Your message dated Thu, 29 Oct 2009 21:01:49 +0000
with message-id <[email protected]>
and subject line Bug#529028: fixed in quilt 0.48-2
has caused the Debian Bug report #529028,
regarding Snippet to detect patches in README.source is insecure
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
529028: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529028
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: quilt
Version: 0.46-6
Severity: normal
Hello,
thanks for maintaining quilt.
quilt's README.Debian, which is a logical boilerplate to use in packages
using quilt, suggests to add this to .quiltrc:
for where in ./ ../ ../../ ../../../ ../../../../ ../../../../../; do
if [ -e ${where}debian/rules -a -d ${where}debian/patches ]; then
export QUILT_PATCHES=debian/patches
fi
done
This basically allows anyone who can write to a path above where I build
packages to influence my build system. That is because the topmost path
is in the end, and the last path found overrides the previous ones.
What you really want is this:
for where in ./ ../ ../../ ../../../ ../../../../ ../../../../../; do
if [ -e ${where}debian/rules -a -d ${where}debian/patches ]; then
export QUILT_PATCHES=debian/patches
break
fi
done
Although that snippet, in my opinion, even when fixed is still very ugly
indeed.
Ciao,
Enrico
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.29-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages quilt depends on:
ii bzip2 1.0.5-1 high-quality block-sorting file co
ii diffstat 1.47-1 produces graph of changes introduc
ii gettext 0.17-6 GNU Internationalization utilities
ii patch 2.5.9-5 Apply a diff file to an original
quilt recommends no packages.
Versions of packages quilt suggests:
ii graphviz 2.20.2-3+b2 rich set of graph drawing tools
ii procmail 3.22-16 Versatile e-mail processor
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: quilt
Source-Version: 0.48-2
We believe that the bug you reported is fixed in the latest version of
quilt, which is due to be installed in the Debian FTP archive:
quilt_0.48-2.debian.tar.gz
to main/q/quilt/quilt_0.48-2.debian.tar.gz
quilt_0.48-2.dsc
to main/q/quilt/quilt_0.48-2.dsc
quilt_0.48-2_all.deb
to main/q/quilt/quilt_0.48-2_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Raphaël Hertzog <[email protected]> (supplier of updated quilt package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 29 Oct 2009 17:56:18 +0100
Source: quilt
Binary: quilt
Architecture: source all
Version: 0.48-2
Distribution: unstable
Urgency: low
Maintainer: Martin Quinson <[email protected]>
Changed-By: Raphaël Hertzog <[email protected]>
Description:
quilt - Tool to work with series of patches
Closes: 509076 529028
Changes:
quilt (0.48-2) unstable; urgency=low
.
[ Ryan Niebur ]
* use sensible-editor, which takes $VISUAL into account (Closes:
#509076)
* in README.source's example snippet, use the first directory found
with debian/{rules,patches}, not the last (Closes: 529028)
.
[ Raphaël Hertzog ]
* Switch to source format 3.0 (quilt) to get rid of all the manual
auto-patching code required to avoid the build-dependency on itself.
Checksums-Sha1:
9f96261b282df7ee9da59106665e8c33dc0bb507 1605 quilt_0.48-2.dsc
03ab863575def29012ecf3b4ea4db2f1e8039684 38479 quilt_0.48-2.debian.tar.gz
bc4652f742f28d92af355133a9887a1845fb482d 352534 quilt_0.48-2_all.deb
Checksums-Sha256:
b3f82e3d22cfe50dc8757e3324095b83243d4a793755aa05f8bf9ce8dba0a8d2 1605
quilt_0.48-2.dsc
ca11ac3baa5974b8672d3fcf5e2f6af689a588405a6a704ea59acbc3421c6bde 38479
quilt_0.48-2.debian.tar.gz
2963509f8803e10d05f0f2578a642f8145dbb9831a758b74168551c627022cfb 352534
quilt_0.48-2_all.deb
Files:
7faaad677429f0f25a866283993ccc7d 1605 vcs optional quilt_0.48-2.dsc
fe52cdf9b213502e202d973ebfe55fad 38479 vcs optional quilt_0.48-2.debian.tar.gz
6a4aa5878fc139216432486c9eed9d4c 352534 vcs optional quilt_0.48-2_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Signed by Raphael Hertzog
iQEcBAEBCAAGBQJK6cmjAAoJEAOIHavrwpq5xvkIAJAd0/ewboSTf8s2p3/4wfrP
RNsmslN5vSqBdQwtSAhja02hlgMBTkrvIpgdk37ZY4ErFcA+AjjamnwC0wG6cjcW
USxPtGiFv3EEocautWwVrmr9KK0rTJ+x8/sLdbHMJPxtts+cgLvVaASqpKhcb9Kf
j9cwH8OfRgZI1LqN5pv2oPNj8HAJWdEldDAl8nsX9B/UfjTF5eeShABPngR599ef
t38gekXv6m3UylbyKTk2bJNXwrkdarGZsBbZxHfoX9/F4XylKkdYQ53L3vJeniLa
uqAF639SBQXbIlCuISIg/pZcXstBOvTY1EeRc1j0tbao0DWKHrfEB8vom2tBYIo=
=hjBw
-----END PGP SIGNATURE-----
--- End Message ---
