Package: dpkg-dev
Version: 1.18.1
Description lines that contains just "." with some trailing whitespace
end up as ".." in binary packages:
| $ dpkg-gencontrol -O
| dpkg-gencontrol: warning: missing information for output field Maintainer
| Package: dpkg
| Version: 1.18.1
| Architecture: all
| Installed-Size: 1
| Description: buggy
| ..
| ^^ dot + space
-- System Information:
Debian Release: stretch/sid
APT prefers unstable
APT policy: (990, 'unstable'), (500, 'experimental')
Architecture: i386 (x86_64)
Foreign Architectures: amd64
Kernel: Linux 4.0.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
Versions of packages dpkg-dev depends on:
ii base-files 9.2
ii binutils 2.25-8
ii bzip2 1.0.6-8
ii libdpkg-perl 1.18.1
ii make 4.0-8.1
ii patch 2.7.5-1
ii xz-utils 5.1.1alpha+20120614-2+b3
Versions of packages dpkg-dev recommends:
ii build-essential 11.7
ii clang-3.5 [c-compiler] 1:3.5.2-1
ii clang-3.6 [c-compiler] 1:3.6.1-1
ii fakeroot 1.20.2-1
ii gcc [c-compiler] 4:4.9.2-4
ii gcc-4.4 [c-compiler] 4.4.7-8
ii gcc-4.6 [c-compiler] 4.6.4-7
ii gcc-4.7 [c-compiler] 4.7.4-3
ii gcc-4.8 [c-compiler] 4.8.4-4
ii gcc-4.9 [c-compiler] 4.9.2-21
ii gcc-5 [c-compiler] 5.1.1-11
ii gnupg 1.4.19-3
ii gnupg2 2.0.28-1
ii gpgv 1.4.19-3
pn libalgorithm-merge-perl <none>
ii tcc [c-compiler] 0.9.27~git20140923.9d7fb33-3
--
Jakub Wilk
Information forwarded
to debian-bugs-dist@lists.debian.org, Dpkg Developers <debian-dpkg@lists.debian.org>: Bug#789580; Package dpkg-dev.
(Mon, 22 Jun 2015 10:42:09 GMT) (full text, mbox, link).
Acknowledgement sent
to Oscar San Antonio <oscar.sanantonio@atmira.com>:
Extra info received and forwarded to list. Copy sent to Dpkg Developers <debian-dpkg@lists.debian.org>.
(Mon, 22 Jun 2015 10:42:09 GMT) (full text, mbox, link).
From: Oscar San Antonio <oscar.sanantonio@atmira.com>
To: Jakub Wilk <jwilk@debian.org>, 789580@bugs.debian.org,
Debian Bug Tracking System <submit@bugs.debian.org>
Subject: unsubscribe
Date: Mon, 22 Jun 2015 12:28:52 +0200
-----Mensaje original-----
De: Jakub Wilk [mailto:jwilk@debian.org]
Enviado el: lunes, 22 de junio de 2015 12:23
Para: Debian Bug Tracking System
Asunto: Bug#789580: dpkg-gencontrol: transforms ". " to ".." in Description
Package: dpkg-dev
Version: 1.18.1
Description lines that contains just "." with some trailing whitespace end up as ".." in binary packages:
| $ dpkg-gencontrol -O
| dpkg-gencontrol: warning: missing information for output field
| Maintainer
| Package: dpkg
| Version: 1.18.1
| Architecture: all
| Installed-Size: 1
| Description: buggy
| ..
| ^^ dot + space
-- System Information:
Debian Release: stretch/sid
APT prefers unstable
APT policy: (990, 'unstable'), (500, 'experimental')
Architecture: i386 (x86_64)
Foreign Architectures: amd64
Kernel: Linux 4.0.0-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
Versions of packages dpkg-dev depends on:
ii base-files 9.2
ii binutils 2.25-8
ii bzip2 1.0.6-8
ii libdpkg-perl 1.18.1
ii make 4.0-8.1
ii patch 2.7.5-1
ii xz-utils 5.1.1alpha+20120614-2+b3
Versions of packages dpkg-dev recommends:
ii build-essential 11.7
ii clang-3.5 [c-compiler] 1:3.5.2-1
ii clang-3.6 [c-compiler] 1:3.6.1-1
ii fakeroot 1.20.2-1
ii gcc [c-compiler] 4:4.9.2-4
ii gcc-4.4 [c-compiler] 4.4.7-8
ii gcc-4.6 [c-compiler] 4.6.4-7
ii gcc-4.7 [c-compiler] 4.7.4-3
ii gcc-4.8 [c-compiler] 4.8.4-4
ii gcc-4.9 [c-compiler] 4.9.2-21
ii gcc-5 [c-compiler] 5.1.1-11
ii gnupg 1.4.19-3
ii gnupg2 2.0.28-1
ii gpgv 1.4.19-3
pn libalgorithm-merge-perl <none>
ii tcc [c-compiler] 0.9.27~git20140923.9d7fb33-3
--
Jakub Wilk
Information forwarded
to debian-bugs-dist@lists.debian.org, Dpkg Developers <debian-dpkg@lists.debian.org>: Bug#789580; Package dpkg-dev.
(Mon, 22 Jun 2015 11:06:03 GMT) (full text, mbox, link).
Acknowledgement sent
to Guillem Jover <guillem@debian.org>:
Extra info received and forwarded to list. Copy sent to Dpkg Developers <debian-dpkg@lists.debian.org>.
(Mon, 22 Jun 2015 11:06:04 GMT) (full text, mbox, link).
To: Jakub Wilk <jwilk@debian.org>, 789580@bugs.debian.org
Subject: Re: Bug#789580: dpkg-gencontrol: transforms ". " to ".." in
Description
Date: Mon, 22 Jun 2015 13:02:52 +0200
Hi!
On Mon, 2015-06-22 at 12:23:24 +0200, Jakub Wilk wrote:
> Package: dpkg-dev
> Version: 1.18.1
>
> Description lines that contains just "." with some trailing whitespace end
> up as ".." in binary packages:
> | $ dpkg-gencontrol -O
> | dpkg-gencontrol: warning: missing information for output field Maintainer
> | Package: dpkg
> | Version: 1.18.1
> | Architecture: all
> | Installed-Size: 1
> | Description: buggy
> | ..
> | ^^ dot + space
Indeed, nicely spotted. This is a regression from the recent security
fix on OpenPGP signatures. I've prepared a fix, and will queue it also
for stable updates.
Thanks,
Guillem
Message sent on
to Jakub Wilk <jwilk@debian.org>:
Bug#789580.
(Wed, 29 Jul 2015 00:36:04 GMT) (full text, mbox, link).
Control: tag 789580 pending
Hi!
Bug #789580 reported by you has been fixed in the Git repository. You can
see the changelog below, and you can check the diff of the fix at:
https://anonscm.debian.org/cgit/dpkg/dpkg.git/diff/?id=95d9b43
---
commit 95d9b43f8ad87bcfc180bd3cd9631c1f7ea83569
Author: Guillem Jover <guillem@debian.org>
Date: Mon Jun 22 13:15:03 2015 +0200
Dpkg::Control::HashCore: Remove trailing space before handling dot-separators
Regression introduced in commit aea291e3db1ac0414dcf005a0a607e78bdd77a5e.
Any spaces after the blank line dot-separator should be stripped before
handling the dot-separator, otherwise we get duplicated dots in field
contents.
Closes: #789580
Stable-Candidate: 1.16.x 1.17.x
diff --git a/debian/changelog b/debian/changelog
index 019fc26..db5dae3 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -13,6 +13,9 @@ dpkg (1.18.2) UNRELEASED; urgency=low
- Add new function changelog_parse_debian() in Dpkg::Changelog::Parse, and
use it in changelog_parse() instead of the external plugin parser when
the input format is “debian”. This significantly speeds up the parsing.
+ - Remove trailing space before handling blank line dot-separator in
+ Dpkg::Control::HashCore. Regression introduced in dpkg 1.18.0.
+ Reported by Jakub Wilk <jwilk@debian.org>. Closes: #789580
* Documentation:
- Fix grammar in dpkg-architecture(1).
Thanks to Chris Lamb <lamby@debian.org>. Closes: #787616
Added tag(s) pending.
Request was from Guillem Jover <guillem@debian.org>
to 789580-submitter@bugs.debian.org.
(Wed, 29 Jul 2015 00:36:04 GMT) (full text, mbox, link).
Reply sent
to Guillem Jover <guillem@debian.org>:
You have taken responsibility.
(Wed, 05 Aug 2015 03:24:36 GMT) (full text, mbox, link).
Notification sent
to Jakub Wilk <jwilk@debian.org>:
Bug acknowledged by developer.
(Wed, 05 Aug 2015 03:24:36 GMT) (full text, mbox, link).
Source: dpkg
Source-Version: 1.18.2
We believe that the bug you reported is fixed in the latest version of
dpkg, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 789580@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Guillem Jover <guillem@debian.org> (supplier of updated dpkg package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 03 Aug 2015 15:40:21 +0200
Source: dpkg
Binary: libdpkg-dev dpkg dpkg-dev libdpkg-perl dselect
Architecture: source all amd64
Version: 1.18.2
Distribution: unstable
Urgency: low
Maintainer: Dpkg Developers <debian-dpkg@lists.debian.org>
Changed-By: Guillem Jover <guillem@debian.org>
Description:
dpkg - Debian package management system
dpkg-dev - Debian package development tools
dselect - Debian package management front-end
libdpkg-dev - Debian package management static library
libdpkg-perl - Dpkg perl modules
Closes: 480638571671785344787616787986788211788819789096789097789580789957790025790073791535792491793330
Changes:
dpkg (1.18.2) unstable; urgency=low
.
[ Guillem Jover ]
* Fix plural form translations for single plural languages. Closes: #790025
* Add new dpkg-buildpackage -J option, which is a safe version of -j.
* Fix dpkg-gencontrol to add correct binary filename to debian/files,
even when overriding the Package field value with the -D option.
Reported by Niels Thykier <niels@thykier.net>.
* Move the implicit build-essential:native Build-Depends from
dpkg-checkbuilddeps to a new vendor hook, as it is Debian-specific.
* Add support for ignoring built-in build dependencies and conflicts
with the new «dpkg-buildpackage --ignore-builtin-builddeps» and
«dpkg-checkbuilddeps -I» options. Closes: #480638, #571671
* When sys_siglist is defined in the system, try to use NSIG as we cannot
compute the array size with sizeof(). If NSIG is missing fallback to 32
items. Prompted by Igor Pashev <pashev.igor@gmail.com>.
* Use string_to_security_class() instead of a literal SECCLASS value in
the setexecfilecon() libcompat function, as <selinux/flask.h> is now
deprecated.
* Switch libdpkg xz compressor to use CRC64 for integrity checks, to match
the default on the command-line tool, which should provide slightly better
detection against damaged data, at a negligible speed difference.
* Only use the SHELL environment variable for interactive shells.
Closes: #788819
* Move tar option --no-recursion before -T in dpkg-deb. With tar > 1.28 the
--no-recursion option is now positional, and needs to be passed before
the -T option, otherwise the tarball will end up with duplicated entries.
Thanks to Richard Purdie <richard.purdie@linuxfoundation.org>.
* Add an extra level of escaping for double $(evals) in architecture.mk
and buildflags.mk, so that the variables are computed lazily again.
Regression introduced in dpkg 1.16.2. Closes: #793330
* Add binary packages Essential information to Package-List field in the
.dsc file, as optional essential=yes entries. This allows precomputing
the pseudo-essential set before starting an architecture bootstrap.
* Perl modules:
- Remove non-functional timezone name support from
Dpkg::Changelog::Entry::Debian.
- Use Time::Piece (part of the perl core distribution) instead of
Date::Parse in Dpkg::Changelog::Entry::Debian. This reduces the build
and run-time dependencies, and helps architecture bootstrapping.
- Simplify distribution splitting in Dpkg::Changelog::Entry::Debian.
- Add new function changelog_parse_plugin() in Dpkg::Changelog::Parse.
- Add new function changelog_parse_debian() in Dpkg::Changelog::Parse, and
use it in changelog_parse() instead of the external plugin parser when
the input format is “debian”. This significantly speeds up the parsing.
- Remove trailing space before handling blank line dot-separator in
Dpkg::Control::HashCore. Regression introduced in dpkg 1.18.0.
Reported by Jakub Wilk <jwilk@debian.org>. Closes: #789580
- Allow the Maintainer field in CTRL_FILE_STATUS.
- Import make_path from File::Path in Dpkg::Source::Package::V2.
Regression introduced in dpkg 1.18.0. Closes: #789957
- Make the BinaryFiles subpackage self-contained by explicitly importing
File::Spec in Dpkg::Source::Package::V2.
- Do not exclude pre-existing symlinks when unpacking the debian/ tarball
in Dpkg::Source::Package::V2. Closes: #790073, #791535
- Disable the thread sanitizer when the address sanitizer is enabled
in Dpkg::Vendor::Debian as these are mutually incompatible, and make
sanitize=+all not work at all.
- Allow colons (:) in added filenames in Dpkg::Dist::Files, which can be
present when the upstream version contains colons. Regression introduced
in dpkg 1.18.0. Reported by Jakub Wilk <jwilk@debian.org>.
- Future-proof tar invocations in Dpkg::Source::Archive for options that
might become positional in the future, and by always placing function
options first.
- Make the dependency comparison deep by comparing not only the first
dependency alternative, to get them sorted in a reproducible way.
Based on a patch by Chris Lamb <lamby@debian.org>. Closes: #792491
- Support spaces in symbol names in Dpkg::Shlibs::Objdump. This is
required by Go shared libraries. Closes: #785344
Based on a patch by Michael Hudson-Doyle <michael.hudson@canonical.com>.
* Test suite:
- Set SIGINT, SIGTERM and SIGPIPE to their default actions to get
deterministic behavior.
- Add test cases for the makefile snippets.
- Delete DEB_VENDOR from the environment to get reliable results.
* Packaging:
- Make the libdpkg-dev package Multi-Arch:same.
- Mark libio-string-perl as <!nocheck>.
* Documentation:
- Fix grammar in dpkg-architecture(1).
Thanks to Chris Lamb <lamby@debian.org>. Closes: #787616
- Use the feature area name in the dpkg-buildflags(1) subsection title.
- Document DPKG_HOOK_ACTION also in dpkg(1) ENVIRONMENT section.
- Clarify when some features where added in man pages.
- Document --yet-to-unpack, --predep-packages and all --assert-<feature>
commands as supported in both «dpkg --help» and dpkg(1).
- Document abitable in dpkg-architecture(1).
- Clarify that an architecture wildcard is a Debian thing in
dpkg-architecture(1).
- Document multiarch triplet in dpkg-architecture(1) TERMS section.
- Remove “my” keyword from Dpkg perl modules function prototypes.
- Say FUNCTIONS instead of METHODS for Dpkg modules when appropriate.
- Fix POD syntax inside verbatim paragraph in Dpkg::Changelog.
- Document and mark Dpkg::Arch as a public module.
- Fix Dpkg::Changelog::Parse::changelog_parse documentation.
.
[ Updated programs translations ]
* Dutch (Frans Spiesschaert). Closes: #789097
* Simplified Chinese (Zhou Mo). Closes: #787986
* Turkish (Mert Dirik). Closes: #788211
* Vietnamese (Trần Ngọc Quân).
.
[ Updated manpages translations ]
* German (Helge Kreutzmann).
.
[ Updated dselect translations ]
* Dutch (Frans Spiesschaert). Closes: #789096
.
[ Updated scripts translations ]
* German (Helge Kreutzmann).
Checksums-Sha1:
2ae95a867db6c932b99e0e0f4f2978a31c8e5c7d 2021 dpkg_1.18.2.dsc
5460c186c6dc59e7c721084cca8e4888596bdfd2 4345224 dpkg_1.18.2.tar.xz
4e9ca94b3664562f8ef14ee5af7b69cbfa7d42d5 1425274 dpkg-dev_1.18.2_all.deb
5bf5998a7769cf88ddb6d2f46aff650ad5972973 2905246 dpkg_1.18.2_amd64.deb
0c4954a51f2fff280424faf607cf1be4ffd22ab6 1186194 dselect_1.18.2_amd64.deb
73c66b2905c02fbe94adc352182373aebd82d359 931966 libdpkg-dev_1.18.2_amd64.deb
d99dec6652852240172f2c45a92daf7cb4f83814 1122344 libdpkg-perl_1.18.2_all.deb
Checksums-Sha256:
dcc8b376723c4328d0c6af41aed32dd594c80cbd35257f2c3aa55526e052fdee 2021 dpkg_1.18.2.dsc
11484f2a73d027d696e720a60380db71978bb5c06cd88fe30c291e069ac457a4 4345224 dpkg_1.18.2.tar.xz
b7cbcb96ee48a8f858c132787618221f1deb1ff1e9723cf73895cc9c6ce498a5 1425274 dpkg-dev_1.18.2_all.deb
683b28d09035a94899cab1ac8e473f4c7e90cf1188bfcce007b21d3707d0b238 2905246 dpkg_1.18.2_amd64.deb
985edbd32c251e1f1afc59cbdd412753651d3b814737f84c061e5d46865dd5c9 1186194 dselect_1.18.2_amd64.deb
da9f68dd5950e14924f359ccf0cb3affaeae798c1951fc847eb3f9935fd0d7ca 931966 libdpkg-dev_1.18.2_amd64.deb
2f1b9624a9d582b003cdc2e8f31e69b34c66f32c0746a272bd7be19bb06b746e 1122344 libdpkg-perl_1.18.2_all.deb
Files:
734609a5c0e8a047b3a9d11e77c78337 2021 admin required dpkg_1.18.2.dsc
63b9d869081ec49adeef6c5ff62d6576 4345224 admin required dpkg_1.18.2.tar.xz
98cda1fa3ab11ebcb0c4c34e248cda2b 1425274 utils optional dpkg-dev_1.18.2_all.deb
c9b70772e48be54558481446c11d15f1 2905246 admin required dpkg_1.18.2_amd64.deb
05f258a6c05460f5c8ff27df3f915db9 1186194 admin optional dselect_1.18.2_amd64.deb
8d60a4bc3459977bb97c206e2be9f31b 931966 libdevel optional libdpkg-dev_1.18.2_amd64.deb
8f5078aef6753952e20644205a1107c2 1122344 perl optional libdpkg-perl_1.18.2_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQIcBAEBCAAGBQJVwWI5AAoJELlyvz6krlejR7UP/1wzSY1z5ccAaTDriQpuKA/E
xfJDirpB9JcDjbgdHPp4pwBRp27zWWrhW7VIYRS+5cWOMjmBeaRiXXMMYDDqbKJj
YUxw7c/3MWqUEQYF2V4ZMJX0kjHRdUX8VdhKn98aO78NvdGJsye6STOE3D2EdN+Y
KHxjT0R+SaadvlWyQimsGasXx34SlEoV9JM7sSglzYA/nshmb8N+OGelpLDCAA6U
99f8383npNAih0U8Uc2K7lQBJHD49dJavkbU/mbfSTZIpHO7ZM/X3DVfmctoWZSG
AQ8Rw38FoRqidIMuH0f6hfm0Chilm5PX9IiPsrkGMfixNoiwAU3TLpdKk8jpJ9xx
rJ0gTPnVP2dRvaza1cCtgMrd0CWaNeSTuAjdaOEBHdN/cUdP31xkpPOstwUpymzk
xTZfUHEPdivqydKr7kvbWuESCC21e1o4p6L0Q6cL0zoek0NT2Yvar7Vd4Vytm4db
upY6PMiKTq0yp7eAeBGG2j0iJ4lvf+wS71XC6oH23RijHGio4LkwCcqWUFgOuUJn
4wgm8vyPr0JHWLRtgT8NcizFRJ2sjxFoy6rtzK3dk+G1YzXpUWS3oI2iFsnlgpKm
fS9tJeCssOvruqxyyyUCe9j54MQ2P1PhFGgtDh5XPZ7w0JgIJbtMR04UzfcppMen
DyRup5x087FikSzLzv7o
=hrPH
-----END PGP SIGNATURE-----
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Sat, 12 Sep 2015 07:44:10 GMT) (full text, mbox, link).
Debbugs is free software and licensed under the terms of the GNU General
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.