00-1
pn libyaml-syck-perl
ii mutt 1.5.21-6
ii openssh-client [ssh-client] 1:6.0p1-2
ii svn-buildpackage 0.8.4
ii w3m 0.5.3-8
--
Jakub Wilk
___
devscripts-devel mailing lis
c 5.11-2
ii sensible-utils0.0.7
ii strace4.5.20-2.3
ii unzip 6.0-7
ii wdiff 1.1.2-1
ii wget 1.13.4-3
ii xz-utils 5.1.1alpha+20120614-1
--
Jakub Wilk
__
Package: devscripts
Version: 2.12.1
User: devscri...@packages.debian.org
Usertags: bts
If you add or remove the "security" tag, then bts copies the e-mail to
. This behavior is undocumented.
--
Jakub Wilk
___
devscripts-devel ma
* Jakub Wilk , 2012-04-23, 01:12:
-=item B<--mbox>
+=item B<-m>, B<--mbox>
It doesn't look like my patch has been actually applied.
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists
--
Jakub Wilk
#!/usr/bin/perl
# Copyright © 2012 Jakub Wilk
#
# Permission is hereby granted, free of charge, to any person obtaining a copy
# of this software and associated documentation files (the “Software”), to deal
# in the Software without restriction, including without limitation the
ii python-magic 5.11-2
ii sensible-utils0.0.7
ii strace4.5.20-2.3
ii unzip 6.0-7
ii wdiff 1.1.2-1
ii wget 1.14-1
ii xz-utils 5
* Arno Töll , 2012-09-26, 03:40:
please consider inclusion of who-permits-upload, a Perl script I wrote
to query and retrieve DM upload permissions in a convenient way.
Shouldn't that be s/permits-upload/permitted-uploads/?
--
Jakub
detecting generated files should be either tightened or the
check should be moved _after_ the check for BSL.
- Regexp for detecting BSL should not contain quotes, as they are
stripped from $licensetext earlier.
--
Jakub Wilk
// Copyright 2006 Nemanja Trifunovic
/*
Permission is hereby granted, free
Package: devscripts
Version: 2.12.6
Severity: minor
If the last line of output doesn't end with newline, annotate-output
doesn't print it at all:
$ annotate-output echo -n foo
20:10:35 I: Started echo -n foo
20:10:35 I: Finished with exitcode 0
--
Package: devscripts
Version: 2.12.6
Severity: minor
annotate-output strips leading whitespace from output:
$ annotate-output echo ' moo'
20:48:04 I: Started echo moo
20:48:04 O: moo
20:48:04 I: Finished with exitcode 0
--
Package: devscripts
Version: 2.12.6
Severity: minor
$ printf '%s\n' '\f\o\o'
\f\o\o
$ annotate-output printf '%s\n' '\f\o\o'
20:55:06 I: Started printf %s\n \f\o\o
20:55:06 O: foo
20:55:06 I: Finished with exitcode 0
(Note that the blackslas
8-trunk-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages devscripts depends on:
ii dpkg-dev 1.16.10
ii libc6 2.17-0experimental2
ii perl 5.14.2-21
ii python3 3.2.3-6
--
Jakub Wilk
# kitchen is fre
eassign 42 src:devscripts
From: Jakub Wilk
To: cont...@bugs.debian.org
Cc: src:devscri...@packages.debian.org
Subject: reassign 42 to src:devscripts
Date: Thu, 09 May 2013 21:51:38 +0200
User-Agent: devscripts bts/2.13.1
Message-ID: <1368129098-3372-bts-jw...@debian.org>
reassign 42 src:devscripts
t
://dep.debian.net/deps/dep8/
http://anonscm.debian.org/gitweb/?p=autopkgtest/autopkgtest.git;a=blob_plain;f=doc/README.package-tests;hb=HEAD
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi
Package: devscripts
Version: 2.13.5
Severity: grave
Tags: security
Justification: user security hole
The newfangled debian/copyright-driven repacking can be exploited by
malicious upstream to execute arbitrary code. Proof of concept is
attached.
--
Jakub Wilk
Format: http://www.debian.org
Package: devscripts
Version: 2.13.5
I set "USCAN_EXCLUSION=no" in my ~/.devscripts, but it didn't change
anything: uscan still attempted to use Files-Excluded from d/copyright.
(The --no-exclusion OTOH works like it should.)
(that will cause attempt
to delete /usr) is attached.
--
Jakub Wilk
foo-42.tar.gz
Description: Binary data
Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Files-Excluded:
cruft/*
___
devscripts-devel mailing list
devscripts-
Package: devscripts
Version: 2.13.9
Severity: minor
Tags: patch
$ chdist create || echo '<-- see?'
chdist: you must provide a dist name.<-- see?
--
Jakub Wilk
diff --git a/scripts/chdist.pl b/scripts/chdist.pl
index e393e7c..4ab6b27 100755
--- a/scripts/chdist.pl
+++ b/s
ripts depends on:
ii dpkg-dev 1.17.5
ii libc62.18-0experimental1
ii perl 5.18.1-5
ii python3 3.3.2-17
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.or
ng to:
http://bugs.debian.org/release-critical/other/all.html
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/devscripts-devel
linked to /bin/dash
Versions of packages devscripts depends on:
ii dpkg-dev 1.17.6
ii libc62.18-0experimental1
ii perl 5.18.2-2
ii python3 3.3.2-17
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.al
kage's B-D and B-D-I. Document in
doc/README.package-tests. (Closes: #720458)
-- Martin Pitt Wed, 25 Dec 2013 21:12:38 +0100
--
Jakub Wilk
diff -Nru devscripts-2.14.1/debian/changelog devscripts-2.14.2/debian/changelog
--- devscripts-2.14.1/debian/changelog 2014-01-26 04:15:54.
fine.
Remember: Your current directory is the OLD sourcearchive!
Do a "cd ../chewmail-2" to see the new package
$ ls /tmp/*
/tmp/changelog /tmp/compat /tmp/control /tmp/copyright /tmp/rules
--
Jakub Wilk
chewmail-2.tar.gz
Descripti
* Jakub Wilk , 2014-01-26, 22:08:
The attached patch makes sadt follow this change in autopkgtest:
autopkgtest (2.5.5) unstable; urgency=medium
[...]
* Add support for virtual "@builddeps@" test dependency, which will be
replaced with the package's B-D and B-D-I. Doc
es of handling this sort of
scenario in (ba)sh has an idea on how to properly implement this, I'm
all ears.
Perhaps a more viable way would be to construct a temporary new source
package, and let dpkg-source deal with all the corner cases of unpacking
it?
Or m
* Jakub Wilk , 2014-02-23, 12:11:
Perhaps a more viable way would be to construct a temporary new source
package, and let dpkg-source deal with all the corner cases of
unpacking it?
Now I realized that this won't work, because dpkg-source insist that
patches apply without fuzz.
So her
skipped tests, etc.).
I agree that such a feature would be desirable.
(When I originally wrote sadt, I stole look&feel from nosetests. In
hindsight, it might not be such a great idea. Python unit tests rarely
produce any output, unlike autopkgtests, which almost always do.)
--
Jakub
Other TLS clients I tested
seem to be happy with it.
Unfortunately, there doesn't seem to be currently any way to disable
certificate verification in uscan.
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.
, but it's indeed
sufficient for https:/bbuseruploads.s3.amazonaws.com/.
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/devscripts-devel
* Jakub Wilk , 2014-05-25, 17:09:
$ GET https://bbuseruploads.s3.amazonaws.com/
Can't connect to bbuseruploads.s3.amazonaws.com:443 (certificate verify failed)
LWP::Protocol::https::Socket: SSL connect attempt failed with unknown error
error:1409008
n.org redirects to https by default...
Not quite. There is no HTTP redirect as far I can see. But
https://www.debian.org/ is served with Strict-Transport-Security header,
so if you ever visited it with a modern browser, it will remember to
connect to www.debian.org only via HTTPS.
--
Jakub
dependencies), or
displays a warning when modifying the permissions. It took me some time
to find who was interfering with my version control system.
Thanks, that's a pretty strong argument that chmod'ing tests is not a
good idea, at least not by default.
--
edirects by default. You need to use the -L option.
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/devscripts-devel
Package: devscripts
Version: 2.14.5
Severity: minor
$ wnpp-alert ksh
RFA 691199 ksh -- Real, AT&T version of the Korn shell
It should be of course:
RFA 691199 ksh -- Real, AT&T version of the Korn shell
--
Jakub Wilk
___
devscripts-devel
-"B<http://qa.debian.org/madison.php> stellt diesen Dienst zur Verfügung ohne "
+"B stellt diesen Dienst zur Verfügung ohne "
Typo. s/http:s/https:/
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@li
ed also data from removed-keys.gpg.
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/devscripts-devel
&2
A MITM attacker could inject options to the dget command-line.
Conveniently for the attacker, --build seems to take precedence over
--download-only, so it can be abused to execute arbitrary code.
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/devscripts-devel
1.2.2-1
ii wget1.15-1+b1
ii xz-utils5.1.1alpha+20120614-2
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/devscripts-devel
Package: devscripts
Version: 2.14.6
Severity: minor
These two lines can be safely removed, because $hostname is not used
anywhere:
my $hostname = `hostname --fqdn`;
chomp $hostname;
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel
implemented.
Disclaimer: IANA devscripts maintainer, just a random dch(1) user, and a
keen changelog reader.
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman
* James McCoy , 2014-10-11, 04:18:
+ # Reinstate symlinks, warning if the
This comment appears truncated.
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman
ld-tree restriction), then fix permissions in
the copy.
* Otherwise, try chmod+x'ing the test file in the source tree, and if
that fails, skip the test.
* Restore the original permissions afterwards.
Does it sound sane?
--
Jakub Wilk
diff --git a/scripts/sadt b/scripts/sadt
--- a/scripts/sad
729 itself.
--
Jakub Wilk
diff --git a/scripts/sadt b/scripts/sadt
--- a/scripts/sadt
+++ b/scripts/sadt
@@ -225,7 +225,7 @@
allow_stderr = False
for r in restrictions:
if r == 'rw-build-tree':
-options.needs_
Package: devscripts
Version: 2.14.10
Severity: wishlist
Please warn against \x escape sequences for printf(1). bash's printf
supports them, but dash's doesn't:
$ bash -c 'printf "\x42\n"'
B
$ dash -c &#
id, I don't use --maintmaint these days, so if nobody else cares,
feel free to close the bug.
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/devscripts-devel
ady utilizing DANE, so there is no reason to
not use it.
Heh, patches welcome. Have fun implementing DANE validation. ;-)
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bi
for downloading binary packages:
$ apt-get download libegl1-mesa:i386
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/devscripts-devel
;
(If the variable were expanded by shell, command injection wouldn't be
even possible. You could still exploit argument injection, but that's
less exciting.)
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian
1.16.3-3
ii xz-utils 5.1.1alpha+20120614-2.1
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/devscripts-devel
.
If the package had architecture-specific build dependencies, then I
would have to use -a in this scenario, even though there's no
cross-building involved.
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
of safe_replace() is to defuse Perl regexes, which
normally let you execute arbitrary code.
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/devscripts-devel
$/_binary-${opt_buildarch}_Packages/;
The need for *_Packages should be documented in the REQUIREMENTS section
of the manpage.
On my machine, your implementation is ~100x slower than the current one.
:\
--
Jakub Wilk
___
de
* Johannes Schauer , 2015-09-11, 10:00:
How about doing it the following way then:
If dose-ceve is not installed, throw an error message and tell the user
to either install the dose-extra package or use the option
--simple-mode which uses the old behaviour.
Sounds good to me.
--
Jakub Wilk
seful on such systems.
If the wishlist bug comes with patch which enables either Dpkg::IPC or
IPC::Run after checking their availability, that may be implemented if
security concerns are not there.
This would be my preferred option, too.
I might write a patch implementing it lat
7;ve attached a more complete patch. It gets rid of now unused error
handling code, and updates debian/control.
--
Jakub Wilk
diff --git a/debian/control b/debian/control
--- a/debian/control
+++ b/debian/control
@@ -51,7 +51,6 @@
gnupg,
libdistro-info-perl,
l
This is an automated email from the git hooks/post-receive script.
jwilk pushed a change to branch master
in repository devscripts.
from 8d8ea3e licensecheck: parse multi-line copyright block (Closes:
#519080)
new c9db186 changelog: Fix typos
The 1 revisions listed above as "
This is an automated email from the git hooks/post-receive script.
jwilk pushed a commit to branch master
in repository devscripts.
commit c9db186d0f5207d88fdfecad66df2cdbe4c86011
Author: Jakub Wilk
Date: Sun Nov 22 21:00:46 2015 +0100
changelog: Fix typos
---
debian/changelog | 8
.
You should set LC_ALL, not LANG.
LANG can be overridden by various LC_* variables;
LC_ALL overrides them all.
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman
e,
local customs, and coded character set in the absence of the LC_ALL and
other LC_* (LC_COLLATE, LC_CTYPE, LC_MESSAGES, LC_MONETARY, LC_NUMERIC,
LC_TIME) environment variables.
[0]
http://pubs.opengroup.org/onlinepubs/009695399/basedefs/xbd_chap08.h
Package: devscripts
Version: 2.16.1
Severity: minor
$ man uscan | grep http::
parentheses of http::/URL as the sortable version index string.
It should be "://", not "::/".
--
Jakub Wilk
___
devscripts-devel mailing l
Package: devscripts
Version: 2.16.2
Severity: minor
$ man uscan | grep -w xip
jar, xip archive, repack it to the specified compression (see
repack xip archives, and the xz-utils package must be installed to
It should be s/xip/xpi/g.
--
Jakub Wilk
i sensible-utils 0.0.9
ii strace 4.11-1
ii unzip 6.0-20
ii wdiff 1.2.2-1+b1
ii wget1.17.1-1+b1
ii xz-utils 5.1.1alpha+20120614-2.1
--
Jakub Wilk
_
very intuitive name... Also, I was grepping for
"repack", not for "mk-origtargz", as the latter is mostly an
implementation detail.
Are you using "uupdate" or "gbp-import-orig --uscan"?
No.
--
Jakub Wilk
__
--no-symlink Don't rename nor repackage upstream tarball by not
calling mk-origtargz.
I think that would be fine if “by not calling mk-origtargz” was
removed.
Shouldn't it be s/repackage/repack/?
Other than that, it looks good to me.
--
Jakub Wilk
__
ackages devscripts depends on:
ii dpkg-dev 1.18.7
ii libc62.22-9
ii perl 5.22.2-1
pn python3:any
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/devscripts-devel
This is an automated email from the git hooks/post-receive script.
jwilk pushed a change to branch master
in repository devscripts.
from c0eb40e Fix typo: releasse -> release
new 5124772 changelog: Fix typo
The 1 revisions listed above as "new" are entirely new to this
reposit
This is an automated email from the git hooks/post-receive script.
jwilk pushed a commit to branch master
in repository devscripts.
commit 512477267df6f5cedc31434562ab1939026f3c53
Author: Jakub Wilk
Date: Wed Jun 8 16:23:08 2016 +0200
changelog: Fix typo
---
debian/changelog | 2 +-
1
This is an automated email from the git hooks/post-receive script.
jwilk pushed a commit to branch master
in repository devscripts.
commit 00f26d3a12f0e8327317e350321abbf25bddf472
Author: Jakub Wilk
Date: Tue Jun 28 21:55:24 2016 +0200
uscan: Fix gpgv existence check
---
debian
This is an automated email from the git hooks/post-receive script.
jwilk pushed a change to branch master
in repository devscripts.
from 8dec22a Replace git-import-orig references with gbp-import-orig
new 00f26d3 uscan: Fix gpgv existence check
The 1 revisions listed above as
This is an automated email from the git hooks/post-receive script.
jwilk pushed a change to branch master
in repository devscripts.
from 79acbd4 po4a update
new a375b84 Fix typos
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in
This is an automated email from the git hooks/post-receive script.
jwilk pushed a commit to branch master
in repository devscripts.
commit a375b8425411fc7cf974d4a7251b7c433927115d
Author: Jakub Wilk
Date: Wed Jun 29 10:59:42 2016 +0200
Fix typos
---
debian/changelog | 7
This is an automated email from the git hooks/post-receive script.
jwilk pushed a change to branch master
in repository devscripts.
from a375b84 Fix typos
new bbabac5 README: Fix typo
The 1 revisions listed above as "new" are entirely new to this
repository and will be describ
This is an automated email from the git hooks/post-receive script.
jwilk pushed a commit to branch master
in repository devscripts.
commit bbabac51699b4cf0378e64bbbc298d9740e8d170
Author: Jakub Wilk
Date: Sat Jul 2 20:37:41 2016 +0200
README: Fix typo
---
README | 2 +-
debian
This is an automated email from the git hooks/post-receive script.
jwilk pushed a commit to branch master
in repository devscripts.
commit e782e494f7b5bca77ced9b189df81712f369c43b
Author: Jakub Wilk
Date: Sun Jul 17 22:09:53 2016 +0200
edit-patch: Fix typos in comments
---
scripts/edit
This is an automated email from the git hooks/post-receive script.
jwilk pushed a change to branch master
in repository devscripts.
from fcf435d grep-excuses: Fix the script for the removal of
testing.pl from release.debian.org
new e782e49 edit-patch: Fix typos in comments
Th
This is an automated email from the git hooks/post-receive script.
jwilk pushed a change to branch master
in repository devscripts.
from 99ab0e4 Fix build failure due to flake8 warning in sadt
new 1437ccf wnpp-alert: Use HTTPS
The 1 revisions listed above as "new" are entirely
EOF in archive
tar: Error is not recoverable: exiting now
dpkg-deb: error: subprocess tar returned error exit status 2
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/l
h the trouble.
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/devscripts-devel
Package: devscripts
Version: 2.17.7
transition-check doesn't work:
$ transition-check
transition-check: Failed to retrieve transitions list:
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
"Inappropriate ioctl for device" doesn't make sense.
--
Jakub Wilk
___
devscripts-devel mailing list
devscripts-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/devscripts-devel
80 matches
Mail list logo
