Your message dated Mon, 27 Apr 2026 01:03:19 +0000
with message-id <[email protected]>
and subject line Bug#1130914: fixed in pupnp 1:1.14.31-1
has caused the Debian Bug report #1130914,
regarding pupnp: Triggers CMake errors due to listing non-existent excess paths
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1130914: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1130914
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: pupnp
Version: 1:1.14.25-1
Severity: important
Tags: patch upstream
Control: forwarded -1 https://github.com/pupnp/pupnp/pull/534

Dear Maintainer,

I am currently working on an updated version of the amule package which
normally build-depends on libupnp-dev. When trying such a build,
setting up the build environment using pbuilder/cowbuilder fails with
various messages like:

   CMake Error in src/CMakeLists.txt:
     Imported target "UPNP::Shared" includes non-existent path
       "/usr/COMPONENT"
     in its INTERFACE_INCLUDE_DIRECTORIES.  Possible reasons include:
     * The path was deleted, renamed, or moved to another location.
     * An install or uninstall procedure did not complete successfully.
     * The installation package was faulty and references files it does not
     provide.

See pipeline on Salsa [1] for a complete picture.

These errors are caused by a malformed INTERFACE_INCLUDE_DIRECTORIES
statement in /usr/lib/*/cmake/UPNP/UPNP.cmake at line 73. In addition,
exactly the same malformed statement exists in
/usr/lib/*/IXML/IXML.cmake again at line 73.

These malformed statements are originating from invalid use of
'install(TARGETS ... INCLUDES DESTINATION ...)' in source files
upnp/CMakeLists.txt [2] + [3] and ixml/CMakeLists.txt [4] + [5].
INCLUDES DESTINATION does not know artifact options like COMPONENT but
solely directories [6].

I reported the issue upstream. Though, upstream seems to be hesitant to
accept my pull request [7].

I prepared patches to fix this in Debian for versions 1:1.14.25-1 and 
1:1.18.0-1 of pupnp. Please find the patches attached, ready to be
imported with 'quilt import ...'. A patched local build of pupnp
1:1.14.25-1 enabled a successful local build of the amule package under
development. It would be great patched versions 1:1.14.25-2 and
1:1.18.0-2 of pupnp would show up in the repo.

Best,
Sven

[1] https://salsa.debian.org/sge/amule/-/jobs/9235504#L2703 ff.
[2] https://sources.debian.org/src/pupnp/1%3A1.14.25-1/upnp/CMakeLists.txt#L159 
+ L160
[3] https://sources.debian.org/src/pupnp/1%3A1.14.25-1/upnp/CMakeLists.txt#L218 
+ L219
[4] https://sources.debian.org/src/pupnp/1%3A1.14.25-1/ixml/CMakeLists.txt#L60 
+ L61
[5] https://sources.debian.org/src/pupnp/1%3A1.14.25-1/ixml/CMakeLists.txt#L109 
+ L110
[6] https://cmake.org/cmake/help/v4.0/command/install.html#signatures
[7] https://github.com/pupnp/pupnp/pull/534

-- System Information:
Debian Release: forky/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.18.9+deb14-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8),
LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

-- 
GPG Fingerprint
3DF5 E8AA 43FC 9FDF D086 F195 ADF5 0EDA F8AD D585
Description: Fix usage of INCLUDES DESTINATION
 In ixml/CMakeLists.txt and upnp/CMakeLists.txt:
 INCLUDES DESTINATION is not an <artifact-kind> and thus does not come with
 <artifact-option>s like e.g. COMPONENT. At least with cmake 4, the strings
 up to the next <artifact-kind> get considered as paths which do not exist,
 resulting in invalid 'INTERFACE_INCLUDE_DIRECTORIES ...' lines in the
 generated files /usr/lib/*/cmake/IXML/IXML.cmake and
 /usr/lib/*/cmake/UPNP/UPNP.cmake.
 .
 This patch drops the false 'COMPONENT UPNP_Development' lines. As a
 saveguard the remaining 'INCLUDES DESTINATION...' lines are moved to the
 end of the respective invocation of 'install(TARGET...)' as the cmake
 manual suggests, see
 https://cmake.org/cmake/help/v4.0/command/install.html#signatures. 
Author: Sven Geuer <[email protected]>
Origin: backport, https://github.com/pupnp/pupnp/pull/534
Forwarded: not-needed
Last-Update: 2026-03-13
---
This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
--- a/ixml/CMakeLists.txt
+++ b/ixml/CMakeLists.txt
@@ -57,8 +57,6 @@
 		EXPORT IXML
 		ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_Development
-		INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
-			COMPONENT UPNP_Development
 		LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_RunTime
 			NAMELINK_COMPONENT UPNP_Development
@@ -66,6 +64,7 @@
 			COMPONENT UPNP_Development
 		RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR}
 			COMPONENT UPNP_RunTime
+		INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
 	)
 endif()
 
@@ -106,8 +105,6 @@
 		EXPORT IXML
 		ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_Development
-		INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
-			COMPONENT UPNP_Development
 		LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_RunTime
 			NAMELINK_COMPONENT UPNP_Development
@@ -115,6 +112,7 @@
 			COMPONENT UPNP_Development
 		RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR}
 			COMPONENT UPNP_RunTime
+		INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
 	)
 endif()
 
--- a/upnp/CMakeLists.txt
+++ b/upnp/CMakeLists.txt
@@ -156,8 +156,6 @@
 		EXPORT UPNP
 		ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_Development
-		INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
-			COMPONENT UPNP_Development
 		LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_RunTime
 			NAMELINK_COMPONENT UPNP_Development
@@ -165,6 +163,7 @@
 			COMPONENT UPNP_Development
 		RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR}
 			COMPONENT UPNP_RunTime
+		INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
 	)
 endif()
 
@@ -215,8 +214,6 @@
 		EXPORT UPNP
 		ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_Development
-		INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
-			COMPONENT UPNP_Development
 		LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_RunTime
 			NAMELINK_COMPONENT UPNP_Development
@@ -224,6 +221,7 @@
 			COMPONENT UPNP_Development
 		RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR}
 			COMPONENT UPNP_RunTime
+		INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
 	)
 endif()
 
Description: Fix usage of INCLUDES DESTINATION
 In ixml/CMakeLists.txt and upnp/CMakeLists.txt:
 INCLUDES DESTINATION is not an <artifact-kind> and thus does not come with
 <artifact-option>s like e.g. COMPONENT. At least with cmake 4, the strings
 up to the next <artifact-kind> get considered as paths which do not exist,
 resulting in invalid 'INTERFACE_INCLUDE_DIRECTORIES ...' lines in the
 generated files /usr/lib/*/cmake/IXML/IXML.cmake and
 /usr/lib/*/cmake/UPNP/UPNP.cmake.
 .
 This patch drops the false 'COMPONENT UPNP_Development' lines. As a
 saveguard the remaining 'INCLUDES DESTINATION...' lines are moved to the
 end of the respective invocation of 'install(TARGET...)' as the cmake
 manual suggests, see
 https://cmake.org/cmake/help/v4.0/command/install.html#signatures. 
Author: Sven Geuer <[email protected]>
Origin: backport, https://github.com/pupnp/pupnp/pull/534
Forwarded: not-needed
Last-Update: 2026-03-13
---
This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
--- a/ixml/CMakeLists.txt
+++ b/ixml/CMakeLists.txt
@@ -58,9 +58,6 @@
 		EXPORT IXML
 		ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_Development
-		INCLUDES
-		DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
-		COMPONENT UPNP_Development
 		LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_RunTime
 			NAMELINK_COMPONENT UPNP_Development
@@ -68,6 +65,7 @@
 				COMPONENT UPNP_Development
 		RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR}
 			COMPONENT UPNP_RunTime
+		INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
 	)
 endif()
 
@@ -111,9 +109,6 @@
 		EXPORT IXML
 		ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_Development
-		INCLUDES
-		DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
-		COMPONENT UPNP_Development
 		LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_RunTime
 			NAMELINK_COMPONENT UPNP_Development
@@ -121,6 +116,7 @@
 				COMPONENT UPNP_Development
 		RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR}
 			COMPONENT UPNP_RunTime
+		INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
 	)
 endif()
 
--- a/upnp/CMakeLists.txt
+++ b/upnp/CMakeLists.txt
@@ -163,9 +163,6 @@
 		EXPORT UPNP
 		ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_Development
-		INCLUDES
-		DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
-		COMPONENT UPNP_Development
 		LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_RunTime
 			NAMELINK_COMPONENT UPNP_Development
@@ -173,6 +170,7 @@
 				COMPONENT UPNP_Development
 		RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR}
 			COMPONENT UPNP_RunTime
+		INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
 	)
 endif()
 
@@ -230,9 +228,6 @@
 		EXPORT UPNP
 		ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_Development
-		INCLUDES
-		DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
-		COMPONENT UPNP_Development
 		LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR}
 			COMPONENT UPNP_RunTime
 			NAMELINK_COMPONENT UPNP_Development
@@ -240,6 +235,7 @@
 				COMPONENT UPNP_Development
 		RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR}
 			COMPONENT UPNP_RunTime
+		INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp
 	)
 endif()
 

Attachment: signature.asc
Description: This is a digitally signed message part


--- End Message ---
--- Begin Message ---
Source: pupnp
Source-Version: 1:1.14.31-1
Done: Sebastian Ramacher <[email protected]>

We believe that the bug you reported is fixed in the latest version of
pupnp, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sebastian Ramacher <[email protected]> (supplier of updated pupnp package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 26 Apr 2026 21:13:41 +0200
Source: pupnp
Architecture: source
Version: 1:1.14.31-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Multimedia Maintainers <[email protected]>
Changed-By: Sebastian Ramacher <[email protected]>
Closes: 1130914
Changes:
 pupnp (1:1.14.31-1) unstable; urgency=medium
 .
   * New upstream version 1.14.31
     - Fix CVE-2026-41682
     - Fix cmake export (Closes: #1130914)
   * debian/control:
     - Bump Standards-Version
     - Drop RRR: no
     - Drop Priority: optional
Checksums-Sha1:
 8a7a3e3a7f242b21380b003720c5b5775b7513a7 1731 pupnp_1.14.31-1.dsc
 654fcd4806ca1b72bbbb1c79d5c851a4149a8470 826590 pupnp_1.14.31.orig.tar.gz
 928e4c2d0b70b834018a2e0c16cd90b4681802f0 14100 pupnp_1.14.31-1.debian.tar.xz
 90b8c10ee0308f82a2b9a6728ff0da90fdc79289 7008 pupnp_1.14.31-1_source.buildinfo
Checksums-Sha256:
 0a30a40784099ac044f1f58f9e3c3a63265df59760c799c12fcbdedc2c080e4f 1731 
pupnp_1.14.31-1.dsc
 ce1dd3da7268ad61a56041af0ee80a3d067e7fbd197e2a387ae53942f70068bd 826590 
pupnp_1.14.31.orig.tar.gz
 8581f0495e547b5fb29e9106b1bf3a90eee8a13915951cb6a5e916f7bacd701b 14100 
pupnp_1.14.31-1.debian.tar.xz
 7e4340248a0ef83eb63f949ee7259a0953e1fde5f9d8ad57784db400bab29f9e 7008 
pupnp_1.14.31-1_source.buildinfo
Files:
 1d4d83f92fdfdd984abfde40dbd50580 1731 net optional pupnp_1.14.31-1.dsc
 4ec1a037f8f9bc32497db0730b401134 826590 net optional pupnp_1.14.31.orig.tar.gz
 84b8b9cea4ae385dd05569802642d0f3 14100 net optional 
pupnp_1.14.31-1.debian.tar.xz
 df439e3156c9db44d61306419973f680 7008 net optional 
pupnp_1.14.31-1_source.buildinfo


-----BEGIN PGP SIGNATURE-----

wr0EARYKAG8FgmnuZRcJECGTazZgD82JRxQAAAAAAB4AIHNhbHRAbm90YXRpb25z
LnNlcXVvaWEtcGdwLm9yZ/gz6TCkQEuKUVpl27E/w01arnKS3cMTge6k+FDIcJq0
FiEEQmJ+hB2ZZ9qD4fqQIZNrNmAPzYkAADxPAP9UlQFItpOWkyjGFda0Bg4KDjUR
DUp+JSzmQ5IWu0gp2gEAnEHblgDJvxoxYRxDM/jS3bSDbzwoTPVtnekpJ8QvagM=
=eMuf
-----END PGP SIGNATURE-----

Attachment: pgpSe5kki4iPR.pgp
Description: PGP signature


--- End Message ---

Reply via email to