris. (Closes: #538055) * data/fields/metapackages: + [RA] New file listing known metapackages that should not be used in Depends or Build-Depends. + [RA] Add mono-complete. (Closes: #538929) * data/fields/virtual-packages: + [ADB] Refresh against unstable. * data/files/fonts: + [ADB] Refresh against unstable. * data/standards-version/release-dates: + [RA] Add the release date for Policy 3.8.3. * debian/control: + [RA] Update standards version to 3.8.3 (no changes required). * frontend/lintian: + [RA] Enable multiple-distributions-in-changes-file now that Policy documents that this does not work with the Debian archive. * frontend/lintian-info: + [ADB] Correctly parse Lintian output for pedantic tags. Thanks, James Vega. * lib/Spelling.pm: + [RA] Add spelling correction for precedence. * reporting/html_reports: + [JP] Accumulate tag-specific statistics in a new variable, and pass it to the appropriate templates. * reporting/templates/tags{,-severity}.tmpl: + [JP] Remove duplicate code to calculate tag statistics. * t/runtests: + [RA] Update standards version to 3.8.3. lintian (2.2.13) unstable; urgency=low The "triggerized install-info" release. * Summary of tag changes: + Added: - install-info-used-in-maintainer-script - package-contains-info-dir-file + Removed: - info-documents-not-removed - install-info-not-called-with-quiet-option - missing-comma-after-substvar - postrm-calls-install-info - preinst-calls-install-info * checks/control-file{,.desc}: + [RA] Rework missing-separator-between-lines to only include two specific package stanzas in the extra tag data and not include newlines. Generalize it to also detect missing commas between substvars, replacing missing-comma-after-substvar. * checks/cruft{,.desc}: + [RA] Don't warn about outdated libtool if the package build-depends on libtool. Thanks, Kurt Roeckx. (Closes: #534134) + [RA] Fix typo in *-contains-ht-tags-file description. Patch from Peter Pentchev. (Closes: #534218) * checks/fields: + [ADB] If the Debian r-cran makefile include is used in the rules file, cdbs, debhelper and r-base-dev are required in Build-Depends. Thanks, Charles Plessy. (Closes: #534684) + [RA] Allow variable settings before ant, dpatch, and dh when checking debian/rules for dependencies. Thanks, Ryan Niebur. (Closes: #535432) * checks/files{,.desc}: + [RA] Allow non-core Python packages to install files into /usr/lib/python*/dist-packages, the extension location for Python 2.6 and later. Thanks, Julian Andres Klode. (Closes: #534212) + [RA] Check for /usr/share/info/dir files included in the package. Thanks, Bas Zoetekouw. (Closes: #535566) * checks/infofiles{,.desc}: + [RA] Ignore dir files; they're a different error that's now caught by checks/files. + [RA] Remove all checking of maintainer scripts, since info dir entries are now handled with triggers. Now always warn of info files without INFO-DIR-SECTION, even if install-info were called with a --section argument. Warn of info files without a DIR-ENTRY section. Thanks, Raphaël Hertzog. (Closes: #534640) + [RA] Fix a bug in the detection of bad info file extensions that missed extensions containing the string "info". + [RA] Improve the long descriptions of tags about compression of info documents. * checks/init.d: + [RA] Take into account dangling symlinks in /etc/init.d. Patch from Raphael Geissert. (Closes: #534139) + [RA] Don't require symlink init scripts to be conffiles and realize they are included in the package even if the symlink is dangling. Thanks, Steve Langasek. (Closes: #534326) * checks/manpages: + [RA] Don't warn about hyphens used as minus signs inside draft mode, since \- cannot be used there. Based on a patch by Gennaro Oliva. (Closes: #535308) * checks/patch-systems: + [RA] Don't include the package name as extra data in tags that are only issued for source packages. Patch from Raphael Geissert. * checks/scripts{,.desc}: + [RA] Lower certainty of read-in-maintainer-script to possible and mention false positives. Thanks, Raphaël Hertzog. (Closes: #534276) + [RA] Allow for output redirection when parsing diversions in maintainer scripts. Thanks, Andreas Beckmann. (Closes: #534942) + [ADB] Detect the use of the "source" bashism when the sourced filename contains a tilde or consists of a single character. Thanks, Raphael Geissert and Ryan Niebur. + [RA] Avoid a false positive in the bashism check for trap with signal numbers when the trap command contains a number. Thanks, Julien Cristau. (Closes: #534580) + [RA] Check for any maintainer script running install-info, since this is now handled with triggers. * checks/watch-file: + [RA] Use a consistent way of displaying the line number of a problem. * collection/strings: + [ADB] Handle the fact that, when Lintian is run as root, the output of "file" on set[gu]id files may include the fact that they are set[gu]id. Thanks, Peter Pentchev. (Closes: #533618) * lib/Read_pkglists.pm: + [RA] Increment the package list format and expect the archive area as an additional argument. Patch from Raphael Geissert. * lib/Spelling.pm: + [RA] Add changes misspelling. + [RA] Fix correction for endianness. Thanks, Raphael Geissert. (Closes: #535582) + [RA] Only strip most punctuation from the end of each word, not from anywhere in the string. We don't want to strip the period from res.size. Thanks, Zack Weinberg. (Closes: #534234) * lib/Tags.pm: + [RA] Replace all newlines in tag data with \n, not just the first. (Closes: #534141) * man/lintian.1: + [RA] The archive area may be a comma-separated list of areas. Patch from Raphael Geissert. * private/update-coverage: + [RA] Provide a breakdown of tags only covered in the legacy test suite by test name. * reporting/html_reports: + [RA] Change area back to section in the loop for generating the package index pages to be consistent with the page template. + [RA] Allow for multiple archive areas in the front page summary. + [RA] Add the archive area to the tag information. * reporting/templates/maintainer.tmpl: + [RA] Include the archive area in the source package heading if it's not main. Include the archive area in the binary package heading if it's different than the source package archive area. * unpack/list-{bin,src,udeb}pkg: + [RA] Collect information from multiple archive areas and include the archive area in the package list. Patch from Raphael Geissert. (Closes: #516530) lintian (2.2.12) unstable; urgency=low The "Policy 3.8.2" release. * Summary of tag changes: + Added: - debug-symbols-directly-in-usr-lib-debug - dh_desktop-is-deprecated - dh_scrollkeeper-is-deprecated - file-in-discouraged-x11-font-directory - file-in-unknown-x11-font-directory - init.d-script-sourcing-without-test - init.d-script-uses-usr-interpreter - missing-separator-between-items - package-contains-multiple-dpi-fonts - package-mixes-misc-and-dpi-fonts + Removed: - missing-comma-between-items * checks/binaries{,.desc}: + [RA] Diagnose installing detached debugging symbols directly in /usr/lib/debug instead of in an appropriate subdirectory. Patch from Raphael Geissert. (Closes: #532394) * checks/control-file{,.desc}: + [ADB] Allow both comma and pipe as valid separators between items when detecting whether a separator has been omitted. As a consequence, rename the missing-comma-between-items tag to the more descriptive missing-separator-between-items. Based on a patch by Rafael Laboissiere. (Closes: #533202) + [RA] Allow a newline immediately after the field name, since this does work with fields that can be wrapped (such as Build-Depends). Thanks, Stephane Glondu. (Closes: #528377) * checks/debhelper{,.desc}: + [RA] Issue package-lacks-versioned-build-depends-on-debhelper always if the debhelper dependency isn't properly versioned, not just for compat levels newer than 5. (Closes: #522384) + [RA] Warn about dh_desktop calls since the command is now deprecated. Thanks, Nelson A. de Oliveira. (Closes: #531164) + [RA] Include the line number in deprecated and obsolete dh_* command tags. + [ADB] Warn about dh_scrollkeeper calls since the command is now deprecated. * checks/fields{,.desc}: + [RA] Update source-field-malformed to serious and don't allow capital letters in source package names. Check source package names for validity even when checking only source packages to be sure the package name is syntactically valid. + [RA] Permit quilt in Build-Depends for arch-independent packages if dh_quilt_* programs are called in the clean target. Thanks, Daniel Moerner. (Closes: #528003) + [RA] If one of the gnome-pkg-tools makefile fragments is included, gnome-pkg-tools is allowed and required in Build-Depends. Thanks, Emilio Pozuelo Monfort. (Closes: #532892) * checks/files{,.desc}: + [RA] Diagnose files installed into discouraged or unknown subdirectories of /usr/share/fonts/X11 per Policy 11.8.5. + [RA] Diagnose packages including both 100dpi and 75dpi fonts or mixing misc and Xdpi fonts. * checks/init.d{,.desc}: + [RA] Also check unregistered init scripts for other syntax problems. Patch from Raphael Geissert. + [RA] Don't think required init.d options are implemented just because they occur in a comment. Patch from Raphael Geissert. + [RA] Diagnose init scripts sourcing /etc/default files without checking first whether they're present. Patch from Raphael Geissert. (Closes: #533571) + [RA] Diagnose init scripts that use interpreters in /usr. Patch from Raphael Geissert. * checks/menus{,.desc}: + [RA] Read menu-methods files from the collected location instead of the unpacked binary package and change the unpack level of menus to 1. Patch from Raphael Geissert. * checks/scripts{,.desc}: + [RA] Per Policy 3.8.2, read-in-maintainer-script is now of serious severity. + [RA] Catch obsolete dpkg checks in more contexts. + [RA] Check for invocations of fc-cache in maintainer scripts. Thanks, Josselin Mouette. (Closes: #532984) + [RA] Catch more commands with paths in maintainer scripts. Thanks, Raphael Geissert. * collection/menu-files{,.desc}: + [RA] Collect menu-methods as well as menu files. Refactor to remove code duplication. Patch from Raphael Geissert. * data/standards-version/release-dates: + [RA] Add the release date for Policy 3.8.2. * debian/control: + [RA] Update standards version to 3.8.2 (no changes required). * t/runtests: + [RA] Update standards version to 3.8.2. lintian (2.2.11) unstable; urgency=low * Summary of tag changes: + Added: - missing-comma-between-items - non-conf-file-in-modprobe.d - non-free-flash - section-area-mismatch + Removed: - section-category-mismatch * checks/binaries{,.desc}: + [ADB] Extend the description of spelling-error-in-binary to mention that misspelt words are always output in lower case, and give some suggestions for finding the error oneself. Thanks, Raphael Geissert and Paul Gevers. (Closes: #526435) + [RA] Downgrade certainty of tags for which we recommend overrides. Patch from Raphael Geissert. (Closes: #530008) + [ADB] Don't consider a 64-bit kernel module shipped in a binary package for the corresponding 32-bit architecture to be "from other architecture". (Closes: #532013) + [ADB] When checking for binaries which define rpaths, don't exclude rpaths of /lib and /usr/lib, even if the directory is shipped by the package. (Closes: #532508) * checks/control-file{,.desc}: + [ADB] Refer to main, contrib and non-free as archive areas rather than categories. + [ADB] Rename section-category-mismatch to section-area-mismatch. + [ADB] Update the description of section-area-mismatch to clarify that source packages in main may build binary packages in contrib. + [RA] Skip duplicate description checks for udeb packages. Thanks, Thijs Kinkhorst. (Closes: #529924) + [ADB] Warn about missing spaces between items in a control file which have been omitted when spanning the dependency line over multiple lines. Based on a patch by Damyan Ivanov. (Closes: #516706) * checks/cruft{,.desc}: + [RA] Downgrade certainty of tags for which we recommend overrides. Patch from Raphael Geissert. + [RA] When looking for tar errors from dpkg-source, ignore gpgv output as well as gpg output. (Closes: #533116) * checks/debhelper.desc: + [ADB] Correct Unpack-Level to 1. Thanks, Raphael Geissert. * checks/fields{,.desc}: + [RA] Allow python << dependencies without Python-Version if the package depends on python-support, which doesn't use the Python-Version field. Adjust the long description of old-versioned-python-dependency to make it clearer it only applies to python-central. Thanks, Bernd Zeimetz. (Closes: #525997) + [ADB] Refer to contrib and non-free as "archive areas" rather than distributions. + [ADB] Accept Architecture fields in .dsc files which contain both "all" and one or more binary architectures. (Closes: #530565) + [ADB] If a ruby-pkg-tools make include is used in a rules file, require a build-dependency on that package. Patch by Ryan Niebur. (Closes: #532837) + [ADB] Replace a misplaced "build-depends" with the correct "depends" in the description of the "missing-build-dependency" tag. Patch by Ryan Niebur. (Closes: #532838) * checks/files{,.desc}: + [RA] Downgrade symlink-has-double-slash and symlink-ends-with-slash to minor. These are violations of a Policy should, but are unlikely to cause practical problems. (Closes: #527843) + [RA] Explain in the symlink-contains-spurious-segments description that these segments can cause problems in the presence of symlinked directories. + [RA] Downgrade certainty of tags for which we recommend overrides. Patch from Raphael Geissert. + [ADB] Add a new tag indicating that the filename of a Flash file it may be a known non-free file. Patch by Raphael Geissert. (Closes: #516250) + [ADB] Check for files in /etc/modprobe.d with filenames which do not end in ".conf". Based on a patch by Raphael Geissert. (Closes: #521595) * checks/manpages: + [ADB] Remove support for detecting whether man supports the --warnings flag. The version of man shipped in lenny supports it so the compatibility code is no longer required. * checks/menu{s,-format}.desc: + [ADB] Correct Unpack-Level to 2. Thanks, Raphael Geissert. * checks/po-debconf.desc: + [ADB] Correct Unpack-Level to 1. Thanks, Raphael Geissert. * checks/scripts: + [ADB] Do not include an empty alternative in the list of suggested dependencies for an interpreter when the interpreter may be unversioned but the dependency may not. For example, pikeX.Y provide /usr/bin/pike and /usr/bin/pikeX.Y but there is no "pike" package. + [ADB] Add ksh and zsh to the list of packages providing the /bin/ksh alternative. Thanks, Guillaume Delacour. (Closes: #529457) + [ADB] Detect shellscript wrappers which embed a call to "exec" in a conditional statement. Thanks, Raphael Geissert. + [ADB] Fix a syntax error in the shellscript wrapper detection that lead to it returning a part of the wrapper script rather than a simple success value. + [ADB] Remove "\\" from the list of unsafe backslash escapes in the shell script checks. POSIX does not prohibit its use and it works in all shells in Debian. + [RA] Add escript to the list of known interpreters. Thanks, Nicholas Jefferson. (Closes: #532158) * checks/shared-libs.desc: + [RA] Downgrade certainty of tags for which we recommend overrides. Patch from Raphael Geissert. * data/debhelper/{dh_commands,dh_packages,maint_commands}: + [ADB] Refresh against unstable. (Closes: #530622) * data/fields/{perl-provides,virtual-packages}: + [ADB] Refresh against unstable. * data/files/fonts: + [ADB] Refresh against unstable. * debian/control: + [ADB] Depend on libapt-pkg-perl. * debian/rules: + [ADB] Re-order the commands in the runtests target so that the "new style" testset is run first, as it now also tests the harness. Thanks, Raphael Geissert. * frontend/lintian: + [ADB] Rename the --section command line option to --area in line with Policy's use of the term "archive area" to describe main, etc. Also rename the corresponding environment and configuration file variables. In each case, the original name is permitted as a synonym. + [ADB] Reset the timezone in the environment before running any tests so that tar's "implausibly old timestamp" errors use a consistent epoch. Thanks, Raphael Geissert. * lib/Lintian/*.pm: + [ADB] Fix a few errors and add missing example variable declarations in POD synopsis example sections. Patch by Raphael Geissert. * lib/Lintian/Relation/Version.pm: + [ADB] Rework to use libapt-pkg-perl rather than calling "dpkg --compare-versions" repeatedly and keeping a potentially large cache of previous results. * lib/Lintian/Schedule.pm: + [ADB] Correctly display package versions of 0 in status messages. (Closes: #532550) * lib/scan_script.pl: + [RA] Removed. A start at parsing shell scripts that was never finished and wasn't usable in its current form. * lib/Spelling.pm: + [ADB] Add a number of new corrections from Raphael Geissert. (Closes: #526019) * man/lintian.1: + [ADB] Document the new --area command line option and update the documentation of --section to indicate that it is deprecated in favour of the new option. * private/refresh-debhelper-data: + [ADB] Update the contents file parsing to handle the fact that there are now section names containing hyphens. + [ADB] Use LC_ALL=C to preserve sort order regardless of the user's locale. * private/refresh-fonts-data: + [ADB] Use LC_ALL=C to preserve sort order. * private/refresh-perl-provides: + [ADB] Special-case libio-compress-zlib-perl to account for the fact that it does not contain IO::Compress::Zlib. Patch by Niko Tyni. (Closes: #528744) * reporting/config: + [ADB] Use $LINTIAN_AREA rather than $LINTIAN_SECTION in the default configuration file. * reporting/harness: + [ADB] Use the new $LINTIAN_AREA variable to determine which packages to process. + [RA] Include pedantic tags in lintian.log, but don't report them on the web site. Patch from Raphael Geissert. * reporting/html_reports: + [ADB] Use the new $LINTIAN_AREA variable to determine which archive area we are generating reports for, and pass it through to templates where relevant. * reporting/templates/index.tmpl: + [ADB] Modify the statistics table to refer to archive area rather than section. * t/runtests: + [ADB] Run the test scripts before all other tests as they now test some fundamentals which are required to pass in order for the harness itself to work. Thanks, Raphael Geissert. + [RA] Run prove recursively in the scripts directory. + [RA] Skip scripts tests if a tag was specified. Patch from Raphael Geissert. * t/scripts/minimum-version.t: + [ADB] New script by Raphael Geissert to ensure that all our scripts can run with Perl 5.8.0. * t/scripts/needs-info.t: + [ADB] Renamed to needs-info-exists.t. * t/scripts/needs-info-missing.t: + [ADB] New script by Raphael Geissert to check whether scripts using Lintian::Collect{,::*} declare the required collection scripts in Use-Info. * t/scripts/pod-synopsis.t: + [ADB] New script by Raphael Geissert to ensure that example code in module's POD synopsis section is valid. * t/scripts/{static-lab,tags}.t: + [ADB] New test scripts splitting some of the "harness checking" out of the runtests script. Patch by Raphael Geissert. * t/scripts/strict.t: + [ADB] New script by Raphael Geissert to check that all our scripts "use strict". * t/scripts/unpack-level.t: + [ADB] New script by Raphael Geissert to check that all checks scripts declare the correct unpack level. * t/scripts/version.t: + [ADB] New script to test Lintian::Relation::Version. * t/tests/lintian-overrides: + [ADB] New testset for the {malformed,unused}-override tags. Patch by Raphael Geissert. * unpack/list-{bin,src,udeb}pkg: + [ADB] Use the new $LINTIAN_AREA variable to determine which package list to read. lintian (2.2.10) unstable; urgency=low The "do something useful with tar errors, plus bug fixes" release. * Summary of tag changes: + Added: - ancient-autotools-helper-file - tar-errors-from-control - tar-errors-from-data - tar-errors-from-source + Removed: - desktop-mimetype-without-update-call - package-uses-breaks * checks/conffiles: + [RA] Fix a false negative in duplicate-conffile by improving normalization of conffiles before comparing and restructure the check a bit. Patch from Raphael Geissert. * checks/cruft{,.desc}: + [RA] Split outdated-autotools-helper-file into ancient- and outdated-, preserving the 2004 date for ancient and checking for at least June of 2006 for outdated. The latter is needed for AVR32. Thanks, Bradley Smith. (Closes: #525280) + [RA] Set certainty for ancient- and outdated-autotools-helper-file to possible instead of certain. Some packages contain extra copies that aren't used during the Debian package build. + [RA] Document that cdbs still requires the autotools-dev build dependency to update config.{sub,guess} at build time. + [RA] Report errors from tar or dpkg-source when listing or unpacking the source package, skipping and suppressing some harmless errors. * checks/deb-format{,.desc}: + [RA] Report tar errors from listing or unpacking the control or data members of the package, suppressing uninteresting errors or errors that are caught some other way. (Closes: #367327) + [CW] Ubuntu's archive allows packages whose data members are compressed with lzma. * checks/etcfiles.desc: + [RA] Remove unused Needs-Info: etcfiles. Thanks, Raphael Geissert. * checks/fields{,.desc}: + [RA] Remove package-uses-breaks. dpkg in stable now supports it. Thanks, Julian Andres Klode. (Closes: #522660) + [RA] Fix Needs-Info. Thanks, Raphael Geissert. * checks/files{,.desc} + [ADB] Anchor the regular expression for the "gz-file-not-gzip" tag so that files with names that contain ".gz" but do not end in that string are not flagged. Patch by Raphael Geissert. (Closes: #523352) + [RA] Remove desc for removed possible-name-space-pollution tag. * checks/manpages.desc: + [RA] Remove desc for removed no-manpage-in-correct-directory tag. * checks/menu-format{,.desc}: + [RA] Remove desktop-mimetype-without-update-call. This is now handled by triggers. Thanks, Chow Loong Jin. (Closes: #525133) + [RA] Remove desc for removed menu-item-adds-to-root-menu tag. * checks/patch-systems.desc: + [RA] Mention that empty dpatch patch lists or quilt series files will disappear in a non-native source package and hence produce the warning about a missing file. (Closes: #525005) * checks/scripts{,.desc}: + [RA] Handle command delimiters, $() expressions, and braces and parentheses in the checks for correct diversion handling. Patch from Raphael Geissert. (Closes: #523708) + [RA] Clarify the php-script-but-no-phpX-cli-dep description to explain why it warns about a php4-cli dependency. (Closes: #525484) + [RA] Add jruby1.2 and allow an unversioned jruby reference. Thanks, Sebastien Delafond. (Closes: #523001) * checks/shared-libs{,.desc}: + [RA] Strip trailing slashes from the libdir path in *.la files before checking it for correctness. Thanks, Patrick Matthäi. (Closes: #524228) + [RA] Special-case *.la files for Python modules installed in /usr/share/pyshared, since they're moved during install. Thanks, Jonas Smedegaard. (Closes: #522623) + [RA] Requires unpack level 2 to read the *.la files. * checks/standards-version.desc: + [ADB] Fix a couple of spelling mistakes ("verison" -> "version"). Thanks, Guillaume Delacour. (Closes: #522643) * collection/file-info: + [ADB] Call "file" with "--" to ensure that any filenames in the package that start with "-" aren't interpreted as options to "file". Thanks, Trent W. Buck. (Closes: #523408) * collection/strings: + [RA] Make strings gathering on ELF binaries robust against file names containing "ELF" or a colon. Patch from Raphael Geissert. * doc/desc-files: + [ADB] Mention the new Standards-Version field available for tests. Patch by Raphael Geissert. * frontend/lintian: + [RA] Stop reporting $! when unpack scripts fail. It will almost never contain anything useful. + [RA] Move override parsing to the Tags module. Patch from Raphael Geissert. * lib/Lintian/Collect/Binary.pm: + [CW] Add missing 'use Parse::DebianChangelog'. * lib/Lintian/Output.pm: + [RA] With --color=html, display the HTML rendering of the long tag description rather than the text version and escape HTML metacharacters in the tag information. Patch from Raphael Geissert. (Closes: #522527) * lib/Lintian/Relation.pm: + [ADB] Fix a spelling mistake ("verison" -> "version"). Thanks, Guillaume Delacour. * lib/Spelling.pm: + [RA] Add spelling correction for "verison". * lib/Tags.pm: + [RA] Add a function to parse overrides, moved from frontend/lintian. Patch from Raphael Geissert. * t/runtests: + [ADB] Allow a default Policy version to be specified in template files. This avoids the need to update every test each time a new Policy version is released, unless one specifically wishes to keep a particular test using an older version. Patch by Raphael Geissert. + [ADB] Use extended regular expressions in "post_test" sed scripts. Patch by Raphael Geissert. * t/tests/README: + [ADB] Mention the new Standards-Version field available for tests. Patch by Raphael Geissert. * unpack/unpack-binpkg-l1: + [RA] Save control unpack errors in control-errors, control listing errors in control-index-errors, and package listing errors in index-errors for later processing by deb-format. (Closes: #522530) * unpack/unpack-binpkg-l2: + [RA] Save data unpack errors in unpacked-errors for later processing by deb-format. * unpack/unpack-srcpkg-l1: + [RA] Save source listing errors in index-errors for later processing by cruft. Don't fail the unpack if tar exits with non-zero status. star-created archives will cause tar to blow up, but the listing and unpacking still works. * unpack/unpack-srcpkg-l2: + [RA] Save source unpack errors in unpacked-errors for later processing by cruft. lintian (2.2.9) unstable; urgency=low * Summary of tag changes: + Added: - wrong-section-according-to-package-name - vcs-field-uses-not-recommended-uri-format - vcs-field-uses-unknown-uri-format + Removed: - dev-package-should-be-section-libdevel - doc-package-should-be-section-doc - perl-package-should-be-section-perl - python-package-should-be-section-python * checks/deb-format.desc: + [RA] In the tag description, the first required element should be debian-binary, not debian-control. Thanks, Judit Foglszinger. (Closes: #521012) * checks/fields{,.desc}: + [FL] Update list of valid sections. (Closes: #521782) + [RA] Fix dbg-package-missing-depends check when the dependency is followed by a comma. (Closes: #520640) + [FL] Add package name checks for the new sections. Move all package section checks to one tag "wrong-section-according-to-package-name" instead of one tag per section. + [FL] Add checks for well formatted Vcs-* fields. (Closes: #517635) * checks/lintian.desc: + [CW] Add karmic as an allowable distribution for Ubuntu (thanks, Soren Hansen). * checks/scripts: + [RA] Fix a hash collision that could suppress a correct remove-of-unknown-diversion tag if the diversion was removed in multiple maintainer scripts including postrm. + [RA] Handle variables in maintainer scripts when adding and removing diversions. Patch from Raphael Geissert. (Closes: #519268) * checks/shared-libs: + [RA] Correctly handle SONAMEs in symbols files that contain regex metacharacters like +. Thanks, Daniel Kobras. (Closes: #521621) * collection/file-info: + [RA] Use chomp instead of chop to remove newlines. + [RA] Ignore error returns from file. file returns non-zero if it can't parse some files, but the resulting output is still fine for Lintian's purposes. Thanks to Raphael Geissert for the problem identification. (Closes: #521257) * data/changelog-file/ubuntu-dists: + [CW] Add karmic as an allowable distribution for Ubuntu (thanks, Soren Hansen). * debian/rules: + [RA] Remove and recreate debian/tests before runtests or check-tag to avoid spurious test failures from lingering old files. * frontend/lintian: + [RA] Belatedly bump the lab format version for many recent changes. * lib/Lintian/Command.pm: + [RA] In kill, initialize the result status and use &&= instead of |=. Partly addresses #521257. * unpack/unpack-srcpkg-l1: + [RA] Better anchor the regexes that parse the file list in a source package. lintian (2.2.8) unstable; urgency=low The "Policy 3.8.1" release. * Summary of tag changes: + Added - dir-or-file-in-var-lock - dir-or-file-in-var-run * checks/changelog-file.desc: + [RA] Using UTF-8 is now a Policy must and hence serious. * checks/control-file.desc: + [RA] Using UTF-8 is now a Policy must and hence serious. * checks/files{,.desc}: + [CW] Emit dir-or-file-in-var-lock or dir-or-file-in-var-run, as appropriate, for packages shipping directories or files in /var/lock or /var/run. See policy bug #514326. * checks/menus{,.desc}: + [RA] Revert the change to not require update-menus in postinst. This is still needed due to #518919. Don't require update-menus in postrm for regular menu files, only for menu-methods, but also don't warn if it's present. (Closes: #519300) * checks/scripts: + [RA] Policy allows scripts to assume that /bin/sh supports local with simple variable assignments. + [ADB] Check all added and removed diversions at once rather than as each maintainer script is processed. This avoids differing results and false positives if the postrm is processed before other maintainer scripts. (Closes: #518966) * data/debhelper/*: + [RA] Refresh against unstable. * data/fields/virtual-packages: + [RA] Refresh against unstable. * data/files/fonts: + [RA] Refresh against unstable. * data/output/manual-references: + [RA] Refresh reference data against Policy 3.8.1, doc-base 0.9.1, and developers-reference 3.4.1. * data/standards-version/release-dates: + [RA] Add release date for 3.8.1. * debian/control: + [RA] Update to standards version 3.8.1. * lib/Dep.pm: + [RA] Remove, replaced with Lintian::Relation. * lib/Lintian/Collect/Binary.pm: + [RA] Fix POD errors. * lib/Lintian/Collect/Source.pm: + [RA] Fix POD errors. * lib/Lintian/Command.pm: + [RA] Fix POD errors. * private/refresh-debhelper-data: + [RA] Remove symlinks as a (possibly temporary) workaround to packages that contain broken links to dh_* commands. + [RA] Exclude dh_gencontrol from debhelper commands that set ${misc:Depends} since it only sets it to empty when not already set. * private/refresh-fonts-data: + [RA] Correctly handle not specifying a Contents file on the command line. * t/runtests: + [RA] Add support for running test scripts under t/scripts via prove (the standard Perl test harness). lintian (2.2.7) unstable; urgency=low The "debhelper 7.2.3 and lots of fiddly infrastructure fixes" release. * Summary of tag changes: + Added - apparently-truncated-elf-binary - copyright-refers-to-nonexistent-license-file - debian-control-has-unusual-field-spacing (pedantic) - diversion-for-unknown-file - embedded-zlib - gz-file-not-gzip - incorrect-libdir-in-la-file - orphaned-diversion - package-uses-local-diversion - remove-of-unknown-diversion + Removed - description-synopsis-has-leading-spaces - postinst-does-not-call-installdocs - prerm-does-not-call-installdocs * checks/binaries{,.desc}: + [RA] Check for embedded copies of zlib in ELF binaries by looking for the inflate and deflate copyright strings. Patch from Raphael Geissert. (Closes: #318104) + [RA] Avoid capturing parentheses in regexes due to their minor performance penalty. Patch from Raphael Geissert. + [RA] Report apparently truncated ELF binaries separately from apparently corrupted ones. The current binutils now distinguishes. Patch from Raphael Geissert. (Closes: #517778) + [RA] Allow i386 binaries in amd64 packages for right now. Thanks, Paul Wise. (Closes: #516856) + [RA] Suggest, when fixing spelling errors in binaries, that one unfuzzy gettext translations as well. Thanks, Raphael Geissert. * checks/changelog-file: + [RA] Avoid capturing parentheses in regexes due to their minor performance penalty. Patch from Raphael Geissert. + [RA] Correctly handle changelog.gz files that aren't compressed with gzip. Patch from Raphael Geissert. * checks/common_data.pm: + [RA] Move all information used only in one check script from here to the relevant check script. Patch from Raphael Geissert. * checks/control-file{,.desc}: + [RA] Add pedantic tag for weird spacing after the colon of a field. * checks/copyright-file{,.desc}: + [RA] Avoid capturing parentheses in regexes due to their minor performance penalty. Patch from Raphael Geissert. + [RA] Avoid false positive for versionless license files when the file is referred to without a hyphen; instead, issue a separate tag that explains the problem. Based on a patch from Raphael Geissert. (Closes: #517191) + [RA] Allow commas between the GFDL license name and version when suppressing false positives for the 1.1 version. Thanks, Aurelien Jarno. (Closes: #516687) + [RA] Don't warn about versionless GPL references if the word version appears nowhere in the copyright file. * checks/debconf: + [ADB] Use Lintian::Relation rather than Dep. * checks/debhelper{,.desc}: + [ADB] Use Lintian::Relation rather than Dep. + [RA] Add dh_bugfiles to version requirements, added in 7.2.3. + [RA] debhelper compatibility level V4 is now deprecated. * checks/description{,.desc}: + [RA] Remove description-synopsis-has-leading-spaces. Policy explicitly says this is not a bug. Adjust for the changes to Util that preserve leading whitespace in continued fields. * checks/fields: + [RA] Precompile constant regexes with qr. Patch from Raphael Geissert. + [RA] Load Lintian::Data objects only once. Patch from Raphael Geissert. Also use all caps for global variables. * [RA] Move data from common_data.pm to here and use Lintian::Data to get the list of known architectures. Patch from Raphael Geissert. * checks/files{,.desc}: + [RA] Avoid capturing parentheses in regexes due to their minor performance penalty. Patch from Raphael Geissert. + [RA] Precompile constant regexes with qr and only load the list of font packages if needed. Patch from Raphael Geissert. + [RA] Warn about yui-*.js as well as yahoo-*.js. Patch from Raphael Geissert. + [ADB] Use Lintian::Relation instead of Dep. + [RA] magpierss was renamed to libphp-magpierss. Patch from Marcelo Jorge Vieira (metal). (Closes: #518684) + [RA] Diagnose files ending in *.gz that aren't compressed with gzip. Patch from Raphael Geissert. (Closes: #518873) + [RA] Simplify some checks now that we're guaranteed leading and trailing whitespace will be stripped from field values. * checks/manpages: + [CW] Run man with '-E UTF-8' to avoid producing bogus warnings on localised manual pages due to attempting to recode through ASCII. + [RA] Set MANWIDTH to 80 in the environment when running man to force it to assume 80-column lines even when Lintian is run in a smaller window. Thanks, Joey Hess. (Closes: #517629) + [ADB] Use Lintian::Relation::Version when determining whether the installed version of man supports the --warnings option. * checks/menus: + [RA] Cache the reference to the section list. Thanks, Raphael Geissert. Also use all caps for global variables. + [RA] Move known doc-base formats from common_data.pm to here. Patch from Raphael Geissert. + [RA] Explicit update-menus calls in postinst and postrm are no longer required unless menu-methods are installed. Thanks, Eric Lavarde. (Closes: #518712) + [RA] Explicit install-docs calls are no longer needed since doc-base registration is done with triggers. (Closes: #518801) * checks/nmu: + [RA] Calculate the regex for Ubuntu distributions only once. * checks/patch-systems: + [ADB] Use Lintian::Relation instead of Dep. * checks/rules: + [ADB] Remove some obsolete code and therefore stop use-ing Dep. * checks/scripts: + [ADB] Use Lintian::Relation rather than Dep. + [ADB] Update lists of known interpreter versions (add jruby1.1, octave3.1 and remove jruby0.9) + [RA] Diagnose various problems with creating and removing diversions. Based on a patch by Jörg Sommer. (Closes: #516221) * checks/shared-libs{,.desc}: + [ADB] When parsing symbols files, correctly ensure that meta-information occurs between the end of the dependency template(s) and the start of the symbol list. The code that was intended to check this resulted in a false positive syntax error being generated if a file with alternative dependency templates used meta-information. + [ADB] Extend the parsing of dependency templates in symbols files to handle ORed dependencies. + [ADB] Use Lintian::Relation rather than Dep. + [ADB] Avoid capturing parentheses in regexes due to their minor performance penalty. + [RA] Check the libdir path in libtool *.la files and ensure that it matches the installed location of the *.la file. Based on a patch by Raphael Geissert. (Closes: #302196) * checks/version-substvars: + [RA] Be robust against whitespace in the Architecture field. Thanks, Gonéri Le Bouder. (Closes: #517555) * collection/*.desc: + [RA] Remove the output key and instead add a version key. Patch from Raphael Geissert. * collection/changelog-file: + [RA] Remove the remains of a previous run before starting. * collection/diffstat: + [RA] Remove the remains of a previous run before starting. * collection/objdump-info: + [RA] Recognize truncated binaries. Patch from Raphael Geissert. * collection/source-control-file: + [RA] Remove the remains of a previous run before starting. * debian/control: + [CW] Depend on man-db (>= 2.4.0) for '-E UTF-8'. * data/fields/architectures: + [RA] Replace the runtime-generated list of known architectures with this data file, built from the current dpkg files. Patch from Raphael Geissert. * doc/desc-files: + [RA] Document new Version field for collect scripts and remove Output field. Document pedantic severity for tags. Document Sequence, Options, and Skeleton for test suite descriptions. Thanks, Raphael Geissert. * doc/lintian.sgml: + [RA] Document pedantic tags. Patch from Raphael Geissert. * frontend/lintian: + [RA] Stop loading FileHandle. We no longer use it. + [RA] Run all the collect scripts within a given order in parallel. Patch from Raphael Geissert. + [RA] Create marker files in the laboratory for each collect script that has successfully including its current version number. Use these marker files rather than the existence of output files to determine when to run collect scripts. Re-run collect scripts if the current version doesn't match what's in the lab. Patch from Raphael Geissert. (Closes: #517650) + [RA] Add oldstable to the known distributions for *.changes files. * lib/Lintian/Collect/Binary.pm: + [RA] Recognize truncated binaries. Patch from Raphael Geissert. * lib/Lintian/Command.pm: + [RA] Add support for running commands in the background using a final argument of '&'. Allow reap() to take multiple opt hashes and reap all of them in a loop. Add a kill() function to kill outstanding jobs. Patch from Raphael Geissert. * lib/Lintian/Tag/Info.pm: + [RA] Strip leading whitespace from continued lines. * lib/Spelling.pm: + [RA] Optimize the spell-checking algorithm. Patch from Raphael Geissert. (Closes: #514495) * lib/Util.pm: + [RA] Fully comply with Policy in whitespace handling when parsing Debian control files. Multiline fields will now have the leading whitespace of subsequent lines left in, and leading tabs are no longer handled specially. Trailing whitespace is now uniformly stripped, as is leading whitespace on the first field line. * man/lintian.1: + [RA] Document strings collect script. * private/refresh-archs: + [RA] Script from Raphael Geissert to refresh known architectures. * unpack/unpack-binpkg-l1: + [RA] Run the separate commands involved in unpacking a binary package in parallel where possible. Patch from Raphael Geissert. * unpack/unpack-srcpkg-l1: + [RA] When processing tar output, we may not get complete lines at a time. Save partial lines and glue them back together again when we get the next burst of data. (Closes: #517899) + [RA] Do a little bit of parallelization when writing out the sorted index of the source package. + [RA] Ignore leading whitespace in the Files section. lintian (2.2.6) unstable; urgency=low * Summary of tag changes: + Added - binary-from-other-architecture - icon-size-and-directory-name-mismatch - lzma-deb-archive - multiple-distributions-in-changes-file (disabled) - spelling-error-in-binary (experimental) - unsupported-source-format * checks/binaries: + [RA] When checking for dependencies on libc, don't use /o on the regex. Otherwise, lintian produces false positives when run on multiple packages with different architectures, since the libc package name is not the same on all architectures. Thanks to Raphael Geissert for the report. (Closes: #516067) + [RA] Check for binaries from other architectures than the declared architecture of the package outside of known multiarch directories. Patch from Raphael Geissert. (Closes: #513996) + [RA] Check the data section of ELF binaries for spelling errors. Patch from Raphael Geissert. * checks/common_data.pm: + [RA] Virtual packages now come from data. * checks/changelog-file: + [RA] Don't warn about uncompressed ChangeLog files in doc. They may be small files and the maintainer may be installing some other upstream file as the upstream changelog. (Closes: #515601) + [RA] Fix improbable-bug-number-in-closes so that it works. * checks/control-file: + [ADB] Properly exclude packages built from the glibc source package from the "hardcoded depends on libc" test. (Closes: #515831) * checks/cruft: + [RA] For Format: 2.0 and Format: 3.0 (quilt) packages, check the *.debian.tar.(gz|bz2|lzma) contents instead of expecting diffstat output. (Closes: #515069) + [RA] Ignore cruft in the upstream source in directories that look like part of a test suite. The files may be part of the test cases. (Closes: #515137) * checks/deb-format{,.desc}: + [RA] Recognize data.tar.lzma binary package components and use a different tag than malformed-deb-archive. * checks/description: + [ADB] Warn of homepages embedded in the description which use the syntax "Homepage: <http://example.com>" using the warning level tag description-contains-homepage rather than the info level tag description-possibly-contains-homepage. (Closes: #515998) + [RA] Don't warn about too-short long descriptions for transitional or dummy packages. Thanks, Andreas Beckmann. (Closes: #515538) * checks/fields{,.desc}: + [RA] Load virtual packages from data/fields/virtual-packages. + [RA] Warn of unsupported source package versions. * checks/files{,.desc}: + [RA] Warn of PNG icons whose size doesn't match the size indicated by the directory in which they're installed. Patch from Raphael Geissert. (Closes: #509624) + [RA] Make static regexes global to avoid recreating them for each file we scan. Patch from Raphael Geissert. + [ADB] Modify the check for embedded Javascript libraries to ignore yahoo.js as there are similarly named, but unrelated, scripts in the archive. + [ADB] Lower the certainty of the embedded-{javascript,php}-library tags to "possible" as they trigger purely on filenames and not content. (Closes: #515690) + [RA] Offer advice for duplicate-font-file for when the font package is huge. Thanks, Thijs Kinkhorst and Paul Wise. (Closes: #515689) * checks/patch-systems.desc: + [RA] Improve the suggestions in the long description of quilt-patch-missing-description and dpatch-missing-description based on suggestions from Paul Wise. (Closes: #516534) * checks/scripts: + [RA] Make static regexes global to avoid recreating them for each file we scan. Patch from Raphael Geissert. * checks/shared-libs: + [RA] Save a local reference to objdump information to reduce the number of method calls. Patch from Raphael Geissert. + [ADB] Correctly handle alternative dependency lines in symbols files which contain multiple entries. (Closes: #516427) * collection/strings{,.desc}: + [RA] Collect a list of ELF binaries in the package and the output of strings on each binary except for those in /usr/lib/debug. Based on a patch from Raphael Geissert. (Closes: #514951) * data/fields/obsolete-packages: + [RA] Add foomatic-data, lambdamoo-{core,server}, and old kernel packages. Patch from Raphael Geissert. * data/fields/virtual-packages: + [RA] New file listing known virtual packages. Based on a patch by Raphael Geissert. (Closes: #514497) * debian/postrm: + [RA] Use set -e, not #!/bin/sh -e. * frontend/lintian: + [ADB] Split the Distribution field of a .changes file into individual distributions and then check each of them against the list of known distributions. (Closes: #514853) + [ADB] Anchor the regular expressions for the backports, security and proposed-updates distribution checks, so that etch-backports is accepted as a valid distribution but etch-backportss is not. + [ADB] Add a new check for .changes files which contain multiple entries in their Distribution: field. The check is currently disabled as the syntax is currently accepted by dak although it is likely to stop being so in the near future. * lib/Lintian/Collect/Source.pm: + [RA] Recognize Format: 2.0 packages as non-native. * lib/Lintian/Command.pm: + [RA] Disable IPC::Run debugging. Patch from Raphael Geissert. + [RA] Don't load Data::Dumper. Patch from Raphael Geissert. * lib/Spelling.pm: + [RA] Add spelling correction for "mroe". * lib/Util.pm: + [RA] Minor optimizations to {read,parse}_dpkg_control. Patch from Raphael Geissert. + [RA] Only take the first space after a field name as the separator and treat the rest as part of the field value so that other parts of Lintian can see the leading spaces. * private/refresh-virtual-packages-data: + [RA] New script to generate the list of virtual packages. Based on a patch by Raphael Geissert. * private/update-coverage: + [RA] Add support for source package tests. * t/runtests: + [RA] Add support for raw source package checks in the source subdirectory. See t/source/README for more details. * unpack/unpack-srcpkg-l1: + [ADB] Handle a number of different ways in which upstream directory trees may be represented in tarballs. (Closes: #515795) + [RA] Support LZMA-compressed upstream source. (Closes: #515068) + [RA] Analyze the upstream source tarball to extract its prefix and save it in the laboratory. Also fixes unpacking of source tarballs that have no common subdirectory. lintian (2.2.5) unstable; urgency=low * lib/Lintian/Collect/{Binary,Source}.pm: + [ADB] Add a missing "use Lintian::Relation". Thanks, Raphael Geissert. (Closes: #514697) lintian (2.2.4) unstable; urgency=low * checks/changelog-file: + [RA] Use Lintian::Relation::Version instead of Dep. * checks/control-file: + [RA] Use Lintian::Relation instead of Dep. * checks/copyright-file: + [RA] Use Lintian::Collect for dependency information. * checks/cruft: + [RA] Use Lintian::Collect for dependency information. * t/runtests: + [ADB] Correctly handle epoched package versions. Patch by Raphael Geissert. * testset/runtests: + [ADB] Correctly handle epoched package versions. * unpack/unpack-srcpkg-l1: + [ADB] Correctly determine the source package version for packages with epoched versions. Based on a patch by Raphael Geissert. (Closes: #514641) lintian (2.2.3) unstable; urgency=low * Summary of tag changes: + Added - description-possibly-contains-homepage - dfsg-version-in-native-package - dfsg-version-with-period - dfsg-version-misspelled - experimental-to-unstable-without-comment (pedantic) - homepage-for-cpan-package-contains-version - maintainer-script-without-set-e (pedantic) - source-contains-prebuilt-binary (pedantic) - source-contains-prebuilt-windows-binary (pedantic) - using-first-person-in-description + Removed - non-us-spelling * checks/changelog-file{,.desc}: + [RA] Add pedantic check for a distribution of unstable when the last version had a distribution of experimental and there's no comment about the change. (Closes: #483845) * checks/common-data.pm: + [ADB] Remove the obsolete non-US from the list of recognised archive sections. * checks/copyright-file: + [RA] Treat License: GPL-2+ as "GPL version 2 or later" for the purposes of the check for a correctly versioned license reference. Patch from Evgeni Golov. (Closes: #513946) * checks/cruft{,.desc}: + [RA] Downgrade all source-contains-* tags to pedantic. These are upstream problems the packager can't do much about and they have no practical effect on the Debian package. Wishlist implies that a wishlist bug against the package would be appropriate, which seems too strong. + [RA] Add pedantic check for binaries in the upstream source. Patch from Raphael Geissert. (Closes: #127494) * checks/description{,.desc}: + [RA] Check for using first person in package descriptions, similar to the existing check for debconf questions. Patch from Raphael Geissert. (Closes: #514491) + [RA] Add check (wishlist/wild-guess) for apparent home page URLs in the long description with no Homepage field. Based on a patch by Paul Wise. (Closes: #339829) * checks/fields{,.desc}: + [ADB] Remove checks for the capitalisation of the obsolete non-US archive section. + [RA] Warn about Homepage fields pointing to search.cpan.org pages containing a version number. Based on a patch by Paul Wise. + [RA] Warn of dfsg versions in native packages. + [RA] Warn of ".dfsg" versions and recommend "+dfsg" for version sorting reasons. Thanks, Paul Wise. (Closes: #514203) + [RA] Warn of the "dsfg" typo in versions. Thanks, Paul Wise. + [RA] Use Lintian::Relation and the new Lintian::Collect support for retrieving parsed relationship fields. * checks/files: + [ADB] Don't report duplicate-font-file for udebs. Patch by Raphael Geissert. (Closes: #514095) * checks/scripts{,.desc}: + [RA] Add pedantic check for maintainer scripts using #!/bin/sh -e instead of set -e in the script body. (Closes: #119045) * collection/file-info{,.desc}: + [RA] Also run file-info for source packages. Patch from Raphael Geissert. * lib/Lintian/Collect.pm: + [RA] Defer loading of the subclasses until the constructor to avoid circular dependencies at compilation time. * lib/Lintian/Collect/Binary.pm: + [RA] New method relation() to return a Lintian::Relation object for a given relationship field or set of relationship fields. * lib/Lintian/Collect/Source.pm: + [RA] New methods relation() and relation_noarch() to return Lintian::Relation objects for a given build relationship field or set of fields. New method binary_relation() to return a Lintian::Relation object for a given relationship field in a binary package built from this source package. + [RA] Add file_info() method to return file information for source packages. Patch from Raphael Geissert. * lib/Lintian/Relation.pm: + [RA] New class based on the existing Dep module that handles package relationship analysis. Now includes documentation, uses a more object-oriented structure, and removes a special case handling of Perl alternatives. This module will eventually replace Dep. * lib/Lintian/Relation/Version.pm: + [RA] New module containing the version comparison code from Dep. This module will only be needed until Lintian is converted to Dpkg::Version or AptPkg::Version. * lib/Spelling.pm: + [RA] Add some additional typo and case corrections. Patch from Raphael Geissert. * t/runtests: + [RA] Copy test suite data based on checksum, not size and time, since some files change one character and Git doesn't preserve timestamps. Patch from Raphael Geissert. (Closes: #514496) * unpack/list-{binpkg,udebpkg}: + [RA] Preserve the source_version field from the previous list when adding new packages, remove some dead code, and restructure for improved readability. Thanks to Jordà Polo for the analysis. (Closes: #507849) + [RA] Generate an index of files in the upstream source tarball. Patch from Raphael Geissert. lintian (2.2.2) unstable; urgency=low The "this is why spooky action at a distance is bad" release. * checks/copyright-file: + [ADB] Treat the new copyright file format's "License-Alias: Perl" as indicating that the package is licensed under the same terms as Perl. Thanks, gregor herrmann. (Closes: #513831) * checks/debconf: + [RA] Reset $/ before issuing duplicate-fields-in-templates to prevent problems if -i was given. * checks/debhelper: + [RA] Remove stray localization of $/, which broke -i when issuing tags about ${misc:Depends}. * checks/fields: + [RA] Stop pointlessly setting $/ while parsing debian/rules and then restoring it to the wrong value, which broke -i when issuing some tags if they were the first tags issued. * checks/scripts: + [RA] Add nickle as a known interpreter. Patch from Julien Cristau. (Closes: #513823) * lib/Util.pm: + [ADB] Localise a use of $_ in control file parsing to avoid overwriting it and leading to uninitialized value warnings in check scripts. (Closes: #513795) lintian (2.2.1) unstable; urgency=low * Summary of tag changes: + Added - copyright-refers-to-symlink-license (pedantic) - copyright-refers-to-versionless-license-file - debhelper-compat-not-a-number - debhelper-compatibility-level-not-a-number - duplicate-font-file - font-in-non-font-package * checks/copyright-file{,.desc}: + [RA] Add checks for references to the versionless FSF license files, pedantic if the package license allows relicensing under later versions. Patch from Raphael Geissert. (Closes: #497346) * checks/debhelper{,.desc}: + [RA] Use binary_field() to read control fields for binary packages. Patch from Raphael Geissert. + [RA] Read only the first line of debian/compat, matching debhelper's behavior. Improve the parsing of DH_COMPAT to pick up values that aren't numbers. Warn of compatibility levels that aren't numbers. Use the same compatibility level that debhelper would use in some other checks. Patch from Raphael Geissert. (Closes: #513767) + [RA] default-jdk and default-jdk-builddep provide dh_nativejava as a special case. (Closes: #513423) * checks/fields: + [RA] Allow but do not require a libmodule-build-perl dependency if the Build script is referenced in clean. Thanks, Charles Plessy and gregor herrmann. (Closes: #421549) * checks/fields{,.desc}: + [RA] Run dbg-package-missing-depends against the source package instead of the binary package and check that it has a dependency against another binary package built from the same source rather than making assumptions about the package name. Patch from Raphael Geissert. (Closes: #513336) + [RA] Use binary_field() to read control fields for binary packages. Patch from Raphael Geissert. * checks/files{,.desc}: + [RA] Add check for fonts in non-font packages. Thanks, Paul Wise and Raphael Geissert. (Closes: #513650) + [RA] Add check for fonts that duplicate already packaged fonts. Patch from Raphael Geissert. Thanks to Paul Wise for analysis and data. (Partly addresses #298545) * checks/shared-libs.desc: + [RA] Add references to the UsingSymbolsFiles wiki page in the tags requesting generation of a symbols file. + [RA] Provide details on how to manually check some of the shared library problems that Lintian diagnoses. (Closes: #513086) * checks/standards-version: + [RA] Be robust against unparsable timestamps in changelog files. Patch from Raphael Geissert. (Closes: #513766) * checks/version-substvars: + [RA] Use binary_field() to read control fields for binary packages. Patch from Raphael Geissert. * data/files/fonts: + [RA] New file listing all font filenames in Debian and the containing package names. Generated by private/refresh-fonts-data. * data/output/manual-references: + [RA] Manual reference data used for formatting tag descriptions. Moved from lib/manual_refs and added an explanatory header. * frontend/lintian-info: + [RA] Use Lintian::Tag::Info instead of Read_taginfo. * lib/Lintian/Collect/Source.pm: + [RA] Add binary_field() method to return a binary package field from debian/control for a source package. Based on a patch by Raphael Geissert. + [RA] Rewrite the binaries() method to use binary_field(). Based on a patch by Raphael Geissert. * lib/Lintian/Output.pm: + [ADB] Add a colour for pedantic tags to avoid warnings when colourised output is used and make the combination more useful. Thanks, gregor herrmann. (Closes: #513132) + [RA] Use Lintian::Tag::Info instead of Read_taginfo. + [RA] Force early exporting of functions to be more robust in the face of circular library dependencies. The circular dependencies had already existed but not previously caused problems. * lib/Lintian/Output/LetterQualifier.pm: + [ADB] Add support for pedantic tags. + [RA] Use Lintian::Tag::Info instead of Read_taginfo. * lib/Lintian/Tag/Info.pm: + [RA] New module providing an interface to tag metadata. Currently, this only supports formatting the tag description, merging the actions previously done by Manual_refs.pm and Read_taginfo.pm. It defers loading of manual references until they're needed, which removes the requirement that LINTIAN_ROOT be already set in the environment before running the reporting harness. It also saves a small amount of time in runs without -I. * lib/Manual_refs.pm: + [RA] Removed, merged into Lintian::Tag::Info. * lib/manual_refs: + [RA] Moved to data/output/manual-references. * lib/Read_taginfo.pm: + [RA] Removed, merged into Lintian::Tag::Info. * lib/Util.pm: + [RA] Force early exporting of functions to be more robust in the face of circular library dependencies. * man/lintian.1: + [ADB] Fix the spelling of "pedantic". Thanks, Michal Čihař. (Closes: #513083) * private/refresh-fonts-data: + [RA] New script to refresh the list of font filenames and containing packages in Debian. Based on a script by Raphael Geissert. * private/refresh-manual-refs: + [RA] Renamed from manual_refs_update.pl. Add a section heading to the output file and update the file in Lintian's data directory directly rather than printing to standard output. * reporting/config: + [RA] Set a bin directory and disable signature checks by default. * reporting/harness + [RA] Add the bin directory to the path and create a gpg link to /bin/true if signature checks are disabled. This is a hack to work with the etch version of dpkg-source. In lenny, the --no-check flag will be used instead. Patch from Raphael Geissert. * reporting/html_reports: + [RA] Use Lintian::Tag::Info instead of Read_taginfo. * t/runtests: + [RA] Add support for selecting a different test package skeleton. * t/templates/pedantic{,.upstream}: + [RA] New template that passes all pedantic checks. lintian (2.2.0) unstable; urgency=low * Summary of tag changes: + Added - direct-changes-in-diff-but-no-patch-system (pedantic) - no-homepage-field (pedantic) - no-upstream-changelog (pedantic) - package-depends-on-hardcoded-libc - weak-dependency-on-misc-depends * checks/*.desc: + [RA] Replace `' "balanced" quotes with straight double-quotes. The old style looks strange with modern fonts. Based on work by Raphael Geissert. * checks/binaries: + [FL] Fix check for directories in the package in RPATH check. * checks/changelog-file{,.desc}: + [RA] Use Lintian::Collect to read the changelog. + [RA] Enable no-upstream-changelog as a pedantic check, since it's often incorrect for multiple binary packages generated from the same source. Patch from Raphael Geissert. (Closes: #470912) * checks/control-file{,.desc}: + [ADB] Fix a typo ("arne't"). Thanks, Raphael Geissert. + [RA] Check for hard-coded package dependencies on libc. Patch from Evgeni Golov. (Closes: #512196) + [RA] Check package-depends-on-itself for Suggests as well. * checks/debhelper{,.desc}: + [ADB] Remove no longer required "Type" fields from a couple of entries. Thanks, Raphael Geissert. + [ADB] Fix a couple of typos. Thanks, Raphael Geissert. + [RA] Allow ${misc:Depends} in Pre-Depends and warn of ${misc:Depends} in Recommends or Suggests. Patch from Raphael Geissert. (Closes: #512478) * checks/fields{,.desc}: + [RA] Add pedantic check for no Homepage control field. Patch from Raphael Geissert. * checks/files: + [RA] Add swfobject.js to embedded-javascript-library. Thanks, Paul Wise. (Closes: #512363) * checks/nmu{,.desc}: + [RA] Use Lintian::Collect to read the changelog. + [RA] Only treat the mention of NMU as a maintainer acknowledgement if the "ack" string appears before the mention of NMU. Avoids changelog-should-mention-nmu false positives for "NMU with ACK from maintainer." Thanks, Evgeni Golov. (Closes: #512738) * checks/patch-systems{,.desc}: + [RA] Add pedantic check for changes to the upstream source in the diff without using a patch system. Thanks, Raphael Geissert. * checks/standards-version{,.desc}: + [ADB] Add source-control-file to the list of information needed by the script. Thanks, Raphael Geissert. (Closes: #512563) + [RA] Use Lintian::Data to get the standards versions and release dates. Dates are now in seconds since epoch, so remove the date conversion code. * checks/version-substvars.desc: + [RA] Mention when the binary:Version and source:Version substvars were introduced. Thanks, Steffen Moeller. * collection/*.desc: + [RA] Replace `' "balanced" quotes with straight double-quotes. The old style looks strange with modern fonts. Based on work by Raphael Geissert. * data/standards-version/release-dates: + [RA] Known standards versions and their release dates in seconds since epoch, taken from checks/standards-version. * frontend/lintian: + [RA] Add --pedantic option to display pedantic tags. Patch from Raphael Geissert. (Closes: #373767) * lib/Checker.pm: + [ADB] Remove some unused code. * lib/Lintian/Collect/Binary.pm: + [RA] Add a changelog() method to return the parsed changelog. * lib/Lintian/Collect/Source.pm: + [ADB] Add a missing "use Util" as the module uses the fail() function from that module. Thanks, Raphael Geissert. (Closes: #512560) * lib/Text_utils.pm: + [ADB] Add a missing "use Util" as the module uses the fail() function from that module. Thanks, Raphael Geissert. * lib/Tags.pm: + [RA] Add support for pedantic tags. Patch from Raphael Geissert. * man/lintian.1: + [RA] Document the new --pedantic option. * reporting/html_reports: + [RA] Add support for a new tag index sorted by severity and certainty. (Closes: #511496) * reporting/templates/index.tmpl: + [RA] Link to the new tag index. * reporting/templates/tags-severity.tmpl: + [RA] Template for a tag index sorted by severity and certainty. * t/runtests: + [RA] Add support for specifying the Lintian options to use when checking a test package. Patch from Raphael Geissert. (Closes: #512678) + [RA] Expect the desc files for tests to be in the test directory rather than at the top level and move the sequence number to an attribute in the test description rather than in the desc file name. lintian (2.1.6) unstable; urgency=low * Summary of tag changes: + Added - diff-contains-cmake-cache-file - diff-contains-hg-tags-file - duplicate-uploader - empty-debian-diff - malformed-changes-file - missing-comma-after-substvar - source-contains-hg-tags-file * checks/control-file{,.desc}: + [RA] Check for missing commas after substvars in dependency fields. Thanks, Jari Aalto. (Closes: #409099) * checks/cruft{,.desc}: + [RA] Error on CMakeCache.txt files added or modified in the diff. Thanks, Joerg Jaspert. (Closes: #510957) + [RA] Warn about .hgtags files in the diff and source. Thanks, Holger Levsen and Chris Lamb. (Closes: #464837) + [RA] Warn if the Debian diff or a non-native package is entirely empty. (Closes: #498668) * checks/debhelper: + [RA] Ignore architecture when checking whether sufficient build dependencies are present for dh_* commands. If the maintainer has architecture-restricted build dependencies, they presumably know what they're doing. (Closes: #511859) * checks/fields{,.desc}: + [ADB] Warn about an individual uploader appearing multiple times in Uploaders. Thanks, Joerg Jaspert. (Closes: #511536) + [RA] Ignore architecture qualifications when checking for missing build dependencies. * checks/lintian.desc: + [RA] Add tag description for malformed-changes-file. * checks/menus: + [RA] Recognize type as a way of checking for binaries, even though it's a bashism, so that we don't issue confusing duplicate tags for one same problem. (Closes: #512119) * checks/nmu{,.desc}: + [RA] Suppress NMU warnings for packages with "local" in the version number or "local package" in the first line of the changelog. Thanks, Zack Weinberg. (Closes: #501523) * checks/scripts{,.desc}: + [RA] Mention type as a bashism and recommend which or command -v. + [RA] Recognize type as a way of checking for binaries, even though it's a bashism, so that we don't issue confusing duplicate tags for one same problem. * checks/standards-version.desc: + [RA] Add a pointer to the debian-policy upgrading-checklist.txt.gz in out-of-date-standards-version and ancient-standards-version. * frontend/lintian: + [RA] Check that .changes files have at least a Format key. If not, issue malformed-changes-file and skip them. This catches .changes files that were PGP-signed twice. (Closes: #315538) * lib/Dep.pm: + [RA] New function, parse_noarch(), which ignores architecture qualifications when parsing a dependency field. * t/runtests: + [RA] Add pre_upstream hook to modify the upstream source before generation of the .orig.tar.gz. lintian (2.1.5) unstable; urgency=low * Summary of tag changes: + Added - changed-by-address-is-on-localhost - changed-by-address-looks-weird - changed-by-address-malformed - changed-by-address-missing - changed-by-name-missing - duplicate-long-description - duplicate-short-description - malformed-deb-archive * checks/control-file{,.desc}: + [RA] Tag (severity: wishlist) duplicate short or long descriptions in packages built from the same source. (Closes: #30020) + [RA] Clarify the binary-control-field-duplicates-source tag. (Closes: #511213) * checks/deb-format{,.desc}: + [RA] New check for the format of *.deb ar archives. Most cases will fail during unpack, but dpkg-deb is more forgiving than dak and allows ordering problems and extra members that dak rejects. (Closes: #292055) * checks/fields: + [RA] Use check_maintainer from Lintian::Check, which suppresses duplicate tags for some ill-formed maintainer fields. * checks/lintian.desc: + [RA] New tag descriptions for Changed-By field tests. * checks/rules: + [RA] Consider a define command to be the end of a list of target commands, avoiding binary-arch-rules-but-pkg-is-arch-indep false positives when an empty rule is followed by a definition. (Closes: #510869) * frontend/lintian: + [RA] Run maintainer well-formedness checks on the Changed-By field of the *.changes file. (Closes: #183642) * lib/Lintian/Check.pm: + [RA] New module for checks run from multiple places. * lib/Lintian/{Output.pm,Output/*.pm}: + [RA] Expect a single string of extra information rather than an array, removing duplicate code to convert it to a string. * lib/Lintian/Schedule.pm: + [RA] Fix Perl warnings triggered by missing fields in the control file of a binary package. * lib/Tags.pm: + [RA] Avoid Perl warnings if Severity or Certainty isn't set for a tag. (Closes: #507278) + [RA] Record statistics for certainty correctly. + [RA] Canonicalize the extra tag information once and pass it as a string to the other output methods. Based on a patch by Raphael Geissert. (Closes: #498883) + [RA] Fix override checking with extra tag information that Perl evaluates to false (such as a bare 0). * man/lintian.1: + [RA] Document new deb-format check script. * t/runtests: + [RA] Add support for running lintian on changes files in t/changes and checking the tag output. + [RA] Add support for building a Debian package using basic tools, with more complete control over the contents, and running lintian on the results. + [RA] Fix exit status when a test fails but -k was given. lintian (2.1.4) unstable; urgency=low * Summary of tag changes: + Added - binary-control-field-duplicates-source - brace-expansion-in-debhelper-config-file - control-interpreter-in-usr-local (split from interpreter-in-usr-local) - control-interpreter-without-depends - copyright-refers-to-bad-php-license - copyright-refers-to-problematic-php-license - copyright-with-old-dh-make-debian-copyright - dh-clean-k-is-deprecated - desktop-mimetype-without-update-call - forbidden-postrm-interpreter - games-package-should-be-section-games - preinst-interpreter-without-predepends - script-calls-init-script-directly - unknown-control-interpreter (split from unusual-interpreter) - version-refers-to-distribution + Removed - desktop-file-but-no-dh_desktop-call - interpreter-without-predep * checks/changelog-file{,.desc}: + [RA] Warn of Debian version numbers containing "testing", "stable", or "unstable", or with release code names for uploads not targeted at that release, except in NMUs. Based on a patch by Raphael Geissert. (Closes: #498876) * checks/control-file{,.desc}: + [RA] Warn (severity: wishlist) of binary control stanzas duplicating fields of the source control stanza. (Closes: #497348) * checks/copyright-file{,.desc}: + [RA] Warn (severity: wishlist) about the old dh_make packaging copyright, which used (C) without the word or symbol. Based on a patch by Raphael Geissert. (Closes: #497347) + [RA] Clean up checks of a symlinked /usr/share/doc directory and avoid making package info global. + [RA] Warn about older PHP licenses. Based on a patch by Raphael Geissert. (Closes: #498875) * checks/cruft: + [RA] Keep the hash of files for which warnings were already issued local to each package, reducing memory consumption and false negatives for archive-wide runs. * checks/debhelper{,.desc}: + [RA] Check for use of shell brace expansion in debhelper config files that list filenames, which is not supported. Based on a patch from Raphael Geissert. (Closes: #480939) + [RA] If dh is used, require debhelper tokens in maintainer scripts. + [ADB] Warn about packages declaring a debhelper compatibility level of 7 or above and using dh_clean -k, which has been deprecated in favour of dh_prep. + [RA] Add dh_auto_* and dh_prep to the debhelper scripts that require a particular version of debhelper. + [RA] De-duplicate the list of scripts with specific version requirements before issuing tags. + [RA] Upgrade package-lacks-versioned-build-depends-on-debhelper to certain (although still minor), making it a warning. debhelper(7) explicitly recommends a versioned build dependency on debhelper. Rewrite the tag description accordingly. * checks/fields: + [RA] dh-make-php provides a CDBS rule fragment and hence should go into Build-Depends, not Build-Depends-Indep. Thanks, Mathieu Parent. (Closes: #509286) * checks/files{,.desc}: + [RA] Packages whose executables are all in /usr/games should probably be in section games. (Closes: #509147) * checks/menu-format{,.desc}: + [RA] If a *.desktop file contains a MimeType key, check that the postinst calls update-desktop-database. (Closes: #488832) + [RA] Stop keeping a separate hash of all files in the package and use Lintian::Collect information. The hash was being reused across packages, possibly leading to excessive memory consumption and false negatives for archive-wide runs. * checks/menus: + [RA] Keep the hash of files and symlinks local to each package, reducing memory consumption and false negatives for archive-wide runs. * checks/patch-systems.desc: + [RA] Improve the patch-system-but-direct-changes-in-diff long description. (Closes: #496516) * checks/rules{,.desc}: + [RA] Remove desktop-file-but-no-dh_desktop-call. The only action of dh_desktop is now checked by desktop-mimetype-without-update-call; dh_desktop is unnecessary with other *.desktop files. * checks/scripts{,.desc}: + [RA] Overhaul checking of maintainer script and config interpreters: - postrm scripts must use an essential interpreter. - Only preinst scripts require Pre-Depends; Depends is sufficient for postinst and prerm scripts. (Closes: #508307) - Separate unknown-control-interpreter from unusual-interpreter since it's much more likely to be an error. - Separate control-interpreter-in-usr-local from interpreter-in-usr-local since the severity is higher. - unusual-control-interpreter is certain, not possible. - Suppress some cases of multiple tags about the same basic problem. + [RA] Check for scripts in /etc that call init scripts directly without using invoke-rc.d. Based on a patch by Raphael Geissert. (Closes: #381485) + [RA] Allow dpkg-dev to satisfy a make dependency. (Closes: #510190) + [ADB] More intelligently remove comments from shell scripts, to avoid removing some constructs that aren't comments, such as those in [ $# -gt 2 ] and "foo # bar". + [ADB] Flag the source bashism when its argument is quoted or a bare filename. * checks/watch-file: + [RA] Recognize additional SourceForge URLs and recommend the redirector. Thanks, Riccardo Stagni. (Closes: #510398) * collection/copyright-file: + [RA] Copy copyright files that are relative links, provided that the link is safe, and otherwise treat symlinked copyright files as if they were empty. Fixes a Lintian crash on packages where the copyright file is a relative symlink. * debian/copyright: + [RA] Add an explicit key to initials used in changelog entries. * debian/rules: + [RA] New check-tag target which runs all test cases in the new test suite that check for or against a particular tag. * data/debhelper/filename-config-files: + [RA] New file listing debhelper config files containing filenames. * frontend/lintian: + [RA] When processing the entire archive, do so in sorted order. * private/update-never-seen: + [RA] Merge data from both test suites and use the tag files for the old test suite rather than relying on runtests -v. * reporting/html_reports: + [RA] We only care about the first line of the archive timestamp. * t/runtests: + [RA] Check that a test produces all tags listed in Test-For and doesn't produce any tags listed in Test-Against. + [RA] Support finding and running all tests for or against a particular tag. + [RA] Correctly set up non-native packages for dpkg-source. * t/tests/README: + [RA] Add documentation of the new test suite. lintian (2.1.3) unstable; urgency=low * Summary of tag changes: + Added - debian-watch-file-should-use-sf-redirector - debian-watch-file-specifies-wrong-upstream-version - debian-watch-file-specifies-old-upstream-version - extended-description-is-probably-too-short - shlib-without-versioned-soname * checks/description{,.desc}: + [RA] Check for extended descriptions shorter than three lines; they probably don't contain enough information. Patch from Raphael Geissert. * checks/files{,.desc}: + [RA] Exclude __init__.py files and Doxygen-generated *.map files from zero-byte-file-in-doc-directory. Improve the tag description to add a rationale and a suggestion for when overrides are appropriate. Lower the certainty to possible. (Closes: #507273) + [RA] Move the check for override files in the wrong location so that the check for subdirectories of /usr/share/lintian/overrides works and improve the tag description. * checks/nmu: + [RA] Recognize Ubuntu native packages by the target distribution and suppress NMU tags for them. Based on a patch by Adrien Cunin. (Closes: #507740) * checks/shared-libs{,.desc}: + [RA] Remove special shlibs exception for NSS modules. libc6 now includes shlibs entries for them. + [RA] Report a more specialized tag for shared libraries with SONAMEs that have no version and exclude them from the shlibs file tests since they cannot be represented there. Reported by Raphael Hertzog. (Closes: #506673) + [RA] Use the same regexes as dpkg-shlibdeps when parsing version information from SONAMEs. * checks/version-substvars: + [RA] Skip version substvar checks when the dependency is on a package whose name is formed by expanding substvars at build time. Thanks, Bastian Blank. (Closes: #507763) * checks/watch-file{,.desc}: + [RA] Merge a set of changes by Raphael Geissert: - Correctly parse multiple line continuations. - Don't attempt any detailed checks on version one watch files. - Recognize versionmangle in addition to [du]versionmangle. - Add line information to some of the tags. - Detect watch files that specify SourceForge download servers directly and suggest use of the QA sf.net redirector instead. - Detect watch files specifying an upstream version that matches a non-native Debian package version in debian/changelog. - Detect watch files specifying an upstream version for an older changelog entry when the current changelog entry has a newer upstream version. * data/changelog-file/ubuntu-dists: + [RA] New shared list of Ubuntu distributions. * frontend/lintian: + [RA] Recognize Ubuntu native packages by the target distribution and check them against the correct set of distributions. Based on a patch by Adrien Cunin. (Closes: #507740) * lib/Lab.pm: + [ADB] Ensure that the output of unpack/list-*pkg is correctly captured so that the reporting harness can use the information to decide which packages to process in an incremental run. * lib/Lintian/Data.pm: + [RA] New all() method that returns all valid keywords. * lib/Read_pkglists.pm: + [JP] Add a new "source version" field to binary and udeb info files. Bump binary and udeb format version to 3 and 2 respectively. * reporting/html_reports: + [JP] Group packages by source version instead of binary version. (Closes: #507849) * reporting/templates/maintainer.tmpl: + [ADB] Print tags affecting udeb packages under a heading for that package, rather than merging them in to whichever binary package was last displayed (or the source package if the udeb is first alphabetically). + [ADB] Separate tags affecting a binary package from those of a source package with the same name when the binary is the first package produced from the source for which there are issues. + [JP] Include binary package version in subtitles when it isn't the same as the source version. * t/runtests: + [RA] Parameterize the package section in the skeleton. * unpack/list-{bin,udeb}pkg: + [JP] Extract source package version from source field. lintian (2.1.2) unstable; urgency=low * frontend/lintian: + [ADB] Accept "html" as a valid argument for --color again. * lib/Lintian/Output.pm: + [ADB] Re-introduce support for HTML coloured output. (Closes: #508341) * man/lintian.1: + [ADB] Document that "--color=html" is supported again. lintian (2.1.1) unstable; urgency=low * Summary of tag changes: + Added - latest-debian-changelog-entry-changed-to-native * checks/changelog{,.desc}: + [ADB] Warn when the version of a package changes to Debian native. Based on a patch by Michal Čihař. (Closes: #504070) * checks/fields.desc: + [RA] Improve the recommendation for dependencies in debug packages to include the case of a debug package corresponding to multiple other packages. * checks/files: + [ADB] Add tests for several more embedded PHP libraries. Patch by Raphael Geissert. * checks/patch-systems{,.desc}: + [ADB] Don't complain about a missing quilt build-dependency if the package contains a directory named debian/patches/series. (Closes: #507761) + [ADB] Lower the severity of {quilt-,d}patch-missing-description from minor to wishlist. * checks/scripts: + [ADB] Enhance the test for command-with-path-in-maintainer-script to better match executions of the command rather than the use of its name in pattern matching expressions. (Closes: #499847) * collection/{fileinfo,md5sums}: + [ADB] Use blocking filehandles to pass the list of filenames to check to the spawned file / md5sum. By default the handles were non-blocking which could lead to problems with larger file lists. (Closes: #507461) * debian/{control,copyright}: + [ADB] Add Adam D. Barratt to Uploaders and copyright. * frontend/lintian: + [ADB] Don't call lintian-info when --info is specified. Set a new flag on the Lintian::Output module instead. * frontend/lintian-info: + [ADB] Add missing "use Text_Utils". It used to be indirectly pulled in via Read_taginfo. * lib/Lintian/Output{.pm,/*.pm}: + [ADB] Flag a tag as issued when printing it. * lib/Lintian/Output.pm: + [ADB] Make sure the default list of colours is initialised before attempting to use it. Thanks, gregor herrmann. (Closes: #507241) + [ADB] Maintain a list of tags which have been issued. + [ADB] Optionally include the description of a tag when displaying it. * lib/Lintian/Output/ColonSeparated.pm: + [ADB] Fix uninitialized value warnings by displaying the type code rather than the (no longer present in description files) Type field and handling non-overridden tags. * lib/Lintian/Output/LetterQualifier.pm: + [ADB] Optionally include the description of a tag when displaying it. * lib/Lintian/Output/XML.pm: + [ADB] Add a missing angle bracket to the closing "tag" tag, so that the XML is well-formed. * lib/Lab.pm: + [FL] Fix breakage of populate_with_dist() I introduced in 2.1.0. * lib/Read_taginfo.pm: + [ADB] Move the work of formatting a tag's description to a separate function so that it can be called from multiple locations. + [ADB] Properly export those functions which are called from other modules. * lib/Spelling.pm: + [RA] Don't add unnecessary backslashes in the list of spelling corrections. They're copied into the output. Thanks, Micah Anderson. (Closes: #507331) * lib/Tags.pm: + [ADB] Don't output a "Processing binary package foo.changes" message. Thanks Sandro Tosi for pointing the issue out. * lib/Text_utils.pm: + [ADB] Properly export those functions which are called from other modules. * reporting/html_reports: + [ADB] Add missing "use Text_Utils". It used to be indirectly pulled in via Read_taginfo. lintian (2.1.0) unstable; urgency=low * Summary of tag changes: + Added - debhelper-but-no-misc-depends - missing-build-dependency-for-dh_-command - quilt-patch-missing-description - shlib-calls-exit * checks/common_data.pm: + [FL] New variable $known_shells_regex which matches known shell names. This removes some synchronisation issues between the different regexes in use. * checks/debconf{,.desc}: + [CW] Update my e-mail address. + [ADB] Don't detect the use of "?" as a literal character or wildcard as part of a question in an extended template description. Based on a patch by Stephen Gran. (Closes: #500661) * checks/debhelper: + [FL] Use Lintian::Data for list of debhelper commands that modify maintainer scripts. Patch by Raphael Geissert. + [FL] Add new tag missing-build-dependency-for-dh_-command for debhelper commands that are not from the debhelper package. Patch by Raphael Geissert. + [FL] Add new tag debhelper-but-no-misc-depends which warns about missing misc:Depends if you use commands that might set it. Patch by Raphael Geissert. (Closes: #499737) * checks/fields: + [ADB] Ignore non-dependency fields when considering whether a versioned dependency is satisfied by the perl core packages. Based on a patch by Niko Tyni. (Closes: #500720) + [RA] Stop checking for a libmodule-build-perl build dependency since Module::Build now comes with Perl. Thanks, Raphael Hertzog. (Closes: #506697) * checks/files: + [ADB] Apply patches from Raphael Geissert to update the list of embedded PHP libraries: - Add detection for the Snoopy and GeSHi libraries and the use of phpmailer.inc (rather than .php). - Enable the libmarkdown-php check, as the package is now in unstable. - Add support for the (not currently packaged and thus disabled) IXR and kses libraries. * checks/infofiles: + [FL] Use $known_shells_regex from common_data. * checks/menus: + [FL] Use $known_shells_regex from common_data. * checks/patch-systems{,.desc}: + [ADB] Don't include dpatch comment lines containing no content when determining whether the patch includes a description. (Closes: #503695) + [ADB] Add missing "diffstat" to the Needs-Info field. + [ADB] Check whether quilt patches include a description. (Closes: #498892) * check/scripts: + [FL] Use $known_shells_regex from common_data. + [FL] Add icmake as a known interpreter as requested by Frank B. Brokken. (Closes: #505868) * checks/shared-libs{,.desc}: + [ADB] Don't issue both symbols-file-contains-debian-revision and symbols-file-contains-current-version-with-debian-revision for any given symbol, as the latter implies the former and may thus create noise in the tests' output. (Closes: #505826) + [ADB] Add an experimental tag flagging shared libraries that call _exit() or exit() without at some point calling fork() (a somewhat inaccurate heuristic, but one which should weed out a number of false positives). (Closes: #504257) * collection/objdump-info: + [ADB] Only use readelf to emulate objdump if objdump returned "file format not recognized". In cases where the objdump output was "invalid operation", the output of etch's readelf is not particularly useful and it's easier to simply let the checks scripts handle the objdump output. * debian/control: + [FL] Add dependency on libipc-run-perl for Lintian::Command. * doc/lintian.sgml: + [ADB] Correct a few typos in the "overrides" section. * frontend/lintian: + [FL] Convert to use Lintian::Output. + [CW] Add jaunty as an allowable distribution for Ubuntu, and remove the EOLed edgy and feisty. + [ADB] Don't complain about unused overrides if the check script for the overridden tag hasn't been run (or --tags was used and the overridden tag not specified). (Closes: #501722) * lib/Lintian/Output: + [FL] New module to bundle output methods. * lib/Tags/{ColonSeparated,LetterQualifier}.pm: + [FL] Move to lib/Lintian/Output and convert to subclasses of Lintian::Output. * lib/Lintian/Output/XML.pm: + [FL] New experimental output format. * lib/Lintian/Command: + [FL] New utility module as a replacement for Pipeline. Provides a convenient wrapper around IPC::Run. * lib/Lab.pm: + [FL] Convert to use Lintian::Output. * lib/Tags.pm: + [FL] Convert to use Lintian::Output. * lib/Pipeline.pm: + [FL] Remove, replaced by Lintian::Command. * lib/Spelling.pm: + [RA] Add subversion to Subversion correction for package descriptions. Thanks, Sandro Tosi. (Closes: #506793) + [ADB] Don't check text contained within square brackets for capitalisation mistakes. This allows for lists such as "[ cvs | subversion ]" to be included. * lib/Util.pm: + [FL] Convert to use Lintian::Output. + [FL] Add some new utility functions: delete_dir copy_dir gunzip_file touch_file. * private/refresh-debhelper-data: + [FL] New script to update debhelper related data by Raphael Geissert. - data/debhelper/miscDepends_commands: debhelper commands that set misc:Depends - data/debhelper/maint_commands: debhelper commands that edit maintainer scripts - data/debhelper/dh_packages: packages that contain debhelper commands - data/debhelper/dh_commands: mapping of debhelper commands to packages they are contained in * testset/{diffs,filenames}: + [ADB] Generate the files "files/'\ " and "filenames.c~" at build time instead of including it in the source package, to allow lintian to be imported in to Bazaar. lintian (2.0.0) unstable; urgency=low The "and this is only the beginning" release. * checks/fields: + [RA] Allow tildes in the optional version number in the Source field. Thanks, Rene Engelhard. (Closes: #500063) * checks/scripts: + [ADB] Detect brace expansions with either a leading or trailing blank component (e.g. "{foo,}"). Thanks to Jonny Lamb for pointing this out. * frontend/lintian: + [FL] Fix config file parsing which I completely broke in ~rc1. * lib/Lintian/Schedule.pm: + [FL] Fix parsing of source package entries in package lists. * man/lintian.1: + [FL] Remove a stray backslash. * reporting/harness: + [FL] Include STDERR output in lintian.log. lintian (2.0.0~rc2) experimental; urgency=low * Summary of tag changes: + Added: - package-superseded-by-perl * checks/copyright-file: + [FL] Also detect v1.1 of CeCILL license, not only v2.0. (Closes: #498994) * checks/debhelper: + [FL] Use new Lintian::Collect::Source->binaries method. * checks/fields{,.desc}: + [FL] Warn about Perl module packages superseded by Perl core. Patch by Niko Tyni. (Closes: #498897) * checks/rules: + [FL] Do not issue desktop-file-but-no-dh_desktop-call if the package uses dh. (Closes: #497247) * checks/scripts: + [FL] Accept the ocaml virtual packages as providing ocamlrun. Based on a patch by Stephane Glondu. (Closes: #495431) * checks/standards-version: + [FL] Use new Lintian::Collect::Source->binaries method to fix udeb detection. Thanks to Raphael Geissert. (Closes: #498096) * frontend/lintian: + [FL] Add support for ranges to --display-level. * lib/Lintian/Collect/Source.pm: + [FL] New binaries method that returns a hash with binary package names and types. lintian (2.0.0~rc1) experimental; urgency=low * [FL] Merge the results of the GSoC project by Jordà Polo, which fully implements a tag classification system in two dimensions (Severity and Certainty). The default output is unchanged, see the documentation on how to utilize the new features. * Summary of tag changes: + Added: - description-contains-dh-make-perl-template - doc-base-uses-applications-section (actually a split of doc-base-unknown-section in two tags) - embedded-pear-module - embedded-php-library - improbable-bug-number-in-closes - maintainer-also-in-uploaders - maintainer-script-ignores-errors - manpage-has-errors-from-pod2man - ored-build-depends-on-obsolete-package (actually a split of build-depends-on-obsolete-package in two tags) - versioned-dependency-satisfied-by-perl - windows-devel-file-in-package + Removed: - package-needs-python-policy-debhelper * checks/*.desc: + [ADB] Fix a number of spelling mistakes and typos. * checks/changelog-file{,.desc}: + [RA] Warn about closing a bug number less than 100; this is likely a typo or placeholder. Thanks, Raphael Geissert. (Closes: #497350) * checks/debconf: + [ADB] Avoid flagging a template as unused if its definition is followed by a string of whitespace. * checks/debhelper{,.desc}: + [FL] Do not require versioned build-depends for compat level 5 anymore. Sarge is not supported anymore. (Closes: #496826) + [FL] Drop package-needs-python-policy-debhelper. Sarge is not supported anymore. * checks/description{,.desc}: + [FL] Warn about left-over dh-make-perl statement. * checks/fields{,.desc}: + [RA] Check for a maintainer also listed in uploaders. Patch from Raphael Geissert. + [ADB] Don't issue an error tag for obsolete packages in Build-Depends fields if the package is part of an "ORed group" of packages and is not listed first. As with Depends, an info tag will still be issued for such packages. (Closes: #496875) + [FL] Check Enhances together with the other relational fields. + [FL] Add ant to @rule_clean_depends. (Closes: #498135) + [FL] Due to a logical error "source-field-malformed" was never actually checked. Patch by Raphael Geissert. (Closes: #498197) + [FL] Check for unnecessary versioned dependencies on Perl core modules. Patch by Niko Tyni. (Closes: #497887) * checks/files{,.desc}: + [RA,FL] Patches from Raphael Geissert: - Check for embedding copies of jsjac and jsMath. - Check for embedded copies of tinymce/2 and allow the usage of regexes on pkgs names. - Add xinha on the embedded js lib check, which is not yet in the archive thus disabled. - Add experimental check for embedded copies of PEAR PHP modules. + [ADB] Rework the description for embedded-javascript-library to make it clear that the listed libraries are examples rather than an exclusive list. Also fix a spelling mistake. + [ADB] Re-add an accidentally removed slash to the check for embedded Javascript libraries, removing some false positives. (Closes: #497215) + [FL] Check for Windows Development files in packages. Based on a patch by Raphael Geissert. * checks/manpages{,.desc}: + [FL] Warn about the POD ERRORS sections pod2man generates. (Closes: #497864) * checks/menus{,.desc}: + [FL] Do not complain if the unknown doc-base section is the subsection of a known section. The doc-base documentation seems to suggest that this is o.k. (Closes: #495836) + [FL] Issue a special tag if the doc-base section would be valid except for a prefixed App(lication)s. * checks/scripts: + [FL] Change all regular expressions in depends_needed to require spaces after the command and not \b. There are very few cases where this would produce false negatives but there are reported false positives for the current expressions. + [RA] Improve the check for possibly insecure /tmp files to check variable assignment as well and reduce false positives by ignoring uses with $RANDOM or without a filename. Based on a patch from Raphael Geissert. + [FL] Update lists of available interpreter versions (remove: jruby1.1, pike7.7, php4, octave2.9, add: tcl8.6, tk8.6). (Closes: #485954) + [FL] Add . and + to regex for command-with-path-in-maintainer-script. Based on a patch from Raphael Geissert. + [FL] Check for missing set -e in maintainer scripts. Patch by Raphael Geissert. + [FL] Add mksh as a valid interpreter. (Closes: #498075) + [FL] Handle continued lines in maintainer shell scripts correctly. Based on a patch by Rafael Laboissiere. (Closes: #495176) * collection/objdump-info: + [ADB] Correctly handle shared objects with no symbol versioning when using readelf. + [ADB] Update the readelf version table parsing code to handle hidden symbols. * data/fields/perl-provides: + [FL] Data about Perl modules that are available both in Perl and as separate packages. * private/refresh-perl-provides: + [FL] Script to update data/fields/perl-provides. By Niko Tyni. * doc/lintian.sgml: + [FL] Document wildcard support in overrides. * frontend/lintian: + [RA] Ensure we close the pipe to lintian-info before exiting, since otherwise lintian-info may print the rest of our output after lintian exits, producing confusing output interleaved with the shell prompt. (Closes: #496295) + [FL] Actually make package version available to output formatters. Currently used only by experimental colon-separated output. + [FL] Use new module Lintian::Schedule and make package architecture available to output formatters if possible. Currently used only by experimental colon-separated output. * lib/Tags.pm: + [FL] Add support for specifying wildcards in overrides. (Closes: #253884) * lib/Tags/ColonSeparated.pm: + [FL] Update for new features and make a little bit easier to read for humans: - Update the format to include the new severity/certainty info. - Include information whether the tag is experimental. - Move the detailed override info to the end but include info flag about the override status in the same column that also includes the experimental flag info. * lib/Lintian/Schedule.pm: + [FL] Factor out some scheduling code. * lib/Lintian/Data.pm: + [FL] Extend Lintian::Data to handle key/value pairs. Patch by Niko Tyni. * man/lintian.1: + [FL] Document udeb support in description for --packages-file. * reporting/templates/maintainer.tmpl: + [ADB] Don't list packages in the summary at the top of the main report page if all of the issues reported for the package were "info" or "experimental". (Closes: #498617) * t/runtests: + [FL] Copy the changes to testset/runtests from JP's branch. + [FL] Remove global tests that were duplicated from testset/runtests, which will not go away in the foreseeable future. + [FL] Print a warning if no tests were run. Based on a patch by Raphael Geissert. + [RA] Fix single test mode. * testset/runtests: + [FL] Print a warning if no tests were run. Based on a patch by Raphael Geissert. lintian (1.24.4) unstable; urgency=low The "[JP] is Jordà Polo" release. * checks/*.desc: + [JP] Update, fix and unify various manual references. * checks/copyright-file: + [ADB] Don't flag copyright files using phrases such as "previously distributed under the GNU GPL" as lacking a reference to the license. Thanks Raphael Geissert. * checks/cruft{,.desc}: + [FL] Add new check for outdated libtool files. (Closes: #293296) + [FL] Don't exclude all of lintian, but only files in the test suites. * checks/files{,.desc}: + [ADB] Don't warn about embedded Javascript libraries in the package that actually provides the library. Thanks Raphael Geissert for pointing out the problem. (Closes: #494577) + [ADB] Enhance the description of package-contains-empty-directory to mention how to remove such directories when building the package. Thanks Chris Lamb. (Closes: #495153) + [ADB] Add libjs-yui (the Yahoo User Interface Library) to the list of packages which contain Javascript libraries and should be depended upon rather than embedded in other packages. Patch from Chris Lamb. (Closes: #495155) * checks/manpages: + [RA] Also ignore "cannot adjust line" errors from man for lines that contain URLs. Thanks, Stéphane Glondu. (Closes: #491578) * checks/scripts: + [ADB] Split the "read without variable or with invalid options" bashism test in two, thus enabling the checks to be more accurate and avoiding an uninitialized variable warning. (Closes: #494450) + [RA] Add dash to the recognized characters in a command in command-with-path-in-maintainer-script to avoid truncation. Thanks, Thijs Kinkhorst. (Closes: #494723) + [RA] Add jruby1.1, thanks Sebastien Delafond. (Closes: #494919) * checks/shared-libs{,.desc}: + [RA] Clarify that shlibs-declares-dependency-on-other-package can be issued for a version mismatch. (Closes: #494400) + [ADB] Correctly match alternative dependency templates in symbols files which specify an unversioned dependency. * checks/standards-version: + [FL] Avoid Perl warning if only the timestamp could not be parsed. * collection/objdump-info: + [ADB] Correctly parse a readelf symbol version block containing the definition of a single symbol. * debian/rules: + [FL] Use $(PERL) instead of a hardcoded path. + [FL] Clean-up the binary-indep code. + [FL] Add build stamp file. * doc/README{,.in}: + [FL] Move README to README.in and add the listing of lintian options on build time from lintian --help. * frontend/lintian: + [FL] Do not try to use fail() before the lintian libraries are loaded. + [JP] Allow tags from the "lintian" checkset to be specified with --tags. * lib/manual_refs: + [JP] Regenerate with new manual_refs_update.pl script. (Closes: #493660) * lib/Read_taginfo.pm, lib/Manual_refs.pm: + [JP] Add support for new manuals, allow specifying manual sections by id and not only by section number. + [JP] Link manpages to manpages.debian.net. * private/manual_refs_update.pl: + [JP] Add support for many more manuals (FHS, debconf-spec, {menu,python,perl}-policy, libpkg-guide). lintian (1.24.3) unstable; urgency=low The "greetings from Argentina" release. * checks/binaries: + [ADB] Use Lintian::Collect throughout rather than reparsing file-info and objdump-info. * checks/changelog-file{,.desc}: + [ADB] Use Lintian::Collect instead of reading the fields/*, file-info and objdump-info files. + [ADB] Remove a misplaced word from the description of the tag "debian-changelog-file-contains-invalid-email-address". * checks/copyright-file{,.desc}: + [ADB] Drop the "copyright line too long" check. Most of the issues it flags aren't easily fixable, particularly where the copyright file is (semi)automatically generated. (Closes: #491302, #491365, #491685) + [ADB] Use Lintian::Collect for accessing control fields and reading the list of files in the package. + [ADB] Don't flag use of version 1 of the GPL, or licenses using phrases such as "compatible with the GPL" (for example, the W3C Software License) as missing a reference to common-licenses + [ADB] Replace references to the GPL in GFDL and LGPL related tags with the appropriate license. Also remove a misplaced word. * checks/cruft: + [ADB] Use Lintian::Collect for accessing control fields * checks/debconf: + [ADB] Don't complain about unused debconf templates in udebs. (Closes: #491135) + [RA] Try to recognize at least some debconf template uses in Perl. + [ADB] Replace fields/* and scripts access with Lintian::Collect + [ADB] Don't flag the shared templates used for dictionaries-common co-ordination as unused. + [FL] Remove debconf-error-requires-versioned-depends since post-lenny a tag for the sake of sarge-backports clearly makes no sense anymore. (Closes: #493920) * checks/description: + [RA] Don't warn about a synopsis that ends in "etc." Patch from Chris Lamb. (Closes: #491252) + [ADB] Use Lintian::Collect to read the package's description. * checks/etcfiles: + [ADB] Walk Lintian::Collect->index instead of reading the "index" file. * checks/fields{,.desc}: + [RA] Warn about packages that depend exclusively on makedev. Thanks, Josh Triplett. (Closes: #491625) + [ADB] Use Lintian::Collect::field() to determine the content of fields from control files rather than reading the fields/* files. This and similar changes to other scripts should improve performance as the Collect object caches the lookup result. + [ADB] Reformat a couple of tags' descriptions. * checks/files{,.desc}: + [ADB] Switch to using Lintian::Collect. + [ADB] Fix a couple of bugs in the parsing of the list of scripts contained within a package which led to scripts in /usr/share/doc being incorrectly tagged as executable-in-usr-share-doc. + [ADB] Update a couple of Policy references. Thanks Jordà Polo. + [ADB] Warn when a package embeds a copy of the Universal Feed Parser. Patch from Chris Lamb. (Closes: #493156) + [FL, ADB] Don't issue tag file-in-unusual-dir for files where we already issued one of the specific dir-or-file-in-* tags. (Closes: #493921) + [ADB] Add a missing "have" to package-contains-ancient-file's description. * checks/huge-usr-share: + [ADB] Replace (the single) direct access to fields/* with ::field() + [ADB] Replace an outdated link to the Developer's Reference. Thanks Jordà Polo. * checks/infofiles{,.desc}: + [ADB] Use Lintian::Collect to retrieve information about the files being processed. + [ADB] Update the tag "install-info-not-called-with-quiet-option"'s Policy reference. Thanks Jordà Polo. * checks/init.d.desc: + [ADB] Update a Policy reference. Thanks Jordà Polo. * checks/lintian.desc: + [ADB] Add a Policy reference to bad-section-in-changes-file. Thanks Jordà Polo. * checks/manpages{,.desc}: + [RA] Suppress warnings about inability to break a line that contains a URL. URLs often can't be usefully broken. Based on a patch by Damyan Ivanov. (Closes: #491578) + [ADB] Update the Policy reference for manpage-has-wrong-extension. + [ADB] Use Lintian::Collect rather than parsing the "index" and "file-info" files. + [FL] In description for manpage-has-errors-from-man note how to reproduce this errors outside of lintian. (Closes: #492930) * checks/menu-format{,.desc}: + [ADB] Use Lintian::Collect to parse the list of files in the package. + [ADB] Don't raise menu-command-not-in-package for 'sensible-browser' or 'sh'. Thanks Raphael Geissert. + [RA] Warn about .kdelnk files and [KDE Desktop Entry] headings in desktop files. Patch from Raphael Geissert. * checks/menus{,.desc}: + [ADB] Fix a typo; thanks Jordà Polo. + [ADB] Use the file list from Lintian::Collect. * checks/nmu{,.desc}: + [ADB] Use Lintian::Collect for maintainer / uploader information + [ADB] Add a DevRef reference to changelog-should-mention-nmu. Thanks Jordà Polo. * checks/patch-systems: + [RA] Combine all patch-system-but-direct-changes-in-diff instances into a single message to reduce the noise from packages that rebuild all auto-generated files outside the patch system. Thanks, Julien Cristau. (Closes: #491296) + [ADB] Migrate fields/* reading to use ::Collect::field(). * checks/po-debconf{,.desc}: + [ADB] Check that at least one complete translation exists. Thanks Jordà Polo. * checks/rules: + [ADB] Use ::Collect for field access. + [FL] Do not complain about using dh in an unused binary-* target. * checks/scripts{,.desc}: + [RA] Warn about maintainer scripts that prepend a path to commands. Based on a patch by Raphael Geissert. (Closes: #376184) + [ADB] Don't read fields/*, scripts, index or file-info directly as the contents have almost certainly been cached in Lintian::Collect already. + [ADB] Update a couple of Policy references. Thanks Jordà Polo. * checks/shared-libs.{,desc}: + [ADB] Improve the description of no-symbols-control-file. + [ADB] Migrate to using ::Collect instead of parsing the index, file-info and objdump-info files directly. + [ADB] Disable ldconfig-symlink-before-shlib-in-deb as it can never be tested correctly using the information currently available to the scripts * checks/watch-file: + [FL] Do not issue debian-watch-file-should-mangle-version for empty watch files. * data/doc-base/sections: + [ADB] Resynchronize with doc-base's section list (adding Programming/OCaml). (Closes: #491440) * debian/postrm: + [FL] Do not try to remove /var/spool/lintian if it doesn't exist (dpkg might already removed it at this point). * doc/desc-files: + [ADB] Update the description of tags to include experimental and info tags. * doc/README: + [ADB] Add -E / --show-experimental, -T / --tags and --tags-from-file to the option list. * frontend/lintian: + [FL, ADB] Add new --tags/-T option to limit the amount of checks run not by check names but by names of tags you're interested in. Requested by Joerg Jaspert for ftpmaster. (Closes: #493903) + [FL] Add --tags-from-file option to make it easier to specify a long list of tags. * lib/Lintian/Collect/Binary.pm: + [ADB] When parsing objdump-info, indicate whether a shared object is an Ocaml executable. Also add information on segments which various checks scripts use which hadn't made it here yet. + [ADB] Make index() return a hash rather than an array + [ADB] Add support for parsing the "scripts" index file * lib/Read_taginfo.pm: + [FL] Handle URLs in the Ref: field. * lib/Tags.pm: + [ADB] If --tags was used, don't issue tags that aren't in the provided list. * man/lintian.1 + [ADB] Update the list of check scripts, removing the no longer present deb-format and perl and adding the nmu script. + [FL] Document the new --tags/-T option. + [FL] Document the new --tags-from-file option. * reporting/templates/index.tmpl: + [RA] Add a link to lintian.log. Suggested by Stefano Zacchiroli. * t/: + [FL] Begin work on a new testsuite. * testset/fields: + [ADB] New testset from Tobias Quathamer (including some tags which previously weren't tested) * testset/tags.scripts{,.sed}: + [ADB] Munge .changes filenames so that the tests produce consistent output across architectures lintian (1.24.2) unstable; urgency=low The "welcome Adam D. Barratt!" release. * checks/binaries.desc: + [ADB] Add some FHS references. Thanks Jordà Polo. * checks/changelog-file{,.desc}: + [ADB] Add missing "use Dep". Thanks gregor herrmann (Closes: #488397) + [RA] Ignore "CNRI OPEN SOURCE GPL-COMPATIBLE LICENSE AGREEMENT" when looking for missing GPL references. Thanks, Scott Kitterman. (Closes: #490264) + [ADB] Fix a typo in the description of syntax-error-in-debian-changelog. Thanks Jordà Polo. * checks/copyright-file{,.desc}: + [ADB] Check for over-long lines in copyright files. (Closes: #479651) * checks/cruft{,.desc}: + [ADB] Check for BTS control directories in source packages and diffs in addition to the existing binary package checks. (Closes: #481787) * checks/debconf{,.desc}: + [ADB] Warn about the use of "_Choices" in templates file and suggest using "__Choices" instead (Closes: #481152) + [ADB] Check all maintainer scripts for issues, rather than just config and postinst. + [ADB] Detect debconf templates which appear to be unused. + [ADB] Replace the {config,postinst}-loads-obsolete-confmodule tags with a new loads-obsolete-confmodule test which is used for all maintainer scripts and outputs the script name as part of its extra data. * checks/description{,.desc}: + [RA] Warn about duplicated words in the description. Patch from Raphael Geissert. (Closes: #424746) * checks/fields{,.desc}: + [FL] Do not complain about obsolete packages if there are non-obsolete alternatives specified and if the obsolete package is not listed first. Issue an info tag for them though. Patch by Adam D. Barratt. (Closes: #486145) + [ADB] Update and add some Policy and DevRef references and fix some typos. Thanks Jordà Polo. + [RA] Recognize and do not warn about Ubuntu security update version numbers for multiple releases. (Closes: #489222) * checks/files{,.desc}: + [ADB] Warn if the package contains embedded copies of separately packaged Javascript libraries. Patch by Chris Lamb. (Closes: #489191) + [ADB] Fix a typo in the description of executable-is-not-world-readable * checks/infofiles{,.desc}: + [ADB] Warn if the package's postinst installs info directory entries but the prerm doesn't remove them. (Closes: #182512) + [ADB] Treat --remove-exactly as indicating removal of an info directory entry as well as --remove. * checks/menus{,.desc}: + [ADB] Check that menu-method files include menu.h (Closes: #184104) * checks/nmu: + [RA] When comparing maintainers, treat the right-hand side of the e-mail address as case-insensitive. (Closes: #486795) * checks/patch-systems{,.desc}: + [RA] Check quilt patches as well as dpatch patches, and also check quilt patches when using the 3.0 (quilt) package format. Fix build dependency checking and check all dpatch files. Patch from Raphaël Hertzog. (Closes: #484549) + [ADB] Treat 00list* as dpatch series files rather than just 00list. (Closes: #482040). Also rename dpatch-index-references-non-existant-patch to dpatch-index-references-non-existent-patch. * checks/rules{,.desc}: + [RA] Warn about use of DEB_BUILD_OPTS. Patch from Raphael Geissert. * checks/scripts: + [FL] Apply File::Spec->canonpath() to rpaths to improve matching with directories. + [FL] Do not check zsh scripts, since zsh -n gives false positives. Downgrades #485885 to wishlist. Also see #175467. Patch by Raphael Geissert. + [FL] Remove "quoted quotes". They're likely to be inside another pair of quotes; we're not interested in them for their own sake and removing them makes finding the limits of the outer pair far easier. Patch by Adam D. Barratt. + [FL] Improve heredoc detection. Patch by Adam D. Barratt. + [FL] Improve script_is_evil_and_wrong() to catch more scripts. Patch by Adam D. Barratt. + [ADB] Update bashism regexes to add new checks, improve performance and reduce false positives. (Closes: #490227) * checks/shared-libs{,.desc}: + [ADB] Implement syntax and sanity checking for symbols files (Closes: #452216) + [ADB] Check symbols files for dependencies that are not satisfied by the package itself (Closes: #461575) * checks/standards-version{.desc,}: + [RA] Only issue out-of-date-standards-version once. Noticed by Raphael Geissert. + [RA] Base the two-year clock for ancient-standards-version on when the Policy version was superseded, not when it was issued. Thanks, Scott Kitterman. (Closes: #487780) + [RA] Warn for packages declaring a standards version released after the date of the most recent changelog entry. Based on a patch by Raphael Geissert. * checks/watch-file{,.desc}: + [FL] Check for more Debian specific strings in version number. Issue an info tag if the watch file uses uversionsmangle to add the Debian specific string. Patch by Raphael Geissert. (Closes: #485879) + [RA] Warn about watch files in native packages and check those watch files for other problems anyway. Allow whitespace around the version declaration. More correctly handle continuation lines. Patch from Raphael Geissert. + [RA] Check for using the Sourceforge QA redirector with deprecated arguments. Patch from Raphael Geissert. + [RA] Be more explicit when warning about missing watch files that Lintian recommends adding a watch file containing only comments for any non-native package where it's not possible to write a meaningful watch file, not only for packages unmaintained upstream. * collection/objdump-info: + [ADB] If objdump from binutils 2.17 fails to parse a file then attempt to gather the required information using readelf instead. This allows us to process 64-bit packages on etch/i386 again (i.e. on lintian.d.o) (Closes: #487746) * data/fields/obsolete-packages: + [RA] mailx is not obsolete. It's a virtual package. Thanks, martin f krafft. (Closes: #488114) + [RA] Add the cupsys packages, all of which have been renamed to cups. Patch from Raphael Geissert. * debian/control: + [FL] Adapt VCS-* headers for move from SVN to git. * debian/copyright: + [FL] Add Patrick Schoenfeld (for checks/watch-file). + [ADB] Update repository information and GPL2 URL. + [RA] Add Adam D. Barratt to the maintainer list so that readers can expand initials in the changelog. * debian/{prerm,postrm}: + [RA] Move prerm to postrm and remove the default /var/spool/lintian lab using shell instead of lintian. We only want to remove the lab on purge, and purge is only passed to postrm, not prerm, by which point the lintian frontend is gone. (Closes: #489860) * doc/CREDITS: + [FL] Add Raphael Geissert and Adam D. Barratt. * doc/lintian.sgml: + [ADB] Add reference to new option to display experimental tags. * frontend/lintian: + [ADB] Add a new --show-experimental / -E option which indicates that experimental tags should be displayed. + [RA] Exit with the correct exit status if no packages were found because non-existent packages were specified on the command line. * lib/Lintian/Collect/Binary.pm: + [FL] Add support for file-info file. + [FL] Add support for objdump-info file. * lib/Spelling.pm: + [RA] Add a couple more spelling corrections and capitalization checks for LaTeX and TeX. Thanks, Raphael Geissert. * lib/Tags.pm: + [ADB] (Re-)Add support for experimental tags. * man/lintian.1: + [FL] Document watch-file check. + [ADB] Document new option to display experimental tags. + [RA] Refer to lintian-info(1) for printing tag descriptions. Patch from Chris Lamb. (Closes: #490374) * reporting/harness: + [ADB] Process packages using -E so that experimental tags are included. * reporting/html_reports: + [FL] Mark the tag pages with the correct code. * reporting/lintian.css: + [RA] New style for marking packages that override a tag on the tag summary page. Patch from Jordà Polo. * reporting/templates/clean.tmpl: + [ADB] Note that the full report includes experimental tags. * reporting/templates/tag.tmpl: + [FL] Mark overridden tags. + [RA] Mark packages that override all instances of a given tag. Patch from Jordà Polo. * reporting/templates/maintainer.tmpl: + [FL] Add useful links for each source package. With layout help by Jordà Polo. + [FL] Include Co-maintained packages in the summary at the top of the page. Also sort the list. Patch by Jordà Polo. + [ADB] Note that the full report includes experimental tags. * testset/runtests: + [ADB] Support experimental tags lintian (1.24.1) unstable; urgency=medium The "mostly for the benefit of lintian.debian.org only" release. * frontend/lintian: + [FL] Increase LAB_FORMAT to 8. This should have happened in 1.23.47, since the unpack-binpkg-l1 then produced a new file which checks depend upon. Since this only affects static labs and only if packages get rechecked (i.e. not on harness -i runs) it only got noticed now. Use urgency=medium for this fix. * checks/watch-file: + [FL] Fix the order of two regular expression to use the more specific one first. Patch by Raphael Geissert. (Closes: #485884) * unpack/unpack-binpkg-l1: + [FL] Don't include version number from Source: field in the source symlink. Noted by RA. (Closes: #485474) * lib/Lintian/Collect/Binary.pm: + [FL] New module for retrieving binary package information. * reporting/checkout-release: + [FL] New helper script for lintian.d.o maintenance. * reporting/config: + [FL] Generate files in $HOME/www directly instead of $HOME/www/reports. * reporting/html_reports: + [FL] Allow inclusion of the new shared templates by convenient functions. Remove some duplicated data setting while I'm on it. + [FL] Generate the manual and lintian.log symlinks dynamically, so that we don't need the reports subdirectory anymore. Also generate a reports -> . symlink for backwards compatibility. * reporting/templates/{head,foot}.tmpl: + [FL] New templates meant for inclusion by other templates for common header and footer parts * reporting/templates/index.tmpl: + [FL] Remove obsolete reports/ subdirectory from the links. * reporting/templates/maintainer.tmpl: + [RA] Redisplay the tag name for each separate binary package, also fixing list nesting problems in some cases. Patch from Jordà Polo. * reporting/templates/*.tmpl: + [FL] Replace common headers/footers with calls to the new head()/foot() functions. lintian (1.24.0) unstable; urgency=low The "Policy 3.8.0, infrastructure evolution, and real web design" release. * checks/binaries: + [RA] Fix code for filtering out NSS modules from SONAME checks. + [RA] When checking SONAMEs against package names, convert all underscores to dashes, not just the first one. Thanks, Gonéri Le Bouder. (Closes: #482450) + [RA] Remove several-sonames-in-same-package. This is frequently not an error and Lintian doesn't have enough information to know. * checks/common_data.pm: + [RA] armel is now a standard architecture. + [RA] Remove %known_obsolete_packages, now handled via data. + [RA] Merge %non_standard_archs into %known_archs. * checks/control-file{.desc,}: + [RA] Check for self-dependencies in the source package since the current dpkg-gencontrol silently fixes them but they may indicate other problems. Thanks, Patrick Matthäi. (Closes: #471740) * checks/copyright-file{.desc,}: + [RA] Check for copyright files containing the Apache 2.0 license, which is now in common-licenses. * checks/cruft: + [RA] Format: 3.0 (quilt) packages are not native even though they have no *.diff.gz. Thanks, Raphael Hertzog. (Closes: #483384) + [RA] Use the new Lintian::Collect interface to check whether a package is native. * checks/debconf: + [RA] Don't warn about using db_input in postinst if a config script also exists and uses db_input. The package maintainer probably knows what they're doing. * checks/fields: + [RA] Syntax-check Breaks like other relationship fields. Warn if any packages use Breaks for right now. Only check for duplicate libraries and Tcl versions in dependency fields, not Breaks, Conflicts, and other similar fields. Warn if Breaks is used without a version. Check that Breaks is not inconsistent with other dependency fields. + [RA] Use Lintian::Data to load the obsolete package list. + [RA] When checking whether a debug package has proper dependencies, allow a dependency on any package name that starts the same as the debug package up to the first dash. This will hopefully produce fewer false positives. Thanks, Josselin Mouette. (Closes: #476587) + [RA] Remove non-standard-architecture-in-source-relation and non-standard-architecture. These aren't bugs. * checks/filenames{.desc,}: + [RA] Warn about BTS data directories in packages (.be and .ditrack). Patch by Ben Finney. (Closes: #481787) * checks/init.d: + [RA] Try to allow for postinst scripts written in Perl and still recognize the update-rc.d calls. * checks/manpages{.desc,}: + [RA] Only ignore errors about wrapping lines for Asian locale man pages, since that's where the groff trouble lies. Ignore character set errors for all man pages with old versions of man and no man pages with current versions of man since the new character set handling should cope. (Closes: #474052) + [FL] Ignore more unicode issues with old man. + [RA] Warn about inclusion of the country name in the localized man page directory unless it's one of the known exceptions. + [RA] Mention in binary-without-manpage that the case of the man page should match the case of the binary even if man can find it anyway. (Closes: #484028) * checks/md5sums: + [FL] Don't complain about missing md5sums file if the package only contains conffiles. (Closes: #482869) * checks/nmu: + [RA] Don't treat "Ack NMU" as an NMU declaration. Thanks, Joe Nahmias. (Closes: #484600) + [RA] Binary NMUs of QA-maintained packages are fine. * checks/rules{.desc,}: + [RA] Add some basic checks for whether debhelper programs are called in a reasonable order. (Closes: #471869) + [RA] Support pattern rules. (Closes: #483475) * checks/scripts: + [RA] Catch deprecated chown syntax even when options are given to chown. Patch by Raphael Geissert. (Closes: #483775) + [RA] $((var+1)) now works in dash and is in POSIX, so remove it from bashisms. Patch by Adam D. Barratt. (Closes: #473156) * checks/standards-version{.desc,}: + [RA] Largely rewritten. Now contains a list of standards versions with the date when they were released, adding 3.8.0. Only emit tag out-of-date-standards-version if the newer version predates the date of the package. Base ancient-standards-version on whether the standards version of the package is more than two years old. Remove package-declares-source-relation-but-has-older-standards-version; policy 3.1.0 was a long time ago. (Closes: #472513) * checks/watch-file{.desc,}: + [RA] New checks for watch files, based on work by Patrick Schoenfeld. (Closes: #234202, #409104, #456629, #472499) * data/fields/obsolete-packages: + [RA] Moved from common_data.pm. Removed many very old packages that nothing depends on and added many new packages identified by Riku Voipio. (Closes: #475400) * debian/control: + [RA] Update standards version to 3.8.0. + [RA] Depend on libtimedate-perl for convenient date parsing. * frontend/lintian: + [RA] Create a new Lintian::Collect object for each package being checked and pass it into Checker::runcheck. * lib/Checker.pm: + [RA] Pass a Lintian::Collect object as the third argument to the run function of each check. * lib/Lintian/Collect.pm: + [RA] New module to retrieve package information. * lib/Lintian/Collect/Source.pm: + [RA] New module to retrieve source package information. * reporting/html_reports: + [RA] Copy over images. Set the maintainer name to "Unknown Maintainer" if not known. Pass the code for a tag into the per-tag page. Based on a patch by Jordà Polo. * reporting/images/*: + [RA] New logo images from Jordà Polo. * reporting/lintian.css: + [RA] Significant overhaul of the lintian.d.o design by Jordà Polo. * reporting/templates/*: + [RA] Significant overhaul of the lintian.d.o design by Jordà Polo. * reporting/templates/clean.tmpl: + [FL] Include link to full maintainer report. Suggested by Kartik Mistry. lintian (1.23.49) unstable; urgency=low The "Business as usual" release. * checks/binaries: + [FL] Ignore rpaths to directories present in the same binary package. Also ignore $ORIGIN since that obviously fulfills that criterion. (Closes: #480636) * checks/copyright-file{,.desc}: + [FL] Implement new check for dh-make-perl boilerplate. + [FL] New check for example URL from dh-make. Based on a patch by Michal Čihař. (Closes: #481368) * checks/debhelper: + [FL] dh_lintian needs debhelper >= 6.0.7. Patch by David Paleino. (Closes: #479088) + [FL] Add basic support for debhelpers new dh utility. (Closes: #477628) + [FL] Suppress maintainer-script-lacks-debhelper-token for single-udeb-only packages as well. (Closes: #471853) * checks/files: + [FL] Drop xresources-file-in-etc-without-proper-conflicts, since the last package that conflict applies to was released with hamm! Reported by Julien Cristau. (Closes: #480574) * checks/menu-format: + [FL] Don't issue false positives about menu files in format menu-2. We don't check them for errors yet, though. (Closes: #478578) * checks/patch-systems: + [FL] Add basic support for dpatch list files which use cpp for preprocessing. Patch by Jörg Sommer. (Closes: #477057) * checks/scripts: + [FL] Always use /bin/bash for shell script syntax check to give consistent errors on systems with changed /bin/sh. Suggested by Raphael Geissert. (Closes: #478192) * frontend/lintian: + [FL] Don't issue a warning about Distribution: UNRELEASED in .changes files. It can be annoying to have to ignore this error during testing and dupload/dput/dak/etc... all will error out on it anyway. Suggested by martin f krafft. (Closes: #382327) + [FL] Add a --keep-lab option to make it easier to debug temporary labs. (Closes: #401046) * lib/Util.pm: + [FL] Only require Digest::SHA if the code path is really used. This makes it unnecessary to install libdigest-sha-perl on lintian.debian.org for now. * man/lintian.1: + [FL] Document --keep-lab option. + [FL] Fix error in checkname: s/patch-system/patch-systems/. Reported by Jörg Sommer. * reporting/html_reports: + [FL] Escape $email variable for usage in URI query strings. Currently it is not used for anything else, so it is most simple to do it in the actual code. Reported by Sandro Tosi. (Closes: #481256) lintian (1.23.48) unstable; urgency=low The "Perl 5.10 compatibility" release. * checks/common_data.pm: + [FL] Add 8.5 versions to known_tcls and known_tks. * checks/copyright-file: + [FL] Also apply the "possible-gpl-code-linked-with-openssl" checks to Pre-Depends. * checks/menus: + [RA] Stop using a deprecated Perl construct that Perl 5.10 no longer supports. Patch from Adam D. Barratt. (Closes: #479318) * checks/shared-libs: + [RA] Fix an unescaped | in the regular expression parsing postinst files for ldconfig invocation. The regex had always been broken, but in Perl 5.10 it causes a recursion error in the regex engine. * checks/version-substvars: + [FL] Also apply the "not-binnmuable-*" checks to Pre-Depends. (Closes: #472247) * frontend/lintian: + [RA] Work around a Perl 5.10 bug with Getopt::Long and sub handlers. * testset/runtests: + [RA] dpkg-source now enables the -i and -I regexes by default. Replace the defaults with ones that never match so that we can continue testing for cruft left in source packages. lintian (1.23.47) unstable; urgency=low The "long time no upload" release. * checks/binaries{.desc,} + [RA] Permit architecture: all packages to have binaries in the multiarch directories. (Closes: #469301) + [RA] Suggest an override for arch: all packages containing binaries independent of the host architecture (such as for cross-compiles). * checks/changelog-file: + [RA] Quash more Perl warnings on badly malformed NEWS.Debian files. * checks/control-files: + [FL] Add 'triggers' as a valid control file. Thanks, Joey Hess. (Closes: #473840) * checks/copyright-file{.desc,}: + [RA] Document handling of false positives for GPL, GFDL, and LGPL license references and catch the GFDL 1.1 false positive. + [FL] Add CeCILL license to false positives list for copyright-should-refer-to-common-license-file-for-gpl. Thanks, Alexandre Fayolle. (Closes: #472933) * checks/cruft: + [RA] Subversion conflicts generate three files, two with revision numbers and one with .mine. Only warn about the revision numbers; .mine probably won't occur alone and may be a false positive. * checks/etcfiles: + [RA] /etc/init.d/{skeleton,rc,rcS} are not conffiles, and README files in /etc need not be. * checks/fields.desc: + [FL] Remove obsolete section base from list of valid sections in unknown-section. (Closes: #471751) * checks/files{.desc,}: + [RA] /etc/init.d/{skeleton,README} don't need to be executable. + [RA] Warn about linda overrides since linda has been removed from the archive. Thanks, Y Giridhar Appaji Nag. (Closes: #469603) + [RA] Check for numeric owners or groups outside of the reserved static ranges. Patch from Håkon Stordahl. (Closes: #469924) + [RA] Issue errors for installing files under /var/www. This isn't in FHS, may not be the document root, and may break local files if it is the document root. Thanks, Joerg Jaspert. (Closes: #470403) + [RA] Don't consider files in bin directories that contain "copying" or "license" to be extra license files. + [FL] Don't complain about empty directories under /usr/share/python-support since those might be needed. Thanks, Josselin Mouette. (Closes: #473428) + [RA] Ignore extra license files in examples subdirectories of /usr/share/doc. Thanks, Daniel Jacobowitz. (Closes: #476149) * checks/lintian.desc: + [FL] Rename md5sum-mismatch-in-changes-file to checksum-mismatch-in-changes-file. * checks/nmu{.desc,}: + [RA] Add support for +nmuX versioning for NMUs of native packages. Patch from James Vega. (Closes: #475026) + [RA] Don't consider an NMU changelog entries that mention NMU with a variation of the word "incorporate." * checks/scripts: + [RA] Attempt to quash some Perl warnings. + [RA] *.py files in /usr/{lib,share}, /etc/init.d/skeleton, and *.ex files do not need to be executable even if they look like scripts. + [RA] Add clisp, procmail, and rrdcgi, and another way interpreters are templated in *.in files. + [RA] Expect unversioned dependencies on OCaml packages rather than versioned dependencies since the version changes frequently and unversioned dependencies are what people are already using. Thanks, Hideki Yamane. (Closes: #476417) + [RA] Add inetutils-inetd and xinetd as additional update-inetd providers. Patch from Guillem Jover. (Closes: #474077) + [RA] If the call to some supporting program like update-inetd is conditional on the existence of the program, assume the maintainer knows what they're doing and don't warn. * checks/shared-libs: + [RA] Move the default ld.so search path into data. Drop obsolete /usr/lib/libg++-dbg, /usr/X11R6/lib/Xaw3d, and libc5 compatibility directories in the process. + [RA] Allow and expect ldconfig, SONAMEs, and shlibs treatment of libraries in multiarch directories. * data/binaries/multiarch: + [RA] New file listing multiarch binary directories. * data/shared-libs/ldconfig-dirs: + [RA] New file listing directories searched by ld.so. * debian/compat: + [FL] Increase debhelper compat level to 5. There is really no need anymore to support building on sarge. * debian/control: + [FL] Add dependency on libdigest-sha-perl. + [FL] Increase debhelper dependency to >= 5 * frontend/lintian: + [RA] Qualify relative --root directories so that we don't break later. Patch from Håkon Stordahl. (Closes: #469925) + [CW] Add intrepid as an allowable distribution for Ubuntu. + [FL] Support Checksums-* fields in .changes files. Follows the same rules as the md5sum check. Add new option --checksums as alias for --md5sums. (Closes: #476565) * lib/Spelling.pm: + [RA] Avoid Perl warnings when called with an uninitialized value. + [RA] Correct "meta package" and "meta-package" in descriptions to "metapackage". Thanks, Frank S. Thomas. (Closes: #476681) * lib/Util.pm: + [FL] Rename function get_file_md5sum to get_file_checksum and support SHA1 and SHA256. * man/lintian.1: + [FL] Drop linda from SEE ALSO since it is obsolete now. Suggested by Hideki Yamane. (Closes: #474478) + [FL] Add new --checksums option. * reporting/html_reports: + [RA] Base the generation of clean report pages on the maintainer URL rather than the full maintainer string so that maintainers with different forms of their name won't have clean reports that overwrite dirty ones. + [RA] Fix the counts in qa-list.txt, which were broken in several respects. + [RA] Don't consider a maintainer's page error/warning free if there are errors or warnings in their co-maintained packages. * reporting/templates/maintainer.tmpl: + [RA] Always add anchors to the package names even for uploaders. * testset/copyright: + [FL] New testcases by Tobias Toedter. (Closes: #472665) * testset/description: + [FL] New testcases by Tobias Toedter. (Closes: #471838, #477471) * unpack/list-srcpkg: + [RA] Fix syntax error introduced by Uploaders support. * unpack/unpack-binpkg-l1: + [RA] Extract a tar listing with numeric owners and groups into index-owner-id in the lab. lintian (1.23.46) unstable; urgency=low The "five Lintian committers!" release. * checks/binaries: + [RA] Anchor file matches for Perl libraries and debugging symbols so as to not match partial paths. Based on a patch from Niko Tyni. (Closes: #466501) + [RA] Also check for make -i when checking if errors from make clean or distclean are ignored. Thanks, Jörg Sommer. (Closes: #469024) * checks/changelog-file: + [RA] Adjust for the extra space added by Parse::DebianChangelog when checking line length. Thanks, Robert Millan. (Closes: #467019) * checks/common_data.pm: + [RA] Accept (and ignore for now) the new Checksums-Sha1, Checksums-Sha256, and Checksums-Md5 fields in source packages. Thanks, Raphael Hertzog. (Closes: #466979) * checks/control-file: + [RA] Skip empty dependencies for stronger-dependency-implies-weaker. * checks/control-files{.desc,}: + [FL] Warn about empty control files. I can't see any use for them. Exclude udebs though, since they might differ there. * checks/copyright-file{.desc,}: + [RA] Tests for copyright notices must be case-insensitive. Patch from Chris Lamb. (Closes: #464992) + [RA] When looking for cases where Copyright is separated from a year by a newline, also allow (C) before or after the newline. Thanks, Michael Meskes. (Closes: #465258) + [RA] Further explain why lintian looks for a valid copyright notice. (Closes: #466714) + [RA] Suggest an override if only the Debian packaging or some other part of the package not linked with OpenSSL is covered by the GPL. Thanks, Andrew Pollock. (Closes: #469106) * checks/cruft{.desc,}: + [FL] Add hg to the list of <vcs>-control-dir tags. + [RA] In the long description of outdated-autotools-helper-file, point to autotool-dev's documentation. (Closes: #465132) + [RA] Remove now-unnecessary workarounds for calling File::Find with symlink starting directory. * checks/debian-readme{.desc,}: + [RA] Warn of references to /usr/doc in README.Debian. Thanks, Guillem Jover. (Closes: #465192) * checks/files{.desc,}: + [FL,RA] Merge all the tags for vcs ignore files, inventory files, and vcs control dirs. Since the explanations don't actually differ, different tags make no sense. While at it, add the mercurial equivalents as well and update some of the tag descriptions. Partly based on a patch by Chris Lamb. * checks/md5sums{.desc,}: + [FL] Remove tag md5sums-control-file-is-empty in favour of a more general tag in control-files. * checks/manpages.desc: + [RA] Mention in binary-without-manpage that if the man pages are provided by another package on which this package depends, a lintian override is appropriate. * checks/menu-format: + [RA] When the menu or desktop file invokes a quoted command via an su program, don't try to check whether the command is in the package. Thanks, Paul Wise. (Closes: #466665) * checks/menus{,desc}: + [RA] Check that doc-base files are encoded in UTF-8. Thanks, Robert Luberda. (Closes: #468759) + [RA] Check doc-base sections against the new canonical list. Thanks, Robert Luberda. (Closes: #463474) * check/patch-systems: + [HE] Warn if the .diff.gz contains changes while the package uses a patch system. (Closes: #452215) * checks/scripts{.desc,}: + [FL] Warn if a maintainer script is a valid shell script but doesn't seem to have any actual code. Based on an idea by Justin Pryzby. (Closes: #410042) + [RA] Update regexes based on checkbashisms to remove additional false positives and add additional checks. Thanks, Adam D. Barratt. + [RA] Add kaptain. Thanks, Tobias Toedter. (Closes: #466701) + [RA] Allow zsh-beta as an alternative to zsh. Thanks, Joost van Baal. (Closes: #468362) + [RA] Add yorick. Thanks, Thibaut Paumard. (Closes: #468370) + [RA] Add warnings for dpkg --assert* flags for features that have been guaranteed for nearly a decade. Thanks, Bernhard R. Link. (Closes: #467642) * checks/shared-libs{,desc}: + [RA] Rename sharedobject-in-library-directory-not-actually-a-shlib to sharedobject-in-library-directory-missing-soname for clarity. Thanks, Peter Eisentraut. (Closes: #467425) * data/doc-base/sections: + [RA] New file listing known doc-base sections. * debian/dirs: + [RA] Install the base directory for the Lintian root here. * debian/rules: + [RA] Redo the installation rules to support arbitrary nesting under the copied directories. As a side effect, install lib/Tags/ColonSeparated.pm, unbreaking the experimental colon-separated output format. * frontend/lintian: + [CW] Make the presence of an Ubuntu release name in the version number trigger the Ubuntu distribution field checks. + [RA] Fix option parsing bug leading lintian to incorrectly reject -a or -p without a package. * lib/Dep.pm: + [RA] Skip empty dependencies, avoiding false positives for stronger-dependency-implies-weaker. Patch from Adam D. Barratt. (Closes: #469222) * lib/Lintian/Data.pm: + [RA] New module for loading and querying lists of keywords. * lib/Read_pkglists.pm: + [RA] Extract Uploaders from the source package list. * lib/Spelling.pm: + [RA] Add another spelling correction. + [RA] Merriam-Webster and the OED have both given up on publically vs. publicly, so we should as well. (Closes: #466617) * reporting/html_reports: + [RA] Load the correct configuration file. + [RA] Include packages for which one is an uploader in one's maintainer page, marked accordingly. (Closes: #421011) * reporting/templates/*: + [TK] Correct Lintian maintainers address in page footers. * reporting/templates/maintainer.html: + [RA] Include packages for which the maintainer is an uploader. * unpack/list-srcpkg: + [RA] Include Uploaders in the package list. * unpack/unpack-srcpkg-l2: + [RA] Don't rely on the output format of dpkg-source to learn the source directory and create a symlink. Instead, tell dpkg-source to unpack the source directly into the unpacked directory. Discard output of dpkg-source to allow for the current version, which prints things even with -q (fixed in later versions). Thanks, Raphael Hertzog. (Closes: #468927) lintian (1.23.45) unstable; urgency=low The "100 open bugs is magical" release. * checks/debconf: + [RA] Recognize require as well as use when loading debconf modules in Perl. Thanks, Manoj Srivastava. (Closes: #464775) * checks/fields: + [RA] Fix coding error that didn't allow python-all-dev to satisfy a Python build dependency. Thanks, Joerg Jaspert. (Closes: #464709) * checks/manpages: + [RA] Ignore another undefined macro generated by pod2man (will be fixed with the Pod::Man in Perl 5.10). * checks/po-debconf: + [RA] Also accept nnn_NN names for po files. nds_DE and nds_NL are valid locales. Thanks, Christian Perrier. * checks/scripts{.desc,}: + [RA] Warn of use of start-stop-daemon in maintainer scripts unless used with --stop. Thanks, Kurt Roeckx. (Closes: #381180) lintian (1.23.44) unstable; urgency=low The "I can't release a quick fix without *some* other work" release. * checks/binaries: + [RA] Make an architecture specification after perlapi optional. Thanks, gregor herrmann. (Closes: #464626) * checks/copyright-file{.desc,}: + [RA] Check the copyright file to ensure it contains at least one copyright statement with a date or the term "public domain". It's hard to be thorough without false positives, but this should catch the most obvious omissions. Thanks, Justin Pryzby and Jari Aalto. (Closes: #286842, #409131) * checks/fields: + [RA] Warn of build-dependencies on a Debian revision of -1. They make backporting unnecessarily difficult. Thanks, Erich Schubert. (Closes: #345487) * checks/po-debconf: + [RA] Accept three-character language codes for po files. Thanks, Patrick Winnertz and Eddy Petrișor. (Closes: #464511) * lib/Spelling.pm: + [RA] Don't strip hyphens before checking spelling. Move all D-Bus corrections to the picky list since the correction is too confusing even if accurate without capitalization. Thanks, Nelson A. de Oliveira. (Closes: #464461) lintian (1.23.43) unstable; urgency=low The "37 bug fixes is enough for one release" release. * checks/binaries{.desc,}: + [RA] Don't require objdump's errors on files with bad dynamic tables to start at the beginning of the line. Patch from Chris Lamb. (Closes: #459509) + [RA] Warn for packages that have binaries requiring libc but which don't depend on libc. Patch from Niko Tyni. (Closes: #461350) + [RA] Remove check for libc5 binaries. libc5 is long-gone. + [RA] Remove various dead tag descriptions we no longer issue. + [RA] Warn on packages that provide Perl modules but don't depend on perlapi-*. Thanks, Niko Tyni. (Closes: #463142) + [RA] Check files in /usr/lib/debug directories mirroring the main file system to verify they are detached debugging symbols and not full libraries or executables. Thanks, Neil Williams and Niko Tyni. (Closes: #462456) * checks/changelog-file: + [RA] Decode the changelog entry from UTF-8 before doing length checks. Thanks, Cyril Brulebois. (Closes: #461822) + [RA] Check for mismatches between the latest changelog and NEWS.Debian entries if they're for the same package version. Thanks, Cyril Brulebois. (Closes: #461823) * checks/common_data.pm: + [RA] Add Bugs, Origin, and Breaks to known binary and udeb fields and Bugs to known source fields, matching current dpkg. Thanks, Raphaël Hertzog. (Closes: #459787) * checks/debhelper: + [RA] CDBS now defaults to a debhelper compatibility level of V5. + [FL] Update list of debhelper commands that modify maintainer scripts. Add dh_icons, dh_installudev, dh_pysupport, dh_pycentral and rename dh_installtexfonts to dh_installtex. + [RA] Add checks for versioned debhelper dependencies for dh_icons and dh_installifupdown. Thanks, Evgeni Golov. (Closes: #463028) * checks/fields{.desc,}: + [RA] The CDBS ant rules are in class, not rules. Thanks, Cyril Brulebois. (Closes: #460168) + [RA] Versioned Python dependencies satisfy a Python debian/rules requirement. Add a separate tag for Python build dependencies to explain the dependency possibilities. Ignore dh_python if debian/pyversion or a Python-Version control field are present. Thanks, Loïc Minier. (Closes: #460625) + [RA] Check that -dbg packages depend on their base package. Patch from Chris Lamb. (Closes: #458785) + [RA] Check the value of Dm-Upload-Allowed. + [RA] Warn about packages with a list as the maintainer and no Uploaders. Thanks, Sune Vuorela. (Closes: #462635) + [RA] Remove the package-has-duplicate-relation test. It gets relations with different version strictness in different levels of dependency wrong and what it gets right dpkg-gencontrol strips out. * checks/files{.desc,}: + [RA] In many of the long descriptions for symlink-related tags, mention that running dh_link will fix symlink problems. + [RA] Fix a long-standing error in the regex checking for *.desktop files in /usr/share/gnome/apps that caused the tag to never be issued. Remove the check for /usr/share/applnk, since obsolete or not KDE appears to actively use it still. + [RA] Check for *.devhelp{2,} files not linked into devhelp's search path. Based on a patch by Bradley Smith. (Closes: #273309) + [RA] Warn about /etc/cron.{hourly,daily,weekly,monthly} scripts that won't be executed by run-parts because of periods in the name. Patch from Chris Lamb. (Closes: #458742) + [RA] Warn of .gitignore files installed by the package. Patch from Chris Lamb. (Closes: #459502) + [RA] Warn of more language extensions on files in the user's path. Patch from Chris Lamb. (Closes: #459514) + [RA] Remove the tag for empty Perl directories. The underlying issue is fixed in Perl 5.10; there's no need to add code to debian/rules when 5.10 is landing soon. (Closes: #463138) * checks/infofiles: + [RA] Don't issue unknown-interpreter for maintainer scripts with weird interpreters. checks/scripts already handles this and the tag wasn't defined. Thanks, Thijs Kinkhorst. (Closes: #460964) + [RA] Fix Perl warnings given a zero-byte maintainer script. Thanks, Thijs Kinkhorst. (Closes: #460966) * checks/init.d{.desc,}: + [RA] Downgrade a missing LSB Short-Description keyword to info since it's not required for functionality. Thanks, Petter Reinholdtsen. (Closes: #460499) * checks/manpages{.desc,}: + [RA] Make hyphen-used-as-minus-sign more conservative to avoid false positives with non-ASCII text and catch hyphens at the start of lines. Thanks, Michal Čihař. (Closes: #459871) + [CW] Use man's new --warnings option to catch use of undefined strings, macros, or diversions in manual pages, which usually indicate mistaken use of "." or "'" at the start of a line. This check is only enabled if man 2.5.1 or later is installed. (Closes: #377392) * checks/menu-format: + [RA] Avoid a Perl warning for desktop entries without Exec. + [RA] Fix a bug that prevented Exec keys in desktop files from being checked at all. Thanks, Raphael Geissert. (Closes: #462601) + [RA] Exempt packages providing the su wrappers from the check for using su-to-root. Thanks, Raphael Geissert. * checks/menus: + [RA] Don't issue unknown-interpreter for maintainer scripts with weird interpreters. + [RA] Fix Perl warnings given a zero-byte maintainer script. * checks/po-debconf: + [RA] Exclude from not-using-po-debconf template files with only the shared templates used for coordination with dictionaries-common. Thanks, Thomas Bushnell BSG. (Closes: #460731) * checks/rules.desc: + [RA] To fix an ignores-make-clean-error, suggest removing "-" for static makefiles. Thanks, Andrea Colangelo. (Closes: #458164) * checks/scripts{.desc,}: + [RA] Re-add php4-cli as a valid interpreter for those who want to maintain stable compatibility. Thanks, Thomas Goirand. + [RA] Be clearer in the tag name that php-cli dependencies should be versioned. Add more explanation to the long description of several interpreter tags about limitations and requested bug filings. + [RA] Remove tcl as a valid interpreter since tclx8.3 is obsolete. (tclsh is the standard interpreter name.) + [RA] Require versioned dependencies for OCaml scripts. Each version is ABI-incompatible. Thanks, Samuel Mimram. (Closes: #462065) + [RA] Add tcl and tk metapackages. Thanks, Sergei Golovan. (Closes: #463281) + [RA] Catch exec wrappers that use $* instead of $@ (not that this is a good idea). Thanks, Adam D. Barratt. (Closes: #463476) + [RA] Integrate several more bashism checks from checkbashisms in devscripts. Patch from Adam D. Barratt. (Closes: #464026) * debian/control: + [RA] Suggest man-db >= 2.5.1 for better warning support. + [RA] Wrap Uploaders. * frontend/lintian: + [RA] Include info tags in the broken-down description of the override count since they're included in the total. Based on a patch by Chris Lamb. (Closes: #459851) + [RA] Don't try to report overrides when not checking a package. Thanks, Håkon Stordahl. (Closes: #461978) + [RA] Cope with a relative path to the lab. Patch from Håkon Stordahl. (Closes: #461982) + [RA] Don't require *.changes files for source-only uploads to have a Description field. Thanks, Cyril Brulebois. (Closes: #462586) * lib/Spelling.pm: + [RA] Add spelling corrections for PostgreSQL and OCaml and lots of new capitalization corrections. (Closes: #460347) lintian (1.23.42) unstable; urgency=low The "what did you do on your Christmas vacation?" release. * checks/binaries: + [RA] Don't warn about unstripped binaries in .../lib/debug. Some packages include debugging symbols in the main package. + [RA] Allow rpath pointing to /usr/lib/games/<package>. Thanks, Bas Wijnen. (Closes: #456318) + [RA] Exclude nsswitch modules from multiple SONAME and package naming checks. * checks/changelog-file{.desc,}: + [RA] Don't spell-check lines that include the word "spelling". Thanks, Andreas Hoenen. (Closes: #456515) + [RA] Allow long no-whitespace lines even when spaces or bullets precede the text. * checks/common_data.pm: + [RA] Remove the obsolete base section. (Policy change pending). * checks/control-file{.desc,}: + [RA] Include the package name in stronger-dependency-implies-weaker. + [RA] Fix stronger-dependency-implies-weaker description cut and paste error. Thanks, Rafael Laboissiere. (Closes: #456405) * checks/copyright-file{.desc,}: + [RA] Warn about packages covered by the GPL and linked with libssl that don't list other common licenses or mention a license exception or exemption. Requested by Joerg Jaspert. (Closes: #454238) * checks/cruft: + [RA] Ignore debian/config.cache. * checks/debconf{.desc,}: + Remove partially-translated-question at the request of Christian Perrier. Only the translator could fix this, and debconf doesn't show the translation unless it's complete. (Closes: #459293) * checks/debian-readme{.desc,}: + Combine readme-debian-{is,contains}-debmake-template and be less particular about the exact formatting of the dh-make template. Triggering off the template text is enough and matches linda. Thanks, Joerg Jaspert. (Closes: #458074) * checks/description{.desc,}: + [RA] Do picky spelling and capitalization checks on the description and note and explain this in the long description. * checks/fields: + [RA] Handle double-colon rules when checking that build dependencies match debian/rules. (Closes: #457501) + [RA] Allow python-setuptools in Build-Depends for arch-independent Python packages. Thanks, Vincent Bernat. (Closes: #459042) * checks/fields.desc: + [RA] Remove X.X.X versions from the debian-revision-not-well-formed long description. (Closes: #456286) + [RA] Update references and binary-NMU version descriptions. * checks/files: + [RA] Ignore zero-length files in /usr/share/doc/examples. + [RA] The underFooLicense.docbook files from KDE are not license files. Thanks, Sune Vuorela. (Closes: #458831) + [RA] Allow /emul as a top-level directory and files in /emul/ia32-linux/{lib,usr/lib}. (Closes: #459254) * checks/files.desc: + [RA] Remove a stray variable from the config-file-reserved tag. * checks/init.d{.desc,}: + [RA] Warn on init scripts that list S in their Default-Stop LSB keyword. Thanks, Petter Reinholdtsen. (Closes: #458596) * checks/menu-format{.desc,}: + [RA] Fix non-wm-module-in-wm-modules-menu-section pluralization to match the check and reword the long description to be hopefully clearer. Thanks, Martín Ferrari. (Closes: #457527) + [RA] Warn about use of su wrappers other than su-to-root for desktop and Live CD support. Thanks, Daniel Baumann. (Closes: #453931) + [RA] Only check for desktop files in /usr/share/applications. The ones elsewhere are too strange. (Closes: #459252) * checks/menus{.desc,}: + [RA] Spelling errors in doc-base files should only be warnings. Do picky spelling and capitalization checks on the abstract and title fields. * checks/patch-systems: + [RA] dpatch permits multiple patches to be listed on the same line of 00list. Patch by Chris Lamb. (Closes: #457523) * checks/scripts{.desc,}: + [RA] Add lua40 and lua5.1. Thanks, Enrico Tassi. (Closes: #457219) + [RA] Improve recognition of heredocs. + [RA] Recognize quoted strings that start at beginning of the line. + [RA] Rewrite script path and dependency checking. Remove scripts and packages no longer in the archive. Add new versions of versioned scripts and packages. Fix the dependencies for pike interpreters. (Closes: #458896) + [RA] Reformat long descriptions and collapse some tags. + [RA] For consistent results, only syntax-check sh and bash scripts. Also ignore all dpatch files, not just those in /usr/src. * checks/shared-libs{.desc,}: + [RA] New check for version numbers in symbol files. Based on a patch from Raphael Hertzog. (Closes: #457067) + [RA] Exclude nsswitch modules from shlibs file checks. + [RA] ld.so may also look in /emul/ia32-linux/{lib,usr/lib}. * debian/control: + [RA] Suggest libtext-template-perl, needed for HTML reporting. * debian/copyright: + [RA] Add my copyright statement. + [RA] Reference GPL-2, not the GPL symlink, reflecting our license. * frontend/lintian: + [RA] Merge all override messages into a single message per run. Add -q/--quiet option to suppress that message. (Closes: #457513) + [RA] Allow + and . in tag names in overrides. Thanks, Stefan Fritsch. (Closes: #454790) + [RA] Check that the argument to --color is valid. + [RA] Warn about no package arguments unless --setup-lab or --remove-lab are given. Thanks, Damyan Ivanov. (Closes: #455732) + [RA] Add support for HTML coloring. (Closes: #458376) * frontend/lintian-info: + [RA] Allow for HTML color tags. + [RA] Add -a to annotate an override file. * lib/Dep.pm: + [RA] Allow substvars instead of package names so that dependency checks against the source debian/control file don't treat all substvars as equivalent. Thanks, Julien Cristau. (Closes: #456802) * lib/Spelling.pm: + [RA] Stop doing capitalization checks on all files; there's too much of a risk of false positives. Instead, provide a separate picky spelling check function for package descriptions and similar cases where we're more sure of the contents. + [RA] Expand the picky capitalization checks to catch Debian, GNOME, KDE, and Linux. (Closes: #456582) * lib/Tags.pm: + [RA] Add support for HTML coloring. * man/lintian.1: + [RA] Document the --color=html and -q/--quiet options. * man/lintian-info.1: + [RA] Document the --annotate option. * reporting/html_reports: + [RA] Rewritten. - Include info, experimental, and overridden tags in the tag pages. - Generate a second report for each maintainer showing all tags. - Correctly handle multiple different maintainer strings with the same e-mail address. - Correctly report the version number of a binary package when it differs from the source package. (Closes: #458036) - Formatting changes (hopefully improvements) to the web pages. - New template-driven system for easier revision of the HTML. * reporting/lintian.css: + [RA] New minimal style sheet for the HTML reports. * reporting/templates/*: + [RA] New Text::Template page templates for the HTML reports. * testset/runtests: + [RA] Test tags for valid characters. lintian (1.23.41) unstable; urgency=low The "it would be lovely if there were an actual desktop file standard" release. * checks/*.desc: + [RA] Escape all literal angle brackets and fix unclosed and unknown HTML tags. Based on a patch by Thijs Kinkhorst. (Closes: #455211) * checks/field{.desc,}: + [FL] Add some checks for the Homepage field: - warn about enclosing < and > - warn about non-absolute URLs * checks/menu-format{.desc,}: + [RA] Add Actions to the KDE-specific desktop file keys. Add Application as an acceptable Main Category even though it's not listed in the standard; given how widely it's used, it doesn't appear to be worth warning about right now. (Closes: #444651) + [RA] Add GNUstep as an acceptable Main Category, since it's used as a non-standard category by GNUstep applications. + [RA] Warn about desktop files containing CRLF line endings (and then strip the CR for later checks). The standard is explicit that each line ends in only LF. * debian/control: + [FL] Add liburi-perl to Depends for the Homepage checks. + [RA] Wrap Depends for readability. * testset/runtests: + [RA] Check all tag descriptions for unknown or unclosed HTML tags and for stray angle brackets. lintian (1.23.40) unstable; urgency=low The "Russ's brown paper bag bug" release. * checks/doc-base: + [RA] My mistaken precedence fiddling with the doc-base checks caused them to warn about every abstract containing a period. Patch from Chris Lamb. (Closes: #454941) * lib/Spelling.pm: + [RA] Add common mistakes for publicly and spelling. lintian (1.23.39) unstable; urgency=low The "Ubuntu and doc-base patch merge, with extra fixes" release. * checks/*.desc: + [RA] Remove the unused Standards-Version header. * checks/changelog-file{.desc,}: + [RA] Check the latest entry of the Debian changelog and any NEWS.Debian file for common spelling errors. (Closes: #36017) + [RA] If this looks like a new package (Debian revision of -1 and only one changelog entry), warn if it doesn't close a bug. Thanks, Margarita Manterola. (Closes: #356051) + [RA] Check for lines over 80 columns in the most recent entry. Thanks, Guillem Jover. (Closes: #435963) * checks/copyright-file{.desc,}: + [RA] Moved spelling-error-in-copyright check to here. * checks/debconf: + [RA] Go back to not warning about "no" in boolean debconf questions. The word is too common in normal English prose for reasons other than assuming a particular debconf interface. Thanks, Rafael Laboissiere. (Closes: #453177) * checks/debian-readme{.desc,}: + [RA] Moved spelling-error-in-readme-debian check to here. * checks/description{.desc,}: + [RA] Moved spelling-error-in-description check to here. * checks/fields: + [RA] Python documentation packages should still be in section doc. Thanks, Michal Čihař. (Closes: #454688) + [RA] Warn about lib.*-dev packages not in section libdevel. + [RA] Warn about debug packages that aren't priority: extra. Thanks, Joerg Jaspert. (Closes: #454358) + [RA] Ignore Original-Maintainer if the version contains ubuntu. + [RA] Only warn about Section for Python packages starting with python-, not py, since py picks up too many things that aren't Python modules. + [RA] Only warn about Section for Perl packages matching lib.*-perl to avoid false positives for things like dh-make-perl. Thanks, Damyan Ivanov. (Closes: #454723) * checks/files: + [RA] Warn about packages providing files in /usr/lib/debug that aren't named -dbg. Thanks, Joerg Jaspert. * checks/lintian.desc: + [RA] Add bad-ubuntu-distribution-in-changes-file, merged from the Ubuntu patch. + [RA] Fix the malformed-override long description. Thanks, Stefan Fritsch. * checks/menus{.desc,}: + [RA] Substantial overhaul and expansion of the doc-base control file checks. Patch from Robert Luberda. (Closes: #448783) * checks/nmu: + [RA] No packages with ubuntu in the version number are NMUs. Merged from the Ubuntu patch. * checks/patch-systems: + [RA] Ignore blank lines in 00list and don't report them as patches without descriptions. Thanks, Julien BLACHE. (Closes: #454730) * checks/spelling{.desc,}: + [RA] Subsumed into other check scripts and lib/Spelling.pm. * frontend/lintian: + [RA] If the version number indicates an Ubuntu package, check against a different list of allowable distributions. Merged from the Ubuntu patch. + [RA] Skip check and collection *.desc files whose names start with a period (mostly to avoid testing artifacts from editor lock files). + [RA] Restore previous override parsing and make the package name optional again. Thanks, Stefan Fritsch. (Closes: #454790) + [RA] Check overrides for implausible tags. * lib/Spelling.pm: + [RA] New module to do general spelling checks for specific misspellings. Based on the previous checks/spelling and a patch by Robert Luberda. lintian (1.23.38) unstable; urgency=low * The "HE's brown paper bag bug" release * checks/changelog-file: + [RA] Don't warn about version numbers going backwards in the changelog file if the comment says this is a backport. * checks/patch-systems: + [FL] Try appending .dpatch to patchnames found in 00list. Patch by Leo Antunes. (Closes: #454516, #454518) * lib/Dep.pm: + [FL] Fix "uninitialized value" warning in pred_implies(). lintian (1.23.37) unstable; urgency=low The "Policy 3.7.3" release. * checks/binaries: + [HE] Fix RegEx to re-enable 'binary-in-etc' and 'arch-dependent-file-in-usr-share' checks. (Closes: #452336) + [HE] When checking that a lib is linked against libc, search for libc.so, not any library beginning with libc. Thanks for the bug and patch to Ruben Porras <nahoo82@gmail.com>. (Closes: #448652) + [RA] Ignore the gf suffix from the gfortran migration when checking whether the package name matches the SONAME. Thanks, Kevin B. McCarty. (Closes: #448207) * checks/changelog-file{.desc,}: + [RA] Check that the latest changelog entry has a later version than the previous entry. Thanks, Thijs Kinkhorst. (Closes: #449257) * checks/common_data.pm: + [RA] Add Dm-Upload-Allowed as a control field. (Closes: #453779) * checks/control-file{.desc,}: + [RA] Diagnose stronger dependencies that imply weaker dependencies, such as the same dependency in both Depends and Recommends or Recommends and Suggests. Thanks, Joerg Jaspert. (Closes: #453302) + [RA] Upgrade no-section-field-for-source to warning at the request of Joerg Jaspert. * checks/control-files: + [RA] Add symbols as a known control file for debs and udebs. * checks/copyright-file: + [HE] Check that encoding of copyright file is UTF-8. Patch by gregor herrmann <gregor+debian@comodo.priv.at>. (Closes: #451689) + [HE] Add warning copyright-contains-dh_make-todo-boilerplate if the maintainer left the dh_make boilerplate in the copyright file. Based on patch by Cyril Brulebois <cyril.brulebois@enst-bretagne.fr>. (Closes: #448677) + [RA] Check for the complete GFDL included in the copyright file and expand copyright-file-contains-full-gpl-license to look for GPL v3 references. Also check for correct references to common-licenses for the GFDL and LGPL. * checks/deb-format: + [HE] Remove, not needed any more. (Closes: #447257) * checks/debconf: + [HE] Explicitly allow the phrase "no longer" in boolean debconf questions. (Closes: #447718) * checks/description.desc: + [RA] Upgrade the legacy Homepage tag to a warning. * checks/fields: + [HE] Add 'doc-package-should-be-section-doc', 'python-package-should-be-section-python', 'perl-package-should-be-section-perl'. Ideas shamelessly stolen from linda. (Closes: #452839) + [RA] Allow Python dependencies in Build-Depends when using another variant for calling Python in the clean target. Thanks, Bernd Zeimetz. (Closes: #444642) * checks/files{.desc,}: + [HE,RA] Add 'package-contains-empty-directory' check, but ignore dirs in /var and /etc and handle /usr/lib/perl5 and /usr/share/perl5 directories separately with a lower priority level since they're very common. (Closes: #452316, #357838) + [HE] Add checks for game packages that contain no game executables (package-section-games-but-contains-no-game) or that contain anything in usr/bin at all, which is usually a mistake. (package-section-games-but-contains-no-game). (Closes: #451668) + [RA] Downgrade symlink-should-be-relative to a warning since it's a Policy should. Thanks, Thijs Kinkhorst. (Closes: #454239) * checks/lintian.desc: + [RA] Add critical as a recognized urgency. * checks/patch-systems: + [HE] Add complete new check script, intended to check for usual problems when using patch systems. Start with three checks for common dpatch problems. Idea loosely based on patch by Carl Fürstenberg <azatoth@gmail.com>. (Closes: #437959) * checks/po-debconf.desc: + [RA] not-using-po-debconf is now an error per Policy section 3.9.1. * checks/rules: + [HE] Implement 'binary-arch-rules-but-pkg-is-arch-indep', checking for rules in binary-arch when the package is arch: all. (Closes: #409109, #119097) + [HE] Implement 'desktop-file-but-no-dh_desktop-call', checking for missing dh_desktop calls when .desktop files are installed in a debhelperized package. (Closes: #409138) * checks/scripts: + [HE] Allow packages to drop snippets into /etc/csh/login.d without a dependency on csh. Files there should also be allowed to have csh in the shebang line. (Closes: #453417) + [HE] Allow packages to drop snippets into /etc/fish.d/ without a dependency on fish. (Closes: #453416) + [RA] Remove possible-non-posix-code-in-maintainer-script entirely. Debian Policy now allows local and test -a/-o specifically and this is pointless portability. * checks/standards-version: + [RA] 3.7.3 is now the current Standards-Version and anything older than 3.6.2 is ancient. * debian/control: + [TK] Add Vcs-* fields to point to Lintian's repository. + [RA] Update standards version to 3.7.3. * debian/dirs: + [RA] Stop creating empty /usr/share/lintian/{overrides,info} directories. The latter is no longer used and the former is shipped with packages that include overrides. * frontend/lintian: + [RA] Add critical as a recognized urgency. + [RA] Diagnose malformed override entries; don't just ignore them. + [RA] Fix some odd formatting. + [RA] Display a summary of overridden tags as an N: output line. Requested by Steve McIntyre. (Closes: #452804) * man/lintian.1: + [RA] Be clearer about what files lintian takes as arguments; in particular, mention that source packages are checked by providing the .dsc file as an argument. (Closes: #441636) + [RA] Fix a slight spacing problem with the --color flag. + [RA] Remove mention of unused /usr/share/lintian/info directory. * lib/DebVersions.pm: + [RA] Remove. This isn't used by anything and would produce incorrect results (it doesn't understand ~), and Dep.pm provides version comparison routines that use dpkg. * lib/Tags.pm: + [RA] Keep statistics on overrides by severity. * reporting/html_reports: + [RA] Change the layout of the per-maintainer lintian pages. Now, each report will be in /reports/maintainer/<email>.html where <email> is the maintainer's e-mail address with unsafe characters replaced by _. This should allow better links from the QA pages. Thanks, Stefano Zacchiroli. * unpack/list-srcpkg: + [RA] Escape ; and newline characters in all package fields before writing them to the index (uncovered when someone accidentally appended a package description to Standards-Version). lintian (1.23.36) unstable; urgency=low The "grand open change and desktop cleanup" release. * {checks,collection,depcheck,frontend,lib,reporting,unpack}/*: + [RA] Use the three-argument form of open uniformly, whether needed or not, to head off further quoting and whitespace interpretation bugs. * checks/files{.desc,}: + [RA] Catch .DS_Store.gz files as well. + [RA] Warn about ._ Mac OS X resource files in the package. + [RA] Add a hopefully helpful note about how cruft from other operating systems can show up in binary packages. * checks/menu-format: + [RA] Fix detection of commands for menu entries when the command is given with its full path. (Closes: #446796) + [RA] Remove Actions from known desktop keys again, as I believe the root problem was our willingness to inspect desktop types other than Application (also fixed in the previous release). + [RA] Fix Perl flow error when skipping some desktop files. + [RA] Skip unknown and deprecated key warnings and encoding key warnings in desktop files if they were of an unknown type. * lib/Dep.pm: + [RA] Fix negative implication in some boundary cases when comparing two versioned relationships in the same direction. Thanks to Raphael Hertzog for the analysis and fix. (Closes: #446768) lintian (1.23.35) unstable; urgency=low The "frantic bug catchup" release. * checks/changelog-file{.desc,}: + [RA] Add some basic checks for NEWS.Debian files: naming, compression, encoding, a syntax check with Parse::DebianChangelog, and unreleased for the distribution. (Closes: #437707) * checks/common_data.pm: + [RA] Allow Homepage in source and binary packages. * checks/control-file: + [RA] Support and ignore comments in debian/control. Thanks, Julien Cristau. (Closes: #440830) + [RA] Check for XS-Vcs-* headers and recommend (at info level) that they be changed to Vcs-* headers. (Closes: #444661) * checks/cruft.desc: + [RA] Fix incorrect tag name for patch failure files. Thanks, Romain Francoise. (Closes: #437463) * checks/debconf: + [RA] A cdebconf that supported error was released with sarge, so don't require a versioned cdebconf dependency. Thanks, Thijs Kinkhorst. (Closes: #438860) + [RA] Various improvements from Thomas Huriaux: Diagnose select templates with only yes/no options, diagnose more question prompts, warn on any questions in the extended description, allow yes/no mentions in non-boolean templates, and catch more first-person language. (Closes: #439508) + [RA] More exactly follow the Developer's Reference recommendations by only requiring open prompts for string and password prompts and only complaining about imperative wording for select and multiselect templates. Thanks, Steve Langasek. (Closes: #442711) * checks/description{.desc,}: + [RA] Warn (at info level for now) about Homepage pseudo-fields in the extended description. (Closes: #444336) * checks/fields: + [RA] Allow python-all as yet another way of satisfying a Python build dependency. (Closes: #444642) * checks/fields.desc: + [RA] Properly escape < and >. * checks/files{.desc,}: + [RA] Warn about Thumbs.db files, which are usually useless Windows thumbnail databases. Thanks, Paul Wise. (Closes: #438202) + [RA] Warn about .DS_Store files, used by Mac OS X to store extended folder attributes. Thanks, Paul Wise. (Closes: #438203) + [RA] Improve the recommended command to remove .packlist files. Thanks, Justin Pryzby. + [RA] Don't think hard links are zero-length files. + [RA] Diagnose files with names ending in whitespace. * checks/infofiles: + [RA] Emacs 22 now allows embedded images in info files, so accept and ignore PNG files in the info directory. More image types may be needed. Thanks, Andreas Metzler. (Closes: #438602) * checks/menu-format{.desc,}: + [RA] Reserved categories are okay in .desktop files if OnlyShowIn is present, and generally deserve their own separate tag regardless. Thanks, Michael Biebl. (Closes: #442709) + [RA] Ignore categories beginning with "X-", reserved for category extensions. Thanks, Josselin Mouette. (Closes: #443827) + [RA] Allow Actions keys. This isn't in the desktop standard but is widely used. Thanks, Raphael Geissert. (Closes: #444651) + [RA] Ignore desktop files not for one of the known types. This should significantly reduce the noise for KDE packages. + [RA] Only check whether a program referenced by Exec is in the package if the desktop file is in /usr/share/applications. Too many applications use Exec for desktop files elsewhere without the standard PATH. + [RA] Ignore Exec fields pointing to kcmshell. + [RA] Ignore desktop files in /usr/share/doc or that appear to be templates. + [RA] Avoid uninitialized warnings on all-whitespace commands. * checks/menus: + [RA] Find the targets of hard links correctly. (Closes: #444355) + [RA] Use the three-argument form of open to not fail on doc-base files ending in whitespace. Error on doc-base files with Document fields that end in whitespace, since currently they break multiple tools. Thanks, Ian Zimmerman. (Closes: #444889) * checks/nmu.desc: + [RA] Remove obsolete note about binary NMUs. Patch from Thijs Kinkhorst. (Closes: #437925) * checks/scripts{.desc,}: + [RA] We now have a csh package. Allow it as an alternative for csh script dependencies. Thanks, Bernd Zeimetz. (Closes: #440825) + [RA] Allow install-sgmlcatalog --remove in postinst as well as prerm and suggest removing it entirely in the long description. * checks/version-substvars.desc: + [RA] Properly escape < and >. * collection/changelog-file{.desc,}: + [RA] Collect NEWS.Debian as well as changelog. lintian (1.23.34) unstable; urgency=low The "brown paper operator" release. * frontend/lintian: + [RA] Use =~ with regexes, not eq. Thanks, Guillem Jover. (Closes: #436180) lintian (1.23.33) unstable; urgency=low The "menu and cruft reorganization" release. * checks/common_data.pm: + [CW] Add automaken as a known virtual package. + [CW] Update architectures to dpkg 1.14.5, adding solaris-* and lpia. + [RA] Add %known_obsolete_emacs. * checks/cruft{.desc,}: + [RA] Check for .git directories in source packages. Thanks, Julien Cristau. (Closes: #433516) + [RA] Substantially rewrite how all cruft checking against source packages is done, incorporating debdiff in the process. There are now two tags for most source package cruft problems: one for files introduced in the Debian diff or in a native package, and one for files present upstream. The former is at warning severity and the latter is at info severity, since it's usually not worth repackaging the upstream source to remove such files. In the process, standardize the names of all of the tags and pull the regexes out into data instead of code for easier maintenance. (Closes: #434744) * checks/debdiff{.desc}: + [RA] Removed, incorporated into checks/cruft. * checks/debian-readme: + [RA] Replace all uses of tag_error and tag_warn with just tag. * checks/fields{.desc,}: + [RA] Tag packages listing emacs21 as the preferred Emacs flavor in a dependency. Thanks, Tatsuya Kinoshita. (Closes: #434978) + [RA] Start tagging unversioned dependencies on coreutils again since the transition from fileutils is long-since finished. Thanks, Guillem Jover. (Closes: #436058) * checks/files{.desc,}: + [RA] Check for .git directories in binary packages. * checks/menu-format{.desc,}: + [RA] Switch to the new menu hierarchy, which will be in the next release of Policy. Add specific checks for the major renamings to hopefully cut down on the confusion and provide some specific guidance. Remove the code that allowed for applications to create new sub-menus, since the current menu documentation says not to do that. (Closes: #431844) + [RA] Add checks of desktop files. The checks so far are basic, but do include key and category verification. Based heavily on work by Javier Fernández-Sanguino Peña. (Closes: #277441, #433411) * checks/scripts{.desc,}: + [RA] If rm output is redirected to /dev/null, don't think that rm is removing /dev/null. Thanks, Robert Luberda. (Closes: #431259) + [RA] xjed also provides jed-script. Thanks, Jörg Sommer. (Closes: #431629) + [RA] Don't complain about ruby libraries in /usr/lib/ruby that have shebang lines. This is a common means for embedding unit tests in Ruby libraries. Thanks, Paul van Tilburg. (Closes: #431545) + [RA] Don't push depending directly on update-inetd in the long description of maintainer-script-needs-depends-on-update-inetd. Most packages should depend on inet-superserver. Leave the check the same for the time being, however. + [RA] Replace all uses of tag_error and tag_warn with just tag. * checks/shared-libs: + [RA] Exclude udebs from dependency checking in the shlibs files since binary packages may legitimately declare udeb dependencies on other packages. Thanks, Loïc Minier. (Closes: #431395) * checks/spelling: + [RA] Replace all uses of tag_error and tag_warn with just tag. * checks/version-substvars: + [RA] Don't skip other checks for binNMUability when warning about the deprecated ${Source-Version} substvar. Thanks, Lior Kaplan. (Closes: #432959) * frontend/lintian: + [RA] Add \w+-backports to the known distribution list. Thanks, Vincent Danjean. (Closes: #432268) * lib/Tags.pm: + [RA] Replace any newlines in the extra information to the tag function with \n. * man/lintian.1: + [RA] Remove the mention of the debdiff check script. lintian (1.23.32) unstable; urgency=low The "stability of output" release. * checks/binaries: + [RA] Sort the package SONAMEs to provide more stable lintian tags. Patch from Cyril Brulebois. (Closes: #428681) * checks/files{.desc,}: + [RA] Limit the Zope license exception to only .dtml, .pt, and .cpt files. Thanks, Bernd Zeimetz. + [RA] Sort the files listed in package-contains-hardlink so that the lintian output is stable regardless of the hash order of the directory when the tar file was built. + [RA] Don't incorrectly skip all other file location checks for hard links. + [RA] Check for files installed in /usr/lib/sgml. This transition was probably completed long ago, but checking for regression can't hurt. (Closes: #90019) * checks/manpages{.desc,}: + [RA] Check for dh_make man page templates (by looking for the template whatis entry). Thanks, Bill Allombert. (Closes: #173583) * checks/menus: + [RA] Avoid a quadratic search of the files in the package on doc-base files that list tons of files individually. This speeds up a lintian check of openoffice.org-dev-doc enormously. * checks/po-debconf: + [RA] Close the template file handle between files so that the line numbers for translated default fields are correct. * checks/rules{.desc,}: + [RA] Check for ignoring all errors from make clean or make distclean and recommend skipping the call if there's no Makefile instead. Thanks, Branden Robinson. (Closes: #325372) * checks/scripts{.desc,}: + [RA] Add Octave as an interpreter, and allow both versioned and unversioned forms. Thanks, Sebastian Harl. (Closes: #428403) + [RA] Check for deprecated install-sgmlcatalog usage. * checks/shared_libs: + [RA] Report the correct file for shlib-with-nonpic-code rather than the last shlib in the package. (Closes: #429840, #429528) * frontend/lintian: + [RA] Don't require -v in order to report unused overrides; they're already info-level tags, which is enough hiding. + [RA] Remove old dead unused override code. * reporting/html_reports: + [RA] Fix a Perl warning when generating the clean maintainer pages. * unpack/unpack-binpkg-l1: + [RA] Sort the output of tar tfv by filename so that the lintian output will be stable regardless of the hash order of the directory when the tar file was built. lintian (1.23.31) unstable; urgency=low The "back under 100 open bugs" release. * checks/changelog-file: + [RA] Only check for missing colons in bug closers in the most recent changelog entry. Thanks, Thijs Kinkhorst. (Closes: #423171) * checks/common_data.pm: + [RA] Update architectures to dpkg 1.14.1. Remove all linux-* architectures and add armel. (Closes: #421995) * checks/control-files.desc: + [RA] Change unknown-control-file to a warning, since Policy only discourages it and doesn't outlaw it. (Closes: #287209) * checks/cruft: + [RA] Allow any automake package to satisfy the autotools-dev build dependency for suppressing warnings about out of date autotools helper files. (Closes: #417067) * checks/fields: + [RA] Require libmodule-build-perl in Build-Depends if the clean rule runs perl Build. Hopefully this isn't too aggressive. Thanks, Ian Beckwith. (Closes: #421549) * checks/files: + [RA] Don't warn about LICENSE files in Zope products, since they may be used for runtime display. (Closes: #424164) * checks/manpages: + [RA] Avoid false positives on binaries with X11 in the name. Patch from Kevin B. McCarty. (Closes: #423229) * checks/menu-format.desc: + [RA] Improve the pkg-not-in-package-test long description and add a manual reference. (Closes: #423519) * checks/menus: + [RA] Allow multiple blank lines between doc-base sections and trailing blank lines in the file. doc-base is fine with this. Reported by Luis Rodrigo Gallardo Cruz. (Closes: #423096) * checks/scripts: + [RA] Add pagsh, provided by openafs-client and heimdal-clients. + [RA] Diagnose removal of device files in maintainer scripts per Policy 10.6. (Closes: #268688) + [RA] Add jruby1.0. Thanks, Sebastien Delafond. (Closes: #426950) + [RA] Add jed and friends. Thanks, Jörg Sommer. (Closes: #426469) + [RA] Move several maintainer script checks specific to shell scripts inside the conditional so that they won't run on maintainer scripts not written in shell. + [RA] Diagnose maintainer scripts looking at /var/lib/dpkg/status directly. Thanks, Guillem Jover. (Closes: #426628) + [RA] Diagnose direct modifications to /etc/services, /etc/protocols, /etc/rpc, and /etc/inetd.conf in maintainer scripts. (Yes, an eight-year-old bug!) (Closes: #32532) * checks/version-substvars{.desc,}: + [RA] Add a check for deprecated ${Source-Version} substvars. Patch from Guillem Jover. (Closes: #427577) * frontend/lintian-info: + [CW] Fix uninitialized value warning after reading a blank line. lintian (1.23.30) unstable; urgency=low The "beating false positives off with a stick" release. * checks/common_data.pm: + [RA] Add mktemp and sysvinit-utils as known essential packages. + [RA] Add Vcs-Mtn and Vcs-Browser to the known source package fields. + [RA] Add Kernel-Version to known udeb control fields. * checks/control-files: + [RA] Allow clilibs, but don't try to check the syntax of it yet. Thanks, Sebastian Dröge. (Closes: #378088) * checks/copyright-file: + [RA] Exclude the Affero General Public License from the check for references to the shared GPL copy. (Closes: #420077) + [RA] Replace yet another hand-rolled dependency parser with Dep. * checks/cruft{.desc,}: + [RA] Check for svk commit message files. * checks/debconf{.desc,}: + [RA] Remove the dependency check for SETTITLE since all debconf implementations back to oldstable support it. + [RA] Reduce the dependency check for error templates to info since all debconf implementations back to stable support it. * checks/debhelper{.desc,}: + [RA] Downgrade the dependency check for dh_python and the Python policy to info since all debhelpers back to stable support it. + [RA] Downgrade the dependency check for compatibility level V5 to info since all debhelpers back to stable support it. * checks/fields{.desc,}: + [RA] The CDBS Python rules only call pycentral or pysupport during the binary targets, so those dependencies can be safely moved to Build-Depends-Indep. Still allow them in Build-Depends, though, since that's where CDBS likes to put them. Thanks, Tristan Seligmann. (Closes: #420526) + [RA] Allow the Python core packages themselves to depend on python-minimal. + [RA] Remove the version constraints for python-central and python-support dependencies since stable released with a working version and they weren't in oldstable. + [RA] Remove the dependency check on dh_installxfonts for the X.Org transition since the debhelper released with stable does the right thing and this dependency is not useful for backports to oldstable. + [RA] Remove the version on the quilt dependency check. It's not worth the effort to maintain a separate version check for oldstable backports. (Closes: #420160) * checks/files{.desc,}: + [RA] Check for svk commit message files. + [RA] Don't consider {copying,license}.dtd extra license files; the Mozilla suite uses them for non-licenses. (Closes: #420558) + [RA] Use $pkg rather than reading fields/package for the x11-common pre-depend check. + [RA] Allow x11-common to install /usr/X11R6/bin. + [RA] Downgrade the pre-depends on x11-common requirement for packages installing into /usr/include/X11 or /usr/lib/X11 to info since it's only needed for upgrades from sarge or early etch. * checks/md5sums: + [RA] Don't warn about a missing md5sums file if the package contains nothing for which we would generate an MD5 checksum. Thanks, Andreas Beckmann. (Closes: #420465) * checks/manpages: + [RA] Cope with more uses of - in *roff escapes that don't need hyphen warnings. + [RA] Don't consider a binary an X binary if it's a symlink into /etc/X11. (seyon does something weird but probably legitimate.) + [RA] Fix manpage-for-non-x11-binary-in-wrong-directory and manpage-for-x11-binary-in-wrong-directory output. (Closes: #295072) * checks/menus{.desc,}: + [RA] In doc-base control files, check for Index fields for HTML and Info documents and require that each section after the header have a Format field. Thanks, Bernhard R. Link. (Closes: #419847) * checks/rules: + [RA] Listing a rule as a dependency of .PHONY is sufficient to mark it as present for GNU make and hence sufficient for Policy's requirement. Thanks, Peter Eisentraut. (Closes: #419446) * checks/scripts{.desc,}: + [RA] Packages calling update-xmlcatalog must depend on xml-core. Also avoid false positives when a package itself provides the program its maintainer scripts use. Thanks, Daniel Leidert. (Closes: #419461) + [RA] Check for maintainer scripts calling read (but exclude those that include /usr/share/debconf/confmodule on the grounds that they're probably only using it as a fallback). Based on a patch by Luk Claes. (Closes: #231770) + [RA] Add pike7.6 and ruby1.9 as valid interpreters. + [RA] Diagnose use of /bin/env with a more specific message than the generic unusual interpreter tag. + [RA] Remove the version constraint on the gconf-schemas check since all versions of gconf2 back to stable provide this script and it's not worth maintaining a separate check for oldstable backports. * checks/shared-libs{.desc,}: + [RA] Warn if a package declares dependencies in its shlibs control file that cannot be satisfied by that package (including via Provides). (Closes: #56440) * reporting/harness: + [RA] Include overridden tags in the lintian output so that we can do statistical reporting on them and see them in lintian.log. * reporting/html_reports: + [RA] Create stub pages for maintainers with only lintian-clean packages. (Closes: #305173) + [RA] Sort packages on each maintainer's page. + [RA] Report statistics on info tags as well. + [RA] Generate better file names for maintainer pages with weird characters. + [RA] Fix Perl warnings. lintian (1.23.29) unstable; urgency=low The "look at all the stuff that accumulated during the etch freeze" release. * COPYING: + [CW] Update to current text of GPL v2 (which talks about the GNU Lesser General Public License rather than Library, etc.; no functional changes). * checks/changelog-file{.desc,}: + [RA] Check for bug closers without a colon after closes, but only if there are at least six digits in the bug number and no non-digits. Suggestion from Jari Aalto. (Closes: #373918) * checks/copyright-file{.desc,}: + [JA] Update usr-doc-* test to report user-share-doc-* instead. New tests added: postinst-should-not-set-usr-doc-link, doc-base-file-references-usr-doc. Patch from Thijs Kinkhorst. (Closes: #406349). * checks/common_data.pm: + [JA] Perl syntax corrections. + [JA] Support the Autobuild: and Vcs-* fields in .dsc files. Applied patch to implement this by Ian Beckwith. (Closes: #403553). * checks/control-file: + [RA] Allow source in main to generate contrib packages. Thanks, Bdale Garbee. (Closes: #401881) * checks/cruft{.desc,}: + [RA] Use Dep to check autotools-dev build dependency rather than rolling our own dependency parsing, thus avoiding problems when it's the first dependency. Thanks, Tilman Koschnick. (Closes: #412406) + [RA] Mention that including CVS or .svn directories in a release tarball should generally be reported as an upstream bug. Qualify the statement that export should be used instead of checkout to refer to snapshot packaging. Thanks, Jari Aalto. (Closes: #373668) + [RA] Allow a build dependency on automake to satisfy the autotools-dev requirement since users may use autoreconf to update config.{sub,guess}. Thanks, Jordà Polo. (Closes: #417067) * checks/debconf: + [RA] Rather than munging dependencies to cope with the various implementations of debconf, take advantage of our new dependency comparison routines and check the full correct dependency. This should really fix problems with checking the dependencies for settitle. Patch from Damyan Ivanov. (Closes: #349616) + [RA] Check that an appropriate versioned dependency on debconf and/or cdebconf is present if error template types are used. Thanks, Christian Perrier. (Closes: #416140) * checks/debhelper.desc: + [RA] Use consistent file naming when diagnosing possibly conflicting debhelper compat settings. Thanks, Jari Aalto. (Closes: #409122) * checks/fields{.desc,}: + [RA] Add an exception to maintainer-not-full-name for Wookey and a comment to consider removing the check if we get more false positives. Thanks, Neil Williams. (Closes: #406731) + [RA] Rename build-depends-indep-should-be-build-depends to clean-should-be-satisfied-by-build-depends to make the reason for the message clearer without running lintian -i. Thanks to Osamu Aoki for the suggestion. (Closes: #405840) + [RA] Recognize the +bX convention for binary NMUs. Warn about use of the old three-part version numbers. * checks/files{.desc,}: + [RA] Diagnose creation of subdirectories of /usr/bin other than mh and the legacy X11 directory. (Closes: #417912) * checks/manpages: + [RA] When checking for hyphen used as a minus sign, avoid false positives on \s-1 (small font) and \*(-- (pod2man long dash). + [RA] Display the full path for binary-without-manpage tags to make it easier to track down problems. + [RA] Ignore binaries in subdirectories of the normal binary directories (other than /usr/bin/X11 and /usr/bin/mh). These should be caught by other checks and the man page warnings would likely be confusing noise. * checks/menu-format{.desc,}: + [RA] If a menu icon isn't an absolute path, only look for it in /usr/share/pixmaps, not in the old X11R6 paths. Update the long tag description accordingly. * checks/menus: + [JA] Perl syntax corrections. Removed extra empty newlines. * checks/lintian.desc: + [RA] List emergency as a valid urgency. * checks/nmu{.desc,}: + [RA] List the exact phrases recognized by lintian as marking an NMU. Reported by Jari Aalto. (Closes: #409108) + [RA] Recognize the +bX convention for binary NMUs. * checks/po-debconf: + [RA] Now that we're passing --use-untranslated to msgcmp, we have to compare the generated pot file with the one in the package both directions to catch all out of date errors. Thanks, Thomas Huriaux. (Closes: #402662) * checks/rules{.desc,}: + [RA] Fix the policy section for debian-rules-missing-required-target and debian-rules-not-a-makefile. Thanks, Daniel Kahn Gillmor. (Closes: #414964) + [RA] Warn about use of $(PWD) instead of $(CURDIR). + [RA] Setting DH_COMPAT globally in debian/rules is now deprecated in favor of debian/compat. Patch from Luk Claes. (Closes: #330025) * checks/scripts{.desc,}: + [RA] update-inetd is now its own package and netbase may not always depend on it. Update the check to require a dependency on update-inetd, inet-superserver, or one of the inet-superserver packages that provides update-inetd. Reported by Tatsuya Kinoshita. (Closes: #402319) + [RA] Mention SUSv3 in the bashism and non-posix tag descriptions, note that use of test -a/-o and local aren't bugs but may still be worth avoiding, and mention short circuiting of && and ||. (Thanks to Jari Aalto for the latter). + [RA] Add /usr/bin/gbr2, provided by gambas2-runtime. Thanks, José "L. Redrejo" Rodríguez. (Closes: #403515) + [RA] Add /usr/bin/jruby0.9, provided by jruby0.9. Thanks, Sebastien Delafond. (Closes: #418105) * doc/README: + Document --color option. Based on a patch from Loïc Minier. * depcheck/deppages.pl: + [JA] Perl syntax corrections. * depcheck/report2html.pl: + [JA] Perl syntax corrections. * frontend/lintian: + [JA] Removed trailing spaces and other perl syntax corrections. + [RA] Add --color option to optionally colorize lintian tags based on their severity. Based on a patch from Loïc Minier. + [RA] Accept emergency as a valid urgency and check urgencies case-insensitively since that's what Policy specifies. Thanks, Joey Hess. (Closes: #412577) * frontend/lintian-info: + [RA] Ignore ANSI color sequences when parsing lintian tags. * lib/Checker.pm + [JA] Perl syntax corrections. * lib/Lab.pm + [JA] Perl syntax corrections. * lib/Tags.pm + [JA] Perl syntax corrections. + [RA] Support for colorizing lintian tags based on their severity. Based on a patch from Loïc Minier. (Closes: #399714) * man/lintian.1: + [RA] Document --color. Based on a patch from Loïc Minier. * unpack/unpack-*pkg* + [JA] Perl syntax corrections. lintian (1.23.28) unstable; urgency=high * collection/objdump-info: + [RA] Remove unsafe temporary file creation in left-over debugging code added accidentally when fixing #399456. Thanks, Josh Triplett. (Closes: #414237) lintian (1.23.27) unstable; urgency=low The "we haven't run this against the whole archive in a while" release * checks/binaries{.desc,}: + [RA] Tag unrecognized ELF binaries as apparently corrupted rather than failing with a note that binutils-multiarch is required. Some packages have had ELF binaries recognized by file but unreadable. Reported by Bill Allombert. (Closes: #399456) * checks/infofiles: + [RA] Don't consider /usr/share/infon to be an info directory. Reported by Joachim Breitner. (Closes: #399857) * checks/md5sums: + [RA] Also don't complain about missing md5sums for files in /var/lib/ispell as they're changed after installation. Thanks, Agustin Martin. (Closes: #401070) * checks/po-debconf: + [RA] gettext 0.16's msgcmp requires --use-untranslated when checking for newer templates than PO files or it gives false positives for every package. Thanks, Damyan Ivanov. (Closes: #400957) + [RA] Don't consider directories to be stray template files even if named template. Thanks, Thomas Huriaux. (Closes: #401442) * checks/shared-libs: + [RA] Don't report shlib-with-non-pic-code unless we're sure that we're looking at a shared library. Otherwise, we get many false positives on some platforms where text relocations are normal for binaries. Reported by Bill Allombert. (Closes: #399525) * collection/file-info: + [RA] Unescape non-ASCII characters escaped by tar before running file on the resulting filename. Otherwise, file can't find the file, exits with an error, and lintian aborts. Reported by Bill Allombert. (Closes: #399392) * collection/objdump-info: + [RA] Include unrecognized format errors from objdump in the output rather than aborting; some packages contain apparently corrupt ELF binaries. * debian/control: + [RA] Depend on gettext 0.16 or later for --use-untranslated. * lib/Lab.pm: + [RA] Preserve the old package lists when setting up a static lab so that the unpack programs can build a list of changed packages and incremental mode works. Thanks, Bill Allmobert. (Closes: #400342) * unpack/list-udebpkg: + [RA] Handle compressed udeb Packages files. Thanks, Bill Allombert. (Closes: #400338) lintian (1.23.26) unstable; urgency=low * checks/binaries{.desc,}: + [RA] Add a policy reference for unstripped-binary-or-object. Thanks, Bas Wijnen. (Closes: #394419) + [RA] Add a special exception to the shared library dependency check for the dynamic loader itself. * checks/changelog-file.desc: + [RA] Downgrade to a warning several errors with changelog files, including compression and a text version of HTML changelogs, that are only shoulds in Policy. (Closes: #289723) + [RA] Cleaned up language and use of unbalanced single quotes in numerous descriptions. * checks/control-file{.desc,}: + [RA] Diagnose a control file that creates binary packages in a different archive category from the source package or the other binary packages. Idea from Yann Dirson. (Closes: #394720) + [RA] Close opened files. + [RA] Add info-level check for Section in the source section of the control file. (Closes: #322244) * checks/cruft{.desc,}: + [RA] Tighten the timestamp check on config.{sub,guess} to look for files dated 2004 or newer, since that's when x86_64 was added. Increase to an error at the request of Ryan Murray since we already suppress this warning of config.{guess,sub} are modified by the Debian patch or if the package build-depends on autotools-dev. (Closes: #190897) * checks/debconf{.desc,}: + [RA] Take into account comma escaping when checking the number of translated choices. Reported by Frans Pop. (Closes: #395028) + [RA] Only require debconf be loaded in the postinst script if a config script exists. Reported by Josselin Mouette. + [RA] Require pre-depends on debconf if debconf is used in the preinst script. Update the long description to deprecate only depending on debconf and falling back on another configuration system. Reported by Josselin Mouette. (Closes: #395468) + [RA] Warn of debconf notes displayed with low or medium priority, with an exception for Policy-required device file warnings. Based on a patch by Thomas Huriaux. (Closes: #389070) + [RA] Close files after opening them, fixing incorrect line numbers when reporting problems with config scripts. * checks/debdiff{.desc,}: + [RA] Check for creation of ~ and .xxx.swp backup files in the Debian diff, but only at the info level for now since they cause no harm. (Closes: #332770) * checks/fields{.desc,}: + [RA] Clarify in missing-build-dependency why lintian does not take into account transitive build dependencies. (Closes: #393975) + [RA] Avoid Perl warning when diagnosing a Python-Version of the form "all, >= 2.4". Thanks, Thijs Kinkhorst. (Closes: #394104) + [RA] Teach the debian/rules parsing about make conditionals and don't require build dependencies for lines encountered inside a conditional (in other words, assume people using conditionals know what they're doing). Fixes a false positive due to the unusual arch-specific build dependencies for openoffice.org, reported by Rene Engelhard. (Closes: #380286) * checks/files{.desc,}: + [RA] Check for vim .swp files in the package. + [RA] Split the warning for NFS temporary files into a separate tag from the warning for editor backup files. * checks/infofiles: + [RA] Close opened files. + [RA] debhelper no longer adds a --section flag to install-info, so don't warn about any install-info invocation without --section. Instead, check each info file for INFO-DIR-SECTION and diagnose calling install-info without --section if any info file is missing this information. (Closes: #97502, #398670) + [RA] Checks for the compression and suffixes of info files were not being run due to a mistake in specifying either /usr/info or /usr/share/info as an info directory. Re-enable them. * checks/md5sums{.desc,}: + [RA] Add a tag for a missing md5sums control file, but only at info level, at least for now. (Closes: #133027) + [RA] Do better syntax checking of the md5sums control file and report malformed lines as a tag rather than aborting lintian. + [RA] Downgrade file-missing-in-md5sums to a warning since it doesn't break the package or debsums and may be intentional. * checks/menu.desc: + [RA] Remove stray commas in Ref strings since the reporting code considers commas to be separating two different references. * checks/menu-format{.desc,}: + [RA] Support the sux, gksu, and kdesu wrappers in menu commands as well as su-to-root. (Closes: #360227) + [RA] Fix tag name for menu-icon-cannot-be-parsed. Thanks, Bill Allombert. (Closes: #399245) * checks/po-debconf{.desc,}: + [RA] Check for misnamed PO files in debian/po, which cause translations to be merged into the template with the wrong names and not found. Based on a patch by Thomas Huriaux. (Closes: #387360) * checks/shared-libs: + [RA] Calling ldconfig is also required for libraries installed in various subdirectories of its standard search path based on hardware capabilities. Reported by Aurelien Jarno. (Closes: #396278) * debian/rules: + [RA] Exclude testset/diffs/binary.c~ from dh_clean. * frontend/lintian: + [RA] Add --fail-on-warning option to exit with non-zero status if any warnings were found. Thanks, Daniel Bonniot. (Closes: #189656) * man/lintian.1: + [RA] Document --fail-on-warning. lintian (1.23.25) unstable; urgency=low The "dependency and debconf" release * checks/debconf: + [CW] Don't trigger partially-translated-question when Choices-C exists but not Description-C. + [RA] Remove select-with-translated-default-field since there are cases where this is correct and we can perform a better check against the source package. Patch from Thomas Huriaux. + [RA] Fix Perl warnings when a template has no type. * checks/debdiff: + [RA] Remove the source-tar-is-posix-tar tag. This was only a problem for woody and earlier, and woody support is no longer needed. Reported by Loïc Minier. (Closes: #385833) * checks/fields{.desc,}: + [RA] Improve the long descriptions of the warnings about dependencies on essential or build-essential packages to make it clearer that the correct resolution is normally to omit the dependency and why. + [RA] Add a check for duplicate build dependencies. (Closes: #359178) * checks/files: + [RA] Don't consider files named license.rb to be extraneous licenses. Patch from NIIBE Yutaka. (Closes: #387269) * checks/init.d: + [RA] Correctly handle LSB keywords which are present but have an empty value. Reported by Erich Schubert. (Closes: #386968) * checks/lintian.desc: + [RA] Add tags for missing and bad Urgency fields in *.changes files. + [RA] Improve the no-description-in-changes-file information. * checks/md5sums: + [RA] aspell dictionary packages may ship files in /var/lib/aspell that should not have MD5 checksums in md5sums because they change after installation. Don't complain that those files are missing. * checks/po-debconf: + [RA] Avoid Perl warnings on .po files that don't contain msgstr lines. Patch from Thomas Huriaux. (Closes: #387357) + [RA] Check templates for a translatable Default or DefaultChoice field and warn if there isn't a translator comment. Patch from Thomas Huriaux. (Closes: #388824) * checks/scripts: + [RA] Add /usr/bin/gosh from the gauche package to the list of valid interpreters. Thanks, Tatsuya Kinoshita. (Closes: #386798) + [RA] Add a separate tag for tclsh dependencies to explain about the virtual package and improve the description of the wish virtual package in its tag. Fix inverted logic that got the wish dependency backwards. Reported by Hamish Moffatt. (Closes: #387845) + [RA] Allow tcsh to satisfy a csh dependency. Reported by Yann Dirson. (Closes: #389615) + [RA] Improve the check for shell scripts that are actually exec wrappers around scripts written in another language. + [RA] Allow update-inetd to fulfill the dependency requirements for the update-inetd script. Thanks, Michael Holzt. (Closes: #389960) * frontend/lintian: + [RA] Check the existence and value of the Urgency field in *.changes files. (Closes: #384219) * lib/Dep.pm: + [RA] Improve the dependency resolution engine so that it can prove aa|bb implies aa|bb|cc. Fix the comparison of dependencies for inverse implication to catch many more cases. (The latter code isn't currently used in lintian.) + [RA] Add an unparse function to take an internal representation and convert it back to human-readable text. + [RA] Significantly improve and rewrite the get_dups function to only find relations that imply each other and to return the complete duplicate dependencies in sets. * man/lintian.1: + [RA] Document setting TMPDIR to change the location of lintian's temporary lab. (Closes: #388786) lintian (1.23.24) unstable; urgency=low The "LSB init script" release * checks/control-files: + [RA] perm2oct definition moved to Util.pm. * checks/cruft{.desc,}: + [RA] Remove the (info-level) check for .cvsignore files in the source tarball. This isn't an error; those files contain metadata that may be useful for people making modifications and it's quite common to distribute them. * checks/debconf{.desc,}: + [RA] Diagnose unknown priorities in db_input and db_text invocations. Patch from Thomas Huriaux. (Closes: #386014) * checks/fields{.desc,}: + [RA] Depending on versioned variants of python-minimal is also an error. Thanks, Adeodato Simó. (Closes: #384476) * checks/files: + [RA] perm2oct definition moved to Util.pm. * checks/init.d{.desc,}: + [RA] Added a warning for init scripts missing an LSB keyword section, checks of the syntax of such a section if present, and some basic semantic checks of the easiest fields. Based on initial work by Carlos Villegas. (Closes: #377740) * checks/menus: + [RA] perm2oct definition moved to Util.pm. * checks/scripts: + [RA] Properly concatenate the dependencies for a package when checking whether the dependency for an interpreter is included. Thanks, Vincent Danjean. (Closes: #385178) * checks/shared-libs: + [RA] perm2oct definition moved to Util.pm. * lib/Util.pm: + [RA] Move perm2oct to here and improve recognition of s, S, t, and T characters. Thanks to Justin B. Rye for patch. (Closes: #376119) lintian (1.23.23) unstable; urgency=low The "new Python policy" release * checks/binaries.desc: + [RA] Greatly expand the binary-or-shlib-defines-rpath long description based on recent discussion in debian-policy. Add a reference to the wiki page. (Closes: #378054, #378055) * checks/changelog-file{.desc,}: + [RA] Diagnose changelog files that are symlinks, using the new way the changelog-file collection script processes them. * checks/common_data.pm: + [RA] Add Python-Version as a known source and binary field. * checks/copyright-file: + [RA] Catch "<fill in http/ftp site>" as well as the string without "http/". Thanks, Jari Aalto. (Closes: #374167) * checks/deb-format{.desc,}: + [RA] Remove deb-created-with-broken-tar; the bug was actually in dpkg, and the dpkg in stable has been fixed. Thanks Jari Aalto and Thijs Kinkhorst. (Closes: #375638, #376030) * checks/debconf: + [RA] Diagnose a missing template description only once and avoid Perl warnings. Thanks, Thomas Huriaux. (Closes: #377654) * checks/debhelper: + [RA] Use the standard control file parser rather than a custom parser that can't handle continuation lines. + [RA] Warn if dh_python is used without debian/pycompat in non-CDBS packages and check for the debhelper version required for Python policy. Thanks, Raphaël Hertzog. (Closes: #375318) * checks/fields{.desc,}: + [RA] Don't warn virtual-package-depends-without-real-package-depends for Recommends and rewrite the tag description to be more accurate. Thanks to Martin F. Krafft for the report. (Closes: #370720) + [RA] ~ is now permitted in version numbers. (Closes: #381965) + [RA] Catch and check dependencies correctly for debconf-updatepo run from the clean target. Thanks, James Westby. (Closes: #380399) + [RA] Warn when encountering an aspell dictionary package that isn't arch: all. Thanks, Piotr Engelking. (Closes: #374899) + [RA] Check the syntax of the new Python-Version field. + [RA] Check for missing build dependencies on python-central or python-support. Thanks, Raphaël Hertzog. + [RA] Check for old << dependencies on Python in Python packages that lack a Python-Version control field, as these are probably packages that don't follow the new Python policy. Thanks, Raphaël Hertzog. * checks/files{.desc,}: + [RA] Provide a better explanation of why Debian packages shouldn't ship files in /srv. (Closes: #379176) + [RA] Warn about files installed into /etc/gconf/schemas. + [RA] Warn about files in /usr/lib/site-python. Thanks, Thomas Viehmann and Raphaël Hertzog. (Closes: #372748) * checks/manpages{.desc,}: + [RA] Warn about manpage short descriptions of the form "manual page for program" (usually generated by help2man). * checks/menu: + [RA] Ignore trailing whitespace in doc-base files. Patch from Bas Zoetekouw. (Closes: #379749) * checks/nmu{.desc,}: + [RA] When checking for an NMU changelog entry, require "NMU" be surrounded by word boundaries. + [RA] Warn if the changelog incorrectly indicates an NMU. Thanks to George Danchev for the report. * checks/scripts{.desc,}: + [RA] Except mkstemp from possibly-insecure-handling-of-tmp-files for maintainer scripts written in Perl. + [RA] Mention [[ ]] explicitly in the possible-bashism long description as requiring a Korn shell and make it clearer that the primary arbiter of this test is the POSIX shell specification. (Closes: #381800 by clarification) + [RA] Use the Dep library to check dependencies. Add php5 to the interpreter list and correctly handle the dependencies for version-less PHP scripts. (Closes: #379558) + [RA] Check for proper dependencies if gconf-schemas is called in maintainer scripts and diagnose calling gconftool(-2) directly. Thanks, Josselin Mouette. (Closes: #333311) * checks/version-substvars{.desc,}: + [RA] New check from Adeodato Simó for proper use of substvars for versioned dependencies between packages built from the same source package so that NMUs will work properly. Also catch use of such a substvar for a versioned dependency on a package not built from the same source. (Closes: #377141, #376596) * collection/changelog-file: + [RA] Be much more careful about changelog files that are symlinks. Don't skip over changelog symlinks just because they point to non-existent files, mark unsafe symlinks or symlinks to non-existent files by creating copyright as a symlink to a non-existent file in the lab, and don't create an empty dummy changelog if we couldn't find a changelog. Correctly handle changelog files that are symlinks to other files in the same directory. * debian/copyright: + [RA] Add Subversion repository location. * frontend/lintian: + [JvW] Give error if there is no "Description" field in .changes, this is required by dak * frontend/lintian-info: + [RA] Add the -t or --tags option that, given a tag name, prints out the description. (Closes: #376109) * lib/Tags.pm: + [RA] If a tag has been overridden via any mechanism, do not add it to any of the statistics (tag, severity, or significance). Before, the override only suppressed a record for the specific statistic the override was based on, meaning that classic tag-based overrides didn't suppress severity statistics. Overridden error tags would therefore cause lintian to exit with non-zero status. Thanks, Andree Leidenfrost and Martin F. Krafft. (Closes: #377182, #374314) * man/lintian.1: + [RA] Better document the --archivedir and --dist options and how lintian constructs the path to an archive. (Closes: #383203) + [RA] Document new version-substvars check script. * man/lintian-info.1: + [RA] Document the new -t or --tags option. * reporting/html_reports: + [RA] Include the lintian version in HTML page footers. Thanks, Thijs Kinkhorst. (Closes: #377616) lintian (1.23.22) unstable; urgency=low * checks/debconf: + [JvW] Teach lintian to know about the 'error' debconf template question type. (Closes: #374399) + [RA] Exclude debconf templates with "for internal use" in the short description from style checks and document this in the log description of the tags most likely to trigger on internal templates. (Closes: #368206) * checks/common_data.pm: + [RA] Add amd64 to the standard architectures. (Closes: #367324) * checks/debhelper: + [RA] Use the Dep library to check debhelper build dependencies rather than parsing Build-Depends with regexes. This avoids false positives due to matching package names ending in debhelper. Reported by Fabio Tranchitella. (Closes: #366531) * checks/fields: + [RA] Allow build-depend on quilt if clean depends on the xsfclean rule, for packages maintained by the X Strike Force. + [RA] CDBS packages that use the python-distutils class should list Python in Build-Depends, not Build-Depends-Indep, since CDBS wants to use it in debian/rules clean. Thanks, Jan Lübbe. + [HE] Add check for build-deps on build-essential. Yes, people do that. + [RA] Recognize direct invocations of quilt in clean rules and allow Build-Depends on quilt in that case. Reported by Sam Hocevar. (Closes: #374878) + [RA] Fix handling of versioned Build-Depends to avoid spurious build-depends-without-arch-dep warnings. Reported by Marcus Better. + [RA] Don't require Build-Depends on perl even if run explicitly in debian/rules clean, since perl-base may be sufficient. Catch more ways perl could be run, including the common idiom for packages that use Build.PL. + [RA] Downgrade build-depends-without-arch-dep to info from warning. Policy doesn't require using Build-Depends-Indep for arch-independent packages and the test has a lot of false positives. + [RA] Require ant in Build-Depends when using the CDBS ant rule. + [RA] Bypass the build-depends-without-arch-dep check entirely when using ant, since determining which Java dependencies are then permissible in Build-Depends is too complex to do a proper job. Reported by Peter Eisentraut. (Closes: #372190) + [RA] Only allow patch in Build-Depends for yada unpatch, don't require it, since yada depends on patch. (Closes: #375479) * checks/po-debconf: + [RA] Don't consider templates.in to be a stray translated template file. Thanks, Thomas Huriaux. (Closes: #367534) * lib/Util.pm: + [RA] Pass the --wildcards option to tar, now required by a change in the default tar semantics. (Closes: #375246) lintian (1.23.21) unstable; urgency=low * checks/menus: + [RA] Tell Perl where common_data.pm is since we're now including it. Doh. Thanks, Nelson A. de Oliveira. (Closes: #366481) lintian (1.23.20) unstable; urgency=low The "Policy backlog clearing is a wonderful sight" release * checks/debconf{.desc,}: + [RA] Add checks for the Developer's Reference guidelines for debconf templates. Based on a patch by Thomas Huriaux. (Closes: #362145) * checks/fields{.desc,}: + [RA] xfonts-encodings is also not an xfont package. Thanks, Drew Parsons. (Closes: #365503) + [RA] Report errors for dependencies on python-minimal. Thanks to Steve Langasek for the analysis. + [RA] Allow a build-dependency on patchutils when using CDBS with one of the patch systems, as patchutils may be optionally used to check for bad patches. Thanks, Marc Dequènes (Duck). (Closes: #365466) + [RA] Since some packages should be in Build-Depends and some should be in Build-Depends-Indep, report all of the misplaced ones rather than just the first one. That way, users know which to move. + [RA] Allow perl in Build-Depends if invoked in clean rules. + [RA] Allow patch in Build-Depends if yada unpatch is invoked in clean rules. * checks/files{.desc,}: + [RA] Add an explicit check for non-world-readable executables to provide a more detailed explanation and tighten the accepted permissions of setuid and setgid executables to just the permissions mentioned in Policy 10.9. Add Policy 10.9 references to the descriptions. Reported by Piotr Engelking. (Closes: #365452) + [RA] Add a request to the descriptions of setuid and setgid tags to add a lintian override for documentation if the permissions are intentional. + [RA] Report a more specific tag for binaries that are owned by group games but are not setgid. + [RA] Remove the check for files in /usr/lib/cgi-bin. This policy change was reverted. + [RA] Allow files installed in /usr/include/X11 and /usr/lib/X11 but require Pre-Depends on x11-common (>= 1:7.0.0). Remove the duplicate check for files in /usr/bin/X11 since it no longer adds additional information. * checks/menus{.desc,}: + [RA] Check that all files referenced in doc-base control files are present in the package, based on a patch by Robert Luberda. Also check that Index references only one file and that Format names a known format. (Closes: #196122) + [RA] Fix incomplete diagnosis of missing calls to update-menus. + [RA] Change postrm to prerm in the check for a useless install-docs call; calling install-docs in postrm is always a warning and useless calls in prerm were not being diagnosed. * checks/po-debconf{.desc,}: + [RA] Exempt packages that use yada from the POTFILES.in check and from checking for up-to-date templates, since yada does this at build time. Reported by Piotr Roszatycki. (Closes: #321139) + [RA] Check for stray debconf-mergetemplate files in packages using po-debconf. Thanks, Martin Quinson. (Closes: #232442) + [RA] General cleanup of tag descriptions for grammar and markup. Move man page references into Ref fields. * checks/shared-libs.desc: + [RA] Document that exceptions to the -fPIC rule for shared libraries are possible and ask that such exceptions be documented with lintian overrides. * checks/standards-version: + [RA] Update to 3.7.2. (Closes: #366233) + [RA] Report the current standards version when warning about too old or too new versions. Thanks, Jari Aalto. (Closes: #366104) * debian/control: + [RA] Update standards version to 3.7.2 (no changes required). + [RA] Update description to note calibration for Policy 3.7.2. lintian (1.23.19) unstable; urgency=low The "Policy 3.7.0" release * checks/fields{.desc,}: + [RA] python-all-dev also satisfies dh_python's requirements. Thanks, Marc Dequènes (Duck). (Closes: #364943) + [RA] Allow python in Build-Depends if it's invoked explicitly in the clean rule. Thanks, Marc Dequènes (Duck). (Closes: #365030) + [RA] Recognize the CDBS included rule files that indicate dpatch or quilt will be used, check those dependencies, and require that they be in Build-Depends since they're used for clean. Thanks, Marc Dequènes (Duck). (Closes: #365041) * checks/files{.desc,}: + [RA] Add the references to Policy for the deprecation of X11R6 directories now that Policy has been updated in 3.7.0.0. + [RA] Policy now mandates FHS 2.3. Update tag descriptions. + [RA] Warn about files installed in /usr/lib/cgi-bin. Policy now states they should be installed in /usr/lib/cgi-lib. + [RA] Warn about scripts installed on the user's PATH with names that include language extensions (.sh, .pl, .py), per Policy 10.4. + [RA] Report directories under /usr/share/man that don't match the directory layout specified in the FHS. (Closes: #176683) + [RA] Fix a very long-standing bug that caused the check for executable manpages to be silently skipped. * checks/scripts: + [RA] Debian etch release policy explicitly forbids scripts without #! magic and they rely on being run from a shell. Revert the change that permitted the Perl magic without a #! line. Thanks to Piotr Engelking and Steve Langasek for pointing this out. + [RA] Don't syntax-check *.dpatch scripts in /usr/src. bash -n doesn't stop at exit 0 and then may choke on the patch. Thanks, Matthias Klose. (Closes: #364521) * checks/scripts.desc: + [RA] Using invoke-rc.d is now required by Policy. * checks/standards-version: + [RA] Update to 3.7.0. * debian/control: + [RA] Update standards version to 3.7.0 (no changes required). + [RA] Update description to note calibration for Policy 3.7.0. lintian (1.23.18) unstable; urgency=low The "brown paper Python" release * checks/fields{.desc,}: + [RA] Redo handling of build dependencies to allow a custom tag to be specified and to allow a general dependency string to be required rather than a simple package name. As a result, dh_python handling is no longer a buggy special case. Allow either python or python-dev for dh_python and the cdbs Python rules. Thanks, Torsten Merek and Aaron M. Ucko. (Closes: #364297, #364330) + [RA] Require at least quilt 0.40 if /usr/share/quilt/quilt.make is included. Thanks, Michele Baldessari. + [RA] Packages using dh_installxfonts must build-depend on 5.0.31 or later of debhelper for the X.Org 7 transition. lintian (1.23.17) unstable; urgency=low The "happy Nanaimo hacking" release * checks/binaries: + [RA] Detect klibc binaries from their requested interpreter and allow them to appear static. (Closes: #328850) * checks/common_data.pm: + [RA] Include all combinations of cpu and os from the dpkg cputable and ostable files (as of dpkg 1.13.16). (Closes: #337034, #357433) + [RA] Include a list of known X metapackages. * checks/control-file{.desc,}: + [RA] Warn if debian/control in a source package is a symlink. * checks/copyright-file{.desc,}: + [RA] Don't assume mentions of GPL or GNU General Public License after what look like mail headers are referring to the license of the package. Be a bit more specific in the old FSF address check to avoid false positives on other Cambridge, MA addresses. Reported by Adam C. Powell IV. (Closes: #205934) * checks/debconf: + [RA] Allow Indices as a template field. cdebconf uses it and debconf ignores it. Reported by Frans Pop. (Closes: #361986) * checks/debdiff{.desc,}: + [RA] Warn if the diff contains debian/substvars. Based on a patch by Michael Ablassmeier. (Closes: #359646) * checks/debhelper.desc: + [RA] When explaining the warning about deprecated debhelper compatibility versions, mention that debhelper defaults to version 1 if not set anywhere. (Closes: #360711) + [RA] Move simple man page references from Info into Ref. * checks/fields{.desc,}: + [RA] Allow dpatch in Build-Depends for arch-independent packages if it is invoked in clean, build-arch, or binary-arch. + [RA] Only list examples of non-standard architectures, since there are now too many combinations to list completely. + [RA] Catch dependencies on X metapackages, based on a patch by Josh Triplett. No packages are allowed to build-depend, and only packages that look like metapackages (arch: all, no files outside of /usr/share/doc) are allowed to depend. (Closes: #347169) + [RA] Look for an explicit section of unknown, probably left over from dh_make templates, and diagnose it with an error rather than a warning. Reported by Jari Aalto. (Closes: #355032) + [RA] Reorganize dependency checking based on debian/rules analysis. Diagnose missing build dependencies on the helper packages we know about, catch cases where Build-Depends-Indep should be Build-Depends because of the clean target, and make sure users of dh_python build-depend on python. yada is no longer a special case. (Closes: #242789, #278290) + [RA] Check for conflicting with dependencies and build-conflicting with build dependencies. (Closes: #122760) + [RA] Allow xfonts-utils in dependencies. It's not actually an X font package. * checks/files{.desc,}: + [RA] For the X.Org 7 transition, add explicit checks for fonts and binaries installed in /usr/X11R6. Rename the existing check for other files in /usr/X11R6 since the tag had a pluralization error and we want package maintainers to see the error again and reconsider whether to ignore it. No packages should be installing files in /usr/X11R6 going forward. Remove the policy cross-refs for right now until policy catches up. * checks/manpages: + [RA] Use system_env instead of system and sanitize the environment before running man -l out of caution and to avoid extraneous output when CDPATH is set. Reported by Marc Haber. (Closes: #360217) * checks/nmu{.desc,}: + [RA] Warn if debian/changelog in a native source package is a symlink and skip checks rather than aborting if it was a symlink to a file we didn't unpack. (Closes: #257650) * checks/po-debconf: + [RA] Use system_env instead of system out of caution and to avoid extraneous output when CDPATH is set. * checks/rules{.desc,}: + [RA] A new set of checks that parses debian/rules and checks for required rules, debian/rules as a symlink, and the correct first line. Based heavily on previous work by René van Bevern. (Closes: #294926, #311786) * checks/scripts{.desc,}: + [RA] Ignore text inside single quotes and, for most checks, text inside double quotes when checking for bashisms. Reported by Frank Küster. (Closes: #344266) + [RA] Change canonical zsh path to /bin/zsh at the request of the zsh maintainer. (Closes: #360534) + [RA] Change the check for broken error handling with invoke-rc.d to maintainer-script-hides-init-failure to be more generic and explain what the test looks at. Add the script name and line number and fix a typo. Thanks, Marc Haber. (Closes: #360214, #360216) + [RA] Warn when maintainer scripts run init scripts directly and don't use invoke-rc.d. Thanks, Lars Wirzenius. (Closes: #353659) + [RA] Find missing ucf dependencies and restructure the code to allow easier addition of similar checks. (Closes: #261891) + [RA] Add python2.5, lua50, gbx, and gbx2 to the list of valid interpreters. (Closes: #361601, #361644, #362566) * checks/shared-libs: + [RA] Limit shlib-without-PT_GNU_STACK-section to only those architectures where gcc always adds the section. Thanks to Frans Pop for the report and Bastian Blank for the architecture list. (Closes: #357636) * collection/objdump-info: + [RA] Unset CDPATH before running cd to avoid strange effects from the user's environment. + [RA] Run readelf -l to collect interpreter information. * lib/Dep.pm: + [RA] Add initial support for analyzing architecture information in dependencies instead of ignoring it. * lib/Read_taginfo.pm: + [RA] Add support for formatting man page references from Ref. * lib/Util.pm: + [RA] Add system_env, like system but sanitizing the environment. * man/lintian.1: + [RA] Mention the new rules check class. lintian (1.23.16) unstable; urgency=low The "What's this Russ guy up to?" release * checks/binaries{.desc,}: + [RA] Add a check for the new "Invalid operation" error from objdump -T. Skip shared-lib-without-dependency-information for files in /usr/lib/debug. * checks/changelog-file: + [FL] Add line number to output of wrong-bug-number-in-closes. Inspired by #349761 from Steinar H. Gunderson. * checks/common_data.pm: + [FL] Add armeb to %non_standard_archs as requested by Martin Michlmayr. (Closes: #350653) * checks/debconf: + [RA] Packages that depend on dbconfig-common are allowed to have config scripts without templates or an explicit debconf dependency. Reported by Marcus Better. (Closes: #344421) * checks/debconf.desc: + [RA] Clarify the necessary dependencies for packages using SETTITLE. (Closes: #349616) * checks/debhelper: + [RA] Recognize setting DH_COMPAT with := in addition to = in debian/rules. (Closes: #349272) + [RA] CDBS sets DH_COMPAT to 4 but doesn't export it. It does create debian/compat with that value if none was present. Reflect this behavior to avoid spurious compat level warnings when using CDBS. Based on a patch by Jay Berkenbilt. (Closes: #350228) * checks/fields: + [RA] Allow a quilt build-dependency for arch-independent packages if the quilt makefile rules are included. (Closes: #349273) + [RA] If clean depends on a rule that calls dh_clean rather than calling it directly, still allow debhelper in Build-Depends for arch-independent packages. Reported by Michael Stilkerich. + [JvW] Commented that Uploaders no longer will hit the multiline field issue, updated testsuite accordingly * checks/manpages: + [FL] Ignore more warnings ("cannot adjust line", "can't break line") in non-English manpages. (Closes: #349792) + [RA] cd into the parent directory before checking man pages with man so that .so inclusions are processed correctly. Based on a patch by Nicolas François. (Closes: #349614) * checks/menu-format: + [RA] Look for binaries in /usr/X11R6/bin, not /usr/bin/X11, per Policy 11.8.7. Thanks, Matej Vela. (Closes: #354890) * checks/menu-format.desc: + [RA] Use "menu manual" rather than "menu" for references to more clearly distinguish from the Debian Menu Policy. (Closes: #347510) * checks/po-debconf: + [RA] If there are template files in debian, assume the package uses debconf; don't require a dependency or config script. Patch by Thomas Huriaux. (Closes: #353294) * checks/scripts: + [RA] Allow /tmp in variable settings. It's likely to be a false positive. Reported by Frank Küster. (Closes: #344998) + [RA] Make the syntax checking of shell scripts more robust against filenames containing shell metacharacters. Reported by Michael Stilkerich. + [RA] Add fish and expectk to the list of valid interpreters. (Closes: #351624, #353770) + [RA] /usr/bin/tcl is provided by tclx8.3, not tcl. Reported by James R. Van Zandt. (Closes: #351324) + [RA] Allow more variations on leading magic to invoke some interpreter rather than then shell. Bypass the ELF magic check for scripts using magic that relies on having no leading #! line. Reported by Frank Küster. (Closes: #344269) + [JvW] Add check against package suffering from debhelper bug #337664, per Joey Hess, which had broken error detection (Closes: #358523) * checks/shared-libs: + [JvW] Fix postinst-must-call-ldconfig to also get emitted when there is no postinst at all, instead of just one lacking a ldconfig call + [JvW] Implement checks for "udeb:" lines in shlibs files (Closes: #357541) + [JvW] Consider also the soname version for shlibs checking, preventing some bogus 'duplicate' warnings, and actually throw a warning when soname version doesn't match + [JvW] Added error when udeb postinst calls ldconfig, that must never happen (thanks to Frans Pop for noticing, see #203056) * debian/{control,copyright}: + [RA] Add Russ Allbery to Uploaders and copyright. + [JvW] Version dpkg-dev requirement to >= 1.13.17, for unpack/unpack-srcpkg-l2 * frontends/lintian-info: + [RA] Avoid Perl uninitialized value warnings when given output that looks like lintian messages without tags. (Closes: #352606) * collection/objdump-info: + [RA] Pass "Invalid operation" errors from objdump -T on to the check scripts instead of failing. (Closes: #249435) * man/lintian.1: + [RA] Add references to dh_make, debhelper, dpkg-buildpackage, and linda in new reference sections. (Closes: #322288) * man/{lintian.1,lintian-info.1}: + [RA] Left-justify and disable hyphenation for readability. * unpack/unpack-srcpkg-l2: + [JvW] Use -q with dpkg-source to suppress warnings about unsigned source packages. Requires dpkg-dev 1.13.17 lintian (1.23.15) unstable; urgency=low * The "www.no-name-yet.eu" release * debian/changelog: + [FL] Fix wrapping of last changelog entry (Closes: #344899) * checks/common_data.pm: + [FL] Add xlibs-dev and debmake to %known_obsolete_packages * checks/debconf: + [CW] Show template name for empty-translated-choices, mismatch-translated-choices, and unknown-field-in-templates. * checks/debhelper: + [FL] Also check for debhelper build-dependency in debhelper-using cdbs based packages + [FL] Indicate where we found which compat version in declares-possibly-conflicting-debhelper-compat-versions (Closes: #329953) + [FL] Add dh_installtexfonts to list of commands that modify the maintainer scripts + [FL] Try a little harder to find the DH_COMPAT setting in debian/rules (Closes: #348380) * checks/fields: + [FL] Allow version numbers of 0 by correctly checking the output of _valid_version for definedness and not the boolean value (Closes: #345005) + [FL] Better check for false positives of build-depends-without-arch-dep. Should fix false positives for cdbs, dbs, dpatch and yada. Based on a patch by Russ Allbery (Closes: #344609, #321135, #339750) + [FL] Also check for build-dependencies on obsolete packages not only dependencies (Closes: #234531) * checks/fields.desc: + [JvW] Fix typo in description * checks/init.d: + [FL] Only try to validate update-rc.d calls where the name of the script matches [\w.-]+. That accounts for all today known init scripts and eliminates false positives like shell variables in the name (Closes: #343865) * checks/manpages: + [FL] Fix stupid mistake in regex to strip of filenames from roff output (which was hidden by another stupid mistake in the test suite). Patch by Nicolas François (Closes: #347999) * checks/scripts: + [FL] Make mknod-in-maintainer-script an error since this is now a must in policy. Pointed out by Bartosz Fenski (Closes: #344928) + [FL] dpkg --print-installation-architecture is deprecated so delete dpkg-print-architecture-in-maintainer-script + [FL] Add parrot to list of valid interpreters (Closes: #346335) lintian (1.23.14) unstable; urgency=low * The "fix those frontend regressions" release * frontend/lintian: + [FL] Fix exit status computing so that we exit with 1 again if we found any error. (Closes: #329458) + [FL] Re-enable reporting unused overrides. * lib/Tags.pm: + [FL] Some fixes to the statistics code to make the fixes in frontend/lintian possible * checks/binaries{.desc,}: + [FL] support c2a suffix in soname check, too (Closes: #340856) + [FL] fix typo in description of package-name-doesnt-match-sonames (Closes: #339360) + [FL] The Debian specific patches from coreutils to call strip with --remove-section arguments on install -s have been dropped. Adapt description of binary-has-unneeded-section accordingly and demote it to "info" because many packages will get this now. * checks/debconf{.desc,}: + [FL] drop seen-flag-requires-versioned-depends and multiselect-without-dependency and drop version requirement from missing-debconf-dependency-for-preinst. All due to the fact that woody shipped with 1.0.x and therefor versioned depends on versions lesser than that don't make much sense anymore (Closes: #333736) * checks/debhelper: + [FL] debhelper compat level 3 is deprecated as well now (Closes: #340222) * checks/files: + [FL] forgot /lib(32|64) (more #328612 fixes) * checks/menu-format: + [FL] Drop su-to-root-with-usr-bin and su-to-root-without-usr-sbin, and add su-to-root-with-usr-sbin to adapt to current menu package and policy (Closes: #332400) * checks/po-debconf: + [FL] Fix logical error in search for files (Closes: #342707) * checks/scripts{.desc,}: + [FL] Drop install-fvwmgenmenu as valid interpreter. Was dropped from menu package before sarge. (also for #332400, see checks/menu-format) + [FL] Change path for install-menu from /usr/sbin to /usr/bin (also for #332400) + [FL] Merge most of the wrong-path-for-* and *-script-but-no-*-dep tags to two tags wrong-path-for-interpreter and missing-dep-for-interpreter. This makes maintaining the list of valid interpreters way easier. Some tags with special text have been special cased (php\d? and (m|g)awk). + [FL] Add speedy and slsh to list of valid interpreters (Closes: #333955, #336700) * checks/shared-libs: + [FL] forgot /lib(32|64) (hopefully finally closes: #328612) lintian (1.23.13) unstable; urgency=low * The "doesn't contain all the fixes I would like but that's no reason to let the others wait forever" release * debian/control: + [FL] Fix typo in description. Noted by Bill Allombert (Closes: #327859) * checks/copyright-file: + [JvW] Demote FSF address check to warning * checks/description: + [HE] Change description-synopsis-is-duplicated to only be emitted if the synopsis is copied without being extended. (Closes: #316523) * checks/files: + [FL] Add some formats to the exception list for extra-license-file (jpe?g, gif and svg) (Closes: #324944) + [FL] Don't complain about lib(32|64) as unusual directories. Noted by Matthias Klose (partly fixes #328612, see checks/shared-libs for the rest) * checks/infofiles: + [FL] Don't issue install-info-not-called-with-section-option if the call in postinst is really a removal. Experienced by Ben Pfaff in autoconf (Closes: #329170) * checks/po-debconf: + [FL] Previously we only run the checks if we found a templates file and a debconf dependency. Since the latter is mostly generated by ${misc:Depends} nowadays, we now also run the checks if we find a templates and a config file. (Closes: #331672) * checks/scripts: + [FL] PythonX.Y dependency can also be satisfied with pythonX.Y-minimal. Noted by Matthias Klose (Closes: #326643) + [FL] Only match 'local' at the beginning of a line. The check is too ambiguous otherwise. Reported by Marc Haber (Closes: #330548) + [FL] Better reflect the current discussions whether some of the XSI:sms should be allowed in shell scripts by moving some of them to a separate check possible-non-posix-code-in-maintainer-script. Not doing that for kill -NAME as requested since -s NAME is available and should be perfectly portable. (Closes: #323053) * checks/shared-libs: + [HE] Apply patch from Bastian Blank to check for executable stacks in binaries. New checks are called shlib-without-PT_GNU_STACK-section, shlib-with-executable-stack, thanks waldi. (Closes: #321750) + [FL] Add lib(32|64) to ldso directories. Pointed out by Matthias Klose (Closes: #328612) lintian (1.23.12) unstable; urgency=low * The "bad, bad SONAME check" release * all files: + [FL] Update FSF address * debian/control: + [FL] Depend on dpkg-dev since we use dpkg-source. How old exactly is this bug? (Closes: #324673) * checks/binaries: + [FL] Only use sonames from files in common library directories for the soname checks. This avoids many false positives. Patch by Russ Allbery (Closes: #321564) + [FL] Convert the SONAME to lower case before comparing with package name. Suggested by Josh Triplett (Closes: #321206, #325225) + [FL] Try to remove strings added for transition purposes from library package names before comparing package name with SONAME. Pointed out by Rene Engelhard (Closes: #322241, #324121) + [FL] Also remove -udeb strings and substitute lib64 with lib in package name before comparing with SONAME + [FL] Replace any occurrence of _ in the SONAME with - since the former isn't allowed in package names but occasionally used in sonames + [FL] Remove trailing .so from SONAMEs + [FL] Also ignore static binaries in sub directories of /boot, not only in /boot itself. Patch by Guillem Jover (Closes: #320382) * checks/changelog-file: + [FL] Detect old FSF address additionally to the even older one * checks/{cruft,files}{,.desc}: + [FL] Also check for .arch-ids/ {arch}/ .arch-inventory and .bzr/ in packages and sources (Closes: #324255) * checks/debhelper{,.desc}: + [FL] Warn about using debhelper compat version lower than 3 like debhelper itself + [FL] Drop package-lacks-versioned-build-depends-on-debhelper tag for compat versions < 5. With debhelper 4 even in oldstable issuing an error here is silly + [FL] Fix typo (s,debian/control,debian/compat,) in description of declares-possibly-conflicting-debhelper-compat-versions * checks/description{,.desc}: + [FL] Avoid double warning about description-is-dh_make-template in the same way we do it for the corresponding debmake tag + [FL] Policy section of Description field has changed * checks/fields{,.desc}: + [FL] Fix a lot of off-by-one errors in the policy references (caused by the addition of the Uploaders field). Unknowingly pointed out by Russ Allbery + [FL] Also use non_standards_archs when checking source package relations. Patch by Russ Allbery (Closes: #322291) * checks/manpages: + [FL] Don't issue warnings about 8bit characters in translated man pages. Patch by Denis Barbier (Closes: #321650) * checks/scripts: + [FL] Don't issue bashism warning on POSIX character classes ([[:foo:]]). Noted by Stephen Gran (Closes: #323098) + [FL] Remove some useless groupings in the bashism regexes lintian (1.23.11) unstable; urgency=low * frontend/lintian: + [FL] Don't use dpkg --print-installation-architecture since it is deprecated, use dpkg --print-architecture instead. * debian/control: + [FL] Depend on libparse-debianchangelog-perl, require >= 0.6 since prior versions have bugs regarding parse error handling * checks/binaries: + [FL] Check that the package name of a shared library matches the SONAME as defined in the "Library Packaging guide" (Closes: #305575, #313118) * checks/changelog-file{,.desc}: + [FL] Use libparse-debianchangelog-perl to parse the changelog, which detects a lot of syntax errors + [FL] Add a new tag debian-changelog-file-missing-or-wrong-name which is issued if we found no Debian changelog but an upstream changelog since the further checks will treat the latter file as the Debian changelog and only issuing debian-changelog-file-missing would be confusing then (Closes: #285152) + [FL] Detect closes: statements with non-valid bugnumbers, suggested by martin f. krafft (Closes: #294409) * checks/common_data.pm: + [FL] Fix typo (hurd-386 -> hurd-i386) from last release that lead to spurious warnings about unknown architectures (Closes: #318110) * checks/control-file: + [CW] Break control paragraphs at lines containing only whitespace, not just on zero-length lines. (Closes: #319370) * checks/fields: + [FL] Actually mention which architecture we're complaining about * checks/manpages: + [FL] Report errors from man when parsing man pages. Based on a patch by Kevin Ryde (Closes: #285540) * checks/po-debconf: + [FL] Abort check if the package doesn't seem to use debconf to avoid false positives in case maintainers use debian/po for other Debian specific strings (Closes: #262749) * checks/scripts: + [FL] increase search limit for exec hack by not counting comments and empty lines (Closes: #294661) + [FL] detect more bashisms, suggested by Clint Adams and martin f krafft (Closes: #253498, #296233 and addresses #253012 partly). + [FL] Adjust check for positional arguments after ". file" to detect more shell control and piping commands that are all allowed. Noted by Thomas Hood. (Closes: #319212) * reporting/html_reports: + [FL] Fix counting of binary package names + [FL] Generate mostly valid HTML (id and name attributes still aren't valid in all cases) lintian (1.23.10) unstable; urgency=low * The "Ah, it's LinuxTag and I still have free time!" release * debian/control: + [HE] Updated description to say that we're calibrated for Policy version 3.6.2. As the changes between 3.6.{1,2} aren't stuff we (can) check, this is actually true! (Closes: #317049) * testset/runtests: + [HE] Fix symlinking of original tarballs to allow run directories outside the lintian source tree. * checks/control-file + [HE] Check for duplicated fields. (Closes: #299792) * checks/fields: + [HE] Change unknown-architecture a bit: We don't complain about "known" non-standard archs (like amd64, ppc64, *bsd-i386) and only print out an info message for those. (Closes: #253405, #311471) * checks/files: + [HE] Allow backupninja configuration files in /etc/backup.d/ to be 0600. (Closes: #307639) * checks/scripts: + [HE] Allow Scripts in /etc/Xsession.d/ to be not executable, as they're not directly called, but only sourced. (Closes: #309203) + [HE] Check for use of adduser and update-inetd and warn if the package has no (pre-)dependency on adduser/netbase. Patch by Russ Allbery, thanks for the work. (Closes: #308569) + [HE] Check for use of "." as a deprecated separator between user and group names in chown call. (Closes: #88340) + [HE] Fix to work $interpreter-script-but-no-$pkg-dep with more than one dependency if needed. First use case is depending on build-essential to provide /usr/bin/make. (Closes: #294894) + [HE] Add lefty as a valid interpreter and check for a correct dependency on graphviz. (Closes: #295093) * checks/shared-libs: + [HE] Don't allow non-PIC shared libraries. This conforms to the new etch release policy. Thanks for the report and patch to Kurt Roeckx <kurt@roeckx.be>. (Closes: #309220) lintian (1.23.9) unstable; urgency=low * The "Wow, so much time at hand" release * [FL] Convert build process to debhelper - debian/rules - adapted - debian/compat - new - debian/dirs - new - debian/docs - new - debian/control - add build depends - debian/postinst - remove (Closes: #292981) - debian/conffiles- remove - debian/prerm - adapted * debian/control: + [FL] Update Standards-Version to 3.6.2 * checks/conffiles: + [JvW] Warn on /var files being a conffile too (Closes: #293443) * checks/debconf: + [FL] Also report postinst-does-not-load-confmodule and postrm-does-not-purge-debconf if the related files don't exist at all. Spotted by Gerfried Fuchs (Closes: #301056) * checks/menus: + [FL] New check menu-file-in-usr-lib because /usr/lib/menu is deprecated + [FL] Also find menu files in /usr/share/menu (Closes: #314187) + [FL] Rename executable-in-usr-lib-menu to executable-menu-file * checks/menu-format: + [FL] Adapt to changes in collections/menu-files * checks/standards-version: + [FL] Update to 3.6.2 (Closes: #314879) * collections/menu-files: + [FL] Also collect files from /usr/share/menu lintian (1.23.8) unstable; urgency=low The "Hm, this is the team's one year anniversary of maintaining lintian" release[1], and still using the "temporary" subversion repository... Featuring Steve "R." Langasek in a guest appearance. [1] http://lists.debian.org/debian-lint-maint/2004/01/msg00014.html * checks/*.desc,doc/lintian.sgml: + [JvW] Stop bugging us for exceptions, mmkay, just install overrides. Hints like this should be in the general documentation anyway, not in per-tag descriptions. The general documentation will now only ask to contact us if in doubt * checks/changelog-file{,desc}: + [JvW] (new test) Bark on @toplevel email signatures in changelogs + [JvW] Display invalid debmake email address upon detection * checks/common_data.pm: + [CW] Add tclx8.4 to %known_tclxs. * checks/description: + [SRL] Do not generate warnings when a short description starts with an article; this is good grammar and should not be discouraged. (Closes: #290505) + [JvW] Drop description-synopsis-starts-with-a-capital-letter by popular demand (Closes: #288568) * checks/files{,.desc}: + [JvW] Warn only for hardlinks in /etc or amongst different directories (Closes: #288634) + [JvW] Only check for desktop files in GNOME's and KDE's obsolete places, not in all the package, as KDE uses .desktop files also for other purposes (Closes: #289773) * checks/nmu.desc: + [JvW] Be more precise in explaining why lintian thinks this is a NMU, and copy explanation to changelog-should-mention-nmu * checks/scripts{,.desc}: + [CW] Add checks for tclsh8.4 and wish8.4. (Closes: #288287) lintian (1.23.7) unstable; urgency=high * lib/Lab.pm: + Fixed creation of static lab if the directory already existed, this failed in 1.23.6 + In temporary lab mode, try to create the directory several times before giving up * testset/runtests: Extend the static lab test lintian (1.23.6) unstable; urgency=low The "Let's see if I can upload myself now" release, made by Marc, Frank and Colin, uploaded by Jeroen. * checks/description + [HE] Warn if the short description start with an article or a capital letter. Patch by Tobias Toedter <t.toedter@gmx.net>, thanks. (Closes: #258824) * checks/fields: + [HE] Warn if the debian revision has three parts, as this is the sign of a binary NMU. New check's name is binary-nmu-debian-revision-in-source. (Closes: #244830) + [HE] Warn if people use the Bugs field to refer to the Debian BTS, the new check is called redundant-bugs-field. (Closes: #245883) * checks/files: + [HE] Check that .desktop files are placed in /usr/share/applications. This seems to be the standard place for those files that are used to create menus. The check is called desktop-file-in-wrong-dir. (Closes: #200171) * checks/manpages: + [HE] Don't compare the manpage filename extension and the content of .TH case-sensitive. Report + patch by Jay Berkenbilt <ejb@ql.org>, thanks. (Closes: #285335) + [HE] Emit binary-without-english-manpage if a package only provides translated manpages for a binary. (Closes: #259227) + [HE] Skip all comment lines when checking for .so links in manpages. Thanks for the report and fix suggestion to Steinar H. Gunderson <sgunderson@bigfoot.com>. (Closes: #284662) * checks/md5sums: + [HE] Strip off ./ at the beginning of the filenames in md5sums files (this seems to happen on some systems, though we don't know how). (Closes: #284728) * checks/standards-version: + [CW] By definition, udebs aren't required to conform to policy, so don't issue no-standards-version-field for them. (If they happen to have a Standards-Version field anyway, we still check that it's valid.) * lib/Lab.pm, frontend/lintian: SECURITY (CAN-2004-1000): + [FL] Overhaul lab directory handling. This also fixes the issue of removing a lab that never was created (Closes: #286681) lintian (1.23.5) unstable; urgency=low The "learn how to use intltool-debian correctly the hard way" release * checks/po-debconf: Set INTLTOOL_EXTRACT to fix invocation of intltool-update (Closes: #285419, #285471) lintian (1.23.4) unstable; urgency=low The "A little pause from the sarge release work" release. * checks/changelog-file: + [FL] file has apparently changed its output format for symlinks sometime in the past. This broke symlink detection. (Closes: #276504) * checks/deb-format, unpack/unpack-binpkg-l1, unpack/unpack-binpkg-l2: + [CW] Fix binary package data member extraction to work with arbitrary compression algorithms instead of hardcoding data.tar.gz. * checks/debconf{,.desc}: + [FL] The SETTITLE command was introduced in debconf version 1.3.22. Check the depends for that (Closes: #261890) + [FL] Warn about incorrect usage of commas in translated Choices fields. Patch by Denis Barbier after a suggestion by Andreas Metzler (Closes: #282030) * checks/debhelper: + [FL] Update list of debhelper scripts that modify maintainer scripts * checks/menu-format.desc: + [FL] Adjust references to the menu documentation. Noted by Jack Moffitt (Closes: #277393) * checks/po-debconf{,.desc}: + [FL] Check for outdated .pot files when using po-debconf. This requires a new dependency on intltool-debian. Patch by Denis Barbier with corrections by JvW (Closes: #242345) * checks/scripts{,.desc}: + [FL] Fix copy-and-paste error in description of wrong-path-for-gnuplot (Closes: #276945) Thanks to Lionel Elie Mamane for reporting. + [FL] Add tclsh8.3 to list of valid interpreters as it is used in at least one package. (Closes: #280080) + [FL] Issue wrong-path-for-{ruby,python} even if the path contained a version number. Change the description of the tag to reflect that. (Closes: #257904) * frontend/lintian-info: + [FL] Overrides start with O:, not with 0:, d'oh! (Closes: #258815) * lib/Tags.pm: + [FL] Add missing "use Util;", noted by Robert Luberda (Closes: #278513) * testset/debconf/*,testset/tags.debconf: + [FL] New test package for debconf and udeb tests * testset/diffs: + [JvW] Remove the shipped ELF binary, can be compiled at test-time * testset/runtests: + [FL] Make checks of udeb packages possible lintian (1.23.3) unstable; urgency=low The ``the others must be busy releasing Sarge or something'' release, prepared by yours truly * checks/conffiles.desc: + Note the most likely cause for duplicate-conffile in the description (thanks Chris Anderson for running into this problem and asking me about it) * checks/copyright-file: + Revert the extra pedantic check introduced in 1.23.0 that complained about unstrict dependencies when one as a /usr/share/doc/<package> that is a symlink (Closes: #249414) * checks/debconf: + Don't warn when the Choices field of a debconf question is not translated, often it makes no sense to translate it (Closes: #262649) * checks/debhelper: + dh-make also creates sample files named .EX, so make that check case-insensitive (Closes: #251262) * checks/fields.desc: + Adjust package-has-a-duplicate-relation to warning, and note that this sometimes happens to you when using ${shlibs:Depends}, and you shouldn't bother too much if that's the case (Closes: #274286) Thanks Peter Eisentraut for the suggestion + Fix English language depends-on-essential-package-without-using-version, thanks to Peter Eisentrautf for noticing (Closes: #261603) + [FL] Clone depends-on-essential-package-without-using-version as build-depends-on-essential-package-without-using-version to give correct policy reference (Closes: #261602) * checks/init.d: + Don't warn for missing init.d scripts in package and conffile list if a variable is used instead of a real name (Closes: #264218) * checks/manpages.desc: + Demote binary-without-manpage to warning, and adjust description, to be consistent with policy, which says a manpage should be available (and doesn't use "must" for it). Thanks to Robert Millan for his patch (Closes: #271014) * checks/nmu.desc: + Note in source-nmu-has-incorrect-version-number's description that the mistake could also be the other way around (Closes: #258604) * checks/po-debconf: + Don't give missing-file-from-potfile-in on empty lines (Thanks Adam Conrad for noticing) * checks/scripts: + The php commandline interpreter is now provided by php4-cli, and not php4-cgi, update dependency check accordingly (Closes: #268077) + Give an error if the 'config' script uses a non-essential interpreter (Closes: #274832) * checks/shared-libraries: + Ignore comments in shlibs files (Closes: #275124) * doc/lintian.sgml: + Document that you can use comments in overrides (Closes: #87805) * frontend/lintian: + Fix overrides so that they allow all of (1) <package> <type>:, (2) <package>:, and (3) <nothing> as prefix to tags you want to override, and modify documentation accordingly. This used to be buggy (Closes: #261435) lintian (1.23.2) unstable; urgency=low * The "of course it had to go wrong on my first own lintian upload" release. * Tighten versioned Build-Depends on sed to (>= 4.1-4) to avoid being hit by a bug in sed that changes the permissions of files when processed with sed -i (Closes: #259109) lintian (1.23.1) unstable; urgency=low The ``Now featuring over 500 checks'' release, prepared by the usual suspects. * checks/*: + [JvW] Changed from executables to check-plugins + [HE] Drop the misuse of charset when we want to say "encoding". Renamed 2 tests for that: unknown-charset-in-po-file -> unknown-encoding-in-po-file debian-changelog-file-uses-obsolete-national-charset -> debian-changelog-file-uses-obsolete-national-encoding (Closes: #248194) * checks/binaries: + [FL] Change check for binary-compiled-with-profiling-enabled on hppa to look for _mcount instead of __gmon_start__ since the latter can't be used as an indicator on that arch (Closes: #207063) + [JvW] Exempt ocaml binaries from the 'is the binary stripped?' test, since they cannot be stripped harmlessly. See #256900 (Closes: #252695) + [JvW] Parse the output of file a little bit more strict, and make it consequent across checks (Closes: #257898) * checks/changelog-files{,.desc}: + [HE] New check latest-debian-changelog-entry-without-new-date, comparing the dates of the last 2 changelog entries. (Closes: #111215) + [FL] New tag invalid-date-in-changelog which is issued if latest-debian-changelog-entry-without-new-date encounters a parse error * checks/common-data.pm: + [JvW] Add libgl(u)-dev to list of virtual packages (Closes: #255595) + [JvW] Added amd64 to list of known architectures, as the name has settled and it'll likely enter the archive soonish (Closes: #257503) * checks/control-file{,.desc}: + [HE] Introduced new check script. New checks: - build-info-in-binary-control-file-section, triggered by a Build-* field in a binary section (Closes: #94928) - debian-control-file-uses-obsolete-national-encoding, stolen from changelog-file (Closes: #247197) * checks/cruft{,.desc}: + [JvW] cvsignore-file-in-source is now info, because it happens so often by upstream, and is only very minor in size + [HE] New check: source-contains-cvs-conflict-copy, triggered by .#file.version files. They are created by cvs when it tries to merge local changes and an update from the repo. (Closes: #246060) + [JvW] Also check for source-contains-svn-conflict-copy (for .r123 and .mine files) * checks/debhelper: + [FL] Avoid Perl warning about undefined values. Noted by JvW. * checks/fields{,.desc}: + [JvW] Added debian-revision-should-not-be-zero, suggested by Adam Conrad + [FL] Downgrade build-depends-without-arch-dep to warning as it's heuristic. Reword explanation. This partly handles #247171. + [JvW] For build-depends-without-arch-dep, fix detection of debhelper usage in clean when used by means of CDBS (combined with above change, now fully closes: #247171) + [HE] Check Build-Depends(-Indep) for virtual packages without a real dependency. Fix based on patch by Steinar H. Gunderson <sgunderson@bigfoot.com>. (Closes: #255593) + [HE] Don't issue virtual-package-depends-without-real-package-depends if this happens in Suggests. (Closes: #254367) + [FL] Allow whitespace in relations after the version number * checks/huge-usr-share: + [FL] Skip check for packages that don't have usr/share at all (Closes: #247708) * checks/manpages: + [FL] Comment check for no-manpage-in-correct-directory out until I know if it's worth keeping it at all (Closes: #253011) Thanks to Stephen Stafford for pointing this out. * checks/menus: + [FL] Fix regex which checks for update-menus calls (missing whitespace) and allow path before executable name (perhaps this should be another warning, though?) (Closes: #254420) + [FL] Some clean-up and warn that wm-menu-config is deprecated (Closes: #248997) + [FL] Demote executable-in-usr-lib-menu to warning as executables are supported (but seldom used) (Closes: #254498) * checks/menu-format: + [FL] Fix su-to-root checks to cope with the new -X option and improve the option parsing to better handle unknown options + [FL] Allow a comma separated list in the package test. Pointed out by Gerfried Fuchs (Closes: #246507) Change incorrect-package-test to pkg-not-in-package-test which is issued when the package is not in the list. Don't issue menu-command-not-in-package when we have a list. + [FL] Commands for window manager's modules can't be expected to be available as executables, so don't issue menu-command-not-in-package in this case. Thanks to Manoj Srivastava for reporting (Closes: #247805) + [HE] Change menu-command-not-in-package to also look into the standard PATH. (Closes: #255155) * checks/po-debconf: + [JvW] Simply fail if stuff from gettext is missing. * checks/scripts: + [FL] Don't issue executable-not-elf-or-script for files that are named *.exe (Closes: #251075, #255083) + [CW] Add python2.4 as a valid interpreter (Closes: #254482) + [FL] Add ruby1.[68] as valid interpreters, introduce new ruby-script-but-no-ruby-dep error, copied from the python stuff + [FL] Don't issue script-not-executable for menu-methods. There are reasons why they are sometimes not executable (Closes: #250632) + [FL] 'and' and 'or' are no bash keywords (Closes: #194283) * checks/shared-libs: + [FL] Don't report shlib-with-executable-bit and shlib-with-bad-permissions on symbolic links to such files + [JvW] Fix the pic-detection code (Closes: #185816) * debian/{control,rules}, frontend/lintian: + [JvW] Insert version number at package build time, no need to commit a change to frontend/lintian on every version number change... Requires sed version 4 at build-time. + [JvW] Start depending on gettext. + [JvW] Start depending on libdigest-md5-perl on woody, for using md5 on files. * frontend/lintian: + [JvW] Partial rewrite: checks are now plugins loaded into lintian, rather than executed as separate executables. Makes it easy to make common functions available, tags are done centrally, etc etc. Should also save quite a number of forks, thus more speedier. * lib/Util.pm: + [FL] dpkg supports comments in control files now, handle them correctly + [FL] a space after the colon is not mandatory in dpkg control files * man/lintian.1: + [FL] Document new control-file check script * reporting/harness: + [FL] Correctly support udeb packages * reporting/html_reports: + [FL] Correctly support udeb packages + [FL] Remove some unused code for bug references * reporting/bug.status: + [FL] Remove * testset/filenames: + [JvW] Fix two lintian warnings in lintian itself by touching files only on clean target, and not distributing them in the source * unpack/list-srcpkg: + [FL] Some packages don't specify a standards-version, e.g. d-i ones. Prevent Perl warnings. * unpack/list-udebpkg: + [FL] Fix sort of copy & paste error which caused the whole script to behave ill * unpack/unpack-binpkg-l2: + [FL] While fixing permissions, also enable write access so we get no problems on removal. Disable group write permissions, we need nobody to interfere with us. lintian (1.23.0) unstable; urgency=low The ``moving forward'' release, prepared by Marc 'HE' Brockschmidt, Frank Lichtenheld and Jeroen van Wolffelaar. * [FL] add udeb support (Closes: #216117) Thanks to Joey Hess for his input. Many changes, mostly to frontend/lintian, checks/debconf and checks/files * checks/binaries: + [JvW] Ignore static binaries in /usr/lib/debug * checks/changelog-file: + [HE] Check for the debmake template email address in the changelog entries. Patch by Steffen Moeller <moeller@pzr.uni-rostock.de>, thanks! (Closes: #199903) + [JvW] Loosen up checks for -0.x versions, could be either native or upstream + Debian revision, so some tests cannot be performed because of that uncertainty * checks/copyright-file: + [HE] Change usr-doc-symlink-to-foreign-package check to throw an error when a package doesn't depend on the *same* version of the package its /usr/share/doc/$foo dir is symlinked to. This is supposed to ensure that both come from the same source and the same source version. (Closes: #201470) * checks/cruft.desc: + [HE] Reworded some parts and bumped the Standards-Version after checking for changes. (Closes: #235735) * checks/debconf{,.desc}: + [JvW] Add an error for a bogus default for a boolean template (Closes: #236846) + [HE] Check for duplicate fields in templates. Fix based on patch by Denis Barbier <barbier@linuxfr.org>, thanks! (Closes: #233116) + [HE] Check if the translation of a Choices: field is empty, leading to skipped questions. (Closes: #149451) * checks/debdiff: + [HE] Check for accidental native packaging. This is done by checking for a dash in the version number (though -0.\d+ and -0.\d+.\d+ are allowed for (binary) NMUs) and the existence of a .diff.gz. (Closes: #216327) + [JvW] Implement source-tar-is-posix-tar, which checks for upstream tarballs that are tar --posix tarballs, which cannot be untarred by the tar version in woody (Closes: #245138) * checks/debhelper{,.desc}: + [JvW] Add error if debian/compat is empty, happens once in current sid and gave internal error before * checks/debian-readme: + [HE] Add check for the debmake template email address. Patch by Steffen Moeller <moeller@pzr.uni-rostock.de>, thanks! * checks/deb-format: + [HE] Add a check for the data member of a deb. dpkg 1.11 introduces support for configurable compression algorithms (bzip2, for example), but this shouldn't be allowed before dpkg 1.11 hits stable. (Closes: #159874) * checks/fields: + [HE, FL] Nearly complete rewrite for clean up: - bad-relation seems to work better now (Closes: #171763) - duplicate relations checking now works for different fields, too (Closes: #234978, #235356) + [HE] Add check for an Origin field with "Debian" as value. (Closes: #119618) + [HE] Reintroduce build-depends-without-arch-dep check with the patch I proposed in #214231. (Closes: #242484) + [JvW] Check for well-formed Debian-revision + [JvW] Check for correct realname when QA mailaddress used * checks/fields.desc: + [FL] Fix some wrong policy references * checks/files: + [HE] New check for compiled python files (*.pyc). Patch by David Kimdon <david@kimdon.org>, thanks. (Closes: #236606) + [HE] Check for gzipped zero byte files. (Closes: #172052) + [FL] Don't complain about read-only *.ali files as requested by Ludovic Brenta. This makes #226879 wishlist again. + [FL] Warn about ancient files with the value of Dinstall::CutOffPastYear from dak CVS as limit. (Closes: #204801, #218304) + [HE] Check for *.ali files introduced, warn if their permissions are != 0444. (Closes: #226879) + [HE] New checks for deprecated X11 dirs (/usr/{bin,lib,include}/X11 and usr/X11R6/*). (Closes: #81004) + [HE] Check for README for other distributions/platforms and warn if they're installed. Based on patch by Jay Bonci. (Closes: #178441) * checks/init.d: + [FL] output-of-updaterc.d-not-redirected-to-dev-null should be only an info tag since it is more an aesthetical issue, not a policy violation. (Closes: #149700) * checks/lintian.desc: + [JvW] Added missing Type: tags * checks/manpages: + [FL] New checks: - Section number of directory and file differ - Section number of file differs from what is expected from the location of the binary. (Closes: #203831) + [FL] Parse contents of man page and implement more new checks: - Section number of file and header differ (Closes: #89488) - Try to search for hyphens that should be minus signs (Closes: #205924). First patch by Eduard Bloch, final regex by Josip Rodin. - Search for FSSTND directories referenced in man pages. Only an info tag. (Closes: #111098) + [FL, HE] Fix false positives of manpage-for-non-x11-binary-in-wrong-directory when a link from a normal bin/ is pointing to a binary in an X11 dir. Based on patch by FL. (Closes: #203389) + [JvW] x11-games-should-be-in-usr-games is now error, because it's mandated by policy * checks/menus: + [JvW] Stricter checking for whether update-menus is actually called (Closes: #244628) * checks/menu-format: + [FL] Only issue one warning about needs=dwww, not two + [HE] Check if the command given with command= is in the package (Closes: #199346) * checks/nmu{,desc}: + [JvW] New series of checks: Check whether NMU's have correct NMU version number, and whether maintainer uploads have correct maintainer version. Also, check whether NMU's and QA uploads are identified as such in the changelog (Closes: #111948) * checks/scripts: + [FL] Add /usr/bin/php as valid interpreter. (Closes: #239115) Thanks to Peter Eisentraut for pointing this change out + [FL] Reflect new suidperl handling. /usr/bin/suidperl shouldn't/can't be called directly anymore so add a new error and remove it from the list of usual interpreters. (Closes: #240806) + [HE] Don't warn about files with a shebang line which are not executable when they are called *in, as they're probably just templates. (Closes: #114740) * checks/shared-libs: + [HE] Add some new logic to cope with symlinks from /usr/lib to another dir to fix false positives of postrm-has-useless-call-to-ldconfig and friends. (Closes: #190714) + [HE] Also handle case statements in postrm scripts. (Closes: #179435) * checks/standards-version: + [JvW] Also emit warning if standards version is 3.6.0, and not yet 3.6.1 * collection/diffstat + [HE] The diff.gz file name does not include the epoch, so strip it before trying to get the file. * collection/override-file: + [FL] add support for source overrides (Closes: #129510) See the User Manual for more information. * collection/source-control-file: + [FL] New collection script to extract field information from debian/control in source packages. Currently used in checks/debhelper to guess udeb packages. * debian/control,debian/copyright: + [FL] Add Marc 'HE' Brockschmidt to Uploaders and to copyright file * doc/lintian.sgml: + [FL] Some updates, some more verbatim explanations (Closes: #197955) + [FL] Reworked the override section to handle udeb and source packages, too * doc/README: + [FL] Update options * frontend/lintian: + [HE] Added a --dont-check-parts|-X option to allow users to specify which tests should not be run. Also added infos about this to the manpage. (Closes: #206674) * frontend/lintian-info: + [JvW] Fixed that lintian -I also displays info for I: entries * lib/Dep.pm: + [FL] Fixed some semantic errors (since no one ever observed the corresponding perl warnings the fixed parts are probably never used in the current code) * lib/Utils.pm + [HE] Changed {read,parse}_dpkg_control a bit to cope with the fact that template files sometimes contain lines consisting only of whitespace which do *not* separate to blocks. (Closes: #242479) * testset/runtests: + [JvW] Rewrote so that it is actually useful: - sort output to nullify filesystem directory ordering differences - run lintian just once - check that all tests that are triggered have a description, if verbose specified, warn about tests that are not tested * unpack/list-binpkg: + [HE] Try to open Packages.gz if no Packages file can be found. Fix based on patch by Robert Lemmen <robertle@semistable.com>, thanks! (Closes: #198617) lintian (1.22.12) unstable; urgency=low The ``Fix those false positives, mkay'' release, prepared for all Debian Maintainers by Frank Lichtenheld and Jeroen van Wolffelaar. Best served cold. * debian/control: + [FL] Make Uploaders a single line field. It didn't really break, but at least DDPO had its difficulties * man/lintian.1: + [FL] sync man page with the --help output by adding missing options Based on a patch by Robert Lemmen. (Closes: #198615) + [FL] sync man page with the current list of checks and collection scripts * checks/binaries: + [FL] Don't complain about non-stripped kernel modules. Patch by Dagfinn Ilmari Mannsaker (Closes: #203373) + [JvW] Exclude binaries and packages named *-static from the binary-is-static test. Exception for sash removed. (Closes: #215235) * checks/changelog-file: + [FL] Check that encoding of changelog file is UTF-8, based on a patch by Denis Barbier (Closes: #175318) * checks/copyright-file{,.desc}: + [FL] Don't advise to point to the perl packages' copyright file. Thanks to Martin Orr for pointing this out. (Closes: #193293) + [FL] Fixed false positives of copyright-should-refer-to-common-license-file-for-gpl due to the GFDL. Thanks to Ross Burton for reporting this. (Closes: #192278) * checks/deb-format{,.desc}: + [JvW] Fix perl variable-name clash causing unusually formatted error output (only important if you do automatic processing on it) + [FL] The current script is by Denis Barbier, correcting author in .desc file * checks/debhelper.desc: + [FL] correct reference to debhelper manpage. It's debhelper(7), not debhelper(1). Thanks to Brian Nelson for pointing this out (Closes: #188245) * checks/debconf: + [JvW] Update valid types, since currently 'title' is supported now too (Closes: #234379, #234608) * checks/description: + [FL] fix description-is-dh_make-template check. (Closes: #215125) Fix suggested by Josip Rodin * checks/etcfiles.desc: + [FL] correcting abbreviation of etcfiles to 'etc', was 'ini' which is already used by init.d * checks/fields: + [FL] Really check only "real" dependency fields for needless depends (Closes: #185035) + [JvW] Don't consider depending on coreutils bad, as this is in a way a versioned depend (Closes: #216536) + [FL] Remove the build-depends-without-arch-dep check. It produces way too much false positives and can only be replaced by a sophisticated debian/rules parser (Closes: #192037, #202950, #214231) + [JvW] Test syntax of Uploaders: too + [JvW] Accept more whitespace in relations, which is allowed according to policy, thanks Adrian Bunk for noticing, FL for patch (Closes: #200280) * checks/filenames: + [JvW] Revised the symlink detection stuff, it is now more rigorous, and has separate warning for recursive symlinks that are otherwise not necessarily wrong (Closes: #118080) * checks/files: + [FL] only issue package-installs-nonbinary-perl-in-usr-lib-perl5 if there is no binary perl file at all in the package, since this reflects the way the Installer module behaves (Closes: #199898) * checks/huge-usr-share: + [JvW] Check for a big /usr/share (currently 1-2MB will trigger it) in arch-dependent packages. Currently just I:. Thanks Steve McIntyre for the idea. (Closes: #232849) * checks/menus{,.desc}: + [FL] Remove non-executable-in-etc-menu-methods as it doesn't reflects the current menu manual (Closes: #229460) * checks/po-debconf: + [JvW] Check whether files listed in debian/po/POTFILES.in actually exist, and only positively detect po-debconf usage if dependency is there. (Patch by Denis Barbier <barbier@debian.org>, only minimally modified) * checks/scripts: + [FL] Fix check for "exec ..." line. Fix suggested by Josip Rodin. (Closes: #212811) + [JvW] Tighten up mknod, dpkg --print-architecture and killall detection in maintainer scripts, would need rewrite to be really sane. (Closes: #148548, #161820, #192300) * checks/shared-libs: + [FL] Be more tolerant to variations when checking for postrm-unsafe-ldconfig. Thanks to Martin Godisch, Steinar H. Gunderson and Aidas Kasparas for their input. (Closes: #218543, #233740) * unpack/unpack-binpkg-l1: + [FL] tar uses now h to signal hardlinks which breaks a lot of our code. so sed'ing it away. Many many thanks to Theodore Y. Ts'o for bringing this to our attention (Closes: #234545) lintian (1.22.11) unstable; urgency=low Jeroen van Wolffelaar <jeroen@wolffelaar.nl> * Upgrade lintian itself to policy 3.6.1 + Drop question about removing lab on purge, just do it. * Update to Debian Policy 3.6.1, all references broken by section-reorganization are updated (Closes: #194257, #208945, #214949, also closes: #217384, #231884) (Patch by Nicholas Breen <nbreen@ofb.net>) * Support for dash scripts (Closes: #194787) (Patch by Frank Lichtenheld <djpig@debian.org>) * checks/binaries.desc: + Fix typo (Closes: #202856) * checks/deb-format, debian/control: + Rewrite by Denis Barbier, slightly cleaned up, renders libarchive-tar-perl dependency unneeded (Closes: #232875) * checks/filenames (and more): + Check for Subversion version control leftovers (Closes: #190067) + Ignore empty __init__.py files in /usr/share/doc (Closes: #215234) (based on patch by Frank Lichtenheld <djpig@debian.org>) * checks/cruft: + Check for CVS and Subversion cruft in source packages (Closes: #189776, also closes: #190067) * checks/po-debconf + Rewrite in Perl + Obsolete PO files are no more checked because po2debconf now automatically runs debconf-updatepo if PO files are older than templates files. Of course PO files might be outdated (e.g. when downloaded from a BR), but it should occur seldom. + PO files are processed through msgfmt to ensure they are valid. + Based on patch by Denis Barbier <barbier@debian.org>, Closes: #210576 + Check whether po-debconf is used at all, and warn if it isn't + Check for required POTFILES.in and template.pot in debian/po * checks/menu-format + Drop menu-icon-has-bad-colors, it doesn't apply anymore (Closes: #199341) + Menu sub-policy 3.6.0 added two sections (Closes: #207529) + Added three checks for correct su-to-root usage (Closes: #188095) + Understand icon32x32 and icon16x16 (Closes: #200046) + Missing required tags are now an error (and check name changed) + Check tag-quotation + Rewrite needs check properly, being more precise what is allowed + Complain about needs="dwww", as this is obsolete according to menu maintainer (parts menu-format updates based on patch by Bill Allombert <ballombe@debian.org>) * checks/scripts + Recognise the 'tcl' interpreter, not the same as tclsh (Closes: #230182) Frank Lichtenheld <djpig@debian.org> * checks/debhelper: + fix parsing debian/compat for needed version (Closes: #198611) + update list of existing debhelper commands * checks/manpages: + push back the extension after testing for manpage-not-compressed (Closes: #225293) * checks/copyright-file: don't complain about missing reference to the GPL if we already detected a wrong reference (Closes: #225837) * checks/debconf: + don't complain about partially-translated-question, if Choices is only a substitution variable (Closes: #200802,#222648) + fix testing of dependencies to eliminate false positives of missing-debconf-dependency (Closes: #195201) lintian (1.22.10) unstable; urgency=low * Lintian maintenance is now in the hands of the `Debian Lintian Maintainers' group * Add check for tar bug #230910 (tar check written by Marc 'HE' Brockschmidt <marc@marcbrockschmidt.de>) lintian (1.22.9) unstable; urgency=low * config.* files from 2000-09-05 and such had the timestamp in a variable called version, not timestamp, so check for that as well to detect the really old ones as well. * Made sharedobject-in-library-directory-not-actually-a-shlib an E because it uses the same method as pkg-has-shlibs-control-file-but-no-actual-shared-libs does, and that one's pretty reliable and already E, closes: #197951 * Fixed logic error in detecting whether the uncompressed changelog file is really a symlink, closes: #198171. * Ripped out those few remaining bits of code that watched over /usr/doc, closes: #193598. * Don't whine about policy 3.5.10. No changes. * Avoid install-docs' --no-update-menus when checking for update-menus calls, closes: #183193. * Close the IN filehandle in menus:check_script() so that $. gets properly reset (sloppy coding -- argh!). * Fixed a $1 overwriting thinko in debhelper checks. * Demoted build-depends-without-arch-dep from E to W. "Most likely" isn't non-heuristic, dammit. lintian (1.22.8.1) unstable; urgency=high * Fixed a small logic oversight in the new debhelper compat check, closes: #187415. lintian (1.22.8) unstable; urgency=low * Updated the list of valid archive sections, closes: #187111. * Ignore symlinks in the image-file-in-usr-lib check, closes: #180280. * Updated the list of virtual packages, closes: #179614, #180421. * Fixed typo in the LaTeX license exception, closes: #184640. * Removed anal-retentive check for a bug in debconf << 1.2.9, closes: #185721. * Updated policy version in the description, closes: #185882. * Checks in debian/compat for debhelper compat version, and warns if it finds that as well as DH_COMPAT, closes: #186269. lintian (1.22.7) unstable; urgency=low * Adjusted Policy references for changes in the shared library stuff. Updated standards-version checks to recognize 3.5.9, and shifted old/ancient borders to 3.5.7/3.5.2. * Allow for ${1+"$@"} as well in the evil exec line check, closes: #179145. * Removed the CXXABI check because it's not reliable enough, not all C++-linked programs include libsupc++ which provides those symbols. Sorry. Closes: #179278, #184729. * Allow /usr/lib/$pkg in the rpath check, thanks to Matej Vela, closes: #173610. * Added /usr/share/pixmaps to the icon file path, closes: #181552. * Ignored symlinks in the gzip -9 check for changelogs, closes: #181899. * Ignore LaTeX license in the common-licenses check for GPL, thanks to Peter van Rossum, closes: #184640. * Included (tcl|tk)8.4 on their respective lists, thanks to Chris Waters, closes: #184655. * Ignore alternatives in the check for duplicate relations, closes: #184660. It's still not inclusive, but the remaining cases should be rare enough. * Added Denis Barbier's po-debconf checks, closes: #173823. lintian (1.22.6) unstable; urgency=low * Added missing description for empty-manual-page. * Adjusted some descriptions for -dev symlinks. * Updated the policy section for copyright files from 13.6 to 13.5, closes: #177769. * Updated the policy section for changelog files from 13.8 to 13.7, closes: #176946. * Added extended-description-line-too-long, closes: #176784. * Warn against lack of CXXABI, thanks to Colin Watson, closes: #175920. * Allow for all the other tricks scripts play with their interpreters by making the check generic, /^\s*exec\s*.+\s*.?\$0.?\s*.?\$\@/. Thanks to Colin Watson, closes: #175602. * Changed the dh_testversion checks to also find disparities between DH_COMPAT and debhelper build-dep version, closes: #175295. * Ignore packages that build-depend on autotools-dev in the config.* date check, since they probably copy stuff around, closes: #178347. lintian (1.22.5) unstable; urgency=low * Ignore Zope's license in copyright-should-refer-to-common-license-file-for-gpl, thanks to Matej Vela, closes: #172211. * Don't require \S+ but .+ while parsing @packages, closes: #172444. * Rewrote the chunk of code dealing with names of manual pages, because it was done all wrong, closes: #173548. * Ignore files consisting merely of .so links completely, thanks to Matej Vela, closes: #173609. * Added code to check for bad-so-link-within-manual-page. * Also added code to check for empty-manual-page. * Added a few more cases of safe ldconfig invocation in postrm, closes: #174042. Didn't handle the one with the "case" statement, it's too bothersome. Oh well, the check is a warning instead of an error for a reason. * Added a check for the timestamp line in config.guess/sub files, closes: #171295. * Renamed the full-stop check to description-synopsis-might-not-be-phrased-properly and rephrased its description. This is where I draw the line :) closes: #174150. * Added a warning on .pl and .pm files within /usr/lib/perl5, closes: #174595. * Renamed pkg-without-shlibs-has-shlibs-control-file to pkg-has-shlibs-control-file-but-no-actual-shared-libs and improved its long description. * Added sharedobject-in-library-directory-not-actually-a-shlib, which should properly address the issue of SONAME-less libraries, closes: #174928. * Exclude files that match "LICENSE AGREEMENT FOR PYTHON 1.6.1" from the copyright-should-refer-to-common-license-file-for-gpl check, closes: #174929. lintian (1.22.4) unstable; urgency=low * Fixed typo in the description of description-synopsis-ends-with-full-stop, closes: #172049. * Slightly clarified the text as well, and added a pointer to Policy 5.7.1. * Made it a warning, not an error which it was by mistake, closes: #172541. * Removed an extra colon from copyright-file-lacks-pointer-to-perl-license. lintian (1.22.3) unstable; urgency=low * Fixed typo in copyright-should-refer-to-common-license-file-for-gpl which caused it to have no description. Also moved the opening of the pipe to lintian-info before the first print E: line so that bad-distribution-in-changes-file and other tags in lintian.desc actually get displayed, closes: #171737. * Updated the description of link-to-undocumented-manpage to better match the current Policy and be more helpful. * Added missing \Q and \E around the variable in description-synopsis-is-duplicated, closes: #171721. * Don't warn on _any_ mention of update-rc.d in postinst, just those that follow whitespace or something else and a semicolon, closes: #171472. lintian (1.22.2) unstable; urgency=medium * Fixed some random glitches. * Change rgb-vs-cmap to first include the hex codes of colors in cmap.xpm, and then go searching for names in rgb.txt. Updated the cmap.xpm location in the description. This hopefully really closes: #170860. * Added exception in the shell syntax checks for evil rep scripts, thanks to Kevin Ryde, closes: #171175. * Added checks for multiple dependencies on libstdc, tcl, tclx, tk, tkx and libpng packages. This is currently being done in a hardcoded manner, but that should do for now, closes: #80447, #129548. * Added a regression test as part of the relations regression test for the above multiple dependencies. * Don't barf on /var/local in the FSSTND-dir-in-var check, just in non-standard-dir-in-var, closes: #119414. The normal packages shouldn't install anything there anyway, and base-files can have overrides :) * Prepend a slash to the file names in file-in-etc-not-marked-as-conffile, closes: #122285. We already don't have the prepended thing normalized, so why not indulge this. * Added dh_suidregister-is-obsolete, closes: #94031. * Added copyright-lists-upstream-authors-with-dh_make-boilerplate, closes: #107815. I am now the official maintainer so I get to do that >:) This time I've written the description much better, so there should be no confusion like there was the last time. * Added description-synopsis-is-duplicated first by comparing the lowercased synopsis with the lowercased start of the extended description, and then if that fails, the letters and numbers are removed and the strings are compared. This may not catch _everything_, but should be satisfactory, and it closes: #118098. * Added a regression test for the above error to the other relations test. It seemed handy. :) * Added an error for depending on libdb1-compat, just in case, as advised by Colin Watson. lintian (1.22.1) unstable; urgency=medium * Handle the $statistics_file rotation in harness. * Warn on dh_dhelp use, thanks to Chris Tillman, closes: #130016. * Exempt awk from the virtual-package-depends-without-real-package-depends check, and add an error when there's a non-versioned dependency on awk, closes: #136831. The description may be considered vague for some cases, but I'll wait until someone actually complains about that before rewriting it. * Moved the generic exceptions before the script-without-interpreter check, which should fix Daniel Kobras' dx false positive, closes: #165574. * Added a warning for full stop in the synopsis line, thanks to Colin Walters, closes: #131747. * Added a warning for daemon stopping stuff in postinst, without a dependency on debconf (>= 1.2.9), thanks to Martin Godisch, closes: #168621. * Based on hints from in Jim Van Zandt's otherwise rather flawed patch posted in bug #94928, moved the diff file stuff from the cruft check into the diffstat collector, and made it simply extract the patch into a file called "debian-patch" which is then used elsewhere, instead of zcatting it over and over again. * Added a regression test for the debian/files and config.* checks. * Added config.log to the list of configure-generated files to warn about. * Updated menu icon colors with a little script I wrote, closes: #170860. * It appears File::Find has changed semantics since woody and now refuses to follow a symlink as the name of the directory to scan. Obviously, a simple readlink() fixes it. * I realized that bug #122855 couldn't have been fixed the diff scanning code anyhow, since dpkg-source ignores file deletions in the first place. Removed the hours of work and simply expanded on the description of the error instead. Oh well. * Added an error for GPL copyrights that don't refer to /usr/share/common-licenses, thanks to Edward Betts, closes: #99885. * Added a warning for some popular architecture-independent image files in /usr/lib which suggests moving them to /usr/share per FHS, thanks to Bill Allombert, closes: #114474. lintian (1.22) unstable; urgency=medium * Further updated the python script checks to ignore obsolete -base packages and watch versioned python interpreters better, thanks to Federico Di Gregorio and Luca De Vitis, closes: #169872. * Added an exception for sash in the statically-linked-binary check, as reported by H. S. Teoh. * Moved descriptions for two manual page location consistency checks from shared-libs.desc (?!) to manpages.desc, and clarified them, as reported by Othmar Pasteka. * Accept /var/games as an exception for setgid stuff, closes: #169382. * Removed the /etc/ppp perms exception as per discussion on debian-devel. * Fixed the add-log-mailing-address check by not re-my-ing the prefix and suffix variables in each iteration of the loop, closes: #129581. Added the word obsolete in the name of the error and a paragraph break to further clarify it. * Added Apps/Science as a valid menu section. This and the removal of the error for calling ldconfig anywhere in the postinst in 1.21.5 make Lintian Policy 3.5.8 compliant, closes: #170093. * Exclude .png files from the extra-license-file check, closes: #164017. * Exclude .php files from the extra-license-file check, closes: #116384. * Added documentation-package-not-architecture-independent warning in the cruft check, closes: #120261. * Check if $action is defined before comparing it to avoid a warning with the -C option, closes: #129582. * Added Kevin Ryde's patch that implements menu-icon-too-big, menu-icon-has-bad-colors, menu-icon-cannot-be-parsed, closes: #71396. * Make .nfs* files trigger the backup-file-in-package check, closes: #95140. * Added an error for .xvpics directories, closes: #169831. * Added more misspellings from Matt Zimmerman, without the British English stuff, with the four language names in a special arrangement, closes: #119786. * Made package-contains-CVS-dir an error, closes: #147301. * Added an error for /usr/share/doc/<something>/examples/examples directory, closes: #153144. * Added an error for referring to the Perl license terms without actually pointing to their location on the file system, thanks to Gergely Nagy, closes: #157449. * Check for localhost(.localdomain) in the Maintainer fields, closes: #162248. * Fixed the needs=dwww exception in the menu file check for an empty section, thanks to Colin Watson, closes: #170437. * Check for debian-qa@l.d.o in Maintainer fields, thanks to Colin Watson, closes: #126687. * Updated standards-version check to declare anything lesser than 3.2 ancient (1999!), and anything lesser than 3.5.6 old (2001). lintian (1.21.6) unstable; urgency=high * Fix two regexps in the scripts check in order to fix *sh -n checking, closes: #167079. * Added duplicate-conffile error, closes: #131632. * There doesn't appear to be any provision in the Policy or in the FHS for random compatibility symlinks, so I've just added "or symbolic link" to the description of file-in-unusual-dir, closes: #135546. * Fixed the regexp for package-contains-CVS-dir to actually recognize directories that are printed with the trailing slash, closes: #146831. * Made unregistered-script-in-etc-init.d a warning, renamed it to script-in-etc-init.d-not-registered-via-update-rc.d and updated its description to mention why it may not be an error, closes: #118823. * Added dash into the regexps in the scripts check. * Added a crude check for code within another shell (foosh -c something). I say crude because it works with oneliners only -- anything that spans lines sounds like pretty much impossible to do in without actually _being_ a shell script interpreter :) closes: #166483. * Added an exception for /etc/ppp being 750 root:dip, and complain if it exists and it's not like that, closes: #169260. * Expunged the notion of a global override file from the tag descriptions. lintian (1.21.5) unstable; urgency=medium * Removed postinst-unsafe-ldconfig warning as per the discussion in #120585, which also conveniently closes: #117260, #114123. Note that postrm-unsafe-ldconfig stays! * Further improvements to reporting/harness, reporting/html_reports and related code. * Fixed the display of info for python-script-but-no-python-dep on python1*. lintian (1.21.4) unstable; urgency=medium * Just check for bashisms in sh files, thanks to Jay Bonci for pointing me a this. * Recognize python source packages called pythonX.Y, which should fix third-party-package-in-python-dir for all of them, closes: #114281. Also extend the checking of that directory on all X.Y and not just 1.5. * Fixed policy references in several init script related tags, made the init.d not conffile check a warning since Policy allows otherwise and we can't check reliably, extended the rc.d file check on rc(\d|S).d and excluded sysvinit and file-rc from the check. All this closes: #118824. lintian (1.21.3) unstable; urgency=high * Do _not_ close STDERR before running dpkg-source in unpack-srcpkg-l2. The logname stuff has been fixed ages ago so there shouldn't be any remotely valid reason to do this. This should explain bugs like #159474 and #162813 to the submitters, but I'll have to wait and see, since I still can't reproduce it myself. * Fixed the cruft check not to check the diff file just once, not for every damn subdirectory of the source, d'oh. * Backed out the --remove-lab move to postrm, lintian doesn't exist there any more, silly, closes: #166309. lintian (1.21.2) unstable; urgency=low * Changed the default path for ksh to /bin/ksh, as per the change in the pdksh package, closes: #131484. Maybe /usr/bin/ksh should still be allowed, but it seems inconsistent to allow several paths like that... perhaps the same should be done for zsh? Although, I suppose there are less zsh scripts out there compared to ksh. * Added $link to the usr-doc-symlink-to-foreign-package error message, hopefully properly closes: #116309 (untested). * Eradicated the remaining Packaging Manual references, from Chris Tillman's patch in #116488. Also removed FSSTND references. * Fixed typo in description-is-dh_make-template, closes: #145802. * Replaced /usr/share/doc with /usr/doc in checks/copyright-file.desc, thanks Matej, closes: #157423. * Set binary mode to be able to grok UTF-8 with Perl 5.8 when reading override files, thanks to Colin in #158119. Maybe this is all wrong, but it shouldn't hurt anyway. :) * Added Colin's patch check manual pages for correctness with lexprog, along with the appropriate versioned dependency on man-db, closes: #52524. * Cleaned up some typos in copyrights. * Added *sh -n checking for syntax errors in shell scripts, closes: #42348. * Moved script checks from control-files to the second part of scripts, and also noticed and fixed a bug -- if a script e.g. called killall and had a bashism on the same line, it would escape undetected. * Check the .diff.gz file (if it exists) for config.(cache|status) that includes no added and a number of removed lines and don't print the configure-generated-file-in-source error for those files, closes: #122855. The diff output analysis isn't perfect, but it oughta work. * Clarified the virtual-package-depends-without-real-package-depends warning with an additional paragraph, closes: #164813. * Updated the testset/check_info.pl to work, similarly to lintian-info. * Updated the testsets (this verified my s/elsif/if/g bug fix in checks/scripts mentioned above). * Updated %known_essential as per my sid available file. * Updated %known_virtual_packages as per Policy's virtual packages list. lintian (1.21.1) unstable; urgency=low * Removed FHS transition stuff from lintian's own maintainer scripts. Lintian is now Lintian-clean. :o) * Moved the purge stuff from the old prerm to postrm, and made the (possibly redundant; to-do) question more forgiving. * Added a doc-base file and run install-docs, closes: #129509. * Removed spurious no-manpage exception for binaries that end in numbers, closes: #118479. * Fixed lintian-info's broken $ENV{LINTIAN_ROOT} use. * Fixed --setup-lab to ignore already-existing packages, thanks to Chris Tillman, closes #83593. Let's hope it all works out :o) * Updated the list of allowed distributions, closes: #150466. * Removed the leading ./ from filenames in %linked_against_libvga which actually makes it work, thanks to Matej Vela, closes: #157317. * Warn against all uncompressed changelogs, thanks again to Matej Vela, closes: #157318. * Nuked the code that checked that for every /usr/share/doc/foo -> ... symlink there exists an equivalent /usr/doc/foo -> ... symlink; seems to be a leftover from the FHS transition days, thanks yet again to Matej Vela for the patch, closes: #161716. lintian (1.21) unstable; urgency=low * New maintainer. * Applied the ever so appropriately named ``unfuck'' patch to the lab code. It includes but is not limited to: + code to read the pool from Bas Zoetekouw + other changes to support new style distributions from myself + fixes for the breakage induced by Shaleh's blitheful insertion of "use strict" everywhere + an array of assorted fixes from Colin Watson, myself and perhaps others which I've accidentally forgotten. The lab code is now officially not entirely broken. Yay! :) There's still work to be done, but this still closes: #157369, #157942. lintian (1.20.19) unstable; urgency=high * revert the frontend to using require as use is a compile time only option which was causing the environment variables to not be read. Closes: #160819 lintian (1.20.18) unstable; urgency=low * "I release once a year whether I need to or not" release * updated debhelper command list, closes: #119094 * applied lab patch from Joy, et. al., closes: #157942 * added python version 1.5, 2.{1,2,3} to checks/scripts, closes: #114164 * applied Colin Watson's patch for needs=dwww handling in menu files, closes: 115486 * renamed autoconf-generated-file-in-source to configure-generated-file-in-source, closes: #115744 * updated php checks in checks/scripts, closes: #116386 * yet another checks/script update. This time we allow for unusual interpreters when the file is not in a bin/ directory, closes: #116584 * updated policy revision, closes: 118694 * applied Colin Watson's patch for a bug in deplib which made A | B => A, closes: #122742 * applied Chris Tillman's patch to clean up policy references, closes: #123585 * applied Kevin Ryde <user42@zip.com.au>'s patch to better check for emacs local variables in changelogs and updated the error message as well, closes: #129581, #138216 * accept *-proposed-updates in distribution field, closes: #139288 * removed check for postrm removing usr doc symlink and inverted the postinst check to now make sure the package does NOT set the symlink. Closes: #154005 * removed global override file, it was getting ancient * converted all uses of 'require' to use statements * more use strict cleanups lintian (1.20.17) unstable; urgency=high * Colin patches: fixed typo in man page causing incorrect formatting, closes: #114118 duplicate relations check is a lot more intelligent, closes: #119048 * urgency set to high to reflect the fact that the relations check is reporting many packages violating policy when in fact they are following it correctly. This is especially true for the new python policy. lintian (1.20.16) unstable; urgency=low * the "next day bug" release * give an error if a package declares a relation on the same package twice, i.e. Depends: libc6, libc6 (<< 2.0). Closes: #27442. * objdump-info collection script now handles UPX binaries (closes: #113497) lintian (1.20.15) unstable; urgency=low * the "collecting unemployment and have time to code" release * no longer use syscall to exit from pipeline handler, now uses POSIX::_exit Closes: #112205. * Accept Joy's NMU patch (he applied it as 1.20.14.1). Closes: #110991, #109244. * Warn if the copyright file contains dh-perl-make boilerplate as suggested by James Troup. In the process debmake-templates-in-copyright became helper-templates-in-copyright. Closes: #110337. * Oops, used the same argument name (-s) twice. Reverted back to -s meaning "source". Updated manpage and source to reflect this. Closes: #109631. * added a warning when hardlinks are used. Closes: #103893, #97518. I am closing #97518 here as well which asked that I warn about hard links that link to files in another directory. Since I warn about hardlinks existing adding a separate check for where they link seems silly. * applied Edward Betts patch to detect .cvsignore and CVS/. Closes: #74684. * applied Daniel Schepler's patch for Build-Depends v. Build-Depends-Indep. Closes: #92472. * applied Edward Betts patch for detecting a misspelling in common-licenses. * added 'debain' to list of spelling errors. Closes: #112083. * applied Steve Kowalik's patch that adds out-of-date-standards-version. This will be defined as the policy shipped with the last stable release. Closes: #112043. * Made doc-base-references-usr-doc inform which file is the culprit. Closes: #111020. * Applied Steve M. Robbins' patch for improved handling of ldconfig checks in maintainer scripts. Closes: #110465, #113285. * do not complain about static binaries if they are called "foo.static". Closes: #98288. * testset/runtests now calls dpkg-buildpackage with a '-d' so build-depends are not checked. * oops I left 'debian' in the spelling check list. * backed out Gergely Nagy's suggestion for checking for 'Author(s)'. That is just overly pedantic and lame. Reopens: #107815, tagged wontfix. * checks/etcfiles now complains about ANY file found in /etc that is not a conffile. The finer grain checks have been removed. Closes: #103940. Added a new testset 'etcfiles' to go along with the test. * debconf check now looks for the 'seen' flag and gives an error if the package does not have a versioned dependency on debconf 0.5.00. Closes: #113164. lintian (1.20.14.1) unstable; urgency=low * Another non-maintainer upload blessed by the maintainer, to clean up after the last such NMU. :) * Fixed spurious postinst-has-useless-call-to-ldconfig warnings, patch from Colin Watson, closes: #109721. Also fixed the silly error in shared-libs which broke shlib-missing-in-control-file. * Fixed checking for /var/lib/games, patch from Andrew Suffield, amended by me not to warn for the files but just that dir, closes: #109970. * Have debian-changelog-file-contains-user-emacs-settings checked only at the start of the line (wonder if Emacs allows indentation in there?), closes: #109971. * Force LANG=C because of a bug in debiandoc-sgml, closes: #110891. lintian (1.20.14) unstable; urgency=low * Non-maintainer upload blessed by the maintainer. Kudos to Colin Watson and Steve Kowalik for helping in the preparation of this upload. * Skip shared objects which aren't in %ldso_dir in some shlib checks, as per changes in Policy 3.5.5, finally closes: #42399, #41613. * Fixed Policy section in package-contains-upstream-install-documentation, closes: #94267. * Added Adrian Bunk's patch for pike/pike7 stuff, along with pike7 stuff in checks/scripts.desc so it's consistent, closes: #94902. * Added an error for leaving files generated by autoconf in the source package, patch from Colin Watson, closes: #107679, #94316. This pulled in renaming checks/debian-cruft* to cruft*, logically. * Added checks/infofiles* for everything related to info files, moved parts of checks/menus* in it and added compression related errors, closes: #95785. * Added Brendan O'Dea's patch for checking Perl module directories, and for not checking the source for each matching file in a !$is_python package, closes: #96350. * Removed lc() from checks on whether a debconf field value is valid, closes: #106324. * Improved binary-or-shlib-defines-rpath description, closes: #94901. * Fixed the references to /usr/doc in the manual page using the patch from Stephen Stafford, closes: #103177. * Added debconf's "config" among %maintainer_scripts in checks/control-files, closes: #108123. * Added "Debian/GNU Linux" among the corrections in checks/spelling, closes: #35761. It required some other modifications but oh well. * Added a new warning, doc-base-file-references-usr-doc, closes: #46582. This required adding collection/doc-base-files* and using that in checks/menus*. * Added a new error, debian-changelog-file-contains-user-emacs-settings, closes: #84750. This required using collection/changelog-file in checks/changelog-file (doh! :). * Complains on manual pages located in /usr/(share|X11R6)/man instead of man* subdirs, closes: #93056. * Added php4 as a valid interpreter, closes: #94534. * Fixed a little bug in checks/spelling.desc, it lacked a comma in its Needs-Info field. * Added a warning when there's common-licenses and not /usr/share/common-licenses/ in the copyright file, closes: #99886. * Added a warning when there's "Upstream Author(s)" in the copyright file, closes: #107815. * Removed -v from command(1) invocation check, patch from Colin Watson, closes: #96227. * Mention the language in select-with-translated-default-field and partially-translated-question, patch from Colin Watson, closes: #95795. Also, fixed some thinkos in the code for the latter warning. * No longer barfs on debhelper-generated safe ldconfig calls, patch from Paul Martin, closes: #82479. * Added the recent Policy versions up to 3.5.6 to standards-version, and moved the threshold for ancient versions up to 3.2.0 because that version was released a bit more than one year ago, closes: #104766. * Added a new error, package-depends-on-an-x-font-package. The pattern is ^xfont.*, that ought to work fine (xfntil2 et al will go undetected, but that's obsolete). * Colin tweaked lib/text_utils.pl to display indented and empty stuff in Info: tags properly. lintian (1.20.13) unstable; urgency=low * debhelper check for lacks #DEBHELPER# token now checks if -n was passed to the dh_ script. Thanks Chip for pointing this out. (closes: #92624) * list of debhelper programs that want to write to maintainer scripts updated * now check for Build-Depends on essential or build-essential packages (closes: #92372) lintian (1.20.12) unstable; urgency=low * 'farewell to Fabrizio Polacco' release * checks/debhelper's dh-make-template check did not include the $type in its output. * removed spurious debug message from zero-byte-file check in checks/files * lintian no longer runs its regression test when it builds (closes: #92192) * unpack-src-l2 now ensures that we have sufficient permissions to later remove the package (closes: #92224) * bashism check now looks for bash style arrays, thanks Torsten Landschoff. also added to testset. lintian (1.20.11) unstable; urgency=low * 'where is my mind release' * added science to list of known sections, Closes: #91798 * cleanup override handling, was using chop instead of chomp * checks/binaries checks a binary for profiling symbols now, Closes: #91837 * removed false report of prerm failing to remove a doc link when there is no doc dir, just a symlink to another package. lintian (1.20.10) unstable; urgency=low * 'I think I remember perl' release * checks/menu-format would die if the last line of a menu had a line continuation character. Seems the function was not getting called with all 5 arguments. * added a list of exempt paths for static binaries, currently only /boot is listed. lintian (1.20.9) unstable; urgency=low * 'rule monger' release * checks/debhelper: make regex case insensitive, Closes: #89070 * checks/debhelper: modify search logic so it does not report false positives when both Build-Depends and Build-Depends-Indep are defined, Closes: #89069 * Fix the description for package-contains-upstream-install-documentation, Closes: #89257 * dh_testversion is deprecated, patch applied. Closes: #89624 * lintian now detects that the deb/dsc/changes file it was told to parse is zero bytes and skips it. lintian (1.20.8) unstable; urgency=low * 'wearing my "fuck redhat" shirt and loving it' release * checks/menus, the check for whether or not the doc symlink is removed fails for people who do not use the -f option to rm (or any other options) thanks Oliver Elphick, Closes: #88182 * checks/scripts handles 'wish' better (I hope), Closes: #88333 * checks/debconf, the registry check is ignore if the package being tested is debconf itself. Closes: #88526 * frontend handles files that are referenced but do not exist better * this is looking like one of the last releases for a while lintian (1.20.7) unstable; urgency=low * 'test everything' release * updated architecture list -- hppa, ia64, mips, mipsel, s390, sh added * added 'Enhances' to list of known fields * removed libwraster2 from list of obsolete packages, Closes: #85584 * Colin Watson's debconf checks added, still need a testset though, Closes: #85876, #84759 * checks/menus now checks for proper use of install-info, Closes: #25823, #30192 need a testset for this too * checks/files.desc now points to the FHS in /usr/share/doc/debian-policy * applied Joey Hess' app-defaults patch. This allows app-defaults to be conffiles as well as adding a check for app-defaults in old dirs. Closes: #86707, #76811 * lintian now knows more about 3.5.x's X policy in 12.8. Added check for Xresources file but no conflicts on xbase (<< 3.3.2.3a-2). Closes: #63542 * applied Joey Hess's perl patch. Now know that pm's in /usr/share have no need for the +x bit. Closes: #86709 * check for INSTALL in /usr/share/doc now knows about INSTALL\..+ (i.e. INSTALL.gz) * checks/standards-version has an error for packages which declare a source relation (ie Build-Depends) but are not at least policy 3.1.x. Closes: #86711 * checks/fields now checks that the arch definition in source relations follows policy. Closes: #86710 * added wish8.3 to list of known interpreters in checks/scripts * warning description cleanups, Closes: #87528 * added more bashism checks -- '|&', '$[foo]', '${parm:len[:offset]}', '${parm/pat[/str]}', '${parm//pat[/str]}' Closes: #32113 (the suidregister stuff happened a release or three ago) you guessed it, need a testset * bashism check now tells you what it thinks the bashism was. Closes: #81738 * bashism checks now ignore here documents, Closes: #87527 teset/maintainer-scripts now has a here document in a script and extended bash triggers. Also, various other bashism test cleanups and improvements. * typo in scripts fixed, now I really do work on python2, thanks Jerome. Closes: #87772 * hmm, versioned-provides message was often wrong, made it better and it reports the perceived relation, i.e. foo (= 4). * removed the -w and strict from reporting/ scripts * update-menus checks enhanced with knowledge about wm-menu-config. * added 'asmodule' to list of known menu tags * depends-on-essential-package-without-using-version now is only reported for actual depends or pre-depends. * interpreter checking handles arbitrary whitespace now * fixed scripts check for ocaml, now know about ocamlrun. * unusual-interpreter messages were being caused by not prepending '.' to the interpreter name when checking %executables in checks/scripts. * still more fun with ++ )-: menus is now even more paranoid with quotemeta(). * ensure $setuid, $setgid is set in checks/files, thanks to the luxman package for triggering the perl oops. * collections/scripts handles files that only contain '#!'. lintian (1.20.6) unstable; urgency=low * 'people who depend on side effects should be flogged' release * lintian had code which set a variable to undef, then used it. Without -w and use strict, this silently became a zero, but now it causes errors. So, since it obviously was meant to be zero, I set it to zero instead of undef. Closes: #85326 Fun part was this only happened when run on more than one version of a single package i.e. lintian foo_1.changes foo_2.changes. * checks/scripts updated to deal with python2.x and there being two versions of python. Closes: #85441 while doing this, collections/scripts was updated to support the use of /usr/bin/env. I probably added bugs here )-: added a scripts testset, very early still. * my modification to checks/menus to support /usr/share/doc/package -> other had a problem with special chars. Now calls quotemeta(). Annoying because I have a ++ package name but it did not trigger this particular case. So, I added a package to foo++ which links to foo++. Closes: #85530 * added a TODO to the private dir. * left off a closes in the big perl closings 2 revisions ago, Closes: #80192 lintian (1.20.5) unstable; urgency=low * 'people who name a lib libfoo-X.X.so should be shot' release * checks/shared-libs handles libraries of the form 'libfoo-X.X.so' now * the virtual package check I added in the last release failed to check the field it was testing, so errors were reported on fields other than Depends. Ooops. The description also should have referred to packaging not policy. Closes: #85225 lintian (1.20.4) unstable; urgency=low * 'why would you ever do THAT?' release * lintian-info sets $ENV{'LINTIAN_ROOT'} if it is not set * added a check to checks/files for packages which ship the upstream INSTALL document. This is almost always useless for users of a package. testset/binary now includes such a file Closes: #81970 * checks/menus -- the walk over package contents now has logic to run file tests on files, link tests on links, etc. * checks/menus -- if there is a /usr/share/doc/$pkg symlink, assume it links to a package it depends on and do not warn about setting the usr/doc symlink. There is code in checks/copyright-file that makes sure policy is followed with regards to what is actually linked against. Closes: #48048 * checks/fields is now less strict about Section: non-US handling * added debconf files to list of known control files in checks/control-files Closes: #46863 * perl mistakes are no longer checked for. Closes: #47076, #75889 * FHS 2.1 cleanups, Closes: #75878 * lintian will not complain if you symlink your doc directory to an essential package and leave off the depends, because since it is essential you must not depend on it. Closes: #48296 * lintian now gives and error when a package declares a depends on an essential package without using a versioned depends. Closes: #33250 * extra-license-file is not given if the file is just a symlink. Closes: #35224 * checks/fields: now complain if a package declares a depends on a virtual package without first depending on a real packages as an alternative. Required adding a known_virtual_packages list to checks/common_data.pl. Also removed redundant info/registered-virtual-packages file. Closes: #70673 * added a library (mostly empty right now) and non-us testset * runtests now runs the tests in alphabetical order * lintian's --version info is being updated automagically again * moved some hashes around in checks/ to common_data.pl * checks/changelog-file reorganized so it knows the size of the files. Now it can check that the changelog is sufficiently large to require compressing. Also modified the desc file to reflect this. Closes: #84400 * --info now outputs all info. Silly bug in how I used split and defined. Closes: #82970 * added a testset/check_info.pl script. It verifies that every lintian check referenced in a desc also has an info section. runtests now runs this test as well. * suidregister warning is now an error. * checks/menus: fixed the if link case pattern match -- one more perl error down, 3 billion hidden ones to go. * Following items thanks to Colin Watson * updated checks/standards-version so it does not give perl errors when it encounters a newer standards version than it knows about. Closes: #84083 * updated references to policy for policy 3.5.0. Closes: #84088, #83969 * Added a warning for packages containing a link to undocumented(7) as suggested on debian-policy list. Also includes a testset (manpages) addition. Closes: #83188 * At the moment checks/copyright-file just tests for a slash in the link; I've changed it here to test for an initial / or ../, and then after that check it strips off everything from the first slash on, so that tests on the package name work correctly when people link to subdirectories of other /usr/share/doc directories. Closes: #84066 * It was unpacking to level 2 even though I had Unpack-Level: 1 and no associated collection scripts. Of course, it wanted override files from /usr/share/lintian/overrides/$pkg. Fair enough - except that if I said --no-override it wanted the override file information anyway, and still unpacked to level 2. No obeys non-overrides. Closes: #84722 lintian (1.20.3) unstable; urgency=low * 'Does the pain ever end?' release * oops, lintian cannot create a static lab due to an error check too early in the code. While fixing this I also added a static lab check in testset/runtests. Closes: #83411 lintian (1.20.2) unstable; urgency=low * 'Where or where did my changes go' release * fixed --help option to not show escaped chars * changed regression test to also do a run with --info on * seems lintian always used the lintian-info script from the path, changed to look in LINTIAN_ROOT if passed * perl problems cleaned up, Closes: #82970 * removed randomization of output strings when referring to policy documents, not only is this silly but it makes regression tests impossible * moved manual_refs.pl list of policy manuals to an external file. This will allow automated updating when releases occur. It also removes the perl warnings (-: lintian (1.20.1) unstable; urgency=low * the change hurts release * every perl script now calls use strict and passes -w to perl The long road of bug tracking because of this has begun. Thanks Joey H. * testset/filenames now has a lengthy-symlink bug to show how that code works * typo in checks/control-files in a bashism check, the correct POSIX call is 'read foo' however the code was checking for the existence of whitespace before the call, not the existence of the variable to read into due to a mixed up regex. Thanks Adam Heath for pointing this out. Closes: #81453 * checks/control-files, the check for whether '.' takes more than one argument did not take into account things like 'and'. It does now. Closes: #81737 * fixed interpreter check code to hand a space between the #! and the interpreter (really), also allows bash,ksh,ash as valid sh shells. Also knows to look for an ELF header and stop parsing the script. Thanks Colin Watson. Closes: #80348, #82541 * testet/binary-1 added. This is a small C program to test lintian's handling of binary files. See the changelog in this directory for info * fixed message for 'manpage-has-wrong-extension', Closes: #82452 * 'N: Unknown interpreter' message now only printed once per script, Closes: #81644 * added equivalent file-directly-in-usr-share-doc messages (et al.), Closes: #82654 * added new message: suidregister-used-in-maintainer-script. this replaces the old messages suidregister-used-in-maintainer-script-other-than-postinst and suidunregister-not-called-in-postrm due to suidregister being phased out of Debian. Closes: #81868 * binary-has-unneeded-section upgraded from info to warning lintian (1.11.15) unstable; urgency=low * Hack Hack * checks/perl disabled until it can be improved * fixed typo in checks/description: s/%type/$type/ * fixed mental typo in checks/*: $foo == 'string' is not the same as $foo eq 'string', Closes: #80813 * Added Colin Watson's patches, Closes: #80373, #80376, #80377 lintian (1.11.14) unstable; urgency=low * more fun with interpreter checking, seems a space is allowed between bang and the interp path. So, fixed the regex (again). Also store the name of the interpreter in $interp and use that rather than $is_sh, this will allow for other interpreter checks later. Closes: #80348 lintian (1.11.13) unstable; urgency=low * (Joy) fixed a typo in binaries.desc * (Joy) checks/debhelper now passes $type with the lintian message * (Joy) libs/text_utils.pl, reporting/html_reports fix maintainer name * checks/control-files now checks if the postrm calls update-alternatives with the --remove option, this is considered harmful, Closes: #80255 checks/control-files.desc explains the problem in detail * fixed checks/menus setting of is_sh, $foo = split() sets foo to the number of items, not the first item -- duh (-: How did this make it thru testing? added a maintainer-scripts testset to help catch this in the future lintian (1.11.12) unstable; urgency=low * new command line option: --show-overrides, displays tags even if they have been overridden, marked 'O: .....' * shared-libs.desc text changed to give more info when a shared library is present, but the SONAME is not set or set improperly, Closes: #78277 * removed references to libtool-workarounds.txt (it never died ....), Closes: #78420 * my reformat of the code in checks/menu-format changed the regex from m/^#/ to m/^ #/, I changed it back (kind of). The test is now m/^\s*\#/ just in case a space snuck in. Also modified the code so it does a if (m//) { next;} rather than if (! m//) { ........ }. Closes: #78532 * checks/menus now checks which interpreter the maint script uses and varies its checks accordingly -- works for sh and perl currently, Closes: #78880 Updated menus.desc while I was at it. * fixed typo in scripts.desc, pike error message should have referred to pike not to make, Closes: #79744 * killed use of \b in bashism checks, now uses (^|\s+), Closes: #80122 lintian (1.11.11) unstable; urgency=low * Finally, lintian's version number is automagically set * lintian.sgml updated to document per package overrides info. * the /usr/share/lintian/overrides/<package> actually works now (-: lintian (1.11.10) unstable; urgency=low * Dammit, + sign in package name problems again added a regression test for a foo++ package. Closes: #77216 * removed the libtool text in the rpath message, libtool no longer sets rpath the upstream finally saw the light. lintian (1.11.9) unstable; urgency=low * Moved the override files from /usr/share/doc/<package> to /usr/share/lintian/overrides/<package> also added a check to catch override files in the old directory * Removed calls to defined in checks/perl, Closes: #76339 * copyright-file-is-gpl renamed to copyright-file-contains-full-gpl-license * magicfilter should be in /usr/sbin, not /usr/bin, Closes: #76686 * modified testset/empty. dpkg-genchanges now requires a Maintainer field. lintian (1.11.8) unstable; urgency=low * Fixed Description too long message, Closes: #75570 * removed description-may-be-too-long * Fixed description of package-uses-debhelper-but-lacks-build-depends, I left the 's' off of lacks * zero-byte-file-in-usr-doc changed to zero-byte-file-in-doc-directory * added documentation for zero-byte-file-in-doc-directory, Closes: #75744 * renamed package-source-contains-debian/files to debian-files-list-in-source, Closes: #75746 lintian (1.11.7) unstable; urgency=low * Fixed lintian's handling of autouse, Closes: #75115 Thanks Stefan Hornburg for helping me with this * Fixed silly manpage filename parsing bug, Closes: #75246 * Removed now out of date libtool-workarounds.txt, Closes: #75324 * unpack-srcpkg-l2 used a silly regex to parse dpkg-source output, this has been fixed to simply read some string of non-whitespace, Closes: #58943 * checks/spelling should now work with high ascii chars, Closes: #70974 * added debiandoc-sgml Build-Depends-Indep, Closes: #74751 * added checks/debian-cruft. Checks for the debian/files file, Closes: #38710 * fixed checks/debhelper -- it actually works now. * added tixwish to list of known interpreters, Closes: #47775 lintian (1.11.6) unstable; urgency=low * Fixed manpages check to handle oddly named files, now uses File::Basename * fixed debhelper check so it will detect a need for Build-Depends even if a script which needs to modify maintainer scripts is not used. * lintian-info now outputs info for source messages too, Closes: #51811 * used a different syntax in checks/perl rather than set $2, Closes: #54710 * if dh_testversion is called by a package, ensure that the package uses a versioned Build-Depends * Maintainer Upload (with Darren's blessing) lintian (1.11.5) unstable; urgency=low * /etc/pam.d are now checked to ensure they are conffiles, Closes: #50293 * fixed the typo in checks/copyright-file, Closes: #53626 * fixed description, lintian is at policy 3.2.0.0, Closes: #55083 * fixed checks/standards-version, knows about policy version 3.2.0, Closes: #68655 * check for zero byte length files in /usr/share/doc/<package>, Closes: #59508 * added a fail function to frontends/lintian, Closes: #69259 * checks/files.desc now refers to FHS 2.1, Closes: #69422 * ran ispell on checks/*.desc files, Closes: #69423 * added checks for suidregister and suidunregister, Closes: #29444 * lintian now checks the length of the short description, Closes: #33411 * lintian now verifies that /etc/cron.{d,daily,monthly,weekly} files are marked as conffiles, Closes: #46332 * Description: is checked to make sure it is not a dh_make template, Closes: #59141 * fixed URL in README, Closes: #59733 * added magicfilter to list of interpreters, Closes: #60361 * added check if debhelper is used by a package, it is included in Build-Depends, Closes: #70438 * for menu files, if the menu needs=foo and foo is the package name, assume this is ok. Also, sections that match the package name are also assumed to be ok. This affects mostly window managers. Closes: #64674 * Checks whether the icon used in a menu file is in xpm format. * added {g,k,p,y}forth as valid interpreters, Closes: #51778 * More checks/ dir cleanups lintian (1.11.4) unstable; urgency=low * Brought lintian.sgml up to date * cleaned up the layout of frontend/lintian * Dep::implies did not parse Depend: foo | bar | baz correctly, this is why things like wmakerconf gave bogus errors. This is duct taped, real fix some day. * Closes: #43706 lintian (1.11.3) unstable; urgency=low * Added 'Format' field to dsc file checks New dpkg versions seem to write a Format version to dsc files, lintian flagged them as an unknown field. * lintian failed lintian (-: changed copyright to point at /usr/share/common-licenses/GPL lintian (1.11.2) unstable; urgency=low * Official maintainer change * Package specified overrides * Fixed perl dep check bug * Added perl modules: (#46118) (#51457) (thanks ardo) * Added interpreter ocaml (#50933) * Cleaned up some overrides -hopefully not yours (#48703, #48769) * SUID allowed for packages named *-suid * Applied Frank Belew's patches (#39832 #48794) * Added checks for /usr/[share/]doc/copyrights references in copyright file * Added change in directory checks based on changes by the Great X Reorganization * Added check for text version of changelog no matter what * Added check for /var/lib/games * Added checks for Build-* source-depends fields * Updated standards-version to accept 3.1.0 and made anything 2.x ancient lintian (1.10) unstable; urgency=low * Richard's changes: * Darren's changes: + changed rm of /usr/doc link to look for rm and rm -f (closes: #46740) + changed numerous overrides to account for tar (closes: #46903) + added doc-base override (closes: #45999) + changed of URI:: functions liburi-perl (closes: #45770) + added recognition of HTML::SimpleParse (closes: #45081) + added "hints" to the known menu tags (closes: #47248) + changed example checks to include ./ (closes: #44897) + moved data/dumper to perl|perl5 (closes: #42036) + changed perl|perl5 check to allow perl5|perl (ver) (closes: #44425) + caused lintian to skip many file related checks for the files in directories /hurd and /server (closes: #36680) lintian (1.9.1) unstable; urgency=low * Richard's changes: * Darren's changes: + Added a check for /etc/pam.conf. Precursor for reserved /etc/* files + Added a check of postinst and prerm for /usr/doc symlink manipulation + Added the /usr/doc symlink to lintian's scripts lintian (1.8.2) unstable; urgency=low * Richard's changes: * Darren's changes: + Added /var/lib to the FHS check + Fix for the new tar + Make libraster2, not libraster1 obsolete lintian (1.7) unstable; urgency=low * Richard's changes: * Darren's changes: + This time.. added Help as a valid root level menu option + Changed FSSTND directory Infos to Josip's suggested wording. + Removed /var/lib from the FSSTND check + Fixed non-US/section check + Added text about bashism checks performed to N: tag + Fixed bad-link-to-undocumented.man.page N: tag lintian (1.6) unstable; urgency=low * Richard's changes: * Darren's changes: + Added some bashism checks from Shalah + Added /usr/share/doc as valid directory + Added /usr/share/man as valid directory + Set warning for FSSTND directories + Added Help and App/Databases to valid menu entries + Added patch from Steve Haslam to recognise /etc/menu-methods and check for update-menus calls + Added overrides for dh_make requested by C. Small + Added patch from Roderick Schertler to skip comments/blank lines at top of menu files. + Changed the relative shared-library check to look for either rela.text or rel.text, not just rel.text. This is needed for PowerPC and other non-i386 architectures. + Added ruby as a valid interpreter + Added notice when unrecognized file format is found that it might be due to a missing package: binutils-multiarch lintian (1.5) unstable; urgency=low * Richard's changes: * Darren's changes: + Changed file error message to indicate it's file's fault(closes: #37259) + Changed perl depends to perl | perl5 to cover both Also added perl-5.004 and perl-5.005 since they are valid perls (closes: #41041, closes: #39835) + Remove a undefine causing spurious unknown-tag error (close: #40699) + Ancient-ized standards-version 2.4.0 and 2.4.1 + Added policy 2.5.1 to the accepted number for standards-version + Check for use of /etc/nntpserver. Only major change in policy v2.5.1 + Added perl-5.005 and perl-5.004 as valid interpreters (close: #39834) lintian (1.4-1) unstable; urgency=low * Richard's changes: + When reporting errors in .changes files, report filenames the way they were listed, rather than as absolute pathnames. + Don't exit with code 1 for errors that were overridden. This fixes bug#37353, reported by Wichert Akkerman. + Correctly handle escaped characters in menu items (bug pointed out by Raphael Hertzog). + bltwish scripts should now depend on blt, not blt8.0. This fixes bug#38092, reported by Gordon Russell. * Darren's changes: + override requested by christian kurz for ppp. Several of the files/dirs have non-standard permissions. + override requested by adam kleine for gtk-engines-gtkstep. Contains libraries not meant to be linked. + override requested by Manoj Srivastava for latex2html. Fixes bug#38098. + hugs added to the list of interpreters. Fixes bug#37668 reported by Antti-Juhani Kaijanaho. lintian (1.3-1) unstable; urgency=low * Richard's changes: + For install-docs, accept --remove as well as -r. Fixes bug#35664, reported by James Van Zandt. + In explanatory text for prerm-does-not-call-installdocs, give a correct example for the prerm (not the postinst). Fixes bug#35665, reported by James Van Zandt. + List gmp2 as obsolete package (replaced by libgmp2). + Don't generate depends-on-obsolete-package for -dev and -dbg packages that depend on their library. * Darren's changes: + override requested by julian gilbey for menu. Menu can't call update-menus in postrm since it won't exist then. + added requested override for vtwm update menus. Fixes bug#36457 reported by Branden Robinson + override requested by Oliver Elphick for postgresql-pl. Has shared libraries not loaded by ld.so lintian (1.2-1) unstable; urgency=low * Darren's changes: + added the -1 to denote purely packaging changes + added fvwmother to menu needs= check (fixes bug#35057) * Richard's changes: + Added new tag package-installs-packlist. This closes wishlist bug#33827, reported by Joey Hess. + Mark all versions of libgtk1.1 as obsolete for depends-on-obsolete-package tag. + For tag arch-indep-package-contains-binary-or-object, tighten up regexp that detects "ELF". This fixes bug#35237, reported by Mark Brown. lintian (1.1) unstable; urgency=low * Zapped compiled-with-bad-libc check. * Corrected spelling error in spelling check (it flagged "interchangeable" as a bad word; this should have been "interchangable"). This fixes bug#33252, reported by Santiago Vila. * Silenced non-standard-dir-in-usr check about /usr/$arch-linuxlibc1/, which will go away at some point and is not worth moving now. I'll file a policy proposal for it at some point. This fixes bug#33114, reported by Marcus Brinkmann, and bug#33374, reported by James Troup * Silenced non-standard-dir-in-var check about /var/www/, since it's Debian policy to use it. lintian (1.0) unstable; urgency=low * New tags: E: non-standard-toplevel-dir W: non-standard-dir-in-usr W: non-standard-dir-in-var W: file-in-unusual-dir E: dir-or-file-in-mnt E: binary-in-etc E: use-of-compat-symlink E: subdir-in-bin These cover much of the FSSTND and FHS. * No longer emit executable-in-usr-doc for scripts. It's just too controversial. I've added an info-level tag script-in-usr-doc for people who are interested. This closes bug#28560, by Stephane Bortzmeyer. * Only emit compiled-with-bad-libc if the register_frame symbols are UNdefined. This closes bug#31867, submitted by Michael Meskes. * Don't emit compiled-with-bad-libc for binaries linked to libgnustep_base.so.0, which also defines __register_frame_info. This closes bug#31004, submitted by Matthias Klose. * Changed a lot of "error:" messages to "internal error:", to make clear that they are errors in Lintian's execution, not in the package being checked. This closes bug#31013, submitted by James Troup. * (frontend/lintian) Select STDOUT again after closing OUTPUT_PIPE. This fixes bug#31574, reported by Julian Gilbey. Thanks for the patch! * (checks/copyright-file) Lintian was confused by "libident(=0.22-1)", i.e. without separating whitespace. Fixed. This closes bug#31821, reported by Paul Slootman. * Man page fix: mention that lintian can be run on .changes files. * Depcheck pages: fixed version comparison bug. lintian (0.9.5) unstable; urgency=low * Do not abort when run as root; print a warning instead. --allow-root still overrides the warning. * Only generate non-standard-file-permissions-for-etc-init.d-script tag for regular files. Reported by Martin Schulze. * Corrected libtool-workaround sample configure.in snippet: Look for *-*-linux-gnu, not *-pc-linux-gnu. Fixes bug#30756, reported by James Troup. * Made lintian abort with an error message when objdump can't handle a binary's file format. Also made lintian Suggest binutils-multiarch. * New error tag: arch-dependent-file-in-usr-share This closes bug#30742, reported by Matthias Klose. * Added gnuplot as a known interpreter. Suggestion by Rafael Laboissiere. lintian (0.9.4) unstable; urgency=low * New features (summary): - 112 new spelling corrections. - Minor efficiency improvements. - Checks __register_frame_info problems. - Updated to policy 2.5.0 * (lib/util.pl) Exit with code 2 when failing, like the manpage says. * (checks/files) Print octal permissions in bad-permissions-for-etc-cron.d-script, not decimal. * (checks/files) Ignore .xpm extensions too when hunting for extra license files. * (checks/conffiles, checks/conffiles.desc) Renamed -may-not-be- tags to -must-not-be-, for clarity. * Replaced most bash scripts with perl scripts, for faster startup times and fewer subprocesses. This speeds up lintian by some 30% on my machine. * (collection/objdump-info) Add -T flag, to collect dynamic symbols table too. * (checks/binaries) Look for __register_frame_info and __unregister_frame_info. New tag: compiled-with-bad-libc * (checks/*.desc) Use new (2.5.0) section numbering for policy references. * (checks/changelog-file) Accept changelog.html.gz files. * (checks/standards-version) newer-standards-version is warning, not error. This fixes bug#29366, reported by Julian Gilbey <jdg@maths.qmw.ac.uk>. * (checks/standards-version) Updated to standards-version 2.5.0. * (info/overrides) New overrides. Fixes bug#29449 reported by Marcus Brinkmann (libc5 overrides) * (checks/standards-version.desc) Remove the link to the upgrading-checklist, which I can no longer find and which is probably not maintained anymore. * (checks/control-files) Fix check for mknod-in-maintainer script: pipes are made with p, not -p. * (debian/control) In the package description, mention which policy version Lintian checks. lintian (0.9.3) unstable; urgency=low * (checks/binaries) Warn if a package with ELF binaries does not have a Depends line. New tag: missing-depends-line. (Suggested by Charles Briscoe-Smith) * (checks/menus) Don't warn about /usr/lib/menu/README. (Noted by joost witteveen) * (checks/binaries.desc, checks/binaries, checks/shared-libs.desc) Renamed "shlib-without-dependency-information" to "shared-lib-without-dependency-information", to avoid confusion with the shlibs control file. (Suggested by Branden Robinson) Also moved the tag info from shared-libs.desc to binaries.desc, where it belongs. * (checks/shared-libs) Suppress "shlib-with-executable-bit" error if a library has an INTERP header. This catches the libraries (such as libc or libm) that print a little banner when executed. * (checks/fields) Report maintainer addresses that have no dots in the domain part. (Suggestion by James Troup) * Teach fields check about non-us. * (info/perl-modules) Updated modules info. * (lib/deplib.pl) Fixed handling of versioned dependencies. * (checks/files.desc) In executable-in-usr-doc tag, suggest examples directory as a place for executables. (Suggestion by Stephane Bortzmeyer) * (checks/fields, checks/fields.desc) New tag: depends-on-obsolete-package, to flag dependencies on old libraries. lintian (0.9.2) unstable; urgency=low * Look for more misspellings: dependant -> dependent, dependancy -> dependency, definate -> definite, definately -> definitely. * (checks/scripts) Correctly deal with the terminating newline when parsing dependency lines. Fixed bug#27694, reported by Rob Tillotson. * (checks/menu-format) Added Apps/Technical and Apps/Hamradio as sections. * (checks/copyright-file) Don't report copyright-file-is-gpl unless it is GPL version 2. This fixes bug#27793, reported by Milan Zamazal. * (checks/menus) Add newline after bad-menu-file-name tag! * (lib/manual_refs.pl) Update urls to manual sections, so that they refer to www.debian.org. Regenerate index of devref sections. lintian (0.9.1) unstable; urgency=low * Added overrides for imap daemons being sgid mail. * Updated info/perl-modules from new Contents file. * (lib/read_pkglist.pl) Don't fail on 0-size package lists. This fixes bug#27121, reported by Adam P. Harris. lintian (0.9) unstable; urgency=low * (frontend/lintian, reporting/html_reports, checks/*, collection/*) Make rigorous distinction between source and binary packages. Pass "source" or "binary" as second argument to check scripts. Report source package tags with "pkg source:" instead of just "pkg:". Binary package tags stay the same. (The check scripts always report "pkg type:", and the frontend strips the type again if it's "binary"). This involves several changes in the web-report scripts as well. * Add command-line options for the things that could only be set via environment variables or the configuration file. (--cfg, --root, --lab, --dist, --arch). * Really rename obsolete-ldconfig-call-in-postinst to postinst-has-useless-call-to-ldconfig. * Really rename changelog-file-missing-in-native-debian-package to changelog-file-missing-in-native-package * (checks/scripts) bltwish now lives in blt8.0, not blt4.2. lintian (0.8.3) unstable; urgency=low * (checks/menu-format) Added "sort" as a known tag; it's documented in the menu package. This fixes bug#26373, reported by Marcelo E. Magallon. * (checks/scripts, checks/scripts.desc) Added /usr/bin/js as a known interpreter (in ngs-js), as suggested by Brian Bassett. * (checks/shared-libs) Brian Bassett reported inaccuracies in detection of "ldconfig" calls in maintainer scripts. Fixed. * (checks/menu-format) Skip checks on "section" if the "needs" tag had an unknown value. This deals with bug#26375, reported by Marcelo E. Magallon. * (checks/manpages) Fixed: check for links to "undocumented" manpage should not react to link destinations like "ilu-undocumented". * changelog-file-missing-in-native-debian-package shortened to changelog-file-missing-in-native-package * wrong-name-for-changelog-file-of-native-debian-package shortened to wrong-name-for-changelog-of-native-package. lintian (0.8.2) unstable; urgency=low * Ignore common programming-language extensions when looking for extra-license-files. (Fixes bug#26252, reported by Manoj Srivastava, who had a file vm-license.el). * Use -z flag for tar, rather than piping through gzip -dc explicitly. This allows tar to detect and pass on errors reported by gzip. lintian (0.8.1) unstable; urgency=low * Added /usr/bin/guile and /usr/bin/scsh as known interpreters. (This fixes bug#26093, reported by Karl M. Hegbloom <karlheg@debian.org>) * Renamed tags: postinst-contains-obsolete-call-to-updatemenus to postinst-has-useless-call-to-update-menus postrm-contains-obsolete-call-to-updatemenus to postrm-has-useless-call-to-update-menus postinst-contains-obsolete-call-to-installdocs to postinst-has-useless-call-to-install-docs postrm-contains-obsolete-call-to-installdocs to postrm-has-useless-call-to-install-docs obsolete-ldconfig-call-in-postinst to postinst-has-useless-call-to-ldconfig The first two are also downgraded from error to warning. (This fixes bug#26118, reported by Wichert Akkerman <wakkerma@debian.org>) * Renamed tag use-of-killall-in-maintainer-script to killall-is-dangerous. * More overrides. lintian (0.8) unstable; urgency=low * (checks/perl) Don't emit warnings for perl scripts in /usr/doc. This closed bug#25728, reported by Manoj Srivastava. * (info/overrides) Change the non-standard-*-perm overrides to match the new format of those tags. (was changed in 0.7.5) * (checks/control-files) "possibly-insecure-handling-of-tmp-files-in-maintainer-script" now knows about mkdir. New tag: W: possible-bashism-in-maintainer-script (Suggestion by Joey Hess) * (testset/filenames-2) Don't rely on installer's umask for testset. * (collection/menu-files, collection/menu-files.desc, checks/menu-format, checks/menu-format.desc) New check for correct syntax in "menu" files, written by Joey Hess. New tags: E: old-format-menu-file E: whitespace-after-continuation-character E: bad-test-in-menu-item E: unparsable-menu-item W: incorrect-package-test W: duplicated-tag-in-menu-item W: menu-item-missing-important-tag W: menu-item-contains-unknown-tag W: menu-item-uses-icon-none W: menu-item-needs-tag-has-unknown-value E: menu-item-adds-to-root-menu W: menu-item-uses-apps-games-section W: menu-item-creates-new-section E: menu-item-creates-new-root-section The check follows current practice on two sections: Window-managers -> WindowManagers Screen/Screen-saver -> Screen/Save The menu docs will be updated to match. * (lib/pipeline.pl) Bugfix: Use syscall SYS_exit when exiting from children that failed to exec, because the perl function exit() would run END blocks and such. * (checks/standards-version) By now, 2.2.0.0 is more than one year old; mark it as 'ancient'. * (reporting/html_reports) Bugfix: Apply quotehtml() to the tag text *before* adding links to bug pages. * Many small adjustments to checks: * (checks/scripts) Be less picky about package names when checking dependencies. (The check was confused by the package blt4.2) * (checks/description) Ignore case when looking for synopsis lines that start with the package name. * (checks/files) Don't give executable-in-usr-doc error for executables in /usr/doc/examples/, since that directory does contain examples, and it's already flagged by old-style-example-dir. * (checks/control-files) Don't warn about references to "/tmp" unless the full filename is "/tmp" or "/var/tmp". * (checks/binaries) Split tag "binary-not-linked-against-libc" into "program" and "library" tags. * (checks/files, checks/scripts) New tag "executable-manpage", which replaces "executable-not-elf-or-script" for manpages. * (checks/files) Shortened file-directly-in-usr-share-not-in-a-sub-directory and file-directly-in-usr-doc-not-in-a-sub-directory to just file-directly-in-usr-share and file-directly-in-usr-doc. * (checks/md5sums) Added md5sums-control-file-is-empty tag, to avoid spewing many file-missing-in-md5sums errors in that case. * (checks/scripts) Suppress interpreter-not-absolute tag if the filename ends in .in and the interpreter looks like #!@PERL@ * (checks/control-files) Suppress mknod-in-maintainer-script tag if mknod was called with -p. * (checks/shared-libs) Emit no-shlibs-control-file tag for each shared lib found, rather than just once. * (checks/files) Emit old-style-example-dir only for directories, not for every file. * (checks/perl) perl-script-needs-dependency Bugfix: realize that a package does not need to depend on itself. * (checks/description) possible-unindented-list-in-extended-description: Only emit this tag if there are at least two things that look like list items. * (checks/scripts) List /usr/bin/env as a known interpreter. * (checks/binaries) unstripped-binary-or-object: Instead of an exception for /lib/modules specifically, suppress this tag for all .o files. * (checks/control-files) Bugfix: check for == bashism works now. * (checks/files) Introduced new tag lengthy-symlink, which supersedes and corrects the relative-symlink-enters-same-toplevel-directory tag. * (man/lintian.1) Document the check and collection scripts added to lintian in the last few months. (oops) * (collection/perlmods, checks/perl) Refined scanner so that fewer spurious perl-script-uses-unknown-module tags are emitted. Perl tags are no longer 'Experimental'. lintian (0.7.5) unstable; urgency=low * (checks/perl) Exchanged order of arguments in perl-script-needs-dependency tag, for clarity. * (info/perl-modules) Added some module dependencies. * (info/overrides) More overrides. * (checks/shared-libs, checks/shared-libs.desc) Fixed: erroneous shlib-missing-in-control-file if a shared library had more than one symlink to it. * Renamed obsolete-shlib-entry-in-control-file to unused-shlib-entry-in-control-file. * (checks/copyright-file) Changed size-requirement for copyright-file-is-gpl tag from 17000 to 12000 bytes, because some packages (casio) extracted only the "TERMS AND CONDITIONS" part, which is shorter. * (reporting/html_reports) Count packages as well as tags, in tag index. * (checks/control-files, checks/control-files.desc) New tag: W: mknod-in-maintainer-script * (checks/files, checks/files.desc) New tags: W: package-installs-into-etc-rc.boot (rc.boot is obsolete) W: extra-license-file (for COPYING files, etc) * (checks/shared-libs, frontend/lintian) Get rid of dependency on File::Basename; use a simple regexp instead. lintian (0.7.4) unstable; urgency=low * (collection/perlmods) Fixed: perl script scanner is now POD-aware. This should cut down on the number of spurious warnings. * (doc/CREDITS) Install credits file. My apologies if I have forgotten anyone. There were far more people than I would have guessed -- Thanks to all! :-) * (checks/perl) Skip 'autouse' keyword when parsing use and require directives. * (frontend/lintian) When processing a .changes file, turn md5sum checks OFF by default. A new -m flag is provided to turn them back on. The .dsc file is still always checked. * (frontend/lintian) Saner interrupt handling. Lintian now dies immediately if ^C is hit, and does remove the temporary lab (if any). This is mostly a side effect of avoiding system() (in favour of the new functions in lib/pipeline.pl), but did involve some tinkering about with perl's signal handling. Thanks to Ruud de Rooij and Graydon Hoare for their help. This closes bug#24975, reported by Yann Dirson. * (checks/copyright) Fixed copyright-is-gpl tag so that it actually works. * (lib/dep.pl, checks/perl, checks/perl.desc, info/perl-modules) Much smarter perl module analysis. Lintian now has a list of perl modules and the packages that provide them (in info/perl-modules), and a dependency processor (in lib/dep.pl), and uses these to check "use" and "require" lines in perl scripts. New tags: W: perl-script-needs-dependency (Experimental) W: perl-script-uses-unknown-module (Experimental) Tag "script-needs-full-perl" has been dropped. lintian (0.7.3) unstable; urgency=low * (frontend/lintian) Fixed: --display-infotags option wasn't working. * (reporting/harness, reporting/html_reports) Have the archive check generate infotags but not display them on the web pages. This way they are still available in the log file. * (checks/fields, checks/fields.desc) New tag: W: doc-package-depends-on-main-package * (checks/menus, checks/menus.desc) New tag: E: bad-menu-file-name This is emitted for packages that install "/usr/lib/menu/menu", which overlaps with the menu package. (I've seen it happen a couple of times). * (checks/binaries, checks/binaries.desc) Allow unstripped-binary-or-object for any package with "debug" in its name. (This is in addition to the exception already made for "-dbg"). Allow binary-not-linked-against-libc for libc itself :-) * (lib/pipeline.pl) New helper functions for starting pipelines from perl scripts, without involving the shell. This makes it easier to pass filenames literally, and often saves a shell invocation. * (collection/diffstat, frontend/lintian, unpack/*) Use the new pipeline functions. * (checks/description, checks/description.desc) New tag: E: description-is-debmake-template * (reporting/html_reports) Quote < and > in displayed tags (such as occurs in email addresses). This fixes the maintainer-name-missing tag output. * (checks/copyright-file, checks/copyright-file.desc) New tag: E: copyright-file-is-gpl Generated for copyright files that contain the complete GPL text. lintian (0.7.2) unstable; urgency=low * (unpack/unpack-srcpkg-l1, unpack/unpack-binpkg-l1, unpack/unpack-binpkg-l2) Speedup: replaced system("mkdir ...") with mkdir() calls. * (unpack/unpack-binpkg-l1) Speedup: avoid extracting control info twice. More speedups are possible here. * (unpack/unpack-binpkg-l1, unpack/unpack-binpkg-l2) Speedup: avoid using dpkg-deb to unpack debs; construct a pipeline with ar, gzip, and tar instead. It turns out to be far faster. * Together, these changes made for a speed increase of some 30% when checking packages that have to be unpacked. lintian (0.7.1) unstable; urgency=low * (reporting/html_reports) Fixed: Print bug number with tags that were reported as bugs. * (checks/scripts, checks/scripts.desc) Added /usr/bin/expect (provided by expect) as known interpreter. * (unpack/unpack-srcpkg-l2) Fixed: chmod -R the right directory when unpacking a source package. * (collection/diffstat, collection/diffstat.desc) New collection script that runs diffstat on the Debian diff. * (debian/control) Depend on diffstat, version >= 1.27-1 so that it can parse Debian diffs. * (checks/debdiff, checks/debdiff.desc) New check that look at the filenames included in the Debian diff. New tag: W: patch-failure-file-in-diff foo.rej * (checks/control-files, checks/control-files.desc) New tag: W: dpkg-print-architecture-in-maintainer-script (dpkg --print-installation-architecture should be used there) lintian (0.7) unstable; urgency=low * (reporting/html_reports) - Rewritten (more modular). - Create a page for each different tag, which gives the lintian-info for that tag and then lists all occurrences of that tag, with each tag line also being a link back to the page for the package in which it occurs. This closes bug#21390, reported by Gregory S. Stark <gsstark@mit.edu>. - Instead of listing the lintian-info text with every different tag in every package, make every tag a link to the page for that tag (which will have the lintian-info for it at the top). This should make the reports a lot smaller, and also more readable. - Make a "Sorted by tag types" page and link to it from the index page. * (doc/TODO) Entries [L3] and [L4] now complete. * (checks/spelling, checks/spelling.desc) Check README.Debian file as well, since we now collect it anyway for the readme-debian-is-debmake-template tag. New tag: E: spelling-error-in-readme-debian * (checks/fields) Added hurd-i386 to the list of known architectures, at the request of Marcus Brinkmann <brinkmds@rz.ruhr-uni-bochum.de>. * (checks/scripts, checks/scripts.desc) Added trs to the list of known interpreters, as /usr/bin/trs provided by konwert. Suggestion by Yann Dirson <dirson@debian.org>. This closed bug#24998. * (checks/files) - Fixed: tags dir-in-user-local and file-in-usr-local did not print the filename involved. - Fixed: some tags were erroneously output as "setuid-gid-binary" even though only one of suid or sgid was set. * (checks/fields) - Fixed: change a few cases of "maintainer-address-malformed" to "maintainer-name-missing". lintian (0.6.1) unstable; urgency=low * Inserted GPL boilerplate text in every file whose format allowed comments. * (doc/lintian.sgml) Use new <url> tag. * (info/overrides) New override for the file in kbd-data with the strange name. Having lintian handle that file correctly would be too expensive. This "closes" bug#25107. * (checks/control-files, checks/control-files.desc) New tag: use-of-killall-in-maintainer-script (experimental) Added at the recommendation of Santiago Vila <sanvila@unex.es>. This closes bug#22206. * (depcheck/deppages.pl, reporting/html_reports) Added arm and hurd-i386 to the list of architectures to check. * (doc/libtool-rpath-workaround.txt, checks/binaries.desc) Revamped doc file at Rob Browning's suggestion, and renamed it to doc/libtool-workarounds.txt because it describes both -rpath and -lc workarounds. Updated the info for the tags binary-not-linked-against-libc and binary-or-shlib-defines-rpath to refer to the new file. * (doc/desc-files) Moved from private/DESC. Briefly describes the meanings of the fields used in lintian's .desc files. * (doc/TODO) Updated and restructured version of what used to be in private/TODO, various bugreports and mailed suggestions. This will become the central place for potential improvements to lintian. I hope that having it in /usr/doc/lintian will inspire some people to help. lintian (0.6.0) unstable; urgency=low * (checks/shared-libs) Corrected bug that made lintian complain about shared modules without version info (thus ending in ".so") with a "non-dev-pkg-with-shlib-symlink" warning. * (info/overrides) Added overrides: libtricks is like fakeroot; nothing is compiled with it. libtricks: no-shlibs-control-file slrnpull has been split off from slrn, and shares some of its overrides. slrnpull: non-standard-dir-perm var/spool/slrnpull/ 2755 This fixes bug#24668, reported by Joey Hess. * (collection/perlmods) Collector script that greps perl scripts for use and require directives. * (checks/perl, checks/perl.desc) New check script that checks perl "use" and "require" directives. New tags: E: script-needs-perl-version (Experimental) W: script-needs-full-perl (Experimental) I: cannot-parse-perl-directive * (frontend/lintian) New flag --print-version that prints the unadorned version number. * (reporting/config, reporting/html_reports) Instead of requiring $LINTIAN_VERSION in the config file, query the lintian frontend for the version number. lintian (0.5.2) unstable; urgency=low * (reporting/html_reports) Lintian web pages now use dists/unstable/main in the path for "Getting Lintian", rather than hamm/hamm, where it doesn't exist anymore. (Pointed out by Ruud de Rooij) * (checks/scripts) Add /usr/sbin/install-fvwmgenmenu as a known interpreter. This fixes bug#23783, reported by Joost Kooij. * (checks/binaries, checks/changelog-file, checks/manpages) [speedup] Don't skip blank lines in file-info file, since there shouldn't be any. * (checks/manpages.desc) - Added note to manpage-in-wrong-directory info that only sections 1 through 9 should be used. Refer to policy 5.1. I had a rewrite of the manpages check in the works, but I deferred it to a later lintian version. * (info/overrides) New override from Joel Klecker: binutils: no-shlibs-control-file. Added overrides supplied by Joey Hess, in bugreport #24425. * (checks/changelog-file) Corrected regexp used for changelog-file-not-compressed; This really fixes bug#23683, reported by Joey Hess. * (checks/files) New warning: package-installs-perllocal-pod, inspired by Manoj Srivasta's recent bugreports about such files. * (checks/fields.desc) No longer experimental: E: alternates-not-allowed E: versioned-provides E: bad-version-in-relation lintian (0.5.1) unstable; urgency=low * Added overrides supplied by Ray Dassen. * (frontend/lintian-info) Made lintian-info aware of X (experimental) tags. (oops) * (lib/read_taginfo.pl) Add a paragraph to the info output for experimental tags that explains what experimental status means. * Added test package "relationships" to test weird dependency lines. * (frontend/lintian) Instead of specifying /usr/bin/lintian-info, use just lintian-info and let the path search find the script. lintian (0.5.0) unstable; urgency=low * (checks/menus) The menu package doesn't need to check for the existence of update-menus :-) * (testset/runtests) A harness for running regression tests on Lintian. * (testset/*) A collection of broken packages on which to test Lintian. Currently, only an empty package is provided for testing. * (debian/rules) Run the tests in the build target. * (checks/*.desc) Added "Tested: empty" to tags that are tested for with the "empty" testpackage. * (collection/file-info) Use a better parser for the index file, so that weird filenames are handled correctly. This fixes bug#24079. * (collection/md5sums) Adapt index-file parser from file-info collector, this saves a "find" operation on the unpacked tree. * New test package filenames-1, which contains various evil filenames. * (checks/shared-libs, checks/menus, checks/manpages, checks/files, checks/control-files) Handle filenames that contain spaces correctly. * (frontend/lintian, reporting/config) Update version number. This fixes bug #23555, reported by Yann Dirson. These will have to be kept in sync manually, because the lintian source package has to be directly usable by the lintian web page generator. * (checks/changelog-file) Allow the upstream changelog to be a symbolic link. As a side-effect, allow it for the Debian changelog too. This handles bug#23300, reported by Manoj Srivastava. * (checks/changelog-file, checks/changelog-file.desc) The wrong-name tags are now warnings, not errors, because the relevant section of policy uses "should usually". This fixes bug#23757, reported by Gregory S. Stark. * (checks/changelog-file) Limited the changelog-file-not-compressed tag to only complain about changelog and changelog.Debian, because policy 5.8 does not mention other changelogs. (These would fall under section 5.3, I guess.) This fixes bug#23683, reported by Joey Hess. lintian (0.4.8) unstable; urgency=low * (checks/fields) New error tag: "multiline-field" flags control fields that span multiple lines when they shouldn't. (According to the Packaging manual, "Except where otherwise stated only a single line of data is allowed"). * (checks/fields) Check dependency relationship fields as well. New tags: E: alternates-not-allowed (generated for use of | in Provides, Conflicts, and Replaces fields) E: versioned-provides (generated for Provides fields that use a versioned package name) W: obsolete-relation-form (generated for use of < and > in versioned relationships) W: bad-version-in-relation (generated if the version number in a versioned relation is not syntactically correct) E: bad-relation (generated if lintian cannot parse an element of a dependency line) W: package-relation-with-self * (checks/fields) Bugfix to maintainer-not-full-name tag, it works now. Added maintainer-address-looks-weird warning for obscure cases. I doubt anyone will ever see it. * (checks/fields) Added new-essential-package warning, to highlight such packages. * (checks/fields.desc) Descriptions of new tags. lintian (0.4.7) unstable; urgency=low * Removed Christian's name wherever it appeared as a contact address. * (depcheck/buglist) Entered newly reported bug numbers for dependency problems. * (checks/menus) Distinguish between install-docs and install-docs -r. (closes #23049). * (checks/files) Added new tag backup-file-in-package. This warns about emacs-style backup files that got installed in a package. * (frontend/lintian) Allow I: tags to be overridden just like any other. * (frontend/lintian) Add support for "Experimental" tags. These are handled like other tags, but an "Experimental: yes" flag in the tag description tells lintian to output them with "X:" rather than "E:" or "W:" or "I:". This is used for new tags that might still misbehave. * (doc/lintian.sgml) Add a paragraph to explain the new tag type. "The displayed message is one of types listed above, but has been flagged as `experimental' by the Lintian maintainers. This means that the code that generates this message is not as well tested as the rest of Lintian, and might still give surprising results. Feel free to ignore Experimental messages that do not seem to make sense, though of course bug reports are always welcomed." lintian (0.4.6) unstable; urgency=low * (debian/control) Lintian now depends on perl, since perl-base is not enough. It already uses Text::Wrap, which is only in perl, and soon it will also use Getopt::Long. * (reporting/html_reports) Report all dates in GMT, in rfc822 format. * (debian/rules) In clean target, delete byte-compiled python files (*.pyc) as well. * (depcheck/dependencies.py) Check "Cannot satisfy without packages in base" before checking "Cannot satisfy with required packages", because a dependency will be listed in only one category, and the former is more important to flag. * (frontend/lintian) Rewrote option handling to use Getopt::Long, thus allowing nifty features like bundling of single-character options. Closes wishlist bug#22566. lintian (0.4.5) unstable; urgency=low * (depcheck/) New directory, containing scripts for generating reports about broken dependency relationships in the main distribution. These are not installed by the lintian deb, they are intended for use by the lintian web pages, which use the source package directly. * (reports/harness) Added hooks to call the depcheck scripts to generate the depcheck page. * (reports/html_reports) Add links from the lintian root page to the depcheck page. * (checks/menus) A tag was still generating "existance" while its description had been corrected to "existence"; the html report generator complained about that. Fixed. * (unpack/list-binpkg) Bugfix in lintian --setup-lab. Instead of looking for files in binary-$arch and binary-all, look only in binary-$arch and follow the symlinks. * (lib/text_utils.pl) Changed "&maint;" name from Christian Schwarz to Richard Braakman, and changed mail address to lintian-maint@debian.org. * (checks/standards-version) If checking a package with a Standards-Version that is newer than the one lintian is written for, warn that lintian should be upgraded. (closes: #22919). * (checks/standards-version.dsc) New tag: newer-standards-version * (checks/debian-readme) New check: at James Troup's suggestion, scan for unmodified deb-make templates in README.Debian files. New tags: readme-debian-is-debmake-template readme-debian-contains-debmake-template * (checks/debian-readme.desc) Describe new tags. * (collection/debian-readme) New collection script for README.Debian file. * (man/lintian.1) Describe new check and collection script. * (doc/libtool-rpath-workaround.txt) Explain how to achieve the same result without touching configure.in and rerunning autoconf, provided certain conditions hold. * (lib/text_utils.pl, frontend/lintian-info, reporting/html_reports) Do not split words that are longer than a line. This fixes the "Poli cy" bug in the lintian HTML reports. * (checks/standards-version.desc) Corrected the URL to Christian's policy upgrading checklist, which seems to have changed from "upgrading.html" to "upgrading-checklist.html". * (info/override) Removed another *.pm warning, I missed it the last time. lintian (0.4.4) unstable; urgency=low * (checks/scripts) Suppress script-not-executable warnings for files in /usr/lib that match *.pm. These are perl modules, which often have a #!/usr/bin/perl line at the top but are not intended to be executed directly. * (info/override) Removed now-suppressed warnings from the overrides file. * (info/override) Added more overrides. (closes #21028). * (checks/scripts) At Oliver Elphick's suggestion, do not emit *-script-but-no-*-dep tags or csh-considered-harmful tags for scripts that are not executable. (These already produce a script-not-executable warning). * (checks/binaries) At Yann Dirson's suggestion, added a tag for stripped binaries that still have the .comment and .note sections. This tag is info-level, thus not normally displayed. dh_strip and install -s have been patched to strip these sections, but most of the distribution has not been recompiled with the patched versions. * (checks/binaries.desc) Described the new tag. (closes #22495). * (man/lintian.1) Documented the options that were added in lintian 0.4.3. * (checks/fields) Produce informational tags no-section-field and no-priority-field. These were removed in a previous version, because nearly all packages do not pass -isp to dpkg-gencontrol when building packages, but the new handling of info-level tags makes them useful again. lintian (0.4.3) unstable; urgency=low * Christian added more overrides. * debian/control: New maintainer. * debian/copyright: Mention that lintian has no separate upstream source. * debian/rules: Got rid of 'dirs' file. * Moved manpages from doc/ to man/ in source package. * debian/rules: Restyled :-) * New overrides, read all about them in /usr/share/lintian/info/overrides. (closes #22001) * Corrected typo in frontend, added --allow-root option at Johnie Ingram's suggestion to override lintian's refusal to run as root. (closes #22162). * Ran ispell over .desc files, fixing lots of typos, including the word "existance" which occurs in several tags. * checks/files: At the advice of the python maintainer, added a warning against files installed in /usr/lib/python1.5 that are not in the site-packages subdirectory. (closes #22236) * checks/fields: Reduced unknown-field-in-dsc and unknown-field-in-control tags from "warning" to "info", because such fields can only be introduced deliberately anyway. ("info" tags are not normally reported, but can be queried when someone is interested.) (closes #20521) * Made the above comment about info tags true, by adding a --display-info option. lintian (0.4.2) unstable; urgency=low * This release contains updates for Policy 2.4.1 * Fixed `changelog' check: - don't report not-max-compression tag if changelog file is a symbolic link (thanks to Santiago for noticing that! fixes:bug#20842) * Improved `description' check: - recognize if extended description is `Missing' (fixes:bug#21091) * Changed `files' check: - symbolic links within /etc and /var have to be relative! * Fixed `scripts' check: - package name is "blt4.2", not "btl4.2" :) * Updated `shared-libraries' check: - check if postinst calls ldconfig if shared libraries are installed in a directory controlled by ld.so (fixes:bug#20414) [2 new tags] * Changed `standards-version' check: - added Standards-Version 2.4.1 - only check first there digits of Standards-Version field * Changes to the `lintian' frontend: - unused overrides are displayed per package - display `Processing changes file...' - use $TMPDIR environment variable for creation of the temporary lab (fixes:bug#21092) - clean up lab if C-C is pressed * Added more overrides lintian (0.4.1) unstable; urgency=low * Fixed `changelog-file' check: - don't treat "NEWS" files as changelog files (thanks to Manoj for pointing this out! fixes:bug#20787) * internal: small changes to the reporting harness lintian (0.4.0) unstable; urgency=low * Changes which make it possible to check the whole archive with Lintian each day without having to check all packages all the time: - Reworked creation and handling of info/{binary,source}-packages files: - the list files contain a version number now, which allows checking for old file formats - each entry has a timestamp now - don't remove $LAB/info/ directory on --setup-lab - just process changed packages when doing --setup-lab - added command line option: `-p X' makes lintian only process all packages which are listed in file X - changed meaning of command line option `-U': specifies info to collect _in addition to_ the usual info (necessary to extract the changelog files on master--see below) * Improved `binaries' check: - objects and binaries in a *-dbg package may be unstripped - libraries in lib/profile or lib/debug may not be stripped (suggested by Fabrizio) [1 new tag] * Added new `changelog' check (thanks to Juan Cespedes for the idea! fixes:bug#19695) * Improved `control-files' check: - improved RE that searches maintainer scripts for /tmp security bugs * Improved `description' check: - fixed RE to check for description-starts-with-package-name (thanks to Roderick Schertler) * Fixed `fields' check: - internal: check for source pkg using "-l dsc" instead of "-e dsc" * Fixed `files' check: - disabled possible-name-space-pollution tag since policy is not defined yet * Improved `manpages' check: - fixed silly typo in binary-without-manpage tag info (thanks to Robert Edmonds for noticing that!) - disabled tag binary-without-manpage for `versioned binaries' (thanks to Dirk for the suggestion! fixes:bug#20186) * Fixed `menu' check: - report maintainer-script-does-not-check... tag only once per package and maintainer script - recognize `$(which update-menus)' as valid check for the existence of update-menus; same for install-docs (thanks to Fabrizio for pointing this out!) - recognize `command -v update-menus' as valid check for the existence of update-menus; same for install-docs (thanks to Adam P. Harris for pointing this out! fixes:bug#20759) - fixed tag infos (thanks to Adam P. Harris for the input! fixes:bug#19810) * Improved `scripts' check: - added new interpreters: nawk, pike, rexx, regina, burlap, wish8.0, bltwish (fixes:bug#20223) * Improved `shared-libs' check: - added check if shared libraries contain non-pic code (thanks to Gregory S. Stark for the idea and the patch! fixes:bug#19249) [1 new tag] * Added `changelog' collector script This makes it possible for Lintian to extract all changelog files on master for use by Apt (fixes:bug#20546) * Incremented LAB_FORMAT version to 3 because of incompatible changes in the objdump-info collector script * Internal: fixed bug in read_dpkg_control() utility function: empty tags have not been handled correctly * Internal: html-reporting tool: don't chop of text after hash (#) * Added a lot new overrides and removed unused overrides (fixes:bug#20017,bug#20082,bug#19562) lintian (0.3.4) unstable; urgency=low * Bug fix release: - check if lab in /tmp already exists (fixes security bug#19799) Thanks to James Troup for noticing this and thanks to Joey Hess for providing a patch! * Added one override entry lintian (0.3.3) unstable; urgency=low * Bug fix release: - `unknown-control-file du' message disappeared - fixed `executable-in-usr-doc' to not display files in /usr/doc/<pkg>/example - fixed tag parameters for bad-owner-for-doc-file dir-or-file-in-opt * Added overrides lintian (0.3.2) unstable; urgency=low * This is (intentionally) an `unstable' upload--we've decided to not include the lintian package in `frozen' since it doesn't make sense to maintain a `stable' and `unstable' version of a package in such an early state. The maintainers should get Lintian from the `unstable' distribution to check `frozen' uploads though. * Added `menus' check. This check checks for common mistakes WRT /usr/lib/menu and /usr/share/doc-base files. [16 new tags] * Fixed `shared-libs' check: - removed `shared-library-uses-its-soname' check since this produced way too many false alarms (thanks to David Engel for the input!) * Fixed `binaries' check: - skip `unstripped-binary-or-object' check for kernel modules (thanks to Michael Meskes for noticing that!) - fixed pattern which parses the `file' command's output to be able to handle files without info text correctly (thanks to James R. Van Zandt for pointing this out!) - mention in tag info that shared libs should be stripped with `--strip-unneeded' options (thanks to Brian for pointing this out!) * Improved `manpages' check: - check if manual pages are compressed with gzip -9 (thanks to Holger Rusch for the idea!) [2 new tags] * Improved `files' check: - for files in /usr/doc: - executables may only be in /usr/doc/<something>/examples - files should be owned by root.root (thanks to Joey) - files should not be directly placed into /usr/doc/ (fixes:bug#19485) - no files may be installed into /tmp and /var/tmp - renamed file-directly-in-usr-share to file-directly-in-usr-share-not-in-a-sub-directory (thanks to Santiago) - fix tag info for "symlink-should-be-absolute" [3 new tags] * Improved `description' check: - lists (starting with a dash or asterisk) have to be indented (thanks to cpb4@ukc.ac.uk for the idea and the patch! fixes:bug#19481) [1 new tag] * Fixed `scripts' check: - packages with python scripts might depend on python or python-base (thanks to Gregor Hoffleit for pointing this out and to Richard for the patch! fixes:bug#19162) - remove wrong policy quotation for `script-not-executable' tag * Fixed `init.d' check: - ignore update-rc.d calls in preinst and postinst scripts, if "remove" option is specified (thanks to Roman Hodek and Herbert Xu for pointing this out--this change also removes a lot of other false alarms WRT update-rc.d calls) * Improved `control-files' check: - scan maintainer scripts for references to /tmp or TMPFILE since this might be insecure (thanks to Topi Miettinen for the help!) [1 new tag] * Improved `copyright-file' to issue a special error message if a symbolic link /usr/doc/foo refers to a directory outside of /usr/doc (thanks to Darren for pointing this out!) [1 new tag] * Fixed `fields' check: - added architecture `arm' (thanks to Roman Hodek) * Fixed `lintian' frontend: - run lintian scripts with LC_ALL=C (thanks to Yann for pointing this out! fixes:bug#19166) - changed handling of `#' comments: for comments in the overrides file, the hash (#) has to be in the first column - changed all tags which used `#' for comments * Fixed `lintian-info': - multiple HTML tags haven't been converted into text format in all cases - preformatted text is now handled correctly - merged with code that produced the HTML reports - code much cleaner now * Improved Lintian's documentation: - fixed libtool/rpath workaround file: don't wrap long line (Thanks to Yann for pointing this out!) - stress in docs that the "lintian-maint@debian.org" address should be used to contact the lintian authors (thanks to Adrian Bridgett for pointing this out!) * Added more overrides (fixes:bug#19163) lintian (0.3.1) unstable; urgency=low * Added `scripts' checks and collector, written by Richard. This check checks the #! lines of scripts in a package. [40 new tags] * Added `spelling' checks, written by Richard. This check searches the "Description:" field and the "copyright" file for common spelling errors (typos). [2 new tags] * Improved `files' check: No package should install files directly into /usr/share. New tag: file-directly-in-usr-share * Fixed `files' check WRT files in /usr/lib/sgml and /etc/emacs/site-start.d: - ignore directories and symbolic links when checking for correct file permissions - display permissions in octal format (fixes:bug#18866,#19026) * Fixed `control-files' check: really ignore `control' control file * Improved `lintian' frontend: - parse command line parameters before reading the configuration file. With that, `lintian -h' even works if the cfg file has errors. (fixes:bug#19031) - issue a warning and ignore `-all' option if packages are specified at the same time (in older versions, this make lintian abort with an error message) - really check all packages listed in a .changes file (fixes:bug#18851) * Fixed `md5sums' check to handle file names with spaces correctly * Put conffile /etc/lintianrc back in (fixes:bug#19031) * Include information about libtool/rpath workaround by Yann Dirson (Thanks Yann!) * Added more overrides * Internal changes: - Each error tag has a (bug) `Severity' field now which can be used to file bug reports with the correct severity - Each helper script has an `Author' field now - Fixed `unused overrides' report lintian (0.3.0) unstable; urgency=low * Lintian now also works without a configuration file and without a static laboratory! (Since Lintian is so easy to use now, there are no excuses for not using it! ;-) * Changed handling of lab: - if no lab is specified, it is created dynamically by the `lintian' command (the average use does not have to worry about the lab anymore) - since the dynamically created lab is placed in /tmp, several users can run lintian at the same time without having to know of each other - the commands `lintian-setup' and `lintian-remove' have been removed (fixes: bug#18707). - a `static' laboratory can be created/updated or removed by specifying the `--setup-lab' or `--remove-lab' options for the `lintian' command - added a lot of sanity checks to make removal of lab less risky :) * Changed handling of configuration file: - configuration file is not necessary anymore - changed search path for the configuration file to: $LINTIAN_CFG/lintianrc $LINTIAN_ROOT/lintianrc $HOME/.lintianrc /etc/lintianrc - all configuration variables have reasonable defaults and can be overwritten by environment variables of the same name - removed configuration file /etc/lintianrc--the file is now installed as /usr/doc/lintian/lintianrc.example - renamed all configuration variables to LINTIAN_xxxx - relaxed syntax of configuration file. It's now also possible to use `~' and `$HOME' in the configuration file (fixes: bug#18559) - added LINTIAN_ARCH configuration variable so that Lintian handles distribution directories correctly if these contain several architectures * Changed parsing of command line arguments: - if a package name is specified (instead of a file), look for this package in the distribution directory and in the lab (in earlier version, only the distribution directory was searched for packages) - added `--all' option to check the whole distribution (in earlier version, this was the default operation) - removed buggy `-n' command line option (this option wasn't really useful anyways) - the `-h' option displays a short description of all available options now - debug option `-d' can be specified several times to increase the verbosity level - recognize `--' as the end of options on the command line * Improved overrides handling: - the override files does not include the leading `[EW]:' anymore - the parameters of an error tag may be omitted to disable a certain tag for a whole package - when checking the full distribution, unused overrides are displayed - cleaned up overrides file and added/removed a few overrides * Improved documentation: - there is now a `Lintian User's Manual' which explains how to setup and use Lintian to check ones packages, and which gives insight on the design issues behind Lintian - added a manual page for lintian-info (has been split off from lintian(1)) - updated the documentation files and the example lintianrc file - merged QUICKSTART file into the README * Improved `binaries' check: check if a binary or shared library defines RPATH (Thanks to Ray Dassen for the suggestion! fixes: bug#18519) New tag: binary-or-shlib-defines-rpath * Improved `files' check: WRT symbolic links: - issue errors instead of warnings - links between different top-level directories should always be absolute - check for relative links which contain to many `../' segments - check for symbolic links which contain segments like `foo/../bar' (Thanks to Manoj for the patch and the ideas!) general: - some additional checks for wrong file permissions New tags: symlink-has-too-many-up-segments relative-symlink-enters-same-toplevel-directory symlink-contains-up-and-down-segments bad-permissions-for-etc-cron.d-script (renamed) bad-permissions-for-etc-emacs-script executable-in-usr-lib-sgml * Fixed `control-files' check: check file permissions correctly; also check file owners of control files New tag: control-file-has-bad-owner * Fixed `copyright' check: check for package dependencies correctly (fixes: bug#18611) * Improved `conffiles' check: files in /var/lib/games should not be tagged as conffile, in general. New tag: score-file-may-not-be-conffile * Improved `manpages' check: files in /usr/X11R6/man/man6 usually indicate X11 games in the wrong directory. New tag: x11-games-should-be-in-usr-games * Fixed `init.d' check: skip comments in init.d file (Thanks to Joey for pointing this out!) - don't collect info for unselected collector scripts (internal bug) * Internal changes: - don't refer to package `ftp.debian.org' for bugs in the $LINTIAN_DIST directory--refer to package `general' instead - made list-binpkg and list-srcpkg more verbose - made lintian-info less verbose (don't give detailed info more than once) - create control-index file which lists all files in control.tar.gz - fix permissions in the lab after a package has been unpacked - chdir to lab dir before running the checker and collection scripts (this makes it easier to write checks in awk or even sh) - pass vars to helpers via environment - don't link static info/* files into lab - implemented dpkg_read_control to parse all controls - don't use dpkg-deb to get control information about a .deb - collection and checking scripts `registry' is now done dynamically - move tag descriptions from collector and checker scripts into separate `.desc' files - each base directory in the lab has a .lintian-status file now, which can be used to detect incompatible lab changes, for example - moved unused files and internal documents into a private/ directory of the source package - cleaned up code lintian (0.2.4) unstable; urgency=low * Added `fields' check for control fields. (That's the first check written by Richard--and it's all Perl!!! ;-) [32 new tags] * Added `binaries' check. [6 new tags] * Improved `shared-libraries' check: - use objdump instead of ldd and ldconfig - this should fix all problems where Lintian couldn't check python/perl dynamic objects, etc. - allow cross-checking of packages, e.g., to check non-i386 .debs on an i386 system (note, that this requires a multi-arch objdump) - recognize if the shared library uses its SONAME New tag: shared-library-uses-its-soname * Improved `control-files' check: - Don't check the `control' control file for correct permissions, because dpkg doesn't care and this file isn't installed on the systems anyways * Improved `files' check: - Games are allowed to be setgid games - svgalib programs are allowed to be setuid root - usually, files in /usr/doc/foo should not be executable New tag: executable-in-usr-doc * Fix bug in `manpages' check: symlinks in /usr/bin, etc. also need a manual page! (Thanks to Joey Hess for pointing this out!) * Use `.' instead of `source' in lintian-{remove,setup} /bin/sh scripts (fixes bug#18421) * Define default values for configuration variables in lintian-{remove,setup} scripts (fixes bug#18354) * Fix bug in `copyright-file' check: Don't report usr-doc-symlink-to-foreign-package if we don't know whether the referenced package comes from the same source or not. (Thanks to James A. Treacy for pointing this out!) * Internal change: - process source packages before binary packages so that a binary package check can use info from the source packages (if these are unpacked, too) * Added more override entries--and removed a few obsolete entries (the checks are smarter now! :) * Added "Depends: binutils" for `objdump' * Changed maintainer email address to lintian-maint@debian.org lintian (0.2.3) unstable; urgency=low * Fixed manual-pages check: Check for the `undocumented' symbolic link failed on X11 manual pages (fixes #18343). * Improved files check. New tag: etc-cron.d-script-tagged-executable * Improved control-files check: - the `du' control file is not allowed anymore - check file permissions of control files New tags: control-file-has-bad-permissions * Fixed bug: ldd-info collection script stopped when ldd failed * Fixed (internal) bugs: - collect data for collection scripts too - don't collect init.d data every time again * Error handling code improved again :) * The lintian frontend script checks if it has root permissions and aborts if this is the case. (Running it as root is unnecessary and simply too dangerous.) * Added one override entry lintian (0.2.2) unstable; urgency=low * Fixed bug in lintian-setup: don't try to create $LAB if it already exists (fixes bug#18227, bug#18252) * Added "Depends: file" (oops!) * Rewrote package "Description:" * Added a lot more override entries (thanks to all that told me about overrides!) lintian (0.2.1) unstable; urgency=low * Fixed bug in ldconfig collection script: script aborted without error message if a shared library had errors (thanks to Kai!) * Fixed bug: `standards-version' check didn't collect necessary data (actually, this was a more general bug--thanks to Joey Hess!) * Fixed bug: init.d checker script didn't notice if several of the required options (start, stop, etc.) have been included on a single line (thanks to Joey Hess!) * Don't check duplicated packages more than once (thanks to Joey Hess!) * Error handling code improved once more * Added more overrides (Thanks to Joey Hess!) * Mentioned Lintian's home page in the README file * Set package priority to `optional' (requested by several developers) lintian (0.2.0) unstable; urgency=low * First public release * Fixed bug in shlibs check: Sometimes, ldconfig doesn't install any symbolic links at all (e.g., for `acroread' package). * Changed lintian-setup: Don't remove the whole lab if it already exists--just remove the info/ directory. * Changed handling of critical Lintian errors (abort on error) * Built package using fakeroot (first time i tried fakeroot--it's great!!) * Checked package with latest Lintian :) lintian (0.1.3) unstable; urgency=low * Next beta release (hopefully the last one :-) * The lintian-info script is available now! You can either pipe the output of lintian through it, or specify the `-i' option when calling lintian. * Lintian can check .changes files now! New tags: bad-distribution-in-changes-file file-size-mismatch-in-changes-file md5sum-mismatch-in-changes-file bad-section-in-changes-file * Lintian now detects if packages have been changed, even if they have the same version number as before. * Improved shlibs check (this fixes the "error: bad ldconfig-info file" bug). New tags: ldconfig-symlink-referencing-wrong-file ldconfig-symlink-is-not-a-symlink * Improved files check! New tags: package-installs-into-etc-rc.d non-standard-file-permissions-for-etc-init.d-script * New check for /etc/init.d scripts! Tags: duplicate-updaterc.d-calls-in-postinst output-of-updaterc.d-not-redirected-to-dev-null preinst-calls-updaterc.d duplicate-updaterc.d-calls-in-postrm prerm-calls-updaterc.d postrm-does-not-call-updaterc.d-for-init.d-script postrm-contains-additional-updaterc.d-calls file-in-etc-rc.d-marked-as-conffile init.d-script-not-marked-as-conffile init.d-script-does-not-implement-required-option init.d-script-not-included-in-package unregistered-script-in-etc-init.d * Fixed manpages check: Subdirectories of /usr/bin (e.g., /usr/bin/mh) have not been handled correctly. * Added new override entries * Cleaned up Lintian's source code * Updated documentation * Lots of small changes lintian (0.1.2) unstable; urgency=low * Beta release * Two major bugs have been fixed * Debugging info increased lintian (0.1.1) unstable; urgency=low * Beta release lintian (0.1.0) unstable; urgency=low * First release08b64542
This project is licensed under the GNU General Public License v2.0 or later.
Learn more