This package provides an ELF binary that lacks the "read-only relocation" link flag. This package was likely not built with the default Debian compiler flags defined by dpkg-buildflags. If built using dpkg-buildflags directly, be sure to import LDFLAGS. Please refer to https://wiki.debian.org/Hardening for details. Visibility: warning Show-Always: no Check: binaries/hardening
[opt/trinity/lib/libkipi.so.0.1.1]
This package provides an ELF binary that lacks the "bindnow" linker flag. This is needed (together with "relro") to make the "Global Offset Table" (GOT) fully read-only. The bindnow feature trades startup time for improved security. Please consider enabling this feature or consider overriding the tag (possibly with a comment about why). If you use dpkg-buildflags, you may have to add hardening=+bindnow or hardening=+all to DEB_BUILD_MAINT_OPTIONS. The relevant compiler flags are set in LDFLAGS. Please refer to https://wiki.debian.org/Hardening for details. Visibility: info Show-Always: no Check: binaries/hardening
[opt/trinity/lib/libkipi.so.0.1.1]
[Trinity]
A file is not valid UTF-8. Debian has used UTF-8 for many years. Support for national encodings is being phased out. This file probably appears to users in mangled characters (also called mojibake). Packaging control files must be encoded in valid UTF-8. Please convert the file to UTF-8 using iconv or a similar tool. Visibility: warning Show-Always: no Check: files/encoding Renamed from: national-encoding-in-text-file debian-changelog-file-uses-obsolete-national-encoding debian-control-file-uses-obsolete-national-encoding debian-copyright-file-uses-obsolete-national-encoding debian-news-file-uses-obsolete-national-encoding debian-tests-control-uses-national-encoding doc-base-file-uses-obsolete-national-encoding national-encoding-in-debconf-template national-encoding-in-manpage
All files in this package are architecture-independent, but the package is not marked Architecture: all. The package should probably be marked Architecture: all. Please refer to Debian Policy Manual section 5.6.8 for details. Visibility: info Show-Always: no Check: files/architecture This tag is experimental.
[Trinity]
The previous version of this package had a different version epoch to the current version but the upstream version did not go "backwards". For example, the previous package version was "1:1.0-1" and the current version is "2:2.0-1". This was likely an accidental bump or addition of an epoch. Epochs exist to cope with changes to the upstream version numbering scheme. Whilst they are a powerful tool, increasing or adding an epoch has many downsides including causing issues with versioned dependencies, being misleading to users and being aesthetically unappealing. Whilst they should be avoided, valid reasons to add or increment the epoch include: - Upstream changed their versioning scheme in a way that makes the latest version lower than the previous one. - You need to permanently revert to a lower upstream version. Temporary revertions (eg. after an NMU) should use not modify or introduce an epoch - please use the CURRENT+reallyFORMER until you can upload the latest version again. If you are unsure whether you need to increase the epoch for a package, please consult the debian-devel mailing list. Visibility: error Show-Always: no Check: debian/changelog
The package is not safely binNMUable because an arch:any package depends
on another arch:any package with a (= ${source:Version}) relationship.
Please use (= ${binary:Version}) instead.
Visibility: error
Show-Always: no
Check: debian/version-substvars
This package seems to contain the development files fer a shared library,
but the requirement for that shared library to be installed does not
include the same version.
A -dev package should normally use (= ${binary:Version}) for the
prerequisite on the shared library. That will ensure that programs compile
and link properly. The symbolic links for the dynamic linker will also
point to the correct places.
To be sure, there are some circumstances when a weak prerequisite is
warranted, for example to prevent the breaking of binNMUs with
architecture-independent -dev packages. Then something like (>=
${source:Upstream-Version}), (<< ${source:Upstream-Version}+1~) may be the
right approach, or possibly ${source:Version} instead. The goal there is
to ensure that a new upstream version of the library does not satisfy the
prerequisite, since any minor version change might break the *.so links.
Please refer to Debian Policy Manual section 8.5 for details.
Visibility: error
Show-Always: no
Check: debian/control/prerequisite/development
[debian/control:16]
The code in debian/rules requires a prerequisite that is not presently listed in the package's Build-Depends. In the special case of Python, affected packages should Build-Depend on one of python3, python3-all, python3-dev, or python3-all-dev. Which one depends on whether a package supports multiple Python versions, and also whether the package builds Python modules or uses Python only as part of the build process. Packages that depend on a specific Python version may build-depend on any appropriate pythonX.Y or pythonX.Y-dev package instead. The condition you see in the context is not a recommendation on what to add. If you see a list, more than likely only one member is needed to make this tag go away. You probably also do not need the :any multiarch acceptor, if you see one. Please refer to Debian Policy Manual section 4.2 for details. Visibility: error Show-Always: no Check: debian/rules Renamed from: missing-build-dependency missing-python-build-dependency
The version number of your source package ends in +b and a number or has a Debian revision containing three parts. These version numbers are used by binary NMUs and should not be used as the source version. (The +b form is the current standard; the three-part version number now obsolete.) Please refer to Debian Developer's Reference section 5.10.2.1 for details. Visibility: warning Show-Always: no Check: fields/version
The previous version of this package had a different version epoch (eg. 2:1.0-1) to the current version but there's no reference to this in the changelog entry. Epochs exist to cope with changes to the upstream version numbering scheme. Whilst they are a powerful tool, increasing or adding an epoch has many downsides including causing issues with versioned dependencies, being misleading to users and being aesthetically unappealing. Whilst they should be avoided, valid reasons to add or increment the epoch include: - Upstream changed their versioning scheme in a way that makes the latest version lower than the previous one. - You need to permanently revert to a lower upstream version. Temporary revertions (eg. after an NMU) should use not modify or introduce an epoch - please use the CURRENT+reallyFORMER until you can upload the latest version again. If you are unsure whether you need to increase the epoch for a package, please consult the debian-devel mailing list. Lintian looks in this version's changelog entry for the phrase "epoch". Visibility: warning Show-Always: no Check: debian/changelog
A file is not valid UTF-8. Debian has used UTF-8 for many years. Support for national encodings is being phased out. This file probably appears to users in mangled characters (also called mojibake). Packaging control files must be encoded in valid UTF-8. Please convert the file to UTF-8 using iconv or a similar tool. Visibility: warning Show-Always: no Check: files/encoding Renamed from: national-encoding-in-text-file debian-changelog-file-uses-obsolete-national-encoding debian-control-file-uses-obsolete-national-encoding debian-copyright-file-uses-obsolete-national-encoding debian-news-file-uses-obsolete-national-encoding debian-tests-control-uses-national-encoding doc-base-file-uses-obsolete-national-encoding national-encoding-in-debconf-template national-encoding-in-manpage
This source package is not Debian-native but it does not have a debian/watch file. This file is used for automatic detection of new upstream versions by the Debian External Health Status project and other project infrastructure. If this package is maintained upstream, please consider adding a debian/watch file to detect new releases. If the package is not maintained upstream or if upstream uses a distribution mechanism that cannot be meaningfully monitored by uscan and the Debian External Health Status project, please consider adding a debian/watch file containing only comments documenting the situation. Please refer to Debian Policy Manual section 4.11 and the uscan(1) manual page for details. Visibility: info Show-Always: no Check: debian/watch
The named field for an installation package in debian/control has the same value as the one inherited from the source paragraph. In the interest of shorter and clearer files, you may wish to take advantage of the inheritance rules. This field is redundant. Visibility: info Show-Always: no Check: debian/control/field/redundant Renamed from: binary-control-field-duplicates-source
[debian/control:30]
This package does not use the dh sequencer in debian/rules. While maintainers may use a variety of build systems, this one is by far the most popular. Maintainers are strongly encouraged to use the dh sequencer in new packages and convert existing ones when appropriate. Visibility: info Show-Always: no Check: debian/rules/dh-sequencer
The source package refers to a Standards-Version older than the one that was current at the time the package was created (according to the timestamp of the latest debian/changelog entry). Please consider updating the package to current Policy and setting this control field appropriately. If the package is already compliant with the current standards, you don't have to re-upload the package just to adjust the Standards-Version control field. However, please remember to update this field next time you upload the package. See /usr/share/doc/debian-policy/upgrading-checklist.txt.gz in the debian-policy package for a summary of changes in newer versions of Policy. Please refer to https://www.debian.org/doc/debian-policy/upgrading-checklist.html for details. Visibility: info Show-Always: no Check: fields/standards-version
Based on the content of the maintainer and uploader fields this package is co-maintained but there are no Vcs-* fields. It is recommended that shared maintenance of packages are co-ordinated via a revision control system. Visibility: pedantic Show-Always: no Check: fields/vcs Renamed from: co-maintained-package-with-no-vcs-headers
This package does not use a machine-readable debian/copyright file. This format makes it easier to review licenses and can be easily parsed by Lintian. Please refer to https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ for details. Visibility: pedantic Show-Always: no Check: debian/copyright/dep5
[debian/copyright]
This non-native package lacks a Homepage field. If the package has an upstream home page that contains useful information or resources for the end user, consider adding a Homepage control field to debian/control. Please refer to Debian Policy Manual section 5.6.23 for details. Visibility: pedantic Show-Always: no Check: fields/homepage
This package uses a debhelper compatibility level that is no longer recommended. Please consider using the recommended level. For most packages, the best way to set the compatibility level is to specify debhelper-compat (= X) as a Build-Depends in debian/control. You can also use the debian/compat file or export DH_COMPAT in debian/rules. If no level is selected debhelper defaults to level 1, which is deprecated. Please refer to the debhelper(7) manual page for details. Visibility: pedantic Show-Always: no Check: debhelper
The field Rules-Requires-Root is missing from the file debian/control. Over time, Debian has sucessively narrowed the steps for which elevated privileges are required. It speeds up the building of installation packages in the archive. Eventually, Debian will switch the default archive-wide behaviour to expedite the build process further. Please declare explicitly that the sources do not require root privileges. You can use the setting Rules-Requires-Root: no in the source stanza of debian/control, but please verify with diffoscope(1) that the installation packages produced are in fact identical. Please refer to /usr/share/doc/dpkg/rootless-builds.txt.gz, Debian Policy Manual section 4.9.2, and Debian Policy Manual section 5.6.31 for details. Visibility: pedantic Show-Always: no Check: debian/control/field/rules-requires-root Renamed from: rules-requires-root-missing
[debian/control]
This source package is not Debian-native but it does not have a debian/upstream/metadata file. The Upstream MEtadata GAthered with YAml (UMEGAYA) project is an effort to collect meta-information about upstream projects from any source package. This file is in YAML format and it is used in to feed the data in the UltimateDebianDatabase. For example, it can contains the way the authors want their software be cited in publications and some bibliographic references about the software. Please add a debian/upstream/metadata file. Please refer to https://dep-team.pages.debian.net/deps/dep12/ and https://wiki.debian.org/UpstreamMetadata for details. Visibility: pedantic Show-Always: no Check: debian/upstream/metadata This tag is experimental.
This is the debhelper compat level used specified by this package. Visibility: classification Show-Always: no Check: debhelper This tag is a classification. There is no issue in your package.
This is the build system that Lintian believes the package is using. Visibility: classification Show-Always: no Check: debhelper This tag is a classification. There is no issue in your package.
[debian/rules]
The number of patches according to the debian/patches/series file. Visibility: classification Show-Always: no Check: debian/patches/count This tag is a classification. There is no issue in your package.
The package is co-maintained but not team-maintained according to the maintainer/uploaders fields in the debian/control file. Visibility: classification Show-Always: no Check: fields/vcs This tag is a classification. There is no issue in your package.
This package uses the specified patch system (eg. "quilt" or "dpatch"). Visibility: classification Show-Always: no Check: debian/patches This tag is a classification. There is no issue in your package.
This is the source format declared in the package. Visibility: classification Show-Always: no Check: debian/source-dir This tag is a classification. There is no issue in your package.
The standards version of the package according to Standards-Version field in the debian/control file. Visibility: classification Show-Always: no Check: fields/standards-version This tag is a classification. There is no issue in your package.
[Trinity]
[Trinity]
Lintian run for libkipi-trinity package.
|
Name
|
|
|
|---|---|---|
| Source package | libkipi-trinity_4:14.1.6~pre1-0ubuntu22.04.0+2 |
|
| System tar | system.tar.xz |
|
| Package upload | libkipi-trinity_4:14.1.6~pre1-0ubuntu22.04.0+2 |
|
|
Name
|
|
|
|---|---|---|
| Lintian report | lintian: libkipi0-trinity, libkipi0-trinity-dev | |
| Lintian report | lintian: libkipi-trinity | |
| Debug log | debusine:work-request-debug-logs |
Work requests that must be completed before this one can run.
| 163580 | 2 weeks, 2 days | Worker | sbuild: libkipi-trinity_4:14.1.6~pre1-0ubuntu22.04.0+2 (amd64) | Completed | Success |
This work request is not required by any other one.
Internal collection: workflow-163562
backend: unshare build_architecture: amd64 environment: debian/match:codename=jammy exclude_tags: [] fail_on_severity: error include_tags: [] input: binary_artifacts: - internal@collections/name:build-amd64 source_artifact: 586387@artifacts output: {} target_distribution: debian:jammy
backend: unshare build_architecture: amd64 environment: debian/match:codename=jammy exclude_tags: [] fail_on_severity: error include_tags: [] input: binary_artifacts: - internal@collections/name:build-amd64 source_artifact: 586387@artifacts output: {} target_distribution: debian:jammy task_configuration: 1021
provided: - task:group:debusine::Admins - task:group:debusine::TDE-Owners - task:scope:debusine - task:source-package:libkipi-trinity - task:workspace:debusine:trinity-sb required: - worker:executor:unshare - worker:task:worker:lintian:version:1 - worker:type:external
configuration_context: jammy environment_id: 27656 input_binary_artifacts_ids: - 591143 input_source_artifact_id: 586387 parameter_summary: libkipi-trinity_4:14.1.6~pre1-0ubuntu22.04.0+2 runtime_context: binary-all+binary-any+source:jammy subject: libkipi-trinity
{ "step": "lintian-amd64", "display_name": "Lintian for amd64+all+source" }
{ "on_success": [ { "action": "update-collection-with-artifacts", "variables": null, "collection": "internal@collections", "name_template": "lintian-amd64", "artifact_filters": { "category": "debian:lintian" } } ] }
{ "runtime_statistics": { "memory": 3285876736, "cpu_time": 47, "duration": 30, "cpu_count": 20, "disk_space": 794591232, "available_memory": 33649803264, "available_disk_space": 16824901632 } }