Package: wireshark
Version: 4.4.5-1
Severity: serious
Justification: violates ftp-master reject faq

Hi,

via codesearching around, I ran into the following part of debian/rules

    ifneq ($(filter noble oracular unstable sid testing trixie 
UNRELEASED,$(DEB_DISTRIBUTION)),)
    CONTROL_IN_SED_CMD := $(CONTROL_IN_SED_CMD)s/@LIBSSH_DEV@/libssh-dev/;
    else
    CONTROL_IN_SED_CMD := 
$(CONTROL_IN_SED_CMD)s/@LIBSSH_DEV@/libssh-gcrypt-dev/;
    endif

Consider what happens when wireshark receives a security upload. At that
point, DEB_DISTRIBUTION will be trixie-security and we flip from the
first branch to the second branch. That's bad, but what does
CONTROL_IN_SED_CMD actually do? It's run during override_dh_clean and
rewrites debian/control. That practice is prohibited by the ftp-master
reject faq and incurs an rc bug.

Helmut

Reply via email to