From 75808db17caf8b960b351e3408e74142f4c85aac Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 14 Apr 2024 15:42:30 +0200 Subject: Adding upstream version 2.117.0. Signed-off-by: Daniel Baumann --- tags/l/lacks-ldconfig-trigger.tag | 20 +++++++++++++++++ .../l/lacks-unversioned-link-to-shared-library.tag | 26 ++++++++++++++++++++++ tags/l/lacks-versioned-link-to-shared-library.tag | 12 ++++++++++ tags/l/latest-changelog-entry-without-new-date.tag | 9 ++++++++ ...ian-changelog-entry-reuses-existing-version.tag | 15 +++++++++++++ ...est-debian-changelog-entry-without-new-date.tag | 9 ++++++++ tags/l/ldconfig-escape.tag | 14 ++++++++++++ tags/l/ldconfig-symlink-is-not-a-symlink.tag | 7 ++++++ tags/l/ldconfig-symlink-referencing-wrong-file.tag | 7 ++++++ tags/l/lengthy-symlink.tag | 10 +++++++++ tags/l/lib-recommends-documentation.tag | 12 ++++++++++ tags/l/libapp-perl-package-name.tag | 12 ++++++++++ ...ule-build-perl-needs-to-be-in-build-depends.tag | 7 ++++++ ...uild-tiny-perl-needs-to-be-in-build-depends.tag | 7 ++++++ tags/l/library-in-root-and-usr.tag | 12 ++++++++++ tags/l/library-not-linked-against-libc.tag | 14 ++++++++++++ tags/l/library-package-name-for-application.tag | 15 +++++++++++++ tags/l/license-file-listed-in-debian-copyright.tag | 6 +++++ tags/l/license-problem-bad-php-license.tag | 10 +++++++++ tags/l/license-problem-cc-by-nc-sa.tag | 5 +++++ tags/l/license-problem-convert-utf-code.tag | 15 +++++++++++++ ...m-font-adobe-copyrighted-fragment-no-credit.tag | 12 ++++++++++ ...nse-problem-font-adobe-copyrighted-fragment.tag | 9 ++++++++ tags/l/license-problem-gfdl-invariants-empty.tag | 11 +++++++++ tags/l/license-problem-gfdl-invariants.tag | 12 ++++++++++ tags/l/license-problem-gfdl-non-official-text.tag | 8 +++++++ tags/l/license-problem-json-evil.tag | 7 ++++++ ...cense-problem-md5sum-non-distributable-file.tag | 12 ++++++++++ tags/l/license-problem-md5sum-non-free-file.tag | 10 +++++++++ tags/l/license-problem-non-free-RFC-BCP78.tag | 11 +++++++++ tags/l/license-problem-non-free-RFC.tag | 11 +++++++++ tags/l/license-problem-non-free-img-lenna.tag | 23 +++++++++++++++++++ tags/l/license-problem-nvidia-intellectual.tag | 14 ++++++++++++ tags/l/license-problem-php-license.tag | 11 +++++++++ tags/l/license-problem-undefined-license.tag | 20 +++++++++++++++++ tags/l/link-to-shared-library-in-wrong-package.tag | 19 ++++++++++++++++ tags/l/linked-with-obsolete-library.tag | 20 +++++++++++++++++ tags/l/loads-obsolete-confmodule.tag | 7 ++++++ tags/l/lzma-deb-archive.tag | 6 +++++ 39 files changed, 467 insertions(+) create mode 100644 tags/l/lacks-ldconfig-trigger.tag create mode 100644 tags/l/lacks-unversioned-link-to-shared-library.tag create mode 100644 tags/l/lacks-versioned-link-to-shared-library.tag create mode 100644 tags/l/latest-changelog-entry-without-new-date.tag create mode 100644 tags/l/latest-debian-changelog-entry-reuses-existing-version.tag create mode 100644 tags/l/latest-debian-changelog-entry-without-new-date.tag create mode 100644 tags/l/ldconfig-escape.tag create mode 100644 tags/l/ldconfig-symlink-is-not-a-symlink.tag create mode 100644 tags/l/ldconfig-symlink-referencing-wrong-file.tag create mode 100644 tags/l/lengthy-symlink.tag create mode 100644 tags/l/lib-recommends-documentation.tag create mode 100644 tags/l/libapp-perl-package-name.tag create mode 100644 tags/l/libmodule-build-perl-needs-to-be-in-build-depends.tag create mode 100644 tags/l/libmodule-build-tiny-perl-needs-to-be-in-build-depends.tag create mode 100644 tags/l/library-in-root-and-usr.tag create mode 100644 tags/l/library-not-linked-against-libc.tag create mode 100644 tags/l/library-package-name-for-application.tag create mode 100644 tags/l/license-file-listed-in-debian-copyright.tag create mode 100644 tags/l/license-problem-bad-php-license.tag create mode 100644 tags/l/license-problem-cc-by-nc-sa.tag create mode 100644 tags/l/license-problem-convert-utf-code.tag create mode 100644 tags/l/license-problem-font-adobe-copyrighted-fragment-no-credit.tag create mode 100644 tags/l/license-problem-font-adobe-copyrighted-fragment.tag create mode 100644 tags/l/license-problem-gfdl-invariants-empty.tag create mode 100644 tags/l/license-problem-gfdl-invariants.tag create mode 100644 tags/l/license-problem-gfdl-non-official-text.tag create mode 100644 tags/l/license-problem-json-evil.tag create mode 100644 tags/l/license-problem-md5sum-non-distributable-file.tag create mode 100644 tags/l/license-problem-md5sum-non-free-file.tag create mode 100644 tags/l/license-problem-non-free-RFC-BCP78.tag create mode 100644 tags/l/license-problem-non-free-RFC.tag create mode 100644 tags/l/license-problem-non-free-img-lenna.tag create mode 100644 tags/l/license-problem-nvidia-intellectual.tag create mode 100644 tags/l/license-problem-php-license.tag create mode 100644 tags/l/license-problem-undefined-license.tag create mode 100644 tags/l/link-to-shared-library-in-wrong-package.tag create mode 100644 tags/l/linked-with-obsolete-library.tag create mode 100644 tags/l/loads-obsolete-confmodule.tag create mode 100644 tags/l/lzma-deb-archive.tag (limited to 'tags/l') diff --git a/tags/l/lacks-ldconfig-trigger.tag b/tags/l/lacks-ldconfig-trigger.tag new file mode 100644 index 0000000..b38f236 --- /dev/null +++ b/tags/l/lacks-ldconfig-trigger.tag @@ -0,0 +1,20 @@ +Tag: lacks-ldconfig-trigger +Severity: error +Check: libraries/shared/trigger/ldconfig +Renamed-From: + package-must-activate-ldconfig-trigger +Explanation: The package installs shared libraries in a directory controlled by + the dynamic library loader. Therefore, the package must trigger libc's + "ldconfig" trigger to ensure the ldconfig cache is updated. + . + If the package is using debhelper, dh_makeshlibs should + automatically discover this and add the trigger itself. + Otherwise, please add activate-noawait ldconfig to the + triggers file in the control member. + . + Note this tag may trigger for packages built with debhelper before + version 9.20151004. In such case, a simple rebuild will often be + sufficient to fix this issue. +See-Also: + debian-policy 8.1.1, + https://lists.debian.org/debian-devel/2015/08/msg00412.html diff --git a/tags/l/lacks-unversioned-link-to-shared-library.tag b/tags/l/lacks-unversioned-link-to-shared-library.tag new file mode 100644 index 0000000..92ad571 --- /dev/null +++ b/tags/l/lacks-unversioned-link-to-shared-library.tag @@ -0,0 +1,26 @@ +Tag: lacks-unversioned-link-to-shared-library +Severity: warning +Check: libraries/shared/links +Renamed-From: + dev-pkg-without-shlib-symlink +Explanation: A -dev package is supposed to install an unversioned + symbolic link that references the shared library by name. + . + There is no requirement that the names are otherwise related. + . + The dynamic linker uses the link to load the executable into memory. + . + In most cases, the symbolic link should be in the same folder as the library itself. + A major exception are libraries installed under /lib. In those cases, + the links should go into the corresponding folders under /usr. + . + For a library installed as /lib/i386-linux-gnu/libXYZ.so.V, a good link + would be /usr/lib/i386-linux-gnu/libXYZ.so. + . + This tag is emitted for the library package and not for the -dev package. + That is because Lintian looks for links after locating the library. The links can be + in any of several installables, but there is only one library for each set of links + pointing to it. +See-Also: + debian-policy 8.4 + Bug#963099 diff --git a/tags/l/lacks-versioned-link-to-shared-library.tag b/tags/l/lacks-versioned-link-to-shared-library.tag new file mode 100644 index 0000000..f2316ff --- /dev/null +++ b/tags/l/lacks-versioned-link-to-shared-library.tag @@ -0,0 +1,12 @@ +Tag: lacks-versioned-link-to-shared-library +Severity: error +Check: libraries/shared/links +Renamed-From: + ldconfig-symlink-missing-for-shlib +Explanation: The package should not only include the shared library itself, but also + the symbolic link which ldconfig would produce. (This is necessary, so + that the link gets removed by dpkg automatically when the package + gets removed.) If the symlink is in the package, check that the SONAME of the + library matches the info in the shlibs file. +See-Also: + debian-policy 8.1 diff --git a/tags/l/latest-changelog-entry-without-new-date.tag b/tags/l/latest-changelog-entry-without-new-date.tag new file mode 100644 index 0000000..bc724cd --- /dev/null +++ b/tags/l/latest-changelog-entry-without-new-date.tag @@ -0,0 +1,9 @@ +Tag: latest-changelog-entry-without-new-date +Severity: error +Check: debian/changelog +Explanation: The latest Debian changelog entry has either the same or even an + older date as the entry before. + . + This can result in subtle bugs due to the SOURCE_DATE_EPOCH + environment variable being the same between the older and newer + versions. diff --git a/tags/l/latest-debian-changelog-entry-reuses-existing-version.tag b/tags/l/latest-debian-changelog-entry-reuses-existing-version.tag new file mode 100644 index 0000000..b69254a --- /dev/null +++ b/tags/l/latest-debian-changelog-entry-reuses-existing-version.tag @@ -0,0 +1,15 @@ +Tag: latest-debian-changelog-entry-reuses-existing-version +Severity: warning +Check: debian/changelog +Explanation: The latest changelog entry has a version that matches one used in + the specified previous entry. All versions of a source package must be + unique even after a leading epoch has been stripped off. + . + Files generated by the current version of this source package would + conflict with some historical files. This is because the Debian archive + does not allow multiple files with the same name and different contents + and the generated .dsc, .deb, etc. do not embed the epoch in their + filenames. + . + Please pick another version, for example by increasing the Debian + revision. diff --git a/tags/l/latest-debian-changelog-entry-without-new-date.tag b/tags/l/latest-debian-changelog-entry-without-new-date.tag new file mode 100644 index 0000000..a5058a3 --- /dev/null +++ b/tags/l/latest-debian-changelog-entry-without-new-date.tag @@ -0,0 +1,9 @@ +Tag: latest-debian-changelog-entry-without-new-date +Severity: error +Check: debian/changelog +Explanation: The latest Debian changelog entry has either the same or even an + older date as the entry before. + . + This can result in subtle bugs due to the SOURCE_DATE_EPOCH + environment variable being the same between the older and newer + versions. diff --git a/tags/l/ldconfig-escape.tag b/tags/l/ldconfig-escape.tag new file mode 100644 index 0000000..bfe1522 --- /dev/null +++ b/tags/l/ldconfig-escape.tag @@ -0,0 +1,14 @@ +Tag: ldconfig-escape +Severity: info +Check: files/hierarchy/links +Renamed-From: + breakout-link +Explanation: The named link is located in the load path for the dynamic + linker but points outside that group of folders. + . + Packages should install public shared libraries into the load path. +See-Also: + Bug#243158, + Bug#964111, + Bug#971707, + Bug#968525 diff --git a/tags/l/ldconfig-symlink-is-not-a-symlink.tag b/tags/l/ldconfig-symlink-is-not-a-symlink.tag new file mode 100644 index 0000000..4338258 --- /dev/null +++ b/tags/l/ldconfig-symlink-is-not-a-symlink.tag @@ -0,0 +1,7 @@ +Tag: ldconfig-symlink-is-not-a-symlink +Severity: error +Check: libraries/shared/links +Explanation: The package installs a file with the name, ldconfig would use for + the symbolic link to reference the shared library. +See-Also: + debian-policy 8.1 diff --git a/tags/l/ldconfig-symlink-referencing-wrong-file.tag b/tags/l/ldconfig-symlink-referencing-wrong-file.tag new file mode 100644 index 0000000..f62db2a --- /dev/null +++ b/tags/l/ldconfig-symlink-referencing-wrong-file.tag @@ -0,0 +1,7 @@ +Tag: ldconfig-symlink-referencing-wrong-file +Severity: error +Check: libraries/shared/links +Explanation: The symbolic link references the wrong file. (It should reference + the shared library.) +See-Also: + debian-policy 8.1 diff --git a/tags/l/lengthy-symlink.tag b/tags/l/lengthy-symlink.tag new file mode 100644 index 0000000..6fd022b --- /dev/null +++ b/tags/l/lengthy-symlink.tag @@ -0,0 +1,10 @@ +Tag: lengthy-symlink +Severity: error +Check: files/symbolic-links +Explanation: This link goes up, and then back down into the same subdirectory. + Making it shorter will improve its chances of finding the right file + if the user's system has lots of symlinked directories. + . + If you use debhelper, running dh_link after creating the package structure + will fix this problem for you. +See-Also: debian-policy 10.5 diff --git a/tags/l/lib-recommends-documentation.tag b/tags/l/lib-recommends-documentation.tag new file mode 100644 index 0000000..c487a7a --- /dev/null +++ b/tags/l/lib-recommends-documentation.tag @@ -0,0 +1,12 @@ +Tag: lib-recommends-documentation +Severity: warning +Check: fields/package-relations +Explanation: The given package appears to be a library package, but it recommends + a documentation package. Doing this can pull in unwanted (and often + large) documentation packages since recommends are installed by default + and library packages are pulled by applications that use them. Users + usually only care about the library documentation if they're developing + against the library, not just using it, so the development package should + recommend the documentation instead. If there is no development package + (for modules for scripting languages, for example), consider Suggests + instead of Recommends. diff --git a/tags/l/libapp-perl-package-name.tag b/tags/l/libapp-perl-package-name.tag new file mode 100644 index 0000000..7c9904f --- /dev/null +++ b/tags/l/libapp-perl-package-name.tag @@ -0,0 +1,12 @@ +Tag: libapp-perl-package-name +Severity: error +Check: application-not-library +Explanation: This package contains a program in $PATH and is named + libapp-*-perl which usually implies that the upstream project on CPAN + is under the App:: hierarchy for applications. Instead of + libfoo-bar-perl it should be named foo-bar. + . + People tend to skip library-like named packages when looking for + applications in the package list and hence wouldn't notice this + package. +See-Also: https://perl-team.pages.debian.net/policy.html#Package_Naming_Policy diff --git a/tags/l/libmodule-build-perl-needs-to-be-in-build-depends.tag b/tags/l/libmodule-build-perl-needs-to-be-in-build-depends.tag new file mode 100644 index 0000000..c88e835 --- /dev/null +++ b/tags/l/libmodule-build-perl-needs-to-be-in-build-depends.tag @@ -0,0 +1,7 @@ +# Imported from pkg-perl-tools +Tag: libmodule-build-perl-needs-to-be-in-build-depends +Severity: error +Check: fields/package-relations +Experimental: yes +Explanation: libmodule-build-perl needs to be in Build-Depends, not in + Build-Depends-Indep, since it's used in the clean target. diff --git a/tags/l/libmodule-build-tiny-perl-needs-to-be-in-build-depends.tag b/tags/l/libmodule-build-tiny-perl-needs-to-be-in-build-depends.tag new file mode 100644 index 0000000..d5a983d --- /dev/null +++ b/tags/l/libmodule-build-tiny-perl-needs-to-be-in-build-depends.tag @@ -0,0 +1,7 @@ +# Imported from pkg-perl-tools +Tag: libmodule-build-tiny-perl-needs-to-be-in-build-depends +Severity: error +Check: fields/package-relations +Experimental: yes +Explanation: libmodule-build-tiny-perl needs to be in Build-Depends, not + in Build-Depends-Indep, since it's used in the clean target. diff --git a/tags/l/library-in-root-and-usr.tag b/tags/l/library-in-root-and-usr.tag new file mode 100644 index 0000000..5698bfb --- /dev/null +++ b/tags/l/library-in-root-and-usr.tag @@ -0,0 +1,12 @@ +Tag: library-in-root-and-usr +Severity: error +Check: usrmerge +Explanation: The package ships two files with the same name installed both in + /lib*/ and /usr/lib*/ (or their subdirectories). + This is not useful and is incompatible with the merged /usr directories + scheme. + . + Shared library files, both static and dynamic, must be installed in + the correct directories as documented in Policy 8.1. +See-Also: https://wiki.debian.org/UsrMerge, + debian-policy 8.1 diff --git a/tags/l/library-not-linked-against-libc.tag b/tags/l/library-not-linked-against-libc.tag new file mode 100644 index 0000000..63d4a5c --- /dev/null +++ b/tags/l/library-not-linked-against-libc.tag @@ -0,0 +1,14 @@ +Tag: library-not-linked-against-libc +Severity: error +Check: binaries/prerequisites +Explanation: The package installs a library which is not dynamically linked + against libc. + . + It is theoretically possible to have a library which doesn't use any + symbols from libc, but it is far more likely that this is a violation + of the requirement that "shared libraries must be linked against all + libraries that they use symbols from in the same way that binaries + are". +See-Also: + debian-policy 10.2, + Bug#698720 diff --git a/tags/l/library-package-name-for-application.tag b/tags/l/library-package-name-for-application.tag new file mode 100644 index 0000000..4287b27 --- /dev/null +++ b/tags/l/library-package-name-for-application.tag @@ -0,0 +1,15 @@ +Tag: library-package-name-for-application +Severity: info +Check: application-not-library +Experimental: yes +Explanation: This package contains a program in $PATH but is named like a + library. E.g. instead of libfoo-bar-perl it should be named just + foo-bar. + . + People tend to skip library-like named packages when looking for + applications in the package list and hence wouldn't notice this + package. See the reference for some (not perl-specific) reasoning. + . + In case the program in $PATH is only a helper tool and the package is + primarily a library, please add a Lintian override for this tag. +See-Also: https://perl-team.pages.debian.net/policy.html#Package_Naming_Policy diff --git a/tags/l/license-file-listed-in-debian-copyright.tag b/tags/l/license-file-listed-in-debian-copyright.tag new file mode 100644 index 0000000..b6dcaeb --- /dev/null +++ b/tags/l/license-file-listed-in-debian-copyright.tag @@ -0,0 +1,6 @@ +Tag: license-file-listed-in-debian-copyright +Severity: info +Check: debian/copyright/dep5 +Explanation: A file containing a software license is listed in + debian/copyright. That is not necessary. Please remove + the entry referring to the license file. diff --git a/tags/l/license-problem-bad-php-license.tag b/tags/l/license-problem-bad-php-license.tag new file mode 100644 index 0000000..014fa64 --- /dev/null +++ b/tags/l/license-problem-bad-php-license.tag @@ -0,0 +1,10 @@ +Tag: license-problem-bad-php-license +Severity: error +Check: cruft +Explanation: This package appears to be covered by version 2.x of the PHP license, + which is not appropriate for anything other than the PHP interpreter + itself. + . + Note that PEAR modules are not a part of the PHP interpreter and cannot + use this license. +See-Also: https://ftp-master.debian.org/REJECT-FAQ.html, Bug#616436 diff --git a/tags/l/license-problem-cc-by-nc-sa.tag b/tags/l/license-problem-cc-by-nc-sa.tag new file mode 100644 index 0000000..7a4e512 --- /dev/null +++ b/tags/l/license-problem-cc-by-nc-sa.tag @@ -0,0 +1,5 @@ +Tag: license-problem-cc-by-nc-sa +Severity: error +Check: cruft +Explanation: The given source file is copyrighted under the non-free + Creative Commons Non-Commercial Share-Alike (CC-NC-SA) license. diff --git a/tags/l/license-problem-convert-utf-code.tag b/tags/l/license-problem-convert-utf-code.tag new file mode 100644 index 0000000..7983c6f --- /dev/null +++ b/tags/l/license-problem-convert-utf-code.tag @@ -0,0 +1,15 @@ +Tag: license-problem-convert-utf-code +Severity: error +Check: cruft +Explanation: The following file source files include material under a + non-free license from Unicode Inc. Therefore, it is + not possible to ship this in main or contrib. + . + This license does not grant any permission + to modify the files (thus failing DFSG#3). Moreover, the license grant + seems to attempt to restrict use to "products supporting the Unicode + Standard" (thus failing DFSG#6). + . + In this case a solution is to use libicu and to remove this code + by repacking. +See-Also: Bug#823100 diff --git a/tags/l/license-problem-font-adobe-copyrighted-fragment-no-credit.tag b/tags/l/license-problem-font-adobe-copyrighted-fragment-no-credit.tag new file mode 100644 index 0000000..5583002 --- /dev/null +++ b/tags/l/license-problem-font-adobe-copyrighted-fragment-no-credit.tag @@ -0,0 +1,12 @@ +Tag: license-problem-font-adobe-copyrighted-fragment-no-credit +Severity: error +Check: fonts/postscript/type1 +Explanation: This type 1 font file includes some postscript fragment with a + non-free license of Adobe. In order to check if this tag is genuine + please follow the procedure described in the reference. + . + Moreover the fragment was likely verbatim copied from black + book without any credit to Adobe. + . + Should this be a false-positive, please override the tag. +See-Also: https://wiki.debian.org/qa.debian.org/type1nondfsg diff --git a/tags/l/license-problem-font-adobe-copyrighted-fragment.tag b/tags/l/license-problem-font-adobe-copyrighted-fragment.tag new file mode 100644 index 0000000..6c7667c --- /dev/null +++ b/tags/l/license-problem-font-adobe-copyrighted-fragment.tag @@ -0,0 +1,9 @@ +Tag: license-problem-font-adobe-copyrighted-fragment +Severity: error +Check: fonts/postscript/type1 +Explanation: This type 1 font file includes some postscript fragment with a + non-free license of Adobe. In order to check if this tag is genuine + please follow the procedure described in the reference. + . + Should this be a false-positive, please override the tag. +See-Also: https://wiki.debian.org/qa.debian.org/type1nondfsg diff --git a/tags/l/license-problem-gfdl-invariants-empty.tag b/tags/l/license-problem-gfdl-invariants-empty.tag new file mode 100644 index 0000000..3689372 --- /dev/null +++ b/tags/l/license-problem-gfdl-invariants-empty.tag @@ -0,0 +1,11 @@ +Tag: license-problem-gfdl-invariants-empty +Severity: info +Check: cruft +Explanation: The given source file is licensed under GFDL, but without any + precision about the presence of invariant sections, front-cover or + back-cover text. + . + GFDL license explicitly requests you to document this non-presence. + . +See-Also: https://wiki.debian.org/qa.debian.org/gfdlinvariant, + https://www.debian.org/vote/2006/vote_001 diff --git a/tags/l/license-problem-gfdl-invariants.tag b/tags/l/license-problem-gfdl-invariants.tag new file mode 100644 index 0000000..81abe73 --- /dev/null +++ b/tags/l/license-problem-gfdl-invariants.tag @@ -0,0 +1,12 @@ +Tag: license-problem-gfdl-invariants +Severity: error +Check: cruft +Explanation: The given source file is licensed under GFDL with invariant + section or front-cover or back-cover text. + . + GFDL with invariant sections, front-cover or back-cover texts are not + suitable for main. + . + If this file be multi-licensed, please override the tag. +See-Also: https://wiki.debian.org/qa.debian.org/gfdlinvariant, + https://www.debian.org/vote/2006/vote_001 diff --git a/tags/l/license-problem-gfdl-non-official-text.tag b/tags/l/license-problem-gfdl-non-official-text.tag new file mode 100644 index 0000000..d1dc70f --- /dev/null +++ b/tags/l/license-problem-gfdl-non-official-text.tag @@ -0,0 +1,8 @@ +Tag: license-problem-gfdl-non-official-text +Severity: pedantic +Check: cruft +Explanation: The given source file is licensed under GFDL, but using a + non-official text for the "no invariant sections" part. + . + Please ask upstream to always use (case insensitive): + with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. diff --git a/tags/l/license-problem-json-evil.tag b/tags/l/license-problem-json-evil.tag new file mode 100644 index 0000000..867abed --- /dev/null +++ b/tags/l/license-problem-json-evil.tag @@ -0,0 +1,7 @@ +Tag: license-problem-json-evil +Severity: error +Check: cruft +Explanation: The given source file is copyrighted under the non-free + license of json and the infamous clause: + The Software shall be used for Good, not Evil. +See-Also: https://wiki.debian.org/qa.debian.org/jsonevil diff --git a/tags/l/license-problem-md5sum-non-distributable-file.tag b/tags/l/license-problem-md5sum-non-distributable-file.tag new file mode 100644 index 0000000..8dca00a --- /dev/null +++ b/tags/l/license-problem-md5sum-non-distributable-file.tag @@ -0,0 +1,12 @@ +Tag: license-problem-md5sum-non-distributable-file +Severity: error +Check: files/banned +Explanation: The following file is not distributable even in the non-free + archive. + . + Please re-package the package without the file (if possible) + or ask the FTP-masters to remove the package. + . + If the package has been uploaded to Debian before, please + remember to also notify snapshot.debian.org about this + package containing a non-distributable file. diff --git a/tags/l/license-problem-md5sum-non-free-file.tag b/tags/l/license-problem-md5sum-non-free-file.tag new file mode 100644 index 0000000..f55f3db --- /dev/null +++ b/tags/l/license-problem-md5sum-non-free-file.tag @@ -0,0 +1,10 @@ +Tag: license-problem-md5sum-non-free-file +Severity: error +Check: files/non-free +Explanation: The following file is not suitable for main or contrib. + . + Please re-package the package without the file (if possible) + or ask the FTP-masters to remove the package. + . + You could also split this package and move this file into the + non-free archive. diff --git a/tags/l/license-problem-non-free-RFC-BCP78.tag b/tags/l/license-problem-non-free-RFC-BCP78.tag new file mode 100644 index 0000000..9d020d5 --- /dev/null +++ b/tags/l/license-problem-non-free-RFC-BCP78.tag @@ -0,0 +1,11 @@ +Tag: license-problem-non-free-RFC-BCP78 +Severity: error +Check: cruft +Explanation: The given source file is licensed under the non-free RFC + license (BCP78). + . + The majority of IETF documents, such as RFCs, are not licensed + under DFSG-free terms, and should thus not be included in Debian main. + . + If this file is multi-licensed, please override the tag. +See-Also: https://wiki.debian.org/NonFreeIETFDocuments diff --git a/tags/l/license-problem-non-free-RFC.tag b/tags/l/license-problem-non-free-RFC.tag new file mode 100644 index 0000000..72f0059 --- /dev/null +++ b/tags/l/license-problem-non-free-RFC.tag @@ -0,0 +1,11 @@ +Tag: license-problem-non-free-RFC +Severity: error +Check: cruft +Explanation: The given source file is licensed under the newer RFC + license. + . + The majority of IETF documents, such as RFCs, are not licensed + under DFSG-free terms, and should thus not be included in Debian main. + . + If this file is multi-licensed, please override the tag. +See-Also: https://wiki.debian.org/NonFreeIETFDocuments diff --git a/tags/l/license-problem-non-free-img-lenna.tag b/tags/l/license-problem-non-free-img-lenna.tag new file mode 100644 index 0000000..4f2ad80 --- /dev/null +++ b/tags/l/license-problem-non-free-img-lenna.tag @@ -0,0 +1,23 @@ +Tag: license-problem-non-free-img-lenna +Severity: error +Check: files/banned/lenna +See-Also: https://en.wikipedia.org/wiki/Lenna, https://www.debian.org/vote/2012/vote_002, Bug#771191 +Explanation: The given source file is cropped from a Playboy centerfold. + . + This image is a picture of Lena Söderberg, + shot by photographer Dwight Hooker, cropped from + the centerfold of the November 1972 issue of Playboy magazine. + . + According to Hutchison, Jamie (May-June 2001). "Culture, + Communication, and an Information Age Madonna" (PDF). + IEEE Professional Communication Society Newsletter 45 (3). + (page 5 second column second paragraph), this image is + distributable but not free. + . + Moreover, Lenna photo has been pointed to as an example + of sexism in the sciences, reinforcing gender stereotypes. + . + Please use well known and free test images. + . + Please also submit the md5sum, sha1sum, and sha256 of this file + as a bug report for Lintian. diff --git a/tags/l/license-problem-nvidia-intellectual.tag b/tags/l/license-problem-nvidia-intellectual.tag new file mode 100644 index 0000000..474b34b --- /dev/null +++ b/tags/l/license-problem-nvidia-intellectual.tag @@ -0,0 +1,14 @@ +Tag: license-problem-nvidia-intellectual +Severity: error +Check: cruft +Explanation: The following source files include material under a + non-distributable license from Nvidia. Therefore, it is + not even possible to ship this in non-free. + . + Please re-package the package without the file (if possible) + or ask the FTP-masters to remove the package. + . + If the package has been uploaded to Debian before, please + remember to also notify snapshot.debian.org about this + package containing a non-distributable file. +See-Also: https://bugs.debian.org/724930#27 diff --git a/tags/l/license-problem-php-license.tag b/tags/l/license-problem-php-license.tag new file mode 100644 index 0000000..5746f28 --- /dev/null +++ b/tags/l/license-problem-php-license.tag @@ -0,0 +1,11 @@ +Tag: license-problem-php-license +Severity: error +Check: cruft +Explanation: This package appears to be covered by version 3.0 (exactly) of the + PHP license. This license is not applicable to anything that is not PHP + and has no contributions from the PHP Group. + . + This tag is not emitted for packages from pecl.php.net or pear.php.net as determined by + the Source: field in debian/copyright. +See-Also: https://ftp-master.debian.org/php-license.html, + https://ftp-master.debian.org/REJECT-FAQ.html diff --git a/tags/l/license-problem-undefined-license.tag b/tags/l/license-problem-undefined-license.tag new file mode 100644 index 0000000..d85235d --- /dev/null +++ b/tags/l/license-problem-undefined-license.tag @@ -0,0 +1,20 @@ +Tag: license-problem-undefined-license +Severity: error +Check: debian/copyright/dep5 +See-Also: https://ftp-master.debian.org/REJECT-FAQ.html +Explanation: Your copyright file references a license that is not defined. + Due to copyright law or treaties, files that are not available under + a defined license are non-free and non-re-distributable. + . + Referencing an undefined license could mean the file cannot be + distributed in Debian or it could simply mean that the existing + license needs to be documented. In both cases, + the copyright file should be updated to reflect reality. + . + Please re-package the package without the file (if possible) + or ask the FTP-masters to remove the package. + . + If the package has been uploaded to Debian before, and if + affected files cannot be distributed in Debian please + remember to also notify snapshot.debian.org about this + package containing a non-distributable file. diff --git a/tags/l/link-to-shared-library-in-wrong-package.tag b/tags/l/link-to-shared-library-in-wrong-package.tag new file mode 100644 index 0000000..1e09451 --- /dev/null +++ b/tags/l/link-to-shared-library-in-wrong-package.tag @@ -0,0 +1,19 @@ +Tag: link-to-shared-library-in-wrong-package +Severity: warning +Check: libraries/shared/links +Renamed-From: + non-dev-pkg-with-shlib-symlink +Explanation: Although this package is not a "-dev" package, it installs a + "libsomething.so" symbolic link referencing the corresponding shared + library. When the link doesn't include the version number, it is used by + the linker when other programs are built against this shared library. + . + Shared libraries are supposed to place such symbolic links in their + respective "-dev" packages, so it is a bug to include it with the main + library package. + . + However, if this is a small package which includes the runtime and the + development libraries, this is not a bug. In the latter case, please + override this warning. +See-Also: + debian-policy 8.4 diff --git a/tags/l/linked-with-obsolete-library.tag b/tags/l/linked-with-obsolete-library.tag new file mode 100644 index 0000000..c9a09a0 --- /dev/null +++ b/tags/l/linked-with-obsolete-library.tag @@ -0,0 +1,20 @@ +Tag: linked-with-obsolete-library +Severity: info +Check: libraries/shared/obsolete +Explanation: This tag is currently only issued for libcblas.so. For an explanation, + please continue below. + . + The symbols in libcblas.so, which represent the CBLAS API, + were merged into libblas.so. (Note the missing letter C.) + Please use libblas.so instead. + . + The old library is still being shipped until all packages have modified + their build systems, but it is not managed by update-alternatives + and may result in poor performance. Please do not use it anymore. + . + Some packages may require functionality specific to Atlas3, which is not + implemented by other BLAS/CBLAS alternatives. Please override the + tag if your package falls into that category. +See-Also: https://wiki.debian.org/DebianScience/LinearAlgebraLibraries , + https://lists.debian.org/debian-devel/2019/10/msg00273.html , + https://salsa.debian.org/science-team/lapack/-/blob/master/debian/README.if-you-look-for-libcblas.so.3 diff --git a/tags/l/loads-obsolete-confmodule.tag b/tags/l/loads-obsolete-confmodule.tag new file mode 100644 index 0000000..fa0e3d4 --- /dev/null +++ b/tags/l/loads-obsolete-confmodule.tag @@ -0,0 +1,7 @@ +Tag: loads-obsolete-confmodule +Severity: warning +Check: debian/debconf +Explanation: The maintainer script uses an obsolete name for a debconf confmodule. + Shell scripts should source /usr/share/debconf/confmodule, while + Perl scripts should use Debconf::Client::ConfModule. +See-Also: debconf-devel(7) diff --git a/tags/l/lzma-deb-archive.tag b/tags/l/lzma-deb-archive.tag new file mode 100644 index 0000000..abb81a6 --- /dev/null +++ b/tags/l/lzma-deb-archive.tag @@ -0,0 +1,6 @@ +Tag: lzma-deb-archive +Severity: error +Check: deb-format +Explanation: The data portion of this binary package is compressed with lzma. + This is supported by dpkg but not yet permitted in the Debian archive. + Such a package will be rejected by DAK. -- cgit v1.2.3