Accepted lintian 2.5.38~bpo7+1 (source all) into wheezy-backports-sloppy, wheezy-backports-sloppy
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 17 Oct 2015 10:26:29 +0200
Source: lintian
Binary: lintian
Architecture: source all
Version: 2.5.38~bpo7+1
Distribution: wheezy-backports-sloppy
Urgency: medium
Maintainer: Debian Lintian Maintainers <lintian-maint@debian.org>
Changed-By: Luca Falavigna <dktrkranz@debian.org>
Description:
lintian - Debian package checker
Closes: 298545 359059 365213 460174 528975 539225 539315 563773 585495 591812 612583 615516 623265 637580 637881 639974 643602 646872 646965 652380 652595 653910 656229 656801 657699 658320 658474 659335 660655 660797 661990 663155 665694 668437 670092 670323 670963 672273 672664 673029 673073 674469 676803 677874 677890 678639 678857 678896 679132 680391 681061 681410 681769 681894 683224 683516 683737 685299 685497 686179 686352 687464 688320 688494 688524 690014 690273 690910 691489 692232 692548 692616 693013 693117 693442 693589 693918 694328 695839 695866 695967 696230 696960 697164 697534 697565 697693 697916 698234 698602 698610 698704 698720 698930 699022 699083 699369 699410 699452 699628 699670 700110 700502 700543 700882 701061 701177 703407 703490 703978 703985 703989 704197 704446 705170 705175 705197 705441 705835 706166 706241 706242 706827 706966 707400 707534 707700 707742 707906 708178 708367 708381 708482 708551 708576 708755 708881 708943 708957 709041 709121 709
379 709415 709455 709615 709886 710086 710380 710405 710466 710919 711069 711090 711119 711193 711207 711553 711988 712124 712405 712607 712641 712932 713012 713884 714191 714427 714437 715035 717621 717633 717916 718167 718337 718349 718351 718404 718427 718563 718575 718690 718820 718862 719163 719450 719769 719788 720337 720348 720835 720910 721179 721205 721252 721268 722102 722582 723003 723730 723732 723886 724319 724524 724733 724866 724930 725139 727665 727683 729034 729037 729226 730456 730714 731904 732225 732246 732799 733318 733595 733659 733733 733883 734280 735266 735348 736203 736711 737867 738174 738175 738176 738342 738349 738454 738591 738597 739109 739247 739347 739366 739671 739744 740161 740183 740339 740607 741212 741346 742260 742693 742985 742989 743384 743446 743453 743754 743840 744981 745152 745568 745740 745802 745877 746305 746362 746402 746563 746656 746744 746790 747248 747266 747407 747439 748167 748375 748421 748452 748688 748881 749103 749768 751926
751945 751949 752218 752229 752540 752611 753077 753165 753970 754738 755266 755275 755902 756128 756158 756301 756643 756722 756940 757068 757383 757398 757551 757583 757615 757802 757921 758236 758891 759726 760642 760677 760714 760987 761125 761649 761930 762105 762177 762179 762460 762609 762660 763339 763456 763457 763773 764015 765311 765344 765995 766033 766118 766468 766737 767107 767867 768884 769036 769679 769818 769845 770068 770643 771054 771113 771191 774729 775467 775760 776267 776480 776535 776954 778323 778328 778556 778558 778820 780474 781235 781396 781397 782902 783327 783628 784012 784277 784639 785084 785329 785353 785662 786362 786421 786533 786867 786895 787248 787853 787930 787937 788629 788796 788839 788926 789151 789577 789820 790323 790369 790493 790693 790739 790915 790932 792167 792237 792418 792501 793068 793164 793503 793613 793908 794196 794505 794674 794953 794995 795275 795614 795667 795779 795955 796311 796815 796822 796896 797395 797466 797532 79
7555 797600 797951 798063 798359 798385 798422 798736 798799 799082 799467 799914
Changes:
lintian (2.5.38~bpo7+1) wheezy-backports-sloppy; urgency=medium
.
* Rebuild for wheezy-backports-sloppy.
* It requires newer pkg-php-tools, uploaded in w-b-s as well.
.
lintian (2.5.38) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- command-in-menu-file-and-desktop-file
- misspelled-closes-bug
.
* checks/binaries.desc:
+ [NT] Update description of a tag now that debhelper properly
strips static libraries.
+ [JW] Relax the regular expression used to used to recognize
architecture-specific paths to avoid false positive
arch-dependent-file-not-in-arch-specific-directory in Python debug
packages. Thanks to Matthias Klose for the bug report.
(Closes: #795275)
* checks/changelog-files.{desc,pm}:
+ [BR] Detect misspelled Closes in changelog file (Closes: #798799)
* checks/files.{desc,pm}:
+ [AB] Apply patch by Mattia Rizzolo to also check for files in /build
and /tmp/buildd in dir-or-file-in-build-tree. (Closes: #797532)
+ [NT] Rewrite the description for dir-or-file-in-build-tree. Thanks
to Chris Lamb and Jakub Wilk for pointing out issues with the
original description. (Closes: #797466)
+ [BR] Detect pagead2.
+ [BR] Fix false positive privacy-breach-* for alternate link tag
with type application/rdf+xml. (Closes: #799914).
* checks/obsolete-sites.pm:
+ [AB] Stop at <>, $, or " when emitting URLs as tag parameter.
* checks/menu-format.{desc,pm}:
+ [NT] Check for menu files used to provide a command also listed in
a desktop file. This tag is based on the verdict in
[CTTE #741573].
* checks/rules.desc:
+ [NT,JW] Improve the wording of one of the tags based on feedback
from Chris Lamb. (Closes: #796815)
* checks/scripts.desc:
+ [NT] Apply patch from Chris Lamb to fix a grammatical issue in a
tag description. (Closes: #797555)
* checks/shared-libs.pm:
+ [JW] Fix false positive dev-pkg-without-shlib-symlink for GCC runtime
libraries. Thanks to Matthias Klose for the bug report.
(Closes: #790739)
* checks/systemd.desc:
+ [AB] Apply patch by Chris Lamb to update link to Debian systemd
packaging reference. (Closes: #799082)
* checks/watch-file.desc:
+ [JW] Fix typo.
.
* data/binaries/embedded-libs:
+ [RG] Use a different string to detect the copies of freetype
(Closes: #756722)
+ [RG] Allow ffmpeg to provide libav*.
* data/debhelper/dh_{commands,packages}:
+ [AB] Apply patch by Stefano Rivera to update the home of
dh_gstscancodecs. (Closes: #799467)
* data/obsolete-sites/obsolete-sites:
+ [AB] Add patch by Hideki Yamane to add sourceforge.jp (Closes:
#798736)
+ [AB] Sort file alphabetically.
* data/spelling/corrections:
+ [JW] Add more corrections.
.
* doc/lintian.xml:
+ [JW] Fix typo.
.
* lib/Lintian/Collect.pm:
+ [JW] Fix typo.
* lib/Lintian/Lab.pm:
+ [JW] Fix typo.
.
* man/lintian.pod.in:
+ [JW] Fix typo.
.
* private/refresh-debhelper-data:
+ [NT] Add a "This file is generated" header to all output files.
.
lintian (2.5.37) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- obsolete-url-in-packaging
- renamed-tag
.
* checks/application-not-library.{desc,pm}:
+ [AB] Downgrade libapp-perl-package-name to certainty possible.
+ [AB] Add libapp-options-perl to the package whitelist.
* checks/binaries.pm:
+ [NT] Apply patch from Michael Stapelberg to ignore
"no-relro" and "no-fortify-functions" issues in
binaries built by the go compiler, as it does not
support these features. (Closes: #795667)
+ [NT] Apply patch from Michael Stapelberg to a
common false positive spelling mistake in "go"
binaries. (Closes: #795614)
+ [NT] Apply patch from Guillem Jover to avoid some false
positive shared-lib-without-dependency-information tags.
(Closes: #798063)
* checks/control-file.pm:
+ [AB] Apply patch by Christoph Biedl for relaxing dependency checks
to allow versions with tilde. (Closes: #797951)
* checks/copyright.pm:
+ [BR] Fix FP for copyright-without-copyright-notice tag
allow public-domain. (Closes: #786867)
* checks/cruft.pm:
+ [BR] Fix complex regular subexpression recursion limit.
Strip comments is only done on first 8192 characters.
(Closes: #795955).
+ [BR] Performance improvement check if line < 1024 before
stripping comment. Classify to minified if line > 1024.
+ [BR] Fix false positive in missing-sources directory
search path.
* checks/debhelper.pm:
+ [NT] Unconditionally warn about dh_clean -k usage even when the
debhelper compat is less than 7.
* checks/description.pm:
+ [AB] Fix false positives in
perl-module-name-not-mentioned-in-description. (Closes: #795779)
* checks/fields.{desc,pm}:
+ [JW] Use "an" (instead of "a") before "HTTP".
+ [NT] Assert that -dbgsym packages are in the "debug" section.
Thanks to Jean-Michel Vourgère for reporting the issue.
(Closes: #796896)
+ [AB] Also emit package-relation-with-perl-module for build-*
relations. Thanks gregor herrmann! (Closes: #798385)
* checks/obsolete-sites.{desc,pm}:
+ [AB] New check with tag obsolete-url-in-packaging to check for URLs
of hosting sites with frozen contents or (soon to be) closed hosting
sites (Google Code, Gitorious, Freshmeat, etc.) inside the
packaging. (Closes: #793503)
* checks/scripts.pm:
+ [BR] Fix Unescaped left brace in regex. (Closes: #788926)
* checks/shared-libs.{desc,pm}:
+ [NT] Accept an "activate-noawait ldconfig" trigger instead of
explicit calls to "ldconfig".
* checks/testsuite.pm:
+ [AB] Split up restrictions, features and tests by comma as well as
space. (Closes: #798359, #792418)
* checks/version-substvars.pm:
+ [BR] Fix Unescaped left brace in regex is deprecated line 68.
* checks/watch.desc:
+ [BR] Upgrade upstream PGP keys location. (Closes: #796311)
.
* data/binaries/embedded-libs:
+ [RG] Add another matching string for libidn
* data/common/source-fields:
+ [AB] Add patch by Tianon Gravi to add go-import-path as known source
field. (Closes: #798422)
* data/fields/archive-sections:
+ [NT] Remove the "debugsym" section as "ddebs" will be put in
the regular "debug" section.
* data/fields/binary-fields:
+ [NT] Accept the "Build-Ids" field, which debhelper will start to
include in debug packages.
* data/scripts/maintainer-script-bad-command:
+ [AB] Fix maintainer-script-should-not-use-adduser-system-without-home
false positive in cases where --system and --home are ordered
differently than initially expected. (Closes: #797395)
* data/spelling/corrections:
+ [JW] Add correction for "bellow". (This is an actual English word,
but in technical texts, it's almost certainly a misspelling of
"below".)
+ [JW] Add correction for "positve".
.
* debian/control:
+ [AB] Update Vcs-Browser header to use https and cgit.
.
* lib/Lintian/{Tags.pm,Tag/Override.pm}:
+ [BR] Support tag renaming. Warn about renamed
tags.
.
* t/runtests:
+ [BR] Apply patch from Chris Lamb improving documentation.
(Closes: #796822).
* t/scripts/01-critic/runner.pl:
+ [AB] Fix FTBFS in perlcritic runner with Test::Perl::Critic 1.03
* t/tests/application-not-library/debian/debian/control.in:
+ [AB] Add a false positive test for libapp-perl-package-name.
* t/tests/rules-perl-makemaker/debian/debian/rules:
+ [NT] Pass DESTDIR to MakeMaker to avoid FTBFS with Perl 5.22.
Thanks to Dominic Hargreaves for the report. (Closes: #797600)
.
lintian (2.5.36.1) unstable; urgency=medium
.
* checks/application-not-library.pm:
+ [NT] Fix invalid import.
.
lintian (2.5.36) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- application-in-library-section
- dep5-file-paragraph-references-header-paragraph
- libapp-perl-package-name
- libmodule-build-perl-needs-to-be-in-build-depends
- libmodule-build-tiny-perl-needs-to-be-in-build-depends
- library-package-name-for-application
- maintainer-script-may-use-dir_to_symlink_helper
- mentions-deprecated-usr-lib-perl5-directory
- package-installs-apt-preferences
- package-installs-apt-sources
- package-installs-ieee-data
- package-installs-into-obsolete-dir
- package-relation-with-perl-modules
- perl-module-name-not-mentioned-in-description
- privacy-breach-uses-embedded-file
+ Removed:
- dep5-file-paragraph-reference-header-paragraph
- package-install-apt-preferences
- package-install-apt-sources
- package-install-ieee-data
- package-install-into-obsolete-dir
- privacy-breach-may-use-debian-package
.
* checks/application-not-library.{desc,pm}:
+ [AB] New experimental checks imported from pkg-perl-tools.
* checks/changelog-file.pm:
+ [JW] Fix invalid comparison leading to false positive
non-consecutive-debian-revision tags. (Closes: #794995)
* checks/cruft.{desc,pm}:
+ [BR] Avoid a false positive for gfdl detection in krusader.
Remove line number before running the detection.
+ [BR] Avoid another gfdl false positive in oidentd, sdlbasic,
smbc package.
+ [AB] Add new tag mentions-deprecated-usr-lib-perl5-directory based
on pkg-perl-tools' usr-lib-perl5-mentioned (multiple authors).
+ [NT] Replace "funny" dash with regular ASCII dash.
+ [AB] Fix grammar issue in license-problem-non-free-img-lenna desc.
* checks/description.*:
+ [AB] Add new tag perl-module-name-not-mentioned-in-description based
on pkg-perl-tools' no-module-name-in-description by Damyan Ivanov.
* checks/fields.pm:
+ [AB] Add emacs23 to list of obsolete Emacs package names.
+ [AB] Also check for obsolete emacs package names with common
suffixes (-gtk, -el, -nox, lucid)
+ [AB] Add an imaginary future emacs222 package to the test suite's
dummy package to check for depends-on-old-emacs false positives.
+ [AB] Add libmodule-build(-tiny)-perl-needs-to-be-in-build-depends
tags from pkg-perl-tools by gregor herrmann.
+ [AB] Add new tag package-relation-with-perl-modules based on
pkg-perl-tools' depends-on-perl-modules by Damyan Ivanov.
* checks/files.desc:
+ [BR] Correct a few typos. (Closes: #794953)
+ [BR] Rename files-privacybreach-may-use-debian-package
to privacy-breach-uses-embedded-file. Thanks to
Guillem Jover for the report.
* checks/scripts.desc:
+ [BR] Detect suspicious use of ln -s that could be replaced by
dpkg-maintscript-helper.
* checks/systemd.desc:
+ [NT] Replace a wide-character by spelling out "does not".
.
* data/files/privacy-breaker-websites:
+ [BR] Detect libjs-bootstap as privacy-breach-uses-embedded-file
+ [BR] Improve detection of google plus.
+ [BR] Improve detection of jquery modules.
+ [BR] Detect doxygen logo.
+ [BR] Detect doubleclick.net
* debian/compat:
+ [BR] Use compat version 9.
* debian/control:
+ [AB] Add myself to Uploaders.
+ [AB] Add Breaks against pkg-perl-tools << 0.23 due to some tags
moved over to lintian proper.
.
* lib/Lintian/{CheckScript,CollScript,Profile}.pm:
+ [NT] Read control files as proper UTF-8 character streams rather
than byte streams. (Closes: #793164)
* lib/Lintian/Collect.pm:
+ [AB] Remove outdated note about automatically computed defaults for
"$info->field('source')".
* lib/Lintian/Util.pm:
+ [NT] Add read_dpkg_control_utf8 that reads the file as UTF-8
characters (as it ought to be) rather than a byte stream.
.
* private/refresh-fonts-data:
+ [NT] Prune some duplicates from the generated font file.
.
lintian (2.5.35) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- non-consecutive-debian-revision
- package-uses-experimental-debhelper-compat-version
- package-uses-old-debhelper-compat-version
.
* checks/binaries.pm:
+ [NT] Apply patch from Sebastian Andrzej Siewior to inhibit
binary-file-built-without-LFS-support tags for binaries
that contains the "offending" LFS symbol. These tend to
come from gnulib and be LFS compliant. Thanks to Guillem
Jover for the report. (Closes: #787853)
* checks/changelog-file.{desc,pm}:
+ [BR] Detect non consecutive debian revision. (Closes: #789820)
* checks/control-file.{desc,pm}:
+ [BR] In order to ease the multiarch-support removal the
severity of pre-depends-directly-on-multiarch-support tag
is raised to important. Thanks to Helmut Grohne for
the reminder.
+ [BR] pre-depends-directly-on-multiarch-support does not need
debhelper for being raised. Suggest to build-depends on
debhelper >= 9.
* checks/debhelper.{desc,pm}:
+ [BR] Use data file for pedantic warning on debhelper depends
version.
+ [BR] Detect not recommended and experimental debhelper version.
* checks/fields.desc:
+ [JW] Fix spelling of the word "indicate".
* checks/scripts.desc:
+ [BR] Document why adduser --no-create-home
is a bad idea for system user. (Closes: #793613).
.
* data/cruft/warn-file-type:
+ [BR] Detect pascal resource file source. (Closes: #793908).
* data/files/fonts:
+ [BR] Refresh this file. (Closes: #794196)
* data/scripts/maintainer-script-bad-command:
+ [BR] Detect more case of
maintainer-script-should-not-use-adduser-system-without-home.
+ [BR] Print offending line for
maintainer-script-should-not-use-adduser-system-without-home.
* data/spelling/corrections*:
+ [JW] Fix correction for "acknowldegement".
+ [JW] Document that the lists should be sorted.
+ [JW] Re-sort the correction lists and remove duplicates.
+ [JW] Add more corrections.
+ [BR] Add existant||existent correction.
.
* mail-templates/license-problem-*:
+ [JW] Make the files end with newline character.
+ [JW] Fix typo in template.
.
* private/refresh-manual-refs:
+ [JW] Update the list of required packages.
.
* t/scripts/*.t:
+ [JW] Make all the scripts executable.
* t/tests/changelog-file-strange-date/*:
+ [BR] Create a test with error syntax in changelog date.
Run only with dpkg below 1.18.2. (Closes: #794674).
* t/tests/binaries-general/*:
+ [BR] Fix a test suite failure with gcc5 by using compat 9, and
removing gets() that does not exist with C11 (used by default
by gcc5). (Closes: #794505).
* t/tests/legacy-binary/debian/debian/rules:
+ [BR] Improve clean rule, thanks to Jakub Wilk.
.
lintian (2.5.34) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- unstripped-static-library
.
* checks/binaries.{desc,pm}:
+ [NT] Apply patch from Guillem Jover to improve the tag
description of the LFS tag. (Closes: #792167)
+ [NT] Detect unstripped static libraries (as an
experimental tag).
* checks/cruft.pm:
+ [NT] Avoid svn-conflict-file tag for ".r0" files, since
there cannot be a conflict involving revision 0.
Thanks to Andreas Beckmann for the report.
(Closes: #793068)
+ [BR] Detect pdf, ps, and eps lenna file.
* checks/files.{desc,pm}:
+ [BR] Fix detection of sources.list file. (Closes: #792237)
* checks/systemd.pm:
+ [NT] Apply patches from Felipe Sateler to ignore known
masked init.d scripts. (Closes: #792501)
.
* commands/info -> info.pm:
+ [NT] Renamed info to info.pm to remove some boilerplate
code.
+ [NT] Forbid late --user-dirs and --include-dir options.
.
* frontend/lintian:
+ [NT] Forbid late --user-dirs and --include-dir options.
+ [NT] Remove the following obsolete command line
options: --root, --all, --binary, --source, --udeb.
They are no longer useful.
.
* lib/Lintian/Collect{,/*}.pm:
+ [NT] Add a shared memory cache that can be used to
reduce memory consumption a bit for sharable objects.
(Closes: #715035)
* lib/Lintian/Data.pm:
+ [NT] Remove references to LINTIAN_ROOT as Lintian::Data
no longer uses it.
* lib/Lintian/Path.pm:
+ [NT] Rework some implementation details to reduce memory
consumption slightly.
+ [NT] The undocumented "type" and "time" methods have been
removed from the API.
+ [NT] The "uid" and "gid" methods now return 0 rather than
undef when numeric ownership is not collected.
.
* reporting/templates:
+ [NT] Remove (uses of) the "invisible-anchor" css class as
invisible (display: none) elements cannot be used as
anchors.
.
lintian (2.5.33) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- systemd-no-service-for-init-rcS-script
- trailing-slash-for-dpkg-maintscript-helper-symlink_to_dir
+ Removed:
- binary-file-compressed-with-upx
.
* checks/binaries.pm:
+ [NT] Ignore "v5" suffixes in package names when matching
SONAMES with package names. The "v5" suffix is the
recommended suffix for packages affected by the GCC-5
libstc++6 C11 ABI breakage.
+ [NT] Drop binary-file-compressed-with-upx as it was not
working. (Closes: #790932)
* checks/cruft.pm:
+ [BR] Increase windows size to 16384 bytes.
Gain about 10% in cruft.
* checks/description.desc:
+ [NT] Clarify that the empty-line control statement " ."
permits no other characters on the same line. Thanks
to Riley Baird for the report. (Closes: #789577)
* checks/files.desc:
+ [JW, NT] Clarify that the ISO 639-1 language codes are
preferred to the ISO 639-2 variant. Thanks to Jonas
Smedegaard for the report. (Closes: #790693)
* checks/infofiles.pm:
+ [NT] Fix use of undefined variable in some cases.
* checks/scripts.{desc,pm}:
+ [BR] Detects problem with dpkg-maintscript-helper symlink_to_dir.
* checks/systemd.{desc,pm}:
+ [NT] Apply patches from Felipe Sateler to refactor the
systemd checks. Notably this also fixes some duplicate
tags.
+ [NT] Apply patch from Felipe Sateler to warn about rcS
init scripts without a native systemd unit file.
(Closes: #790323)
* checks/source-copyright.pm:
+ [NT] Fix use of undefined variable in some cases.
+ [NT] Avoid triggering a tag for a DEP-5 paragraph
referencing the license of the header paragraph
when said paragraph is *the* header paragraph.
(Closes: #769818)
.
* data/cruft/non-free-files:
+ [BR] Add a few lenna image. Thanks to Norbert
Preining <preining@logic.at> (Closes: #790915).
* data/spelling/corrections-multiword:
+ [JW] Correct spelling for "GNU Public Licence".
(Closes: #790369)
.
* frontend/lintian:
+ [JW, NT] Add "--hide-overrides" option to contrast
the "--show-overrides" option. (Closes: #770643)
.
* helpers/coll/objdump-info-helper:
+ [NT] Fix use of undefined variable in some cases.
+ [JW,NT] Gracefully cope with upstreams storing poems in
valid ar archives with the file extension ".a" and
possibly also corrupt ar files.
(Closes: #790493)
+ [NT] Remove slow "head + grep" pipeline on all ELF
binaries, which is no longer used.
* helpers/coll/strings-helper:
+ [NT] Avoid an unnecessary overhead in using L::Command's
spawn+reap. In some cases, this can reduce the runtime
of this command by ~50%.
.
* lib/Lintian/Check.pm:
+ [NT] Optimise out some calls to Lintian::Data, which in
a few cases adds up to a couple of seconds in total
runtime.
.
* profiles/debian/ftp-master-auto-reject.profile:
+ [NT] Drop binary-file-compressed-with-upx as it no
longer exists.
.
* reporting/harness:
+ [NT] Add a --[no-]generate-reports option as alias of
the -r mode. The option can now be used together with
"-i", "-f" or "-c" to control whether the reports
should generated at the end of the run. Without any
of these, harness will only generate reports like it
used to do.
* reporting/templates/*.tmpl:
+ [NT] Change from XHTML 1.1 to HTML5.
.
lintian (2.5.32) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- changelog-empty-entry
- dh-manual-sequence-control-obsolete
- license-problem-non-free-img-lenna
- missing-intermediate-directory
- package-contains-cmake-private-file
- package-contains-mime-file-outside-package-dir
- package-install-apt-preferences
- package-install-apt-sources
- package-install-ieee-data
- service-key-has-whitespace
- source-contains-autogenerated-gperf-data
- source-contains-data-from-ieee-data-oui-db
- static-library-has-unneeded-section
+ Removed:
- hyphen-used-as-minus-sign
.
* checks/*.pm:
+ [NT] Rewrite to handle new check_spelling{,_picky}
* checks/binaries.pm:
+ [NT] Also apply the binary-has-unneeded-section check on
static libs. (See #662998)
* checks/cruft.{desc,pm}:
+ [BR] Detect non free lenna file based on filename and filetype.
(Closes: #771191).
+ [BR] Avoid a false positive for autogenerated index in dx package
for source-is-missing.
* checks/changes-file.{desc,pm}:
+ [NT] Downgrade backports-changes-missing to a wishlist (I) tag.
Thanks to Vincent Cheng for the report. (Closes: #785084)
* checks/changelog-file.{desc,pm}:
+ [BR] Detect empty changelog entry. (Closes: #763457)
* checks/debhelper.{desc,pm}:
+ [NT] Warn about using dh --{until,before,after,remaining} as
these are deprecated and have been since debhelper/8.9.4.
+ [NT] Permit the use of dh-exec-install in ".manpages" as well
since dh-exec now advertises this as acceptable. Thanks to
Andreas Henriksson for reporting this. (Closes: #788796)
* checks/fields.pm:
+ [BR] Detect double comma in uploaders fields.
(Closes: #783628).
* checks/files.{desc,pm}:
+ [NT] Apply patch from Tomasz Buchert to avoid false-positive
package-contains-timestamped-gzip in some cases.
(Closes: #762105)
+ [BR] Detects // tricks in privacy breach test.
(Closes: #786362)
+ [BR] Apply patch from Lisandro Damián Nicanor Pérez Meyer
for detecting private cmake file.
(Closes: #785329).
+ [BR] Detect package shipping apt_preferences(5) file.
(Closes: #786533).
+ [BR] Detect package shipping oui or iab ieee database.
(Closes: #785662).
+ [NT] Add a check for packages without intermediate
directories.
+ [BR] Avoid a false positive in jsom for defaultpresets.xml
from openmapstreet.
+ [NT] Tweak the "extra-license-file" check to avoid some
common false-positives.
+ [BR] Raise severity of package-contains-timestamped-gzip.
(Closes: #778328).
+ [BR] Detect package shipping apt_sources(5) file.
(Closes: #646965).
+ [BR] Warn about files installed in /usr/share/mime/ other
than in packages/. (Closes: #761649).
* checks/java.pm:
+ [NT] Fix "off-by-one" in the check for the maximum permitted
Java major version.
* checks/manpages.{desc,pm}:
+ [NT] Retire the hyphen-used-as-minus-sign tag as upstream now
renders both "-" and "\-" as HYPHEN-MINUS. (Closes: #785353)
* checks/po-debconf.pm:
+ [JW] Use TMPDIR rather than TEMPDIR for temporary files.
(Closes: #787930)
* checks/source-copyright.pm:
+ [NT] Apply patch from Evgeni Golov to permit multiple
different "public-domain licenses", as they are expected to
describe why the affected files are in public domain.
(Closes: #787248)
* checks/systemd.{desc,pm}:
+ [NT] Apply patch from Felipe Sateler to mark service files in
/usr/lib as invalid. (Closes: #788629)
+ [NT] Apply patch from Felipe Sateler to detect service files
that use spaces around the = in the key definition.
(Closes: #786421)
.
* collection/{debfiles,doc-base-files,init.d,menu-files}{,.desc}:
+ [NT] Remove deprecated and unused collections. These were
deprecated in 2.5.28. Note that debfiles was omitted in the
deprecation list by mistake in the original 2.5.28 release.
* collection/objdump-info:
+ [NT] Also analyse static libraries.
* collection/unpacked:
+ [NT] Apply patch from Tomasz Buchert to extract the full time
in UTC.
.
* commands/reporting-sync-state.pm:
+ [NT] Read mirror files as UTF-8 files to avoid mojibake in
maintainer names. Once again, thanks to Andreas Rönnquist
for the report.
* commands/spellintian.pm:
+ [JW,NT] Import Jakub Wilk's spellintian tool with minor
modifications.
.
* data/binaries/embedded-libs:
+ [BR] Detect embedded ieee-data package.
* data/cruft/non-free-license:
+ [BR] Detect autogenerated gperf data. (Closes: #762179).
+ [BR] Detect ieee oui db in source files.
* data/cruft/missing-dir-search-path:
+ [BR] Fix a false positive in fspy for source-is-missing.
* data/cruft/warn-file-type:
+ [BR] Fix a false positive source-is-missing by checking
-nc.js suffix.
+ [BR] Fix a false positive source-is-missing in zivot
package by adding .e as binary suffix.
+ [BR] Fix a false positive source-is-missing by adding
yorick source file as source.
+ [BR] Fix a false positive source-is-missing in
haskell-pretty-show by adding -src.js suffix.
+ [BR] Fix a false positive source-is-missing in
iceweasel by adding -prod.js suffix.
* data/debhelper/*:
+ [NT] Refresh against unstable to pick up the rename of
libaqbanking-dev. Thanks to Micha Lenk for the reminder.
(Closes: #787937)
* data/debhelper/filename-config-files:
+ [NT] Add "links" file.
* data/fields/archive-sections:
+ [NT] Pre-emptively support the "debugsym" section, which is
expected to be used by debhelper for "ddebs".
* data/files/js-libraries:
+ [NT] Apply patch from Jean-Michael Vourgère to detect
embedded versions of libjs-raphael. (Closes: #788839)
* data/files/privacy-breaker-websites:
+ [BR] Detect mascot as logos.
* data/java/constants:
+ [NT] Accept Java7 class files without warning as OpenJDK-7
is now the default implementation. Thanks to Markus
Koschany for the report. (Closes: #786895)
.
* debian/changelog:
+ [NT] Add missing list of new / removed tags to the
entry for the previous release.
+ [NT] Add missing "debfiles" in the list of collections
deprecated in 2.5.28. It was deprecated in that release
despite the omission.
* debian/copyright:
+ [NT] Document new text case being under the Expat license.
* debian/{lintian.links,manpages}:
+ [NT] Install spellintian in PATH and install its manpage.
Thanks to Paul Wise for the suggestion. (Closes: #767867)
* debian/rules:
+ [NT] Generate the spellintian manpage during build.
.
* frontend/spellintian:
+ [NT] Add symlink to dplint.
.
* helpers/coll/objdump-info-helper:
+ [NT] Collect readelf output from static libraries.
+ [NT] Fix bug that caused lintian to ignore the up to 10
valid named sections.
.
* lib/Lintian/Check.pm:
+ [NT] Rewrite check_spelling{,_picky} with a new interface,
which is better suited for additional purposes than just
emitting Lintian tags.
+ [JW, NT] Normalise spaces a bit better in check_spelling to
catch some "multi-word" misspellings, where said words are
not on the same line. (Closes: #763456)
* lib/Lintian/Collect/Binary.pm:
+ [JW, NT] Make is_pkg_class case-insensitive to avoid some
false-positive "empty-binary-package" warnings.
(Closes: #789151)
+ [NT] Make data from static libraries available.
* lib/Lintian/Collect/Package.pm:
+ [NT] Create "faux" Lintian::Path entries for missing
intermediate directories. This avoids a crash and made
some checks work correctly even in the absence of such
immediate directories. (Closes: LP: #1351380)
* lib/Lintian/Path.pm:
+ [NT] Apply patch from Tomasz Buchert to add "timestamp"
method.
+ [NT] Add "faux" method that returns at truth value for
path entries, which Lintian has created from templates
to fully connect all path entries in the package.
* lib/Lintian/Tag/Info.pm:
+ [NT] Expand BTS links using https rather than http.
* lib/Test/Lintian.pm:
+ [NT] Output spelling mistakes as "diag()" messages now.
.
* mail-templates/source-is-missing:
+ [BR] Apply patch from Holger Levsen improving language.
.
* profiles/debian/ftp-master-auto-reject.profile:
+ [NT] Refresh against current rule set.
.
* t/scripts/spellintian.t:
+ [JW,NT] Import spellintian test case.
.
lintian (2.5.31) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- bad-intended-distribution
- dbus-policy-excessively-broad
- debian-pycompat-is-obsolete
- debian-watch-file-accesses-pypi-over-http
- debian-watch-file-unsupported-pypi-url
- dep5-copyright-license-name-not-unique
- dep5-file-paragraph-reference-header-paragraph
- file-should-not-be-compressed
- multiline-architecture-field
- python-version-current-is-deprecated
- uses-no-compression-for-control-tarball
- uses-no-compression-for-data-tarball
- xs-testsuite-header-in-debian-control
+ Removed:
- bad-intended-distibution
- compressed-objects.inv
.
* checks/binaries.pm:
+ [BR] Do not tag with
library-in-debug-or-profile-should-not-be-stripped
when file add "not stripped, too many notes" to its
output. Thanks to Jakub Wilk. (Closes: #775760).
+ [AB] Ignore tEH and tEh for spelling-error-in-binary. (Closes:
#782902; bug report and patch by Tomasz Buchert, thanks!)
* checks/changelog-file.{desc,pm}:
+ [BR] Correct a typo on tag name and do not raise
bad-intended-distribution if distribution is still
set to UNRELEASED. (Closes: #765344).
+ [NT] Apply patches from Ben Finney to permit quotes around
the distribution name in the "to unstable" entries.
(Closes: #784012)
* checks/control-file.{desc,pm}:
+ [BR] Apply patch from Johannes Schauer in order
to detect obsolete XS-Testsuite header.
(Closes: #770068).
+ [AB] New check for multiline architecture fields in debian/control.
(Closes: #780474)
+ [NT] Apply patch from Guillem Jover to update the description
of the xs-testsuite-header-in-debian-control tag.
(Closes: #781397)
* checks/copyright-file.pm:
+ [NT] Permit the use of "pkg:arch" dependencies when packages use
symlinked doc-dirs.
* checks/cruft.{desc,pm}:
+ [NT] Import "d/pycompat is deprecated" check from
lintian4python.
* checks/dbus.{desc,pm}:
+ [NT] Apply patch series from Simon McVittie to
improve the dbus check. In particular, detect dbus
policy files that exposes CVE-2014-8148 and
CVE-2014-8156. (Closes: #776480)
* checks/deb-format.{desc,pm}:
+ [BR] Support all format described in deb(5)
but manually reject until dak is ready.
* checks/debian-source-dir.pm:
+ [NT] Fix regression where "missing-debian-source-format" was
not emitted if "debian/source" was missing. Thanks to
Jean-Michel Nirgal Vourgère for finding this bug.
(Closes: #781235)
* checks/description.pm:
+ [NT] Allow debug packages without an extended description.
* checks/fields.{desc,pm}:
+ [BR] Add reference to build-depends-on-metapackage
(Closes: #767107).
+ [BR] Check source version (Closes: #749103).
+ [NT] Import check of "Python-version: current" being
deprecated from lintian4python.
+ [AB] Remove "dev" from list of suffixes to trigger
rc-version-greater-than-expected-version (Closes: #732246)
+ [AB] Recognize user@host:path.git URIs in Vcs-Git (Closes: #778323)
* checks/files.{desc,pm}:
+ [BR] Rename compressed-objects.inv to
file-should-not-be-compressed and use it for doxygen
map.gz. (Closes: #751949).
+ [NT] Merge patch from Nicolas Boulenguez to remove some
partially redundant code. (Closes: #784277)
+ [NT] Allow "-dbgsym" as an alternative name to "-dbg" for
packages containing debug symbols.
* checks/init.d.desc:
+ [BR] Add reference to #DEBHELPER# token for
script-in-etc-init.d-not-registered-via-update-rc.d.
(Closes: #775467).
* checks/patch-systems.pm:
+ [NT] Avoid crashing on debian/patches being a file.
(Closes: #778556)
* checks/po-debconf.pm:
+ [NT] Avoid errors from intltool-update.
(Closes: #778558)
* checks/script.{desc,pm}:
+ [BR] Fix some false negatives for
command-with-path-in-maintainer-script tag.
(Closes: #769845).
* checks/shared-libs.{desc,pm}:
+ [NT] Apply patch from Guillem Jover to recognise the
"Ignore-Blacklist-Groups" meta field in symbols files.
(Closes: #781396)
* checks/source-copyright.{desc,pm}:
+ [BR] Fix a false positive for
missing-license-paragraph-in-dep5-copyright tag.
Emit a new specific tag for references to the header paragraph
as a license paragraph. (Closes: #766118).
+ [BR] Detect if license short name are unique.
+ [BR] Avoid false positive license-problem-undefined-license
for - in short license.
+ [BR] Warn when using reference to header license.
(related to bug #769818).
* checks/symlinks.desc:
+ [AB] package-contains-broken-symlink: Mention in the tag description
that only direct dependencies built from the same source package can
be checked by lintian. (Closes: #776535)
* checks/watch-file.{desc,pm}:
+ [NT] Check for watch files accessing PyPI over HTTP
instead of HTTPS. This check has been imported from
lintian4python (with a different tag name).
+ [AB] Check for watch files accessing unsupported PyPI URLs (Check
written by James McCoy and Ben Finney; Closes: #776267)
.
* collection/strings:
+ [NT] Pass "-a" to strings to avoid possible security
issues in strings.
.
* commands/reporting-{lintian-harness,sync-state}:
+ [NT] New files (internal commands for the reporting
framework).
.
* data/binaries/arch-regex:
+ [NT] Add arm64 and ppc64el regex.
+ [NT] Correct armel and armhf regex to cope with
statically linked binaries. (Closes: #768884)
* data/binaries/embedded-libs:
+ [RG] Do not warn about libpng1.6 embedding libpng
+ [RG] Add a new string to detect embedders of libpng
* data/changes-file/known-dists:
+ [ADB] Add "stretch".
* data/cruft/rfc-whitelist:
+ [BR] Whitelist dual licensed vorbis rfc5215.
* data/debhelper/dh_addons-manual:
+ [BR] Apply patch from Jean-Michel Nirgal Vourgère for
detecting missing-build-dependency-for-dh-addon apache2.
(Closes: #778820).
* data/fields/binary-fields:
+ [AB] Add ghc-package (Source: /usr/share/cdbs/1/class/hlibrary.mk)
+ [AB] Add gstreamer-* fields as generated by dh_gstscancodecs
+ [AB] Add lua-versions as mandated by the Debian Lua Policy
* data/fields/perl-provides:
+ [NT] Update perl-provides for perl 5.20.2.
* data/files/js-libraries:
+ [AB] Use "tinymce" instead of "tinymec2?" (Closes: #783327)
* data/files/obsolete-paths:
+ [BR] Add /etc/bash_completion.d (Closes: #776954).
* data/files/privacy-breaker-websites:
+ [BR] Add specific test for privacy breach with modernizr.js
(Closes: #769679).
+ [BR] Add /logos/ to privacy-breach-logo.
+ [BR] Add specific test for libjs-openlayer.
+ [BR] Detect twitter logo.
+ [BR] Detect libjs-jquery-flot.
+ [BR] Detect libjs-jquery-mobile.
+ [BR] Detect beta of libjs-query.
+ [BR] Detect libjs-prototype.
* data/spelling/corrections:
+ [BR] Add portugese||Portuguese. (Closes: #764015).
* data/spelling/corrections-multiword:
+ [BR] Add "allow one to" and "permit one to". (Closes: #756128).
.
* debian/control:
+ [NT] Recommend dpkg (>= 1.17.14) for the --ctrl-tarfile
option in dpkg-deb. Lintian relies on it to support
(u)deb files without a gzip compressed control.tar file.
+ [AB] Promote xz-utils from Suggests to Depends. (Closes: #774729)
* debian/copyright:
+ [AB] Update copyright years.
* debian/rules:
+ [NT] Add CLEAN_TEST_WORK_DIR to be able to control
whether the test artifact directory should be cleaned
during a call to "debian/rules clean" (defaulting to
do the clean).
.
* doc/CREDITS:
+ [AB] Add contributors from 2014 and 2015.
.
* frontend/lintian:
+ [NT] Produce a better error message for lintian detects
that a check has a dependency on an unknown collection.
.
* helpers/coll/objdump-info-helper:
+ [NT] Apply patch from Matt Kraai that adjusts the regex
used for parsing readelf output. Thanks to Martin Pitt
for reporting the issues. (Closes: #771054)
.
* lib/Lintian/Collect/Binary.pm:
+ [NT] Add "debug" class for "is_pkg_class". This uses the
package name to guess if the package is expected to
contain debug symbols.
* lib/Lintian/Command.pm:
+ [NT] Use croak() rather than L::Util's fail() on errors.
The issues are generally not "internal errors".
* lib/Lintian/Internal/FrontendUtil.pm:
+ [NT] Work around a bug in autodie, where an fdopen of a
file-descriptor always failed with "bad file descriptor".
* lib/Lintian/Lab.pm:
+ [NT] Null fields extra metadata fields in the lab storage
that are no longer used. These were previously used by
the reporting framework.
+ [NT] Automatically correct lab metadata, when the lab
discovers an entry does not exist. Any remains of the
entry will be removed as well. Previously, the lab would
just throw an error and require a manuel correction of
the lab.
* lib/Lintian/Reporting/ResourceManager.pm:
+ [NT] Only preserve the last extension of the installed
resource. Previously it would keep all "extensions",
including long parts of the original name if it happened
to contain a period.
* lib/Lintian/Util.pm:
+ [NT] Prefer dpkg-deb --ctrl-tarfile to "ar p" when dpkg
is recent enough.
+ [NT] Stricten the permitted whitespace at the end of GPG
marker lines. This is the same issue as CVE-2015-0840,
except lintian never attempted to validate the signature.
+ [NT] Explicitly use YAML::XS for reading and writing
YAML files. YAML::Any does not specify an interface for
reliably read YAML files in UTF-8 encoding leading to
"mojibake" in some cases. Thanks to Andreas Rönnquist
for reporting the issue. (Closes: #784639)
.
* profiles/ubuntu/main.profile:
+ [BR] Exclude no-human-maintainers (Closes: #769036).
.
* reporting/config:
+ [NT] Include and briefly document new configuration
options.
* reporting/{harness,html_reports}:
+ [NT] Rewrite harness and remove the hard dependency on
a functional permanent laboratory in the reporting
framework.
- The framework now relies on the "harness state cache"
(a YAML file), which can be updated atomically.
- The harness framework now avoids stat(2)ing all
artefacts on the mirror just to check if they are
unchanged.
- The harness frontends use less memory and now
releases most of it before calling html_reports.
This should reduce the peak memory requirements
considerably for the html_reports part of the run.
* reporting/{html_reports,templates/*}:
+ [NT] Reorder the datastructures shared with templates
for better data sharing. This reduces the memory
consumption of html_reports by ~25% on lintian.d.o.
* reporting/html_reports:
+ [NT] Templates are now always read and (their output)
written in the UTF-8 encoding.
+ [NT] Stop reading $statistics_file from the config file.
.
* t:
+ [NT] Apply patch from Matt Kraai to fix test case on
i386. (Closes: #771113)
* t/scripts/pod-spelling.t:
+ [AB] Hardcode aspell as spelling command since Test::Spelling
prefers spell over aspell if installed, too. This avoids having to
add a "Build-Conflicts: spell".
* t/tests/files-embedded/:
+ [AB] Add test case for #783327.
.
lintian (2.5.30) unstable; urgency=medium
.
The "welcome Axel Beckert!" release.
.
* Summary of tag changes:
+ Removed:
- deprecated-kdelnk-file
.
* checks/menu-format.{desc,pm}:
+ [NT] Retire check for "kdelnk" files.
.
* collection/unpacked:
+ [NT] Correct handling of files with 2 or more consecutive
backslashes.
.
* debian/control:
+ [AB] Add a Homepage header pointing to https://lintian.debian.org/
* debian/copyright:
+ [AB] Add myself to debian/copyright.
* debian/rules:
+ [NT] Ensure that po4a/*.cfg are always up to date during releases
builds.
.
* helpers/coll/strings-helper:
+ [NT] Filter out duplicate strings. This applies to the
majority of all ELF binaries (except ones with very exotic
file names with glyphs like ":").
.
* lib/Lintian/Internal/FrontendUtil.pm:
+ [AB] Don't clean HOME and some XDG_* variables when sanitizing the
environment. (Closes: #766737)
.
* t:
+ [JW,NT] Apply patch from Johannes Schauer to fix FTBFS with
newer dpkg that have stricter checking of build-profiles.
.
lintian (2.5.29) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- dbus-policy-at-console
- dbus-policy-without-send-destination
- dbus-session-service-wrong-name
- dbus-system-service-wrong-name
- invalid-profile-name-in-build-profiles-field
- invalid-profile-name-in-source-relation
- invalid-restriction-formula-in-build-profiles-field
- restriction-formula-with-debhelper-with-conflicting-version
- restriction-formula-with-debhelper-without-debhelper-version
- restriction-formula-with-versioned-dpkg-dev-conflict
- restriction-formula-without-versioned-dpkg-dev-dependency
+ Removed:
- invalid-restriction-label-in-source-relation
- invalid-restriction-namespace-in-source-relation
- invalid-restriction-term-in-source-relation
- restriction-list-with-debhelper-with-conflicting-debhelper-version
- restriction-list-with-debhelper-without-debhelper-version
- restriction-list-with-versioned-dpkg-dev-conflict
- restriction-list-without-versioned-dpkg-dev-dependency
- stageX-profile-used-but-no-binary-package-dropped
.
* checks/{control-file,fields}.{desc,pm}:
+ [NT] Apply patch from Johannes Schauer to support the
new build profile syntax. (Closes: #763773)
* checks/dbus.{desc,pm}:
+ [NT] New check by Simon McVittie to discover some dbus
related issues. (Closes: #762609)
* checks/nmu.pm:
+ [JW] Avoid chopping off trailing ">" in emails in the
canonicalize subroutine. (Closes: #766468)
* checks/rules.pm:
+ [JW,NT] Fix undef warning for packages with empty an
empty d/rules file. (Closes: #766033)
* checks/source-copyright.pm:
+ [NT] Apply patch from Johannes Schauer to optimise the
check.
+ [NT] Optimise for "dir/*" wildcards in DEP-5 copyright
files.
* checks/watch-file.pm:
+ [NT] Fix undef warning with some watch files. Thanks
to Axel Beckert for reporting the bug.
(Closes: #765995)
.
* collection/{bin-pkg-control,unpacked}:
+ [NT] Pass "-m" to tar to make it avoid "correcting" the
timestamp of the extracted files. Lintian does not need
it for correctness, so it can make tar save a few syscalls
here.
+ [NT] Explicitly pass tar options to make it extract files
as the current user and applying the users umask. This is
mostly to be explicit about how things are extracted.
* collection/file-info:
+ [NT] Stop collecting file-info for "non-files". The output
is not used and often trivial / predictable from other data
input already available.
* collection/strings:
+ [NT] Stop creating "elf-index" file as nothing uses it.
* collection/unpacked:
+ [NT] Gracefully handle when symlink targets contains
newlines. Thanks to Faheem Mitha for reporting the bug.
(Closes: #765311)
.
* frontend/lintian:
+ [NT] Aggressively reset the environment a well-defined
state at start up. Only ENV variables starting with
"LINTIAN_" (and a select few well known variables) are
preserved.
+ [NT] Runtime for collections and checks now only requires
a single --debug option. Lintian will now also show
runtime for other things (e.g. total runtimes).
+ [NT] Add --perf-debug and --perf-output options to enable
logging for performance data. This is mostly intended
to allow collecting performance data from archive-wide
runs.
+ [NT] Hide some options in the default output for --help.
These can now be shown with "--help=extended".
+ [NT] Add a new "Developer/special usage options" section
in the --help output for some options (e.g. --debug).
This section is hidden by default.
.
* lib/Lintian/Relation.pm:
+ [NT] Unparsable entries are now included in relation
objects rather than being silently discarded.
* lib/Lintian/Util.pm:
+ [NT] Purge even more ENV variables in clean_env.
+ [NT] Add "pipe_tee" subroutine for tee'ing data from one
input file descriptors to one or more output output file
descriptors.
.
* man/lintian.pod.in:
+ [NT] Document the performance logging options.
+ [NT] Add a new "Developer/special usage options" section
in the --help output for some options (e.g. --debug).
.
* private/generate-html-docs:
+ [NT] Add doctype and encoding to generated files.
.
* reporting/harness:
+ [NT] Add missing import.
* reporting/html_reprots:
+ [NT] Correct the command line in the creation of the
lintian.log.gz.
* reporting/{html_reports,templates/*}:
+ [NT] Correct the generated HTML, which was invalid in
some cases.
* reporting/templates/{head,lintian.css}.tmpl:
+ [NT] Define a default "viewport". This slightly improves
the output on some mobile devices.
+ [NT] Add some special cases for "smaller" viewports in the
style sheet.
* reporting/templates/maintainer.tmpl:
+ [NT] Correct name of variable to avoid using an undefined
variable.
.
* vendors/ubuntu/main/data/changes-file/known-dists:
+ [NT] Add "vivid" per request of Iain Lane.
.
lintian (2.5.28) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- license-problem-cc-by-nc-sa
.
* checks/*:
+ [NT] Remove all uses of "control", "debfiles" and
"unpacked".
* checks/*:
+ [NT] Remove all uses of the "doc-base-files", "init.d"
and "menu-files" collections.
* checks/changes-file.pm:
+ [NT] Add "-lts" as common suffix for distribution,
which makes "squeeze-lts" a valid distribution. Thanks
to Holger Levsen for the report. (Closes: #763339)
* checks/description.pm:
+ [SL] show the actual description when it is too short.
* checks/files.pm:
+ [NT] Only flag the Doxygen generated "md5" file as
useless. Thanks to Mathieu Malaterre for reporting.
(Closes: #762660)
* checks/patch-systems.pm:
+ [NT] Rewrite using index rather than debfiles to analyse
the package. A side-effect of that means that Lintian
can now check patches stored in the upstream part of the
packages. (Closes: #563773)
* checks/po-debconf.pm:
+ [NT] Avoid writing test.pot to the unpacked package.
(Closes: #699022)
* checks/testsuite.pm:
+ [NT] Recognise autopkgtest-pkg-{perl,ruby} values for
the "Testsuite" field. Extended validation is not
implemented though. Thanks to Niko Tyni for reporting
the issue. (Closes: #762177)
.
* collection/*:
+ [NT] Remove all uses of "debfiles" and "control".
* collection/{debfiles,doc-base-files,init.d,menu-files}{,.desc}:
+ [NT] Deprecated, will be removed in a future release.
They will now be now auto-removed at the end of the
processing if they have been collected previously.
.
* data/*:
+ [NT] Refresh some of the data against unstable.
* data/cruft/non-free-license:
+ [BR] Detect cc-by-nc-sa license. (Closes: #749768).
* data/standards-version/release-dates:
+ [NT] Add 3.9.6. (Closes: #762460)
.
* debian/control:
+ [NT] Bump Standards-Versions to 3.9.6 - no changes
required.
* debian/dirs:
+ [NT] Stop installing /var/spool/lintian
* debian/lintian.install:
+ [NT] Install Lintian::Tutorial POD documents into
/usr/share/perl5. (Closes: #761930)
* debian/postinst:
+ [NT] Remove empty Lintian labs in /var/spool/lintian on
upgrade.
* debian/postrm:
+ [NT] Remove the "changes" folder when purging the
Lintian lab in /var/spool/lintian.
* debian/source/lintian-overrides:
+ [NT] Remove obsolete lintian overrides.
.
* doc/tutorial/Lintian/Tutorial/WritingChecks.pod:
+ [NT] Mention "safe_qx" as alternative to qx/`` in the
tutorial.
.
* lib/Lintian/Collect{,/*}.pm:
+ [NT] Deprecate the use of "control", "debfiles" and
"unpacked". Consumers are recommended to use
index_resolved_path and control_index_resolved_path
instead.
+ [NT] Remove all uses of debfiles (both the method and
the collection). All methods (except "debfiles") now
depend on "unpacked" instead.
+ [NT] Remove all uses of the "control" and the "unpacked"
method.
* lib/Lintian/Command.pm:
+ [NT] Add support for running a sub in the child before
it calls exec.
+ [NT] Add support for shell-like (e.g. &2) redirects of
stdout and stderr.
+ [NT] Add safe_qx sub for replacing qx() that supports
most of the features of spawn().
* lib/Lintian/Path.pm:
+ [NT] Add support for fetching and (where it makes sense)
opening the underlying file system object. It also adds
a few minor safety guards to common issues with symlinks.
(Closes: #698930)
* lib/Lintian/Path/FSInfo.pm:
+ [NT] New file.
.
* reporting/*:
+ [NT] Avoid forking a shell when invoking commands. This
has the side effect of allowing some paths from the
configuration to contain spaces (among other), where it
previously would not work.
* reporting/templates/maintainer.tmpl:
+ [NT] Use https:// in links to other resources/sites and
add link to tracker.debian.org.
.
lintian (2.5.27) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- bad-exception-format-in-dep5-copyright
- changed-by-address-is-root-user
- exclusive-runtime-tests-field
- maintainer-address-is-root-user
- source-contains-prebuilt-doxygen-documentation
- uploader-address-is-root-user
- useless-autogenerated-doxygen-file
.
* checks/cruft.pm:
+ [BR] Fix a few false positives is for javascript source-is-missing.
+ [BR] Detect prebuilt doxygen documentation.
* checks/fields.pm:
+ [JW] Fix incorrectly anchored regexps. (Closes: #760987)
* checks/files.pm:
+ [BR] Detect useless doxygen generated file. (Closes: #751945)
* checks/manpages.desc:
+ [BR] Improve documentation of manpage-has-errors-from-man.
(Closes: #757068).
* checks/menu-format.pm:
+ [BR] Fix a false positive in desktop-mime-but-no-exec-code.
(Closes: #760677).
* checks/source-copyright.pm:
+ [BR] Fix false positive for space-in-std-shortname-in-dep5-copyright
with alternative licenses. (Closes: #760642).
+ [BR] Fix false positive for with exception syntax.
+ [BR] Fix false positive of
wildcard-matches-nothing-in-dep5-copyright. (Closes: 761125)
* checks/testsuite.{desc,pm}:
+ [BR] Fix false positive missing-runtime-tests-field.
(Closes: #760714).
+ [BR] Print line in case of error.
.
* data/fields/metapackages:
+ [BR] Add qt4-default and qt5-default as metapackage.
(Closes: #756158).
.
* lib/Lintian/Check.pm:
+ [BR] Detect package being built as user root.
(Closes: #612583).
.
lintian (2.5.26) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- backports-changes-missing
- backports-upload-has-incorrect-version-number
- debian-upstream-obsolete-path
- description-is-pkg-name
- description-too-short
- desktop-mime-but-no-exec-code
- empty-short-license-in-dep5-copyright
- file-without-copyright-information
- invalid-escape-sequence-in-dep5-copyright
- invalid-short-name-in-dep5-copyright
- license-problem-bad-php-license
- license-problem-php-license
- license-problem-undefined-license
- no-dep5-copyright
- package-contains-timestamped-gzip
- pipe-symbol-used-as-license-disjunction
- privacy-breach-may-use-debian-package
- source-contains-autogenerated-visual-c++-file
- space-in-std-shortname-in-dep5-copyright
- unused-file-paragraph-in-dep5-copyright
- wildcard-matches-nothing-in-dep5-copyright
+ Removed:
- copyright-refers-to-bad-php-license
- copyright-refers-to-problematic-php-license
.
* checks/binaries.{desc,pm}:
+ [NT] Apply patch from Damyan Ivanov to handle the new
Perl5 library path location.
* checks/changes-file.{desc,pm}:
+ [BR] Add patch from Ivo De Decker, add check for
backports changes file. (Closes: #732225).
+ [BR] Apply patch from Tomasz Bucher, add check for
for timestamped gzip files. (Closes: #738591).
* checks/cruft.{desc,pm}:
+ [BR] Use license checking framework for checking php license.
(Closes: #752540).
+ [BR] Add a pedantic tag for autogenerated file made by Visual
C++.
+ [BR] Fix another false positive for gfdl invariants in
php-elisp, doc-linux-fr and in clisp.
+ [BR] Detect old path for upstream metadata.
* checks/description.{desc,pm}:
+ [SL] Check for one word short description. (Closes: #756643).
+ [SL] Check if the short description is the same as the
package name. (Closes: #757398).
* checks/fields.pm:
+ [NT] Apply patch from Salvatore Bonaccorso to recommend the
new cgit URLs for anonscm.debian.org over the webgit URLs.
(Closes: #756940)
* checks/files.pm:
+ [BR] Fix false positive in detection of cross arch pkgconfig.
(Closes: #755902).
+ [BR] Detect privacy breach fixable by using existing debian
package.
+ [BR] Whitelist <link rel="generator-home"...> in privacy breach
checker.
+ [NT] Apply patch from Damyan Ivanov to handle the new
Perl5 library path location. (Closes: #757921)
* checks/init.d.pm:
+ [NT] Allow usage of /lib/init/init-d-scripts as alternative to
implementing init.d targets in the script itself. Thanks to
Yaroslav Halchenko for the report. (Closes: #758236)
* checks/menu-format.pm:
+ [BR] Add new desktop keys files. Move key list to data.
(Closes: #755266).
+ [NT] Apply patch from Niklas Fiekas to check for desktop files
with MimeType-field but no format code in the Exec-field.
(Closes: #757383)
* checks/phppear.pm:
+ [BR] Fix a false positive for
missing-pkg-php-tools-addon phpcomposer, thanks to
David Prévot (Closes: #754738).
* checks/source-copyright.{desc,pm}:
+ [BR] Add a pedantic warning about non dep-5 debian/copyright.
+ [BR] Detect empty required fields. (Closes: #748452, #656801).
+ [BR] Detect undefined license. (Closes: #733659).
+ [BR] Apply patch from Johannes Schauer in order
to warn if the pipe symbol is used in license.
(Closes: #757583).
+ [BR] Apply patch from Johannes Schauer in order to
check if DEP-5 debian/copyright covers all files
in the unpacked sources. (Closes: #757551).
+ [BR] Detect bad short name and space in license.
Thanks to Clint Adams and Johannes Schauer.
(Closes: #747248, #757615).
+ [BR] Avoid to raise file-without-copyright-information
for .pc directory.
* checks/systemd.pm:
+ [NT] Allow usage of /lib/init/init-d-scripts as alternative to
sourcing /lib/lsb/init-functions.
* checks/testsuite.desc:
+ [BR] Update ref url. (Closes: #755275).
.
* data:
+ [NT] Refresh several data files against sid.
* data/cruft/gfdl-license-fragments-checks:
+ [BR] Add tla false positive for gfdl license text.
* data/cruft/non-distributable-files:
+ [BR] Detect play boy Lenna test image.
* data/cruft/non-free-files:
+ [BR] Add non free icc profile HP5000_UVDuraImageGlossMaxQ.icc
from nips2 package.
* data/cruft/warn-file-type:
+ [BR] Add debug source suffix for detecting javascript
source-is-missing and improve test suite. Fix a
false positive in mono and in jenkins.
* data/debhelper/dh_commands:
+ [BR] Add patch from Piotr Ożarowski, dh-python2
moved to dh-python package (Closes: #740161).
* data/debhelper/dh_commands-manual:
+ [JW] Add dh_apache2 relations to avoid a false-positive.
Thanks to Axel Beckert for reporting the issue.
(Closes: #748688)
+ [NT] Add ":any" to all python related dependencies. Thanks
to Matthias Klose for reporting the issue. (Closes: #733733)
* data/debhelper/*:
+ [NT] Refresh against sid. Thanks to Christian Marillat for
reporting the out of date data. (Closes: #758891)
* data/fields/obsolete-packages:
+ [NT] Add ruby1.9.1, ruby1.9.1-dev and libruby1.9.1 per
request of the Ruby team.
* data/files/js-libraries:
+ [BR] Apply patch from Paul Wise for detection of
libjs-excanvas.
* data/files/privacy-breaker-website:
+ [BR] Improve detection of sourceforge logos.
+ [BR] Detect libjs-jquery use.
+ [BR] Detect libjs-mathjax use.
+ [BR] Add count.digitalpoint.com to statistics website.
+ [BR] Add xoom.com to privacy-breach-donation (used by
freesci-doc package).
+ [BR] Detect libjs-jquery-ui use.
+ [BR] Detect pledgie.com as a donation website.
* data/source-copyright/bad-short-licenses:
+ [BR] Add unspecified and - as bad license.
+ [BR] Detect some invalid short name. Thanks to
Johannes Schauer.
.
* debian/control:
+ [NT] Update recommendation on libautodie-perl to
include perl 5.20 as alternative.
* debian/rules:
+ [NT] Gracefully handle the case where there are no
translations of tag descriptions.
.
* doc/tutorial/Lintian/Tutorial/WritingChecks.pod:
+ [NT] Correct tutorial now that the "index" collection
is gone.
.
* lib/Lintian/Internal/FrontendUtil.pm:
+ [NT] Ignore set, but empty locale environment variables.
Thanks to Michael Prokop for the report. (Closes: #759726)
.
* reporting/{config,html_reports}:
+ [NT] Add support for copying the documentation rather than
symlinking to it. Thanks to Nicolas Sévelin-Radiguet for
reporting the issue. (Closes: #756301)
.
* t:
+ [BR] Fix FTBFS on !amd64. (Closes: #757802).
.
lintian (2.5.25) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- capitalization-error-in-description-synopsis
- incorrect-naming-of-pkcs11-module
- package-contains-thumbnails-dir
- pkg-config-bad-directive
- source-contains-prebuilt-ms-help-file
- spelling-error-in-description-synopsis
.
* checks/*.desc:
+ [NT] Replaced "index" with "unpacked" in Needs-Info.
* checks/cruft.{desc,pm}:
+ [BR] Add a forgotten return statement, and avoid
false positive for deployJava.js (Closes: #745152).
+ [BR] Fix another false positive in GFDL detection.
+ [BR] Use whitelist for know good RFC (Closes: #753970).
+ [BR] Detect and warn about *.chm file
(MS Windows HtmlHelp Data). (Closes: #653910).
* checks/description.{desc,pm}:
+ [NT] Apply patch from Anders Jonsson to check spelling
of the package synopsis. (Closes: #747266)
* checks/files.{desc,pm}:
+ [RG,NT] Check for invalid named p11-kit modules in
/usr/share/p11-kit modules. (Closes: #741346)
+ [BR] Detect cross architecture pkg-config file.
(Closes: #539225).
+ [BR] Add a sanity check for pkg-config files.
(Closes: #676803, #657699).
+ [BR] Detect .thumbnails dir (Closes: #660797).
.
* collection/*.desc:
+ [NT] Replace "index" with "unpacked" in Needs-Info.
* collection/index{,.desc}:
+ [NT] Removed file.
* collection/unpacked{,.desc}:
+ [NT] Have unpacked create indices when the package is
being unpacked. This is done using a pipeline to avoid
decompressing the data.tar file multiple times.
.
* data/cruft/missing-dir-search-path:
+ [BR] Close false positive for mathjax, search under
/unpacked.
+ [BR] Fix another false positive for emscripten.
* data/cruft/warn-file-type:
+ [BR] add yc suffix for detecting javascript
source-is-missing and improve test suite. Fix a
false positive in libdevel-nytprof-perl.
* data/files/js-libraries:
+ [NT] Apply patch from Marcelo Jorge Vieira to correct
a regular expression for finding embedded copies of
libjs-jquery-history. (Closes: #753077)
* data/init.d/virtual_facilities:
+ [NT] Apply patch from Guillem Jover to fix a typo.
* data/scripts/interpreters:
+ [NT] The texlua binary is now provided by
texlive-binaries (>= 2014.20140512.33982) instead of
luatex. Thanks to Norbert Preining for reporting this.
(Closes: #752611)
* data/symlinks/well-known-symlinks-target:
+ [NT] Apply patch from Guillem Jover to fix a typo in
a regex. (Closes: #752229)
.
* debian/control:
+ [NT] Add Breaks/Replaces for funny-manpages due to a
bug in funny-manpages before 1.3-5.1. Thanks to Adrian
Bunk for reporting. (Closes: #753165)
.
* lib/Lintian/Collect{,/*}.pm:
+ [NT] Replace "index" with "unpacked" in Needs-Info
requirements.
.
* reporting/config:
+ [NT] Remove "$statistics_file" from the sample config.
* reporting/harness:
+ [NT] Set the state cache to 0644 after creating it.
* reporting/html_reports:
+ [NT] Move the statistics file to the harness state cache
dir. It only contains information about the last run and
is re-generated as needed. If the file exists, it will
be moved to its new location if possible.
.
lintian (2.5.24) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- uses-deprecated-compression-for-data-tarball
.
* checks/file.pm:
+ [BR] Speed-up privacy check (Closes: #745877).
+ [BR] Fix false positive for detecting minified
javascript (Closes: #745877).
+ [BR] Fix false positive due to cpython name
encoded in compiled python file name (Closes: #752218).
+ [BR] Add another suffix to source-is-missing for javascript
file.
+ [BR] Add url if possible for privacy breach.
* checks/changelog-file.pm:
+ [BR] Use lower case for bad intended distribution.
* checks/deb-format.{desc,pm}:
+ [NT] Apply patch from Guillem Jover to check for
deprecated compressions on data.tar-members.
(Closes: #745740)
* checks/menu-format.pm:
+ [JW] Also validate desktop files in usr/share/xessions.
(Closes: #746402)
.
* data/files/privacy-breaker-{fragments,websites}:
+ [BR] Improve detection rules.
.
* debian/rules:
+ [NT] Extract some tasks from the build-stamp target,
so they can be run independently.
+ [NT] Create a "rebuild-lintian.debian.org" target that
only (re-)builds/regenerates the needed parts for the
lintian.debian.org checkout. (Closes: #751926)
.
* frontend/{dplint,lintian}:
+ [NT] Fix a bug in command-line parsing, where "--"
was interpreted as a literal file-name rather than
the "end of options" marker. Thanks to Luca
Falavigna for spotting it. (Closes: #746790)
.
* vendors/ubuntu/main/data/changes-file/known-dists:
+ [NT] Add utopic as valid Ubuntu distribution.
.
lintian (2.5.23.1) unstable; urgency=medium
.
* debian/rules:
+ [NT] Avoid regenerating po4a files if not needed.
* debian/source/lintian.overrides:
+ [NT] Add overrides for false-positive "evil JSON" license
problem, which is triggered by the current Lintian on the
FTP master host.
.
lintian (2.5.23) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- init.d-script-depends-on-all-virtual-facility
- maven-plugin-in-usr-share-java
- needless-suggest-recommend-libservlet-java
- pre-depends-directly-on-multiarch-support
- quilt-series-without-trailing-newline
- source-contains-prebuilt-sphinx-documentation
.
* checks/binaries.{desc,pm}:
+ [NT] Apply patch from Samuel Bronson to improve the
description of the debug-symbols-directly-in-usr-lib-debug
tag.
+ [BR] Extend eglibc whitelist to glibc. (Closes: #748881).
* checks/changelog-file.pm:
+ [BR] Allow to sid for experimental to unstable comment.
(Closes: #747407).
* checks/control.{desc,pm}:
+ [BR] Apply patch from Helmut Grohne to warn about
Pre-Depends: multiarch-support in debian/control.
(Closes: #747439).
* checks/cruft.{desc,pm}:
+ [BR] Detect sphinx generated documentation and avoid
a false positive for minified javascript and missing sources.
(Closes: #742693).
+ [BR] Do not remove newline with c++ comments. Fix a false
positive.
+ [BR] Fix a GFDL detection false positive in texlive. Thanks
to Norbert Preining. (Closes: #743754).
+ [BR] Fix another false positives in GFDL detection.
+ [BR] Fix a false positive for source-is-missing for
deployJava.js. (Closes: #745152).
+ [BR] Fix a false positive for GFDL detection in
soundjuicer. (Closes: #748375).
+ [BR] Fix a false positive for source-is-missing in e2fsprogs.
(Closes: #748421).
* checks/files.pm:
+ [BR] Use Lintian::Data for detecting embedded library.
+ [BR] Add context in embedded lib tagging.
+ [BR] Avoid to warn on bookmark link. (Closes: #746656).
* checks/fields.{desc,pm}:
+ [NT] Apply patch from Johannes Schauer to rename "notest"
build-profile to "nocheck". (Closes: #743840)
+ [NT] Support giving replacements for obsolete packages.
+ [NT] Fix a bug with versioned dependencies on obsolete
packages with non-obsolete alternatives.
* checks/infofiles.desc:
+ [NT] Apply patch from Samuel Bronson to improve some of
the examples.
+ [NT] Apply patch from Don Armstrong to ignore jpg/jpeg images
beneath /usr/share/info. (Closes: #748167)
* checks/init.d.{desc,pm}:
+ [BR] Detect $all virtual dependency in legacy init scripts.
Thanks to Holger Levsen. (Closes: #737867).
* checks/java.{desc,pm}:
+ [SL] Do not trigger a warning when a jar is not in
/usr/share/java and the package name matches. (Closes: #746744).
lib.*maven.*plugin.*java. (Closes: #743446).
+ [SL] Catch uses of Java8 byte code. (Closes: #743384).
+ [SL] Warn that the suggests/recommends on libservlet[\d\.]+-java is
needless (Closes: #743453)
+ [SL] missing-classpath should be disabled on Java binaries
+ [NT] Exclude some jar files from "codeless-jar" tag based
on the basename of the jar file. This is intended to
reduce the number of codeless jars for source/doc jars in
eclipse(-based) packages.
* checks/patch-systems.{desc,pm}:
+ [BR] Warn against trailing newline in debian/patches/series.
(Closes: #746362).
* checks/source-copyright.pm:
+ [NT] Permit the use of "https://" in DEP-5 format URIs even
if the policy suggests that they have to use "http://".
(Closes: #744981)
* checks/testsuite.pm:
+ [JW] Add new restrictions for DEP-8 tests. (Closes: #746305)
.
* data/binary/embedded-libs:
+ [RG] Detect embedded copies of lcms, lcms2, libmms, libminiupnpc,
libupnp, and libyaml, polarssl.
+ [RG] Don't detect mariadb as embedder of mysql.
+ [BR] Detect libidn*, and libsrtp.
+ [NT] Apply patch from Samuel Bronson to detect mpfr and gmp.
+ [BR] Extend eglibc whitelist to glibc.
* data/cruft/non-distributable-files:
+ [BR] Add a file comes from the Novell libc Software Development
Kit. (Closes: #745802)
* data/cruft/non-free-files:
+ [BR] Add all profiles from icc-profiles non free package.
+ [BR] Add icc profiles from Adobe.
+ [BR] Add icc profiles from http://www.color.org/srgbprofiles.xalter.
+ [BR] Add Apple icc profile: Color LCD Calibrated, Copyright
Apple Computer, Inc., 2003
+ [BR] Add old srgb profile from HP: IEC 61966-2.1 Default RGB
colour space - sRGB, Copyright (c) 1998 Hewlett-Packard Company
* data/fields/obsolete-packages:
+ [NT] Add hardening-includes and hardening-wrapper on request of
Thijs Kinkhorst. (Closes: #711193)
+ [NT] Add python-support on request of Luca Falavigna.
(Closes: #746563)
* data/java/constants:
+ [SL] introduce this file to specify JDK values
* data/scripts/maintainer-script-bad-command:
+ [BR] Avoid a false positive for
maintainer-script-should-not-use-update-alternatives-set.
(Closes: #745568).
.
* debian/control:
+ [NT] Add Build-Depends on po4a.
* debian/lintian.install:
+ [NT] Install translations.
* debian/{lintian.,source/}lintian-overrides:
+ [NT] Add overrides for using hardening-includes.
* debian/rules:
+ [NT] Add rules for handling translations.
+ [NT] Run dh_lintian during binary-indep target.
.
* frontend/lintian{,-info}:
+ [NT] Use localized version of tag descriptions.
(Closes: #663155)
.
* lib/Lintian/{CheckScript,Profile}.pm:
+ [NT] Add support for translations of tag descriptions.
.
* po4a:
+ [NT] New directory for translations.
.
* private/private/gen-po4a-conf:
+ [NT] New file.
.
* README:
+ [NT] Document how to make and contribute translations.
.
lintian (2.5.22.1) unstable; urgency=medium
.
* checks/ocaml.{desc,pm}:
+ [NT] Replace unnecessary uses of file_info with index.
.
* data/binary/embedded-libs:
+ [RG] Detect embedded copies of libmpg123.
* data/fields/perl-provides:
+ [NT] Refresh against Perl 5.18.2.
* data/spelling/corrections:
+ [RG] Add "functiosn" to the list of spelling mistakes.
.
* frontend/lintian:
+ [NT] Fix a regression that completely broke the
command-line argument "--packages-from-file", when
the file was "-".
.
* lib/Lintian/Relation.pm:
+ [JW,NT] Fix dependency-testing issues caused by too
greedy regular expressions in the dependency parser.
(Closes: #742989)
.
* reporting/templates/tags.tmpl:
+ [JW,NT] Fix grammatical error in a template.
(Closes: #742985)
.
lintian (2.5.22) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- invalid-restriction-label-in-source-relation
- invalid-restriction-namespace-in-source-relation
- invalid-restriction-term-in-source-relation
- license-problem-gfdl-non-official-text
- license-problem-non-free-RFC-BCP78
- privacy-breach-google-plus
- privacy-breach-twitter
- restriction-list-with-debhelper-with-conflicting-debhelper-version
- restriction-list-with-debhelper-without-debhelper-version
- restriction-list-with-versioned-dpkg-dev-conflict
- restriction-list-without-versioned-dpkg-dev-dependency
- source-is-missing
- stageX-profile-used-but-no-binary-package-dropped
.
* checks/*:
+ [NT] Avoid using "I" or "we" in tag descriptions.
+ [NT] When looping over the names of binary packages,
prefer the order they are listed in the control file.
Previously they were either sorted by name or ordered
by Perl's hash iterator.
* checks/control-file.{desc,pm}:
+ [NT] Apply patch from Johannes Schauer to validate
build-profile usage.
* checks/control-files.pm:
+ [NT] Remove special case for udebs on empty control
files. Thanks to Cyril Brulebois for testing it.
* checks/cruft.pm:
+ [BR,NT] Optimise the GFDL check considerably in some
cases (e.g. the linux source). (Closes: #738342)
+ [BR] Factorize GFDL detection. Detect non official
wordings of GFDL invariant section. (Closes: #717916).
Fix some old false positives.
(Closes: #742260, #741212).
+ [BR] Add opentoken non official wording for GFDL
invariant section, thanks to Nicolas Boulenguez.
(Closes: #740183).
+ [BR] Detect minified js based on line length.
(Closes: #735348).
+ [BR] Detect missing sources for minified javascript, flash project,
flash files, and elf binary.
* checks/fields.{desc,pm}:
+ [NT] Apply patch from Johannes Schauer to validate
build-profile usage. (Closes: #740607)
* checks/files.desc:
+ [BR] Raise file-name-in-PATH-is-not-ASCII and
file-name-in-PATH-is-not-ASCII to error
(see policy 10.10), thanks to Helmut Grohne.
(Closes: #739347)
+ [BR] Improve privacy-breach tags wording, thanks to Paul Wise.
(Closes: #738176)
* checks/menu-format.desc:
+ [NT] Apply patch from Charles Plessy to correct an URL
in a tag reference. (Closes: #738454)
* checks/symlinks.pm:
+ [BR] Use Lintian::Data for safe symlinks list. Add
/dev/null to this list. (Closes: #740339).
* checks/systemd.pm:
+ [BR] Allow spaces around = in service files.
(Closes: #739366).
* checks/watch-file.{desc,pm}:
+ [BR] Allow debian/upstream-signing-key.asc,
thanks to Nicolas Boulenguez (Closes: #736711).
+ [NT] Apply patch from Daniel Kahn Gillmor to check for
the upstream signing key in debian/upstream. Thanks to
Hideki Yamane for the bug report. (Closes: #738597)
.
* collection/java-info:
+ [NT] Update the conditional using file(1) to cope with
the new output for JAR files.
.
* data:
+ [NT] Refresh several architecture data files against
dpkg 1.17.5. Thanks to James Hunt for the reminder.
(Closes: #735266)
+ [NT] Refresh several data files with data from sid.
* data/binary/embedded-libs:
+ [RG] Detect embedded copies of liblivemedia, libgadu, libssh,
libssh2, freetype, nss, and nspr.
+ [RG] Adjust the detection of embedded copies of libmagic.
+ [RG] Detect embedded copies of an ancient tinyxml. Thanks to
Andreas Rönnquist for the report. (Closes: #733318)
* data/cruft/non-free-files:
+ [BR] "id3v22-tda.mp3 considered non-free", thanks to Charlie
Smotherman (Closes: #736203).
* data/files/privacy*:
+ [BR] Improve detection of privacy-breach-google-cse, thanks to
Paul Wise (Closes: #739247).
+ [BR] Detect google+, thanks to Paul Wise.
(Closes: #738175).
+ [BR] Detect twitter, thanks to Paul Wise.
(Closes: #738174).
* data/scripts/maintainer-script-bad-command:
+ [BR] Fix false positive
maintainer-script-should-not-use-adduser-system-without-home
due to quoting, thanks to Andreas Beckmann <anbe@debian.org>
(Closes: #739109).
.
* debian/source/lintian-overrides:
+ [NT] Override false-positive for license checks.
* debian/tests/control:
+ [NT] Use the new @builddeps@ from autopkgtest/2.5.5
instead of duplicating the values.
.
* frontend/lintian:
+ [NT] Fix a regression in argument handling after the first
non-option. This problem was introduced in 2.5.18.
+ [NT] Let --color default to "auto".
+ [NT] Discard STDERR when running git describe to guess the
version of Lintian. Avoids a warning from git tags are
absent from the repository.
.
* lib/Lintian/Collect/Source.pm:
+ [NT] Apply patch from Mathieu Parent to make "binaries" return
the package name in the same order as they are listed in the
control file. (Closes: #739671)
* lib/Lintian/Reporting/ResourceManager.pm:
+ [NT] New file.
* lib/Lintian/Util.pm:
+ [NT] Extend the "Continuation line outside a paragraph" parse
error on Deb822 files with a possible suggestion for fixing
the problem.
* lib/Test/Lintian/Harness.pm:
+ [NT] New file - mostly for internal use during testing.
.
* profiles/debian/ftp-master-auto-reject.profile:
+ [BR] Refresh with new tags.
.
* reporting/config:
+ [NT] Fix typo of HARNESS_STATE_DIR config variable.
* reporting/harness:
+ [NT] Avoid writing state-cache during dry-run.
+ [NT] Add timestamps to the log output.
* reporting/{html_reports,templates/*.tmpl}:
+ [NT] Show the same statistics on the tag page as shown
on the tag index pages. Thanks to Guillem Jover for
the suggestion. (Closes: #738349)
+ [NT] Remove the second argument to the "head" sub in
the templates. Its value is now computed automatically
by html_reports based on the name of the output file.
+ [NT] Install "lintian.css" and all files in
"reporting/images" and "reporting/resources" into
"HTML_DIR/resources". These will be named after their
content to allow more aggressive public caching.
* reporting/html_reports:
+ [NT] Link to the library API docs from the index page.
(Closes: #639974)
+ [NT] Optimise the graph generation by only calling
gnuplot twice (rather than once plus once per tag).
+ [NT] Show the number of package groups and the size
of the harness backlog on the index page.
* reporting/{lintian.css => templates/lintian.css.tmpl}:
+ [NT] Rename file and make it a template.
.
* t/runtests:
+ [NT] Cache test artifacts and reuse them in subsequent
runs. This removes the majority of the runtime
overhead of running the test suite on subsequent runs.
(Closes: #699083)
+ [NT,BR] Fix test suite issues caused by a regression
in tar 1.27. (Closes: #739744)
.
lintian (2.5.21) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- bad-intended-distibution
- debian-rules-should-not-automatically-update-control
- debian-rules-should-not-use-DEB_BUILD_OPTS
- debian-rules-should-not-use-or-modify-user-only-variable
- debian-rules-should-not-use-pwd
- debian-rules-should-not-use-underscore-variable
- license-problem-md5sum-non-distributable-file
- license-problem-md5sum-non-free-file
- license-problem-non-free-RFC
- maintainer-script-should-not-use-service
- privacy-breach-donation
- privacy-breach-facebook
- privacy-breach-google-cse
- privacy-breach-logo
- privacy-breach-piwik
- privacy-breach-statistics-website
- privacy-breach-w3c-valid-html
- source-contains-prebuilt-flash-object
- source-contains-prebuilt-flash-project
- source-contains-prebuilt-java-object
- source-contains-prebuilt-javascript-object
- source-contains-prebuilt-python-object
- source-contains-prebuilt-silverlight-object
+ Removed:
- debian-rules-automatically-updates-control
- debian-rules-uses-DEB_BUILD_OPTS
- debian-rules-uses-or-modifies-user-only-variable
- debian-rules-uses-pwd
.
* checks/changelog-file.{desc,pm}:
+ [BR] Warn when an upload erroneously targeted at distribution that
is not intended (Closes: #661990).
* checks/cruft.{desc,pm}:
+ [BR] Detect non free rfc (Closes: #365213).
+ [BR] Check md5sums on source package.
+ [BR] Detect prebuilt jar file.
+ [BR] Detect prebuilt silverlight file.
+ [BR] Detect prebuilt flash file (Closes: #733883).
* checks/fields.{desc,pm}:
+ [BR] Increase severity of vcs-field-uses-not-recommended-uri-format
(Closes: #670323).
* checks/files.{desc,pm}:
+ [BR] Add xz and zip to duplicated-compressed-file regexp.
+ [BR] Use Lintian::Data for compressed file extension.
+ [BR] Use Lintian::Data for vcs files list. Add a few more VCS
files (Closes: #731904).
+ [BR] Remove long obsolete reference to rc.boot(5) manpage
in package-installs-into-etc-rc.boot description.
Thanks to Jakub Wilk (Closes: #729034).
+ [BR] Add a moreinfo field to obsolete path.
+ [BR] Fix non-conf-file-in-modprobe.d description
(Closes: #729037).
+ [BR] Check privacy breach only in regular file.
+ [BR] Add link tag as potential privacy breaker.
+ [BR] Add <div data-href="http://website" to potential privacy
breaker.
* checks/md5sums.pm:
+ [BR] In case of strange filename, md5sum(1) prefix the md5sum
by backslash and escape the name using backslash encoding.
Handle this case properly.
* checks/rules.{desc,pm}:
+ [BR] Use Lintian::Data for forbidden construct in rules
file.
+ [BR] Rename debian-rules-automatically-updates-control to
debian-rules-should-not-automatically-update-control.
+ [BR] Rename debian-rules-uses-pwd to
debian-rules-should-not-use-pwd.
+ [BR] Rename debian-rules-uses-DEB_BUILD_OPTS to
debian-rules-should-not-use-DEB_BUILD_OPTS.
+ [BR] Rename debian-rules-uses-or-modifies-user-only-variable
to debian-rules-should-not-use-or-modify-user-only-variable.
* checks/watch.{desc,pm}:
+ [BR] Fix the description of debian-watch-may-check-gpg-signature tag.
Thanks to Gregor Herrmann for the bug report and patch
(Closes: #732799).
.
* data/cruft/non-free-files:
+ [BR] Add sRGB.icm to non-free files (Closes: #699369).
+ [BR] Add a few non-free font files (Closes: #298545).
+ [BR] Add non-free w3c valid icons.
* data/cruft/warn-file-type:
+ [BR] Add this file.
+ [BR] Detect minified javascript (by extension).
+ [BR] Detect python prebuilt object (Closes: #734280).
* data/fields/obsolete-packages:
+ [BR] Apply patch from Jonas Genannt to render obsolete ruby 1.8.
* data/files/obsolete-paths:
+ [BR] Add /etc/X11/fonts/X11R7 as obsolete path (Closes: #646872).
* data/files/privacy-breaker-{fragments,websites}:
+ [BR] Add w3c website valid x?html icons.
+ [BR] Add piwik detection.
+ [BR] Add detection of well known statistics websites.
+ [BR] Detect facebook.
+ [BR] Detect google custom search engine.
* data/rules/rules-should-not-use:
+ [BR] Detect use of $(_) variable in debian/rules (Closes: #585495).
* data/scripts/maintainer-script-bad-command:
+ [BR] Service is reserved to system admin (Closes: #656229).
+ [BR] Fix false positive for
maintainer-script-should-not-use-adduser-system-without-home
by allowing shell variable (Closes: #733595).
.
* debian/control:
+ [NT] Add relevant relations on libyaml-perl, which is
now used by harness.
.
* reporting/harness:
+ [NT] Fix typo in --schedule-chunk-size command-line argument.
+ [NT] Require a new configuration variable $HARNESS_STATE_DIR.
This variable tells harness where it can store state
information and caches.
+ [NT] Track which version of lintian a given package group
was processed by. Using this information, harness will now
slowly reprocess groups processed by another version of
Lintian than the current.
.
* t:
+ [NT] Apply patch from Adam Conrad to fix issue with a test
when run in an Ubuntu environment. Also thanks to Benjamin
Drung for forwarding the patch to the Debian BTS.
(Closes: #725139)
.
lintian (2.5.20) unstable; urgency=low
.
* Summary of tag changes:
+ Added:
- build-depends-on-an-obsolete-java-package
- debian-watch-file-pubkey-file-is-missing
- debian-watch-may-check-gpg-signature
- license-problem-nvidia-intellectual
- maintainer-script-should-not-hide-init-failure
- maintainer-script-should-not-modify-ld-so-conf
- maintainer-script-should-not-modify-netbase-managed-file
- maintainer-script-should-not-use-adduser-system-without-home
- maintainer-script-should-not-use-ancient-dpkg-epoch-check
- maintainer-script-should-not-use-ancient-dpkg-multi-conrep-check
- maintainer-script-should-not-use-deprecated-chown-usage
- maintainer-script-should-not-use-dpkg-status-directly
- maintainer-script-should-not-use-fc-cache
- maintainer-script-should-not-use-gconftool
- maintainer-script-should-not-use-install-sgmlcatalog
- maintainer-script-should-not-use-start-stop-daemon
- maintainer-script-should-not-use-update-alternatives-remove
- maintainer-script-should-not-use-update-alternatives-set
- package-install-into-obsolete-dir
- privacy-breach-generic
- privacy-breach-google-adsense
+ Removed:
- ancient-dpkg-epoch-check
- ancient-dpkg-multi-conrep-check
- deprecated-chown-usage
- fc-cache-used-in-maintainer-script
- gconftool-used-in-maintainer-script
- install-sgmlcatalog-deprecated
- maintainer-script-hides-init-failure
- maintainer-script-modifies-ld-so-conf
- maintainer-script-modifies-netbase-managed-file
- maintainer-script-uses-dpkg-status-directly
- start-stop-daemon-in-maintainer-script
- update-alternatives-remove-called-in-postrm
.
* checks/cruft.{desc,pm}:
+ [BR] Check files for under a non-distributable Nvidia
license. (Closes: #724930)
+ [BR] Abstract sliding window algorithm and use it for
license check. (Closes: #720348)
+ [BR] Filter (x?ht|x)ml comments for license check.
(Closes: #729226).
* checks/fields.pm:
+ [SL] Returns a warning when a package build-deps on java-compiler
instead of default-jdk. (Closes: #730714)
* checks/files.desc:
+ [BR] Improve description of pkg-config-multi-arch-wrong-dir
tag. Add debhelper > 9 on non multi-arched package as a likely
cause (Closes: #723886).
+ [BR] Add a generic check for obsolete path.
+ [BR] Detect privacy breaker html/css files (Closes: #637580)
particularly Google Adsense (Closes: #718427).
* checks/scripts.{desc,pm}:
+ [BR] Detect update-alternatives --set in maintainer scripts.
(Closes: #643602).
+ [BR] Use Lintian::Data for bad shell construction in maintainer
scripts.
+ [BR] Detect use of adduser --system without --home or with
--home inside /home. (Closes: #730456).
+ [BR] install-sgmlcatalog is deprecated for a long time. Warn
now in all use case. Rename the tag to
maintainer-script-should-not-use-install-sgmlcatalog
+ [BR] Rename gconftool-used-in-maintainer-script to
maintainer-script-should-not-use-gconftool. Add gconf\d package
to exception list.
+ [BR] Rename fc-cache-used-in-maintainer-script to
maintainer-script-should-not-use-fc-cache. Add fontconfig
package to exception list.
+ [BR] Rename (ancient-dpkg-.*) to maintainer-script-should-not-use-$1.
+ [BR] Rename (deprecated-chown-usage) to
maintainer-script-should-not-use-$1.
+ [BR] Rename maintainer-script-hides-init-failure to
maintainer-script-should-not-hide-init-failure.
+ [BR] Rename maintainer-script-modifies-ld-so-conf to
maintainer-script-should-not-modify-ld-so-conf.
+ [BR] Rename maintainer-script-modifies-netbase-managed-file to
maintainer-script-should-not-modify-netbase-managed-file.
+ [BR] Rename maintainer-script-uses-dpkg-status-directly to
maintainer-script-should-not-use-dpkg-status-directly.
+ [BR] Rename update-alternatives detection in maintainer script to
aintainer-script-should-not-use convention.
+ [BR] Rename start-stop-daemon-in-maintainer-script to
maintainer-script-should-not-use-start-stop-daemon
* checks/standards-version:
+ [BR] Use Lintian::Data for ancient date check.
* checks/watch.{desc,pm}:
+ [BR] Detect lack of uscan support for gpg signature.
(Closes: #711553).
.
* data/binary/embedded-libs:
+ [RG] Detect embedded copies of poppler/xpdf. (Closes: #724733)
* data/files/obsolete-paths:
+ [BR] Add this this file to generically check obsolete path.
+ [BR] Check obsolete /etc/dhcp3 path. (Closes: #673029)
* data/fields/obsolete-packages:
+ [NT] Apply patch from Eric Dorland to mark various versions
of automake as obsolete.
+ [SL] Tag openjdk-6-jdk, openjdk-6-jre and openjdk-6-jre-headless
as obsolete (See ##720911). (Closes: #730714)
* data/fields/virtual-packages:
+ [NT] Refresh against sid. Thanks to Nicholas Breen for the
reminder. (Closes: #724866)
* data/spelling/corrections:
+ [RG] Detect some typos of "establishment" and "contains".
+ [SL] Detect some typos of "suppress".
* data/standards-version/ancient-date:
+ [BR] Set ancient date to 14 Jan 2012.
* data/standards-version/release-dates:
+ [NT] Add release date for 3.9.5.
.
* debian/control:
+ [NT] Bump Standards-Versions to 3.9.5 - no changes required.
+ [BR] Add myself as uploader.
.
* lib/Lintian/Collect/Binary.pm:
+ [GN] Add support for multi-component RPATHs. (Closes: #727683)
* lib/Lintian/Collect/Package.pm:
+ [BR] Globally replace \\ by \ in _dequote_name(). This bug was
masked by old buggy tar (Closes: #727665).
.
* t/debs/deb-format-wrong-order/.*:
+ [BR] Recent dpkg detect this error and bail out. Do not run with
dpkg >= 1.17.2. See dpkg git commit
cb8ed03bbffe892165620ed1ddf753a6b0c1ee62
and 547dca4c3ff23df5dfa554f1943b371cd7056ee4.
.
* vendors/ubuntu/main/data/changes-file/known-dists:
+ [NT] Add "trusty". Thanks to Stéphane Graber for the
reminder.
.
lintian (2.5.19) unstable; urgency=low
.
* Summary of tag changes:
+ Added:
- homepage-in-binary-package
.
* checks/fields.{desc,pm}:
+ [NT] Add check for "Homepage"-field missing in the
source, when one of the binary packages has the
field. Thanks to Ricardo Mones for the bug report.
(Closes: #693117)
* checks/files.pm:
+ [NT] Apply patch from Samuel Thibault to fix a
false-positive non-standard-toplevel-dir for the
directories /hurd and /servers. (Closes: #724524)
+ [NT] Work around bug #724571 in t1disasm by ignoring
failures caused by segmentation faults and bus errors.
Though, Lintian will emit a warning when such an error
occurs. Thanks to Ansgar Burchardt for the report.
(Closes: #724319)
* checks/testsuite.pm:
+ [NT] Allow uppercase letters in the names of DEP-8
tests, now that the DEP-8 officially "tolerates" them.
(see #711844)
.
* lib/Lintian/Util.pm:
+ [NT] Add drain_pipe(FD).
.
* reporting/{config,harness}:
+ [NT] Determine the html_reports command automatically
instead of allowing it to be configurable.
+ [NT] Stop allowing config script to name individual
log files. The directory in which they are put is still
configurable.
+ [NT] Replace LINTIAN_CFG with passing "--no-cfg" to
lintian.
+ [NT] Replace $lintian_cmd config option with a
@EXTRA_LINTIAN_OPTIONS. Also stop forking a shell to
run lintian.
+ [NT] Remove LINTIAN_BIN_DIR; it is no longer used to
avoid signature checking.
+ [NT] Fix a bug where harness would not remove entries in
the Lintian log for removed packages if no packages were
to be processed.
* reporting/lintian-dummy.cfg:
+ [NT] Remove file as it is now obsolete.
.
lintian (2.5.18.1) unstable; urgency=low
.
* checks/application-not-library.desc:
+ [JW] Fix typo.
* checks/files.pm:
+ [NT] Only open .pc files if they are regular files.
This fixes a possible DoS introduced in 2.5.17.
* checks/shared-libs.pm:
+ [NT] Correct the name of the multiarch-dirs data file,
which was renamed in 2.5.17.
.
* lib/{Test/Lintian,Lintian/Data}.pm:
+ [NT] Load data files eagerly during tests to ensure
missing or typo'ed data files are spotted earlier.
.
* debian/changelog:
+ [NT] Mention in the 2.5.17 entry that multiarch-dirs
data file was renamed.
+ [NT] Consistently spell "typos" without an "e".
.
lintian (2.5.18) unstable; urgency=low
.
* Summary of tag changes:
+ Added:
- debian-changelog-has-wrong-weekday
- debian-rules-missing-good-practice-target-dfsg
- empty-udeb-package
- file-name-in-PATH-is-not-ASCII
- misplaced-extra-member-in-deb
.
* checks/apache2.pm:
+ [NT] Fix false-positive warning about non-standard package
name when the Apache2 module contained uppercase letters.
Thanks to Jonas Smedegaard for the report.
(Closes: #723003)
* checks/changelog.{desc,pm}:
+ [NT] Check that the weekday of the latest changelog entry
is consistent with the date. Thanks to Raphael Champeimont
for the report. (Closes: #703407)
* checks/cruft.{desc,pm}:
+ [BR] Fix false-postive for license-problem-gfdl-invariants.
(Closes: #721252)
+ [BR] Extend tag description of the gfdl-invariants tag.
(Closes: #722102)
* checks/deb-format.{desc,pm}:
+ [NT] Support (but tag) unofficial members after the
"debian-binary" member where allowed by dpkg. These
members will trigger misplaced-extra-member-in-deb tag.
Thanks to Guillem Jover for the report and the feedback.
(Closes: #718349)
* checks/fields.{desc,pm}:
+ [NT] Warn about "?op=log" in svn.d.o brower links. Thanks
to Paul Wise for the report. (Closes: #707700)
+ [NT] Fix false-positive dbg-package-missing-depends for
transitional dbg packages. Thanks to Paul Wise for the
report. (Closes: #665694)
+ [NT] Remind people that packages named gir1.2-foo-X.Y
should be in the introspection section. Thanks to Michael
Biebl for the report (part of #695345)
* checks/files.{desc,pm}:
+ [BR] Fix false-positive dir-or-file-in-build-tree for
the sbuild source package. (Closes: #720910)
+ [NT] Add check for empty udeb packages. Thanks to Cyril
Brulebois for the suggestion. (Closes: #672664)
+ [NT] Remove exception for "/selinux" top-level directory.
Thanks to Laurent Bigonville for the report.
(Closes: #723730)
+ [NT] Add a check for files in PATH being representable
using only ASCII characters. (Closes: #723732)
* checks/menu-format.desc:
+ [BR] Rewrite description of the tag for desktop files
without a keywords entry based on a wording from Gaudenz
Steinlin. (Closes: #706966)
+ [NT] Apply patch from Lucas Nussbaum to add an additional
reference to the desktop-entry-lacks-keywords-entry tag.
(Closes: #722582)
* checks/rules.{desc,pm}:
+ [BR] Refactor the check for known targets in d/rules.
+ [BR] Add check for missing for recommended "get-orig-source"
target in d/rules for packages that look like they have been
repacked. (Closes: #460174)
* checks/scripts.desc:
+ [NT] Demote the certainty of shell-script-fails-syntax-check
due to "extglob" in bash. Thanks To Trent W. Buck for the
report. (Closes: #699410)
* checks/testsuite.pm:
+ [NT] Add "allow-stderr" as known autopkgtest "restriction".
Thanks to Jérémy Bobbio for the report and the initial
patch. (Closes: #721179)
* checks/version-substvars{.desc,.pm}:
+ [NT] Mention that version-substvar-for-external-package
can happen if the package name used in the relation has
a typo. Thanks to Joachim Reichel for reporting this.
(Closes: #708576)
+ [NT] Ignore ":any" qualifiers in dependencies. Thanks to
Scott Ritchie for the report. (Closes: #658320)
.
* commands/info:
+ [NT] New file (replacing lintian-info).
+ [NT] Emit a deprecation warning for --include-dir
and --[no-]user-dirs when they are not the first
arguments and called as lintian-info.
.
* doc/README.in:
+ [NT] Replaced by top-level README.
.
* data/common/source-fields:
+ [NT] Allow the "Dgit" field in source packages. Thanks
to Ian Jackson for the report. (Closes: #721205)
* data/fields/perl-provides:
+ [NT] Refresh against perl 5.18.
* data/rules/policy-rules:
+ [BR] New file.
* data/scripts/{,versioned-}interpreters:
+ [NT] Apply patch from Gunnar Wolf to update which package
is providing "rackup". (Closes: #721268)
* data/scripts/interpreters:
+ [NT] Use "python:any | python-minimal:any" as dependency
for python scripts. This fixes a false-positive for
python-script-but-no-python-dep when dh_python2 generates
a dependency of "python:any". Thanks to Francois Gouget
for the report. (Closes: #711988)
* data/scripts/versioned-interpreters:
+ [NT] Add python 2.7 and remove 2.4, 2.5 and 2.6. Also
add ":any" the dependency template like with the
unversioned interpreters (see above).
.
* debian/docs:
+ [NT] Install "README" instead "doc/README"
* debian/lintian.install:
+ [NT] Install dplint and commands/*.
* debian/lintian.links:
+ [NT] New file.
* debian/rules:
+ [NT] Add code for substituting some placeholder values in
dplint and lintian.
+ [NT] Invoke dh_link.
+ [NT] Remove code for auto-generating README from README.in
* debian/tests/control:
+ [NT] Remove reference to testsuite-legacy.
* debian/tests/testsuite-legacy:
+ [NT] Removed; no longer useful.
.
* doc/README.developers:
+ [NT] Update the section on running Lintian from a source
tree to mention that setting LINTIAN_ROOT is no longer
needed.
+ [NT] Remove references to the legacy testsuite.
* doc/tutorial/Lintian/Tutorial/TestSuite.pod:
+ [NT] Remove references to the legacy testsuite.
.
* frontend/dplint:
+ [NT] New file.
* frontend/lintian:
+ [NT] Automatically determine the LINTIAN_ROOT when run from
the extracted source dir.
+ [NT] Deprecate --root and LINTIAN_ROOT. These are largely
obsolete as Lintian can now automatically determine the
proper LINTIAN_ROOT. To avoid surprises, lintian will
now exit with an error if requested to use a different
LINTIAN_ROOT than the one lintian expected to use.
+ [NT] Emit a deprecation warning for --include-dir
and --[no-]user-dirs when they are not the first
arguments and called as lintian-info.
* frontend/lintian-info:
+ [NT] Replace with symlink to dplint. The implementation of
lintian-info is now handled by commands/info.
.
* lib/Lintian/Collect/Package.pm:
+ [NT] If the index file does not include a "root" directory,
then create a fake one.
* lib/Lintian/Data.pm:
+ [NT] Make a special case to allow "original-maintainer" by
default in all non-"Debian" profiles. Thanks to Nick
Black for the report. (Closes: #697565)
* lib/Lintian/Relation.pm:
+ [NT] Allow "pkg" to imply "pkg:any", but without permitting
"pkg:any" to imply "pkg".
.
* private/runtests:
+ [NT] Remove file; merge the relevant parts into t/runtests.
.
* README:
+ [NT] New file for basic information about Lintian and
where to find more information.
.
* reporting/harness:
+ [NT] Fix bug that caused harness to not remove old log
entries on incremental runs.
+ [NT] Clear LINTIAN_ROOT environment variable if set.
* reporting/html_reports:
+ [NT] Copy (rather than symlink) the lintian.log to the
generated website.
.
* t/runtests:
+ [NT] Assume dpkg (>= 1.16.1) is present.
+ [NT] Work around bug in Perl (#723805) when using "glob"
within threads. Thanks to Brian "hugmeir" Fraser for
finding the underlying cause.
* t/tests/binaries-spelling/{debian/basic.c,tags}:
+ [AB] Add subtest which verifies that the additional exception list
(teh vs tEh) for spelling-error-in-binary works.
* t/tests/legacy-debug/debian/debian/control:
+ [NT] Mark some packages "arch:any" to avoid test failures
on kfreebsd-amd64. (Closes: #688524)
.
* testset/*:
+ [NT] All tests moved to t/tests/legacy-* and the test
runner removed.
.
* vendors/ubuntu/main/data/{common,fields}/*:
+ [NT] Retire now redundant files.
.
lintian (2.5.17) unstable; urgency=low
.
* Summary of tag changes:
+ Added:
- apache2-unparsable-dependency
- deprecated-configure-filename
- doc-base-abstract-field-separator-extra-whitespace
- doc-base-abstract-might-contain-extra-leading-whitespace
- doc-base-file-separator-extra-whitespace
- md5sums-lists-nonexistent-file
- non-multi-arch-lib-dir
- pkg-config-multi-arch-wrong-dir
+ Removed:
- apache2-unparseable-dependency
- doc-base-abstract-field-separator-extra-whitespaces
- doc-base-abstract-might-contain-extra-leading-whitespaces
- doc-base-file-separator-extra-whitespaces
- md5sums-lists-nonexisting-file
.
* checks/apache2.{desc,pm}:
+ [JW,NT] Rename a tag for consistent spelling of
"unparsable" in tag names. The tag has no known
overrides.
* checks/automake.{desc,pm}:
+ [NT] Apply patch from Gautier Minster to detect
usage of configure.in with automake. Thanks to
Paul Wise for the report. (Closes: #708482)
* checks/cruft.pm:
+ [NT] Avoid given/when which was demoted to an
experimental feature. (Closes: #720835)
* checks/files.{desc,pm}:
+ [BR] Add check for architecture pkg-config files using
multi-arch paths but being installed in a non-multi-arch
location. Thanks to Ivo De Decker for the report.
(Closes: #674469)
+ [BR] Add check for using the old bi-arch directories
(/usr/lib64) instead of multi-arch dirs. Thanks to
Kurt Roeckx for the report. (Closes: #528975)
+ [BR] Remove "emul/" as a recognised top-level directory.
* checks/md5sums.{desc,pm}:
+ [JW,NT] Rename a tag due to a typo in the tag name.
The tag has no known overrides.
* checks/menus.{desc,pm}:
+ [JW,NT] Rename tags due to a typo in their tag name.
These tags have no known overrides.
* checks/source-copyright.pm:
+ [NT] Avoid accidental use of an experimental feature.
.
* data/{binaries => common}/multiarch-dirs:
+ [BR] Moved multiarch-dirs from binaries to common, since
it is used from multiple checks.
.
* debian/control:
+ [NT] Add Build-Depends on aspell, aspell-en and
libtest-spelling-perl.
.
* lib/Lintian/Tag/TextUtil.pm:
+ [NT] Prevent very long URLs from being split into two
lines. Thanks to Jari Aalto for the report.
(Closes: #719769)
* lib/Lintian/Util.pm:
+ [NT] Prefer paths without leading slash in the
documentation for normalize_pkg_path. Thanks to
Kevin Ryde for spotting this inconsistency.
+ [NT] The first argument argument of normalize_pkg_path
is now unconditionally normalized. Furthermore, allow
the function to be called with only one argument like
Cwd::realpath.
.
* t/*:
+ [NT] Adapt several tests to work under perl 5.18.
.
lintian (2.5.16) unstable; urgency=low
.
* Summary of tag changes:
+ Added:
- changelog-is-dh_make-template
- copyright-should-refer-to-common-license-file-for-apache-2
- debian-control-repeats-field-name-in-value
- info-document-missing-image-file
- license-problem-font-adobe-copyrighted-fragment
- license-problem-font-adobe-copyrighted-fragment-no-credit
- missing-dependency-on-libstdc++
- quilt-patch-using-template-description
+ Removed:
- dh_pycentral-is-obsolete
- dh_python-is-obsolete
- font-adobe-copyrighted-fragment
- font-adobe-copyrighted-fragment-no-credit
- init.d-script-call-internal-API
- missing-dependency-on-python-central
.
* checks/apache2.pm:
+ [NT] Fix F-P apache2-deprecated-auth-config for
"AllowOverride". Thanks to Jean-Michel Vourgère
for the report and an initial patch.
(Closes: #717621)
* checks/binaries.pm:
+ [NT] Apply patch from Michael Stapelberg to exempt
golang-go binaries from statically-linked-binary
tag. (Closes: #718404)
+ [NT] Permit shared libraries to not link against
libc as long as they link against libstdc++. This
fixes a lot of false positive warnings for some c++
libraries when the linker (with --as-needed)
determines that the libc link is superfluous.
Thanks to Maximiliano Curia for the report.
(This is a partial fix for #719806)
+ [NT] Add experimental tag for missing dependency
on libstdc++.
* checks/changelog-file.{desc,pm}:
+ [BR] Add check for dh-make reminder to insert the
bug number of the ITP bug. (Closes: #690273)
* checks/control-file.{desc,pm}:
+ [BR] Add check for field name being duplicated in
the value of the field. (Closes: #711069)
* checks/copyright-file.{desc,pm}:
+ [BR] Extend check for "reference to compressed
common-license" to include all current
common-licenses.
+ [BR] Add check for use of Apache-2.0 in d/copyright
without references common-licenses.
(Closes: #713012)
* checks/cruft.pm:
+ [NT] Skip d/README.Debian and d/README.source when
checking for non-free licenses. Mentions here are
presumably just false-positives. Thanks to
Marcelo Jorge Vieira for the report and the initial
patch. (Closes: #718575)
* checks/deb-format.pm:
+ [NT] Apply patch from Guillem Jover to fix a wrong
tag being emitted on lzma compressed udebs.
(Closes: #718337)
* checks/debhelper.{desc,pm}:
+ [NT] Remove tag for dh_pycentral and dh_python being
obsolete. Thanks to Luca Falavigna for the report.
(Closes: #720337)
+ [BR] Fix false-negative in the brace expansion check
when the comma was next to one of the braces.
(Closes: #708381)
* checks/files.{desc,pm}:
+ [NT] Remove tag for missing dependency on
python-central. Thanks to Luca Falavigna for the
report. (Closes: #718690)
+ [BR] Rename font-adobe-copyrighted-fragment tags.
(Closes: #718820)
+ [NT] Fix false positive warning about embedded
feedparser for python3-feedparser. Thanks to
Etienne Millon for the report. (Closes: #719163)
* checks/infofiles.{desc,pm}:
+ [NT] Apply patches from Kevin Ryde to find info files
references non-existent images. (Closes: #719450)
* checks/init.d.{desc,pm}:
+ [NT] Revert init.d-script-call-internal-API for now.
Refer to #710559 for more information.
* checks/patch-systems.{desc,pm}:
+ [BR] Add tag for DEP-3 template descriptions.
(Closes: #717633)
* checks/phppear.{desc,pm}:
+ [NT] Apply patch from Mathieu Parent to fix false
positive missing-pkg-php-tools-addon. Thanks to
Thijs Kinkhorst for the report. (Closes: #718167)
+ [NT] Apply patch form Mathieu Parent to reduce the
severity of a "composer package" not using
pkg-php-tools to wishlist. Thanks to Thijs
Kinkhorst for the report. (Closes: #718862)
+ [NT] Apply patch from Vincent Bernat to downgrade
severity of not using phppear substvars for
description and synopsis plus explain that they
should not be used blindly. Thanks to Mathieu
Parent for the review of the patch.
(Closes: #719788)
* checks/po-debconf.{desc,pm}:
+ [NT] Fix false-positive translated-default-field for
fields preceded by a "true" Deb822 comment. Thanks
to Ron Lee for the report. (Closes: #637881)
* checks/scripts.pm:
+ [NT] Stop emitting package-uses-local-diversion for
calls to dpkg-divert without --package as dpkg 1.16.0
(Wheezy) handles this case correctly. Thanks to
Raphaël Hertzog for the report. (Closes: #679132)
+ [NT] Apply patch from Vincent Cheng to fix warning
for executable jar files. Thanks to Matthew Johnson
for the report. (Closes: #539315)
* checks/systemd.pm:
+ [NT] Apply patch from Stig Sandbeck Mathisen to allow
systemd files being symlinks to /dev/null.
(Closes: #718563)
.
* debian/changelog:
+ [NT] Correct some older tag summaries to include some
missing tags in the entry for 2.5.11 and 2.5.12.
* debian/copyright:
+ [NT] Add Bastien ROUCARIÈS to maintainers (as BR).
.
* frontend/lintian:
+ [NT] Move some handling of overrides to Lintian::Tags.
.
* lib/Lintian/Processable/Package.pm:
+ [NT] Refuse to process .dsc files that are missing the
Source field. This prevents some warnings about using
undefined values. Thanks to Guillem Jover for the
report. (Closes: #718351)
* lib/Lintian/Tags.pm:
+ [NT] Take over some handling of overrides from the
frontend.
* lib/Lintian/Util.pm:
+ [NT] Fix problem in normalize_pkg_path, where "."-entries
were not properly filtered out.
.
* profiles/debian/ftp-master-auto-reject.profile:
+ [NT] Refresh with new tags. Thanks to Gregor Herrmann
for the reminder.
.
lintian (2.5.15) unstable; urgency=low
.
"use less qw(memory);"
.
* Summary of tag changes:
+ Added:
- composer-package-without-pkg-php-tools-builddep
- init-script-is-not-a-file
- init.d-script-does-not-source-init-functions
- maintainer-script-calls-systemctl
- manpage-named-after-build-path
- missing-pkg-php-tools-addon
- missing-pkg-php-tools-buildsystem
- pear-channel-without-pkg-php-tools-builddep
- pear-package-but-missing-dependency
- pear-package-feature-requires-newer-pkg-php-tools
- pear-package-not-using-substvar
- pear-package-without-pkg-php-tools-builddep
- pecl-package-requires-build-dependency
- service-file-is-not-a-file
- systemd-no-service-for-init-script
- systemd-service-file-outside-lib
- systemd-service-file-refers-to-obsolete-target
- systemd-tmpfiles.d-outside-usr-lib
.
* checks/*.pm:
+ [NT] Add final return to all subs in checks and ensure
that the "run" sub complies with Lintian's own
recommendation.
* checks/binary.pm:
+ [NT] Apply patch from Bastien Roucariès to fix false-
negatives for debug files in usr/lib/debug/.build-id.
(Closes: #714191)
+ [NT] Apply patch from Bastien Roucariès to fix false-
positive debug-file-with-no-debug-symbols for files
using compressed debug sections.
* checks/fields.pm:
+ [NT] Apply patch from Niko Tyni to fix false-positive
package-superseded-by-perl for packages with epochs.
(Closes: #710919)
* checks/files.pm:
+ [NT] Fix some false-negative extra-license-file.
Thanks to Helmut Grohne for the report and the advices.
(Closes: #701177)
* checks/manpages.{desc,pm}:
+ [NT] Apply patch from Bastien Roucariès to test for
manpages named after their build path.
(Closes: #713884)
+ [NT] Skip some checks on empty manpages.
(Closes: #700502)
* checks/phppear.{desc,pm}:
+ [NT] New check based on patches from Mathieu Parent.
(Closes: #708551)
* checks/source-copyright.pm:
+ [NT] Some tags now refer to the line number of the field
with an issue instead of the line number of the paragraph.
* checks/systemd.{desc,pm}:
+ [NT] New check for systemd related files. Thanks to
Michael Stapelberg for providing the check and the
tests. (Closes: #704197)
.
* collection/copyright-file:
+ [NT] Avoid creating an empty copyright file when it is
not needed.
* collection/unpacked:
+ [NT] Skip signature checking of source packages.
(Closes: #707534)
.
* data/binary/embedded-libs:
+ [NT] Rename libgd2 to libgd. (Closes: #708367)
* data/fields/virtual-packages:
+ [NT] Refresh. Thanks to Laurent Bigonville for the
reminder. (Closes: #712641)
* data/files/{fonts,locale-codes}:
+ [NT] Refresh.
* data/menu-format/add-categories:
+ [NT] Apply patch from Bastien Roucariès to include newer
categories. Thanks to Yves-Alexis Perez for the report.
(Closes: #712932)
* data/output/manual-references:
+ [NT] Refresh.
* data/scripts/interpreters:
+ [NT] Apply patch from Bastien Roucariès to include gjs.
Thanks to Andreas Henriksson for the report.
(Closes: #712607)
.
* debian/control:
+ [NT] Add Build-Depends on pkg-php-tools for a new test.
* debian/dirs:
+ [NT] Remove /var/lib/lintian, we no longer use it.
* debian/docs:
+ [NT] Add auto-generated API documentation.
* debian/lintian.examples:
+ [NT] New file to install examples. (Closes: #707906)
* debian/rules:
+ [NT] Generate API documentation during build.
+ [NT] Call dh_installexamples.
.
* doc/examples/*:
+ [NT] New example files.
* doc/lintian.xml:
+ [NT] Add small example vendor profile to the user
manual.
.
* frontend/lintian:
+ [NT] Add information about memory usage with -ddd if
Devel::Size is available. A more detailed breakdown
of the memory usage with -dddd.
.
* lib/Lintian/Collect/Package.pm:
+ [NT] Share some string values in the file_info and in
the (X_)index methods. This reduces memory usage a bit.
* lib/Lintian/Collect/Source.pm:
+ [NT] "binaries" and "binary_field" now only exposes data
about entries in d/control with a valid package name.
+ [NT] Document that "binaries" return an unorderd list.
+ [NT] relation and relation_noarch now recognises
"Build-Depends-Arch".
* lib/Lintian/Path.pm:
+ [NT] Fix bug in the overloaded qr// operator.
* lib/Lintian/ProcessablePool.pm:
+ [NT] Fix a bug that could cause .changes files to be
silently skipped. This only occurred if a related package
was passed on the command line before the .changes file.
Thanks to Salvo Tomaselli for reporting the bug.
(Closes: #714437)
* lib/Lintian/Relation.pm:
+ [NT] Apply some memory optimisations to some common cases.
* lib/Lintian/Tags.pm:
+ [NT] Use croak instead of die when a check emits an
unknown tag. This gives the check writer a better chance
of finding where the problem occurred.
* lib/Lintian/Util.pm:
+ [NT] Have parse_dpkg_control and visit_dpkg_control
give a more detailed line number information about
paragraphs.
.
* reporting/harness:
+ [NT] Clear some variables before running Lintian in the
hope it will reduce the memory pressure on "long runs".
+ [NT] Remove support for "$LINTIAN_GPG_CHECK" config
variable. Lintian no longer checks any signatures.
.
lintian (2.5.14) unstable; urgency=low
.
* Summary of tag changes:
+ Removed:
- upstream-version-not-numeric
.
* checks/*:
+ [NT] Rename all checks to include the extension ".pm".
(Closes: #710405)
+ [JW] Fix typos in several files.
* checks/binaries.pm:
+ [NT] Also check for the presence of "mcount" to detect
whether a binary was compiled with profiling.
(Closes: #712124)
+ [NT] Ignore "teH" when checking for spelling mistakes in
ELF binaries. Thanks to Ryan Kavanagh for the report.
(Closes: #711207)
* checks/cruft.pm:
+ [NT] Revise a few tests that relied on file(1) on text files.
+ [NT] Apply patches from Bastien Roucariès to fix some false
positives in the GDFL related checks. (Closes: #711119)
+ [NT] Show the full path with source-contains-unsafe-symlink
rather than just the "basename".
* checks/fields.{desc,pm}:
+ [NT] Fix typo, thanks to Adrien Cunin.
+ [NT] Retire upstream-version-not-numeric which can no longer
be emitted. Versions that would previously trigger this tag
will now trigger bad-version-number instead.
+ [NT] Properly quote package names used in regular expressions.
Thanks to Mattias Ellert for the report. (Closes: #714427)
* checks/menus.pm:
+ [NT] Fix a bug in checking for symlinks that could possibly
make lintian follow an unsafe symlink. (CVE-2013-1429)
.
* coll/*:
+ [NT] Set "Auto-Remove: yes" on several collections to
reduce the "inode pressure" on lintian.d.o.
+ [NT] Reduce the number of inodes used by removing or not
creating some empty files and directories.
* coll/debfiles:
+ [NT] Remove test of the presence of unpacked.
* coll/file-info{,.desc}:
+ [NT] Disable "ascii" test in file(1). For some packages this
may greatly reduce the overhead of running the file-info
collection.
* coll/hardening-info:
+ [NT] Skip files in usr/lib/debug/.
.
* data/binaries/embedded-libs:
+ [RG] Check for embedded copies of libraw. (Closes: #711090)
* data/fields/obsolete-packages:
+ [NT] Add texi2html. Thanks to Ryan Kavanagh for the report.
(Closes: #710466)
* data/scripts/interpreters:
+ [NT] Add plackup (libplack-perl) as a known interpreter. Thanks
to Robert James Clay for the report. (Closes: #712405)
.
* doc/{lintian.xml,README.in}:
+ [JW] Fix typos.
.
* lib/Lintian/CheckScript.pm:
+ [NT] Prefer loading checks with ".pm", but fall back to loading
checks without the extension (with a deprecation warning).
* lib/Lintian/Collect/Package.pm:
+ [NT] sorted_index (etc.) now returns L::Path objects rather than
just file names.
* lib/Lintian/{Path,Util}.pm:
+ [NT] Remove deprecated methods.
* lib/Lintian/Path.pm:
+ [NT] Overload some operators.
.
* man/lintian.pod.in:
+ [JW] Fix typos.
.
* reporting/config:
+ [NT] Replace /org with /srv.
* reporting/harness:
+ [NT] Fix bug where harness might schedule the same group
multiple times. (Closes: #710380)
.
* t/runtests:
+ [NT] Include a summary of all skipped and failed tests.
.
lintian (2.5.13) unstable; urgency=low
.
Upload to unstable.
.
* Summary of tag changes:
+ Added:
- conffile-is-not-in-package
- debconf-translation-using-general-list
- dh_pysupport-is-obsolete
- init.d-script-call-internal-API
+ Removed:
- debhelper-maintscript-needs-versioned-build-depends
- debhelper-script-needs-versioned-build-depends
- missing-pre-dependency-on-multiarch-support
.
* checks/*:
+ [NT] Use Lintian::Path objects as arguments to unpacked
and control where these objects are available.
* checks/binaries:
+ [RA] Do not complain about kernel modules with no shared
library dependency information. Patch from Guillem Jover.
(Closes: #706242)
+ [NT] Demote the certainty of hardening-no-fortify-functions
to "wild-guess". (Closes: #709415)
* checks/changes:
+ [NT] Recognise "<dist>-backports-sloppy" as a valid
distribution. Thanks to Romain Francoise for the
report and the patch. (Closes: #705170)
* checks/conffiles:
+ [NT] Strip whitespace from conffiles similar to how dpkg
does it.
+ [NT] When emitting duplicate-conffile, avoid repeating
other tags related to that conffile. The exception to
this is relative-conffile where the original file might
not have triggered that tag.
+ [NT] Test that all paths listed in the "conffiles" control
file is actually in the package being tested.
* checks/cruft{,.desc}:
+ [JW] Correct the name of the architecture listed in
description of the tag outdated-autotools-helper-file.
(Closes: #706166)
+ [NT] Flag all absolute symlinks in source packages as
"unsafe". (Closes: #697164)
+ [NT] Fix false-positive source-contains-unsafe-symlink
for symlinks ascending one or more levels without escaping
the package root. Thanks to Michael Schutte for the
report and the patch. (Closes: #707742)
+ [NT] Add a series of patches from Bastien Roucariès to
reduce the number of false positives and negatives in the
GDFL related checks. (Closes: #708957, #708881, #709379,
#709886)
* checks/debhelper{,.desc}:
+ [NT] Retire some tags that are no longer relevant in the
Jessie development cycle.
+ [NT] Apply patch from Luca Falavigna to detect uses of the
deprecated tool, dh_pysupport. (Closes: #709615)
* checks/description:
+ [NT] Skip extended-description-is-probably-too-short
for -dbg packages. Thanks to Paul Wise for the suggestion.
(Closes: #705441)
* checks/fields.desc:
+ [NT] Clarify that the "canonical URI" for Vcs fields is
based on an announcement from the Alioth admins. Thanks
to Torquil Sørensen for the report. (Closes: #705835)
+ [NT] Clarify in the tag description of some tags related
to "Vcs-*" fields that the tags are based on a data list
(and is not a result of a HTTP request while checking the
package).
* checks/files{,.desc}:
+ [JW,NT] Drop missing-pre-dependency-on-multiarch-support
now that multiarch-support is in stable. (Closes: #709121)
+ [JW] Fix typo in a tag description. (Closes: #709455)
+ [NT] Change the "ancient-file" cut-off date to 1975 from
1984. Thanks to Ole Streicher and Ansgar Burchardt for the
report. (Closes: #710086)
* checks/group-checks.desc:
+ [NT] Add missing semi-colon in tag description. Thanks to
Andrey Rahmatullin for the report. (Closes: #706827)
* checks/init.d{,.desc}:
+ [NT] Add missing import of utility function that could cause
Lintian to crash in some cases.
+ [NT] Add check for uses of /lib/init in maintainer scripts.
Thanks to Josh Triplett for the report and to Bastien
Roucariès for the patch. (Closes: #670092)
* checks/menu-format:
+ [NT] Fix use of uninitialized variable when menu file uses a
section of "/". (Closes: #708755)
* checks/po-debconf{,.desc}:
+ [NT] Remove tests for commands that are provided by
Lintian's dependencies.
+ [RA] Add new check for a Language-Team field in a translation
pointing to the debian-i18n mailing list. Based on work by
victory. (Closes: #705197)
* checks/rules:
+ [NT] Remove check for "dpkg-dev (>= 1.16.1~)" build-dependency,
since this is trivially satisfied in Wheezy and Jessie.
.
* collection/*-helper:
+ [NT] Move all collection helpers to helpers/coll.
* collection/debfiles:
+ [NT] Replace makeshift "is_ancestor_of" check with the
one from L::Util.
* collection/java-info:
+ [NT] Update a regex to cope with file(1) now calling JAR files
for "Java Jar file" rather than "Zip archive".
(Closes: #707400)
.
* data/changes-file/known-dists:
+ [NT] Add jessie and remove lenny.
* data/debhelper/dh_{addons,commands}-manual:
+ [NT] Remove entries/versions that are no longer relevant.
* data/fields/perl-provides:
+ [NT] Refresh against sid. (Closes: #708178)
* data/spelling/corrections:
+ [NT] Add correction for unnecessarily. Thanks to Guillem
Jover for the suggestion. (Closes: #706241)
.
* debian/control:
+ [NT] Remove irrelevant (versioned) dependencies that are now
trivially satisfied in stable.
+ [NT] Recommend libautodie-perl (>= 2.18) and libperlio-gzip-perl
as these can greatly effect performance of Lintian.
* debian/lintian.install:
+ [NT] Install "helpers" as /usr/share/lintian/helpers
* debian/{postinst,prerm}:
+ [NT] Remove unused maintainer scripts now that stable's
libc-bin provides a C.UTF-8.
* debian/triggers:
+ [NT] Remove unused trigger now that stable's libc-bin
provides a C.UTF-8.
.
* doc/tutorial/**/*.pod:
+ [NT] Fix a number of spelling mistakes in the POD.
* doc/tutorial/Lintian/Tutorial/WritingChecks.pod:
+ [NT] Add a section about how to avoid some common ways
of introducing security issues.
.
* frontend/lintian:
+ [NT] Ignore LINTIAN_ROOT/locale and /var/lib/lintian/locale.
+ [NT] Export LINTIAN_INCLUDE_DIRS and LINTIAN_HELPERS_DIR to
subprocesses. These are ":"-separated lists of dirs used by
Lintian. The first being a list of raw include dirs and the
second being a list of helpers dirs in these include dirs.
+ [NT] Fix a bug where the exit code from lintian would
sometimes be an undocumented value (>= 3).
.
* helpers/coll:
+ [NT] New directory containing some helpers that used to be in
directly collection.
.
* lib/*:
+ [NT] Fix a number of spelling mistakes in the POD.
* lib/Lintian/Collect/{Package,Binary}.pm:
+ [NT] Accept Lintian::Path objects to unpacked and control.
* lib/Lintian/Collect/Source.pm:
+ [NT] Provide a "source" specific is_non_free method that reads
the "Section"-field from d/control instead of the .dsc. This
fixes false-positives "problematic licenses" for non-free
packages. Thanks to Bastien Roucariès for the report.
(Closes: #709041)
* lib/Lintian/Path.pm:
+ [NT] Rename link_resolved to link_normalized.
* lib/Lintian/Unpacker.pm:
+ [NT] On platform that support it, change the "name" of the
process running the collection. This makes it easier to
see what collections are currently being run (like in the
versions prior to 2.5.12). For platforms, where it is
not possible to change the name of a running process, the
unpack jobs will simply be named "lintian" like its parent.
* lib/Lintian/Util.pm:
+ [NT] Fix a race condition in touch_file.
+ [NT] Add sanity check in perm2oct for bad permission
strings and throw errors when they are seen (instead
of returning 0).
+ [NT] Require that the input file is present for
read_dpkg_control and get_deb_control.
+ [NT] In copy_dir, pass --reflink=auto to cp.
+ [NT] Replace resolve_pkg_path with to normalize_pkg_path.
The latter has slightly different return values in some
cases.
+ [NT] Avoid the LOCPATH dance to find the path to an UTF-8
locale now that stable's libc-bin provides C.UTF-8 for us.
+ [NT] Add new function, locate_helper_tool, to find helper
tools.
.
* private/refresh-perl-provides:
+ [NT] Apply patch from Niko Tyni to improve Lintian's
data file about Perl modules provided by perl-base.
.
* profiles/debian/extra-apache2.profile:
+ [NT] Removed, merged into debian/main.profile.
* profiles/debian/ftp-master-auto-reject.profile:
+ [NT] Include md5sums-mismatch and non-standard-toplevel-dir
as an overridable tag.
* profiles/debian/main.profile:
+ [NT] Include the apache2 check. Thanks to Arno Töll for
the report. (Closes: #708943)
.
* reporting/harness:
+ [NT] Stop exporting ENV variables that lintian no longer
cares about.
.
* vendors/ubuntu/main/data/changes-file/known-dists:
+ [NT] Add "saucy" as known Ubuntu distribution. Thanks to
Iain Lane for the report.
.
lintian (2.5.12) experimental; urgency=medium
.
* Summary of tag changes:
+ Added:
- ambiguous-paragraph-in-dep5-copyright
- binary-file-built-without-LFS-support
- debian-tests-control-is-not-a-regular-file
- debian-tests-control-uses-national-encoding
- debug-file-with-no-debug-symbols
- desktop-entry-lacks-keywords-entry
- dir-or-file-in-build-tree
- dir-or-file-in-etc-opt
- dir-or-file-in-home
- file-name-is-not-valid-UTF-8
- font-adobe-copyrighted-fragment-no-credit
- font-package-not-multi-arch-foreign
- illegal-runtime-test-name
- inconsistent-testsuite-field
- license-problem-gfdl-invariants
- license-problem-gfdl-invariants-empty
- menu-icon-uses-relative-path
- missing-runtime-test-file
- missing-runtime-tests-field
- package-contains-broken-symlink-wildcard
- package-contains-unsafe-symlink
- runtime-test-file-is-not-a-regular-file
- source-contains-unsafe-symlink
- syntax-error-in-debian-tests-control
- unknown-runtime-tests-feature
- unknown-runtime-tests-field
- unknown-runtime-tests-restriction
- unknown-testsuite
- vcs-field-bitrotted
- vcs-git-uses-invalid-user-uri
- zip-parse-error
+ Removed:
- unneeded-build-dep-on-quilt
.
* checks/*:
+ [NT] Avoid following unsafe symlinks. (CVE-2013-1429)
* checks/binaries{,.desc}:
+ [NT] Accept libx32 as a bi-arch directory.
+ [NT] Correct reference policy reference. Thanks to
Samuel Bronson for the correction. (Closes: #698234)
+ [NT] Detect debug ELF binaries with no debug symbols.
Thanks to Nelson A. de Oliveira for the report.
(Closes: #668437)
+ [NT] Check for binaries built without LFS. This can
only be checked for 32bit binaries as 64bit binaries
have LFS by definition. Thanks to Guillem Jover for
the report and patches. (Closes: #670963)
+ [NT] Apply patch from Samuel Bronson to bump severity
(but decrease certainty) of the "not linked against
libc" tags. (Closes: #698720)
* checks/copyright:
+ [NT] Apply patch from Evgeni Golov to avoid false
positive tag when the MPL-2.0 license appears in the
copyright file. (See #626454)
* checks/cruft{,.desc}:
+ [NT] Do not emit the license-problem-json-evil tag for
non-free packages.
+ [NT] Apply patch from Bastien Roucariès to catch GFDL
licenses with invariants (etc.). (Closes: #695967)
+ [NT] Correct description of an autotools tag. Thanks
to Alberto Garcia and Timo Juhani Lindfors for the
report and patch. (Closes: #703490)
+ [NT] Check for unsafe symlinks (outside common testsuite
paths).
* checks/debconf:
+ [NT] Fix several path traversal issues that could leak
information about the host system. (CVE-2013-1429)
* checks/debhelper{,.desc}:
+ [JW] Assume the proper python helpers are called if a
(Makefile) variable is used. (Closes: #659335)
+ [JW] Promote python-depends-but-no-python-helper and
python3-depends-but-no-python3-helper to non-experimental.
* checks/description:
+ [NT] Ignore "extended-description-is-probably-too-short"
for metapackages. Thanks to Axel Beckert for the
report.
* checks/duplicate-files.desc:
+ [NT] Demote severity of "duplicate-files" tag to pedantic.
* checks/fields{,.desc}:
+ [NT] Apply patch from Samuel Bronson to detect some
broken or poor Vcs URLs. Also thanks to James McCoy for
his report. (Closes: #652595)
+ [JW] Reduce severity of b-d-on-python-dev-with-no-arch-any
to minor.
+ [NT] Skip "depends-on-packaging-dev" for metapackages.
+ [NT] Apply patch from Gregor Herrmann to catch metacpan
homepage links with versions. (Closes: #700110)
+ [NT] Apply patch from Vasudev Kamath to detect fonts
packages without a Multi-Arch foreign (or allowed) field.
(Closes: #701061)
* checks/files{,.desc}:
+ [NT] Apply patch from Bastien Roucariès to catch paths
in (common) build dirs. (Closes: #678857)
+ [NT] Do not suggest the use of "virtual package" as a way
to suppress empty-binary-package. Lintian will still
accept it the phrase for now.
+ [NT] Accept libx32 as an bi-arch directory.
+ [NT] Ignore gzipped lintian overrides when checking whether
a package is empty.
+ [NT] Fix typo of Pre-Depends, thanks to Raúl Benencia for
spotting it. (Closes: #699452)
+ [NT] Add patch from Bastien Roucariès to check for another
adobe font license issues. (Closes: #705175)
+ [NT] Test for use of file names that are contain invalid
UTF-8 byte sequences. Thanks to Helmut Grohne for the
suggestion. (Closes: #704446)
* checks/init.d:
+ [NT] Fix regression where Lintian would not properly match
init.d passed to update-rc.d. Thanks to Michael Meskes for
reporting. (Closes: #698602)
+ [NT] Fix possible symlink traversal that could leak
information about the host system. (CVE-2013-1429)
* checks/java{,.desc}:
+ [NT] Report possibly broken jar files.
* checks/md5sums:
+ [NT] Fix path traversal issue that could leak information
about the host system.
* checks/menu-format{,.desc}:
+ [NT] Apply patch from Bastien Roucariès to detect missing
"Keywords" in desktop files. Thanks to Jeremy Bicha for
the report. (Closes: #693918)
+ [NT] Apply patch from Matthias Klumpp to add missing
"Science" category. (Closes: #697693)
+ [NT] Apply patch from Thomas Preud'homme to detect uses of
relative icons in menu files. (Closes: #697916)
+ [NT] Document why only XPM are allowed in the tag description
of menu-icon-not-in-xpm-format. (Closes: 591812)
* checks/menus:
+ [NT] Fix path traversal issue that could leak information
about the host system. (CVE-2013-1429)
* checks/patch-systems{,.desc}:
+ [NT] Retire unneeded-build-dep-on-quilt, it is only a pedantic
tag and apparently not too accurate. Thanks to Charles Plessy
and Frank Kuester for the reports. (Closes: #615516, #681061)
* checks/po-debconf:
+ [NT] Unconditionally set INTLTOOL_EXTRACT.
* checks/rules:
+ [NT] Remove ant1.7 as alternative to ant as ant1.7 has been
removed from Wheezy.
* checks/scripts:
+ [NT] Treat scripts in /usr/src/ like they were documentation.
* checks/shared-libs:
+ [NT] Special case gcc packages when looking for dev symlinks.
gcc stores its dev symlinks in some special directories.
+ [NT] Fix path traversal issue that could leak information
about the host system. (CVE-2013-1429)
* checks/source-copyright{,.desc}:
+ [JW,NT] Add a separate tag for ambiguous DEP-5 paragraphs,
where Lintian cannot reliably figure out what is intended.
Thanks to Julian Taylor for the report. (Closes: #652380)
+ [NT] Add paragraph line number to the "field typo" tag.
* checks/symlinks{,.desc}:
+ [NT] Warn about broken symlinks that contains a literal "*"
in their target. This is usually a sign that a wildcard did
not properly expand. Thanks to Bernd Zeimetz for the report.
(Closes: #683737)
+ [NT] Demote certainty of package-contains-broken-symlink to
wild-guess.
+ [NT] Check for unsafe symlinks in binary packages.
* checks/testsuite{,.desc}:
+ [NT] New check written by Nicolas Boulenguez to catch some
mistakes with the new autopkgtest tests.
.
* collection/*:
+ [NT] Avoid reading files outside the package root.
(CVE-2013-1429)
* collection/{changelog-file,debian-readme}:
+ [NT] Ignore files in usr/doc/<pkg>.
+ [NT] Skip collection if usr/share/doc/<pkg> is not contained
within the package root. (CVE-2013-1429)
* collection/hardening-info{,-helper,.desc}:
+ [NT] Whitelist "memset" and "memmove" as "always safe"
functions. Thanks to Sebastian Ramacher for the suggestion
and Roland Stigge for the report. (Closes: #685299)
+ [NT] Remove work around for #677530
* collection/index{,.desc}:
+ [NT] Fix missing trailing slash on dirnames and bump index
version accordingly. Thanks to Nicolas Boulenguez for
noticing.
* collection/java-info:
+ [NT] Gracefully handle broken Jar files. Thanks to Paul
Tagliamonte for the report. (Closes: #700543)
* collection/strings:
+ [NT] Fix a regression in filtering out "debug" ELF binaries.
.
* data/binaries/arch-regex:
+ [NT] Recognise x32 as an ELF32 binary.
* data/fields/obsolete-packages:
+ [NT] Apply patch from Guillem Jover to add fuse-utils as an
obsolete package. (Closes: #697534)
* data/files/locale-codes:
+ [NT] Refresh against sid data files.
* data/menu-format/add-categories:
+ [NT] Apply patch from Matthias Klumpp to add missing
subcategories.
* data/output/manual-references:
+ [NT] Refresh with Policy 3.9.4.
* data/scripts/interpreter:
+ [NT] Add cfagent as a known interpreter. Thanks to Andreas
Mundt for the suggestion. (Closes: #699670)
* data/scripts/versioned-interpreters:
+ [NT] Apply patch from Thijs Kinkhorst to add lua5.2 as a
versioned alternative to lua. (Closes: #698704)
* data/shared-libs/ldconfig-dirs:
+ [NT] Add libx32 and usr/libx32 used by some gcc x32 bi-arch
packages.
* data/spelling/corrections{,-case}:
+ [JW] Add correction for "privileges". (Closes: #700882)
+ [NT] Warn about incorrect case of "OpenStreetMap". Thanks
to Paul Wise for the patch.
.
* debian/control:
+ [NT] Bump dependency on hardening-includes to avoid having
to work around #677530.
+ [NT] Add XS-Testsuite for autopkgtest tests.
+ [NT] Add Build-Depends on libtest-perl-critic-perl.
+ [NT] Add (Build-)Depends on liblist-moreutils-perl and
libfile-basedir-perl.
+ [NT] Add versioned (Build)-Depends on perl | libautodie-perl.
* debian/lintian.install:
+ [NT] Install Test::Lintian in /usr/share/lintian/lib.
* debian/rules:
+ [NT] Include the new Tutorial pods in the "api-doc" target.
* debian/tests/{control,testsuite,testsuite-legacy}:
+ [NT] New file.
.
* doc/tutorial/Lintian/Tutorial{/WritingChecks}.pod:
+ [NT] Add POD tutorial on writing checks.
.
* frontend/lintian{,-info}:
+ [NT] Add --include-dir command line option. This can be used
to load additional Lintian checks, profiles, libraries or data.
(Closes: #359059)
* frontend/lintian:
+ [NT] Remove "make-shift" lab-query support now that
Lintian::Lab supports it.
+ [NT] Add new command line option "--[no-]user-dirs" to disable
loading from $HOME/.lintian{rc,/} and /etc/lintian{rc,/}.
+ [NT] Error out early if a check cannot be loaded.
+ [NT] Make --suppress-tags{,--from-file} do something when used
with --check-part and document that --tags causes the option
to be ignored.
+ [NT] Accept the magic token "{VENDOR}" as a part of the value
to --profile.
+ [NT] Add new command line option "--ignore-lintian-env" to make
lintian ignore all environment variables starting with LINTIAN_.
+ [NT] Add a new command line option --no-display-experimental
and --default-display-level. These options can be used to
override some display options from the config file.
(Closes: #703985)
+ [NT] Also search for the lintianrc file in XDG_CONFIG_{HOME,DIRS}.
The default paths are now ~/.config/lintian/lintianrc and
/etc/xdg/lintian/lintianrc. The previous lintianrc paths are
still accepted.
+ [NT] Stop looking for lintianrc files in the LINTIAN_ROOT.
+ [NT] Stop exporting LINTIAN_LAB to processes run by lintian.
+ [NT] Use of --root (or setting LINTIAN_ROOT) will now imply
the option --no-user-dirs by default.
.
* lib/*:
+ [NT] Use "parent" instead of the "base" pragma.
* lib/Lintian/Collect.pm:
+ [NT] Add "is_non_free" method to easily check of a given
package appears to be non-free.
* lib/Lintian/Collect/Binary.pm:
+ [NT] Re-instate the "TEXTREL" marker. This fixes a regression
where shared-libs compiled without pic was not reported.
Thanks to Dmitry Shachnev for the assistance in debugging this.
+ [NT] Recognise packages in section "metapackages" as a
metapackage. Thanks to Axel Beckert for the report.
(Closes: #698610)
* lib/Lintian/Collect/Package.pm:
+ [NT] Ensure the "root" entry of indices do not contain itself.
(Closes: #695866)
+ [NT] Add warning to unpacked and debfiles when they are given a
path with leading slash or dot-slash.
+ [NT] When a check requests access to a raw file (or dir) in the
package, ensure that the resulting path does not "escape" the
top level directory. This should preemptively guard against some
(but not all) traversal attempts.
* lib/Lintian/Path.pm:
+ [NT] Document that link_resolved is not sufficient to test the
"safeness" of a symlink.
* lib/Lintian/Command/Simple.pm:
+ [NT] Use constant time lookup access instead of linear scan with
"hashref" wait.
* lib/Lintian/Lab.pm:
+ [NT] Add lab_query method to handle lab-queries directly.
+ [NT] Fix bitrot of repair_lab and rename it to repair for
consistency.
* lib/Lintian/Lab{,/Manifest}.pm:
+ [NT] Add support for grouping of manifests.
* lib/Lintian/Lab/Manifest.pm:
+ [NT] Fix an error in visit_all when sufficient keys for an
exact look up was given.
* lib/Lintian/Processable.pm:
+ [NT] Fix issue where packages loaded from the lab indices would
sometimes get a wrong source-version.
* lib/Lintian/Relation/Version.pm:
+ [NT] Add and export "versions_comparator" that can be used for
sorting purposes.
* lib/Lintian/Tag/Info.pm:
+ [NT] Use "&" in the manpage ref URLs to generate proper HTML.
Thanks to Vasudev Kamath for reporting the issue.
+ [NT] Produce a more helpful error message when a tag has an
invalid severity or certainty. (Closes: #703978)
* lib/Lintian/Tags.pm:
+ [NT] Deal with parsing an ambiguous override a bit better. This
solves false-positive malformed-override, where Lintian misparsed
the tag name as a package name. (Closes: #699628)
* lib/Lintian/Util.pm:
+ [NT] Reject partially signed Deb822 files. Most Deb822 files
are not signed at all; but those that are should be completely
covered by a signature. (Closes: #696230)
+ [ADB] Fix a typo in the matching of expected delimiters for some
signed messages; thanks Samuel Bronson.
+ [NT] Add sub to check if a path is contained within a given dir.
+ [NT] Fix bug in resolve_pkg_path that made it resolve some links
incorrectly.
+ [NT] Document that resolve_pkg_path is not sufficient to test the
"safeness" of a symlink.
.
* man/lintian.pod.in:
+ [NT] Document that --pedantic is the same as "-L +=pedantic".
(Closes: #703989)
+ [NT] Fix typo of the "override" variable in the config example.
.
* private/refresh-locale-codes:
+ [JW,NT] Ignore the "zxx" locale code, which means "No
linguistic content". (Closes: #692548)
.
* reporting/config:
+ [JP] Remove unused $GRAPH_DIR configuration option.
* reporting/graphs/{statistics,tags}.gpi:
+ [JP] Tweak graph size to allow longer labels, and force font
family.
* reporting/harness:
+ [NT] Add --to-stdout option to emit log information to
stdout as well as the log files.
+ [NT] Always schedule packages in groups. Otherwise, binNMU'ed
binaries would not be tested together with their source
package (and architecture independent packages).
+ [NT] Schedule groups in chunks (default 512 per chunk).
This makes the Lintian processes shorter and makes memory
reclaimable sooner. (Closes: #695839)
+ [NT] Remove "make-shift" lab-query support now that
Lintian::Lab supports it.
* reporting/html_reports:
+ [NT] Update xrefs to include source version.
+ [NT] Generate a text file suitable for Apache's RewriteMap to
map source packages to the full report for that source.
Thanks to Joerg "Gannef" Jasper for the suggestion to use
RewriteMap. (Closes: #696960)
+ [JP] Fix version labels glitches.
+ [JP] Use global $GRAPHS_RANGE_DAYS.
+ [JP] Pass graph variables to index and tag templates.
* reporting/lintian.css:
+ [JP] Tweak graph alignment.
* reporting/templates/{packages,maintainer,tag}.tmpl:
+ [NT] Properly handle multiple versions of the same source and
add versioned anchors to them.
* reporting/templates/{index,tag}.tmpl:
+ [JP] Include history graphs in HTML templates.
* reporting/templates/tag.tmpl:
+ [NT] Fix "empty <ul>" tag when tag has no "extra" information.
Thanks to Vasudev Kamath for reporting the issue.
.
lintian (2.5.11) experimental; urgency=low
.
* Summary of tag changes:
+ Added:
- conffile-has-bad-file-type
- debug-package-for-multi-arch-same-pkg-not-coinstallable
- dm-upload-allowed-is-obsolete
- field-name-typo-in-dep5-copyright
- font-adobe-copyrighted-fragment
- license-problem-json-evil
- maintainer-script-has-unexpanded-debhelper-token
- shlibs-uses-obsolete-relation
- untranslatable-debconf-templates
- vcs-field-has-unexpected-spaces
- vcs-field-not-canonical
+ Removed:
- apparently-truncated-elf-binary
- data.tar.xz-member-without-dpkg-pre-depends
- debhelper-overrides-need-versioned-build-depends
- no-source-field
- preinst-uses-dpkg-maintscript-helper-without-predepends
.
* checks/*:
+ [NT] Remove assumption that lintian will chdir into the
the lab before calling the check.
+ [NT] Be better at avoiding false-positive spelling errors
for references to packages that also happen to be common
spelling mistake. Thanks to Paul Tagliamonte for the
report. (Closes: #687464)
* checks/binaries{,.desc}:
+ [NT] Merge apparently-truncated-elf-binary into
apparently-corrupted-elf-binary.
+ [NT] Remove some references to objdump in tag descriptions
as Lintian uses readelf.
+ [JW,NT] Update the "extract SONAME" shell snippet to properly
handle SONAMEs with uppercase letters.
+ [JW] Recognise any path with matching the GNU multi-arch
triplet as a "Multi-arch: same"-safe directory. Thanks to
Matthias Klose for the report. (Closes: #681410)
* checks/changelog-file:
+ [NT] Emit "missing changelog" for packages that are missing
their usr/share/doc/<pkg>/ dir and do not have a doc symlink.
Thanks to Faheem Mitha for the report. (Closes: #683224)
* checks/conffiles{,.desc}:
+ [NT] Remove leading slash on the filename when emitting
file-in-etc-rc.d-marked-as-conffile.
+ [NT] Add check for "non-file" conffiles. Thanks to Guillem
Jover for the report. (Closes: #690910)
* checks/control-file.desc:
+ [NT] Bump obsolete-relation-form-in-source to serious as these
forms are now "must not" instead of "should not".
* checks/copyright.desc:
+ [NT] Bump debian-copyright-file-uses-obsolete-national-encoding
to serious as copyright files must now be UTF-8 encoded.
* checks/cruft{,.desc}:
+ [NT] Detect MS-DOS executables as windows binaries.
+ [NT] Bump the version of config.{guess,sub} needed for
triggering the "outdated-autotools-helper-file" tag for arm64
support. Thanks to Paul Wise for the report and the
investigative work. (Closes: #690014)
+ [RA,NT] Extend the description of the tags {outdated,ancient}-
autotools-helper-file to mention that dh-autoreconf might be
helpful tool.
+ [NT] Apply patch from Bastien Roucariès to detect file licensed
under the "Good, not Evil"-JSON license. (Closes: #692616)
* checks/deb-format{,.desc}:
+ [NT] Retire data.tar.xz tag. (Closes: #680391)
* checks/debhelper{,.desc}:
+ [JW,NT] Consider missing versioned build-depends on
debhelper for compat 8 (or less) a pedantic issue.
(Closes: #681894)
+ [NT] Retire debhelper-overrides-need-versioned-build-depends.
* checks/fields{,.desc}:
+ [NT] Retire no-source-field since Lintian cannot emit it any
more due to dpkg-source refusing to extract such source
packages.
+ [NT] Add tag for using the obsolete DMUA field. Thanks to
Ansgar Burchardt for the report. (Closes: #688494)
+ [NT] Apply patches from Bernhard R. Link to check for
unintentional whitespace and use of non-canonical URIs in
Vcs-* fields. (Closes: #681769)
+ [NT] Fix false-positive caused by insignificant whitespace.
Thanks to Dima Kogan for the report. (Closes: #693589)
* checks/files:
+ [RG] Recognise smarty3 as smarty itself.
+ [NT] Consider "tasksel tasks" as a meta package.
(Closes: #691489)
+ [NT] Add patch from Bastien Roucariès to check for adobe font
license issues. (Closes: #694328)
* checks/group-checks{,.desc}:
+ [NT] Detect debug packages not co-installable with itself,
when it provides debug symbols for a Multi-Arch: same package.
Thanks to Carsten Hey for the report. (Closes: #678896)
* checks/infofiles:
+ [NT] Use L::Util's gzip decompressor rather than zcat.
* checks/init.d{,.desc}:
+ [NT] Move file-in-etc-rc.d-marked-as-conffile to conffiles
check.
+ [NT] Use L::Collect's conffile API instead of accessing the
"conffiles" control file directly.
* checks/java.desc:
+ [NT] Remove the "experimental" marker of the Java byte-code
check.
* checks/manpages{,.desc}:
+ [CW,NT] Manually do redirects and chdir rather than
invoking a shell when calling man and lexgrog.
+ [CW,NT] Be stricter with missing roff preprocessors by
setting MANROFFSEQ to the empty string when calling man.
+ [CW,NT] Pass -Tutf8 -Z to man to skip an unused part of
the groff pipeline. (Closes: #677874)
+ [CW,NT] Use the L::Util gzip decompressor to open gzipped
manpages.
* checks/menu-format{,.desc}:
+ [NT] Move a table of categories to a data file.
+ [NT] Update description of menu-icon-missing. Lintian is now
sometimes able to find the icon in dependencies (if they are
built from the same source). Thanks to Ryan Kavanagh for the
report and the suggested patch. (Closes: #683516)
* checks/md5sums:
+ [NT] Use L::Collect's conffile API instead of accessing the
"conffiles" control file directly.
* checks/po-debconf{,.desc}:
+ [NT] Check for untranslatable templates that should be
translatable. Thanks to David Prévot for the report and the
patch. (Closes: #686179)
* checks/scripts{,.desc}:
+ [NT] Retire check for dpkg-maintscript-helper in preinst.
(Closes: #685497)
+ [NT] Fix false positive "executable-not-elf-or-script" when
the file is an executable hardlink to a script.
+ [NT] Check maintainer scripts for unexpanded #DEBHELPER# tokens.
Thanks to Cyril "KiBi" Brulebois for the suggestion.
+ [NT] Fix false-positive for removal of device files as /dev/shm
is not a device. Thanks to Steve Langasek for the report and
Roger Leigh for the extra info. (Closes: #693442)
* checks/shared-libs{,.desc}:
+ [NT] Clarify the description of dev-pkg-without-shlib-symlink
to mention that the dev symlink is always expected in /usr.
+ [NT] Add missing "+" in libtool regex. Thanks to Leo 'costela'
Antunes for the report.
+ [RA,NT] Check for use of obsolete "<" and ">" in shlibs control
files. (Closes: #660655)
* checks/source-copyright{,.desc}:
+ [NT] Check for possible misspellings of known field
names. (Closes: #678639)
+ [NT] Fix typo of paragraph. Thanks to Logan Rosen for spotting
it. (Closes: #693013)
* checks/version-substvars{,.desc}:
+ [JW,NT] Extend version-substvar-for-external-package to
all relations. Previously it was only triggered for
strong dependency relations. (Closes: #658474)
.
* collection/deb-format.desc:
+ [NT] Remove unneeded changelog-file from "Needs-Info".
* collection/objdump-info{,-helper,.desc}:
+ [NT] Change the output format for the collection and
bump the version of the collection accordingly.
+ [NT] Apply patch from Peter Pentchev to ensure set{u,g}id
ELF binaries are properly processed, even when Lintian is
run as root. (Closes: #686352)
.
* data/binaries/embedded-libs:
+ [RG] Check for embedded copies of jsoncpp.
* data/fields/archive-sections:
+ [NT] Add new "tasks" section.
* data/menu-format/add-categories:
+ [NT] New file.
* data/output/ftp-master-{,non}fatal:
+ [NT] Removed, not used at run time.
* data/scripts/interpreters:
+ [NT] Add nodejs and Rscript as a known interpreter.
Thanks to Marcelo Jorge Vieira and Sébastien Boisvert
for the report. (Closes: #623265, #692232)
* data/spelling/corrections:
+ [NT,RG] Add more corrections.
+ [RG] Re-sort the corrections.
.
* debian/control:
+ [NT] Add (Build-)Depends on libtext-levenshtein-perl.
+ [NT] Use anonscm.d.o in the Vcs-* fields instead of
git.d.o.
* debian/lintian.install:
+ [NT] Install Lintian perl modules in /usr/share/perl5.
* debian/rules:
+ [NT] Add target to generate HTML API doc. Currently
this is only run manually.
.
* frontend/lintian:
+ [NT] Remove chdir calls for checks.
+ [NT] Retire depreciated command line and config options.
+ [NT] Refactor unpacking into Lintian::Unpacker.
+ [NT] Make parameter for --jobs optional. In its absence
Lintian will not limit the number of parallel jobs.
+ [JW,NT] During the unpack phase, emit the name of the
group currently being unpacked when --verbose is given.
(Closes: #677890)
+ [JW] Fix typo of Parallelization.
+ [NT] Fix regression where --suppress-tags{,-from-file}
was ignored if -C or -X was passed. Thanks to Thorsten
Glaser for reporting it. (Closes: #688320)
.
* lib/Lintian/Collect{,/Source}.pm:
+ [NT] Add optional parameter to field (and X_field)
methods that denotes the default value if a field is
missing. This avoid some boiler plate for callers
of the methods.
* lib/Lintian/Collect/Binary.pm:
+ [NT] Bump API for objdump method.
+ [NT] Add API for checking if a file is considered a
conffile.
* lib/Lintian/Collect/Package.pm:
+ [NT] Strip leading slash off files extracted from tar.
* lib/Lintian/Command.pm:
+ [NT] Work around a leak in IPC::Run (see #301774).
* lib/Lintian/Internal/FrontendUtil.pm:
+ [NT] Always use Dpkg::Vendor to determine the default
vendor. Previously dpkg-vendor would be preferred if
available.
* lib/Lintian/Lab/Entry.pm:
+ [NT] Use the L::Collect during creation instead of
manually reading the dsc for source packages.
* lib/Lintian/Profile.pm:
+ [NT] Add support for the new optional "Load-Checks"
field in profiles.
+ [NT] Ensure that the "lintian" check is always loaded
as these tags are not emitted by check modules. Also
enable the tags from the check by default.
* lib/Lintian/Tags.pm:
+ [NT] Be explicit about the reason when rejecting an
override. Thanks to Yves-Alexis Perez for the report.
(Closes: #673073)
* lib/Lintian/Unpacker.pm:
+ [NT] New file.
.
* man/lintian.pod.in:
+ [NT] Remove documentation about removed options.
.
* reporting/graphs/{statistics,tags}.gpi:
+ [JP] New file.
* reporting/html_reports:
+ [JP,NT] Generate graphs of the collected history data.
(Closes: #672273)
+ [NT] Make the mirror name configurable.
.
* vendors/ubuntu/main/data/changes-file/known-dists:
+ [NT] Add "raring" as known Ubuntu distribution. Thanks to
Dmitry Shachnev. (LP: #1068208)
Checksums-Sha1:
8353fe27f71877880c5d31fb49b573001abd73de 2758 lintian_2.5.38~bpo7+1.dsc
38b6f8d63f4ecfa15838f173f6bd793658947122 1872274 lintian_2.5.38~bpo7+1.tar.gz
3d21fcf1fe1fe086820a0c6fbe63f2806745f59f 1056102 lintian_2.5.38~bpo7+1_all.deb
Checksums-Sha256:
eb3e99e0fb619d4f9435a55407226698298c16c3d1e342a2ef1a54dc5bead13d 2758 lintian_2.5.38~bpo7+1.dsc
8839278c5c068b95e7d01f5ba49247f9d0a65d69e5a9d87dbf51dad09ea3c984 1872274 lintian_2.5.38~bpo7+1.tar.gz
bc6a308acfa832be39d69d1742fac0ea22eaf6e4e785458ecd29b46cf68b0028 1056102 lintian_2.5.38~bpo7+1_all.deb
Files:
1e9ded6c508473d01fd8e2e095a04329 2758 devel optional lintian_2.5.38~bpo7+1.dsc
e1314a931b189ae5d78a0e9f61610369 1872274 devel optional lintian_2.5.38~bpo7+1.tar.gz
b7e3bb3a9e319fbf98f3614f4efbcb64 1056102 devel optional lintian_2.5.38~bpo7+1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=EWWs
-----END PGP SIGNATURE-----
Reply to: