Your message dated Tue, 26 Aug 2014 21:32:06 +0000
with message-id <e1xmolw-0007hb...@franck.debian.org>
and subject line Bug#753921: fixed in getfem++ 4.1.1+dfsg1-12~deb7u1
has caused the Debian Bug report #753921,
regarding getfem++: Bogus patch disallows dpkg-source unpack
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
753921: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=753921
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: getfem++
Source-Version: 4.1.1-6
Severity: serious
Tags: wheezy
Control: fixed -1 4.2.1~beta1~svn4422~dfsg-1

Hi!

This package contains a bogus patch, which makes latest dpkg-source in
stable to be unable to correctly unpack the source, due to more strict
parsing of patches required to disallow path traversal vulnerabilities.

The broken patch has a stray @@ patch hunk marker.

Here's a simple patch fixing this. It would be nice if this could be
fixed in stable, otherwise the source cannot be unpacked normally. I'm
ready to help with such release if needed, given that the “regression”
was caused by the dpkg update. (Unstable is unaffected.)

This was found by David Suárez in an archive-wide check:

  <https://lists.debian.org/debian-dpkg/2014/07/msg00002.html>

Thanks,
Guillem
diff -Nru getfem++-4.1.1+dfsg1/debian/changelog getfem++-4.1.1+dfsg1/debian/changelog
--- getfem++-4.1.1+dfsg1/debian/changelog	2012-11-17 23:12:43.000000000 +0100
+++ getfem++-4.1.1+dfsg1/debian/changelog	2014-07-05 23:12:45.000000000 +0200
@@ -1,3 +1,10 @@
+getfem++ (4.1.1+dfsg1-11.1) UNRELEASED; urgency=low
+
+  * Non-maintainer upload.
+  * Fix broken patch headers.
+
+ -- Guillem Jover <guil...@debian.org>  Sat, 05 Jul 2014 23:12:45 +0200
+
 getfem++ (4.1.1+dfsg1-11) unstable; urgency=low
 
   [ Anton Gladky ]
diff -Nru getfem++-4.1.1+dfsg1/debian/patches/ld-no-add-needed.patch getfem++-4.1.1+dfsg1/debian/patches/ld-no-add-needed.patch
--- getfem++-4.1.1+dfsg1/debian/patches/ld-no-add-needed.patch	2012-11-17 22:40:46.000000000 +0100
+++ getfem++-4.1.1+dfsg1/debian/patches/ld-no-add-needed.patch	2014-07-05 23:09:18.000000000 +0200
@@ -3,7 +3,6 @@
 Author: Matthias Klose <d...@ubuntu.com>
 Last-Update: 2012-01-18
 
-@@ -0,0 +1,44 @@
 --- a/tests/Makefile.in
 +++ b/tests/Makefile.in
 @@ -562,7 +562,7 @@

--- End Message ---
--- Begin Message ---
Source: getfem++
Source-Version: 4.1.1+dfsg1-12~deb7u1

We believe that the bug you reported is fixed in the latest version of
getfem++, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 753...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Anton Gladky <gl...@debian.org> (supplier of updated getfem++ package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sun, 24 Aug 2014 14:01:36 +0200
Source: getfem++
Binary: libgetfem4++ libgetfem++-dbg libgetfem++-dev libgmm++-dev 
python-getfem++ scilab-getfem++
Architecture: source amd64 all
Version: 4.1.1+dfsg1-12~deb7u1
Distribution: stable
Urgency: medium
Maintainer: Debian Science Team 
<debian-science-maintain...@lists.alioth.debian.org>
Changed-By: Anton Gladky <gl...@debian.org>
Description: 
 libgetfem++-dbg - Debugging symbols for the GETFEM++ generic finite element 
library
 libgetfem++-dev - Development files for the GETFEM++ generic finite element 
library
 libgetfem4++ - GETFEM++ generic finite element library
 libgmm++-dev - Generic C++ template library for sparse, dense and skyline 
matric
 python-getfem++ - Python interface to the GETFEM++ generic finite element 
library
 scilab-getfem++ - Scilab interface to the GETFEM++ generic finite element 
library
Closes: 753921
Changes: 
 getfem++ (4.1.1+dfsg1-12~deb7u1) stable; urgency=medium
 .
   [ Guillem Jover ]
   * [0d337a2] Fix broken patch headers. (Closes: #753921)
Checksums-Sha1: 
 a46bed9e545256e10fe7b6ee68e36bd761bbd45a 2693 
getfem++_4.1.1+dfsg1-12~deb7u1.dsc
 0ea487a14c19472b74432acf07767e42598c32ff 13364 
getfem++_4.1.1+dfsg1-12~deb7u1.debian.tar.gz
 411f3afe75e8cb0037b53ba5402a218c3947ccbb 2088734 
libgetfem4++_4.1.1+dfsg1-12~deb7u1_amd64.deb
 46cece85cfc7d63f5ca90ab4e5e3b4c6f7ce6b03 80609936 
libgetfem++-dbg_4.1.1+dfsg1-12~deb7u1_amd64.deb
 1aaecad100be865e8965223d6a464a5c776f3683 4256546 
libgetfem++-dev_4.1.1+dfsg1-12~deb7u1_amd64.deb
 a78ac551ca83e4936ec0535321cb57d29e9776f2 156862 
libgmm++-dev_4.1.1+dfsg1-12~deb7u1_all.deb
 b97ad626c53c58811d9d4748981fb89ce3223feb 1626364 
python-getfem++_4.1.1+dfsg1-12~deb7u1_amd64.deb
 783228f7c5211c7886101412bdea6b079d116b48 5899104 
scilab-getfem++_4.1.1+dfsg1-12~deb7u1_amd64.deb
Checksums-Sha256: 
 dd636aaf1ba0443d5678da3daaebe82da926e2e5532bef5496138ea47db99536 2693 
getfem++_4.1.1+dfsg1-12~deb7u1.dsc
 87746fd0b1407b60bb606fe4d071ffaf6e1e56e8bcacb0599bce97887e93a06c 13364 
getfem++_4.1.1+dfsg1-12~deb7u1.debian.tar.gz
 443ca5500f1829bf69141635bac4dda6c04254d749c7698e0c0d2e06681702ec 2088734 
libgetfem4++_4.1.1+dfsg1-12~deb7u1_amd64.deb
 52b5042bc531d5787808a2a23bb74291cd5437fe2c7617c2f7b88094d40f96b6 80609936 
libgetfem++-dbg_4.1.1+dfsg1-12~deb7u1_amd64.deb
 857af907cee563b03dab2273403804d32a1ce585eed54c5896424ef92d09d6e6 4256546 
libgetfem++-dev_4.1.1+dfsg1-12~deb7u1_amd64.deb
 5ddedc45ae51a789a05dac39ae21bf259e1c9ec630e628c74d4102e2c84dc454 156862 
libgmm++-dev_4.1.1+dfsg1-12~deb7u1_all.deb
 917dbb7c5cbd98d2d1947d2103d77fbca56817932f844aca58c3e4c4f7875eb0 1626364 
python-getfem++_4.1.1+dfsg1-12~deb7u1_amd64.deb
 547d5102c46ac6eab6394ad1aa93d44e60968032254dc059a26b1e461398bbc6 5899104 
scilab-getfem++_4.1.1+dfsg1-12~deb7u1_amd64.deb
Files: 
 5f4b0fd85ca0e1ab2418e9ec12b3a956 2693 libs extra 
getfem++_4.1.1+dfsg1-12~deb7u1.dsc
 3c0f6b26815c0a78026493265466ac2a 13364 libs extra 
getfem++_4.1.1+dfsg1-12~deb7u1.debian.tar.gz
 195a510b8e6437bcc9016925d8c0c15e 2088734 libs extra 
libgetfem4++_4.1.1+dfsg1-12~deb7u1_amd64.deb
 000c84f771141584d782409bbf4d4449 80609936 debug extra 
libgetfem++-dbg_4.1.1+dfsg1-12~deb7u1_amd64.deb
 8387197229813600a14e9625c1d2b32f 4256546 libdevel extra 
libgetfem++-dev_4.1.1+dfsg1-12~deb7u1_amd64.deb
 74eb858bb53321f3fd0ca27a9cb9d2b1 156862 libdevel extra 
libgmm++-dev_4.1.1+dfsg1-12~deb7u1_all.deb
 ecc79a84d7816c5b6ae43081c947503e 1626364 python extra 
python-getfem++_4.1.1+dfsg1-12~deb7u1_amd64.deb
 5e6a91fe66cc3827717e1013b788b8f6 5899104 libs extra 
scilab-getfem++_4.1.1+dfsg1-12~deb7u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBAgAGBQJT+g/fAAoJENPhc4PPp/8GKesP/iQV0qbRh9VY7LteJIO5EseU
wMh9zmVLrz9zVSe8+hmpW7BxRFjhwgQACB8uqp5j34bYZSsbygQ2uV0aS7LmtWWf
/SbVGbDt7/P92dU43NV+Rg6XBnjPZkwFJmpGDXcQNP1yX7QgsUL+xzm6SOGfm5Vp
7k5CTZ8cAIy4W9ltXPNGTUu2zySCaSuM4b5tC+FxrzGyL8DTctVXLOS6TtOy/HDX
TjnyumQAsJOEpm4aRYGyoA4Ct2zSyi9/fyrB68/qnh1Ui9vUlwQf7zMv4JXGP3er
32wDrDDaxZmK3jDXVs4F0iv/fg2xHbcz0NWeWUczuLOyE5kfrIHRD4rcNVM5awE8
unot5tumVCq2L5O8/E7sLNt38AXG86sp9pPtL2lBL9fSkC7PUi3LzvZX5sSewdfp
araT9F2QYksVoG6XpDD+d++Qq23zdFKn9iO1KtqX9xdvwEe100hGVc7nfFeGkPux
sS374LMT8IuQru8IHFzkV669H/ftn5Um32CDdBHMawU47o51y3Ks/2owyMYw0mZx
h/8mdCQw+7kPKsrx66pR9oLcbEq9cYB28QvbKwjA2oDEZzkCFj9aywZBnI4pR/+f
4ATNMrhgoZWLlnQmFiRn4vQYqfxeaqptMcSyxOtdxz25OzXmAgYK6yGGqBKgJMCm
a5PQl+pzzquelJxLYbvK
=/xbx
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to