Bug#1130914: fixed in pupnp 1:1.14.31-1
Sven Geuer <[email protected]>
| Newsgroups | gmane.linux.debian.devel.multimedia |
|---|---|
| Message-ID | <1f51674f8de25790cbb0e83660d41fbe42c4965e.camel__5573.38003288663$1782381096$gmane$org@debian.org> |
Control: found -1 1:1.14.31-1 On Mon, 27 Apr 2026 01:03:19 +0000 Debian FTP Masters <[email protected]> wrote: > Source: pupnp > Source-Version: 1:1.14.31-1 > Done: Sebastian Ramacher <[email protected]> > > We believe that the bug you reported is fixed in the latest version of > pupnp, which is due to be installed in the Debian FTP archive. > > A summary of the changes between this version and the previous one is > attached. > [...] > Changes: > pupnp (1:1.14.31-1) unstable; urgency=medium > . > * New upstream version 1.14.31 > - Fix CVE-2026-41682 > - Fix cmake export (Closes: #1130914) The bug still exists in pupnp 1:1.14.31-1. The relevant lines have not been touched upstream [1],[2]. Also, upstream does not claim the cmake export being fixed [3]. Please find attached the patch fixing the issue for pupnp 1:1.14.31-1. Please release a 1:1.14.31-2 version with this patch applied. Thanks, Sven [1] https://sources.debian.org/src/pupnp/1%3A1.14.31-1/ixml/CMakeLists.txt#L61 - L63 [2] https://sources.debian.org/src/pupnp/1%3A1.14.31-1/upnp/CMakeLists.txt#L166 - L168 [3] https://sources.debian.org/src/pupnp/1%3A1.14.31-1/ChangeLog#L1 - L48 -- GPG Fingerprint 3DF5 E8AA 43FC 9FDF D086 F195 ADF5 0EDA F8AD D585 -- GPG Fingerprint 3DF5 E8AA 43FC 9FDF D086 F195 ADF5 0EDA F8AD D585 -- GPG Fingerprint 3DF5 E8AA 43FC 9FDF D086 F195 ADF5 0EDA F8AD D585
0002-Fix-ixml+upnp-CMakeLists.txt-1.14.31-1.patch
(text/x-patch, 3.1 KB)
Description: Fix usage of INCLUDES DESTINATION In ixml/CMakeLists.txt and upnp/CMakeLists.txt: INCLUDES DESTINATION is not an <artifact-kind> and thus does not come with <artifact-option>s like e.g. COMPONENT. At least with cmake 4, the strings up to the next <artifact-kind> get considered as paths which do not exist, resulting in invalid 'INTERFACE_INCLUDE_DIRECTORIES ...' lines in the generated files /usr/lib/*/cmake/IXML/IXML.cmake and /usr/lib/*/cmake/UPNP/UPNP.cmake. . This patch drops the false 'COMPONENT UPNP_Development' lines. As a saveguard the remaining 'INCLUDES DESTINATION...' lines are moved to the end of the respective invocation of 'install(TARGET...)' as the cmake manual suggests, see https://cmake.org/cmake/help/v4.0/command/install.html#signatures. Author: Sven Geuer <[email protected]> Origin: backport, https://github.com/pupnp/pupnp/pull/534 Forwarded: not-needed Last-Update: 2026-03-13 --- This patch header follows DEP-3: http://dep.debian.net/deps/dep3/ --- a/ixml/CMakeLists.txt +++ b/ixml/CMakeLists.txt @@ -58,9 +58,6 @@ EXPORT IXML ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_Development - INCLUDES - DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp - COMPONENT UPNP_Development LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_RunTime NAMELINK_COMPONENT UPNP_Development @@ -68,6 +65,7 @@ COMPONENT UPNP_Development RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR} COMPONENT UPNP_RunTime + INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp ) endif() @@ -111,9 +109,6 @@ EXPORT IXML ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_Development - INCLUDES - DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp - COMPONENT UPNP_Development LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_RunTime NAMELINK_COMPONENT UPNP_Development @@ -121,6 +116,7 @@ COMPONENT UPNP_Development RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR} COMPONENT UPNP_RunTime + INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp ) endif() --- a/upnp/CMakeLists.txt +++ b/upnp/CMakeLists.txt @@ -163,9 +163,6 @@ EXPORT UPNP ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_Development - INCLUDES - DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp - COMPONENT UPNP_Development LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_RunTime NAMELINK_COMPONENT UPNP_Development @@ -173,6 +170,7 @@ COMPONENT UPNP_Development RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR} COMPONENT UPNP_RunTime + INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp ) endif() @@ -230,9 +228,6 @@ EXPORT UPNP ARCHIVE DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_Development - INCLUDES - DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp - COMPONENT UPNP_Development LIBRARY DESTINATION ${CMAKE_INSTALL_LIBDIR} COMPONENT UPNP_RunTime NAMELINK_COMPONENT UPNP_Development @@ -240,6 +235,7 @@ COMPONENT UPNP_Development RUNTIME DESTINATION ${CMAKE_INSTALL_BINDIR} COMPONENT UPNP_RunTime + INCLUDES DESTINATION ${CMAKE_INSTALL_INCLUDEDIR}/upnp ) endif()
signature.asc
(application/pgp-signature, 854 B)
-----BEGIN PGP SIGNATURE----- iQJDBAABCgAtFiEEPfXoqkP8n9/QhvGVrfUO2vit1YUFAmo8+asPHHNnZUBkZWJp YW4ub3JnAAoJEK31Dtr4rdWFA/wP+walLyOLlA1DWvVaXpW87MCai2NbO+nIWCvF HBLAIe3c1K8p2BjjQRatVC3tn+q0mQGCRXG9gtFqe+ldgZoqgzOsXugvJ18r/XPF 3sTVWaPkxOYtnxPGVCQ21g0Y3jx64vEBWWWCV12VqaHqePlxPEp6AowbqE4XfrON /9g9N5coUM7EjfCDSVmRYPALgFqTxF4k6i6owFSo2ya9z7s7M/rr4Lj3nPrXz9pa camNlDCkCDprteJ0bSmIT3wZhbzQUxrGVER7iYCt0qqeOT2+pG895S6w83jutRa2 D3VfjxemtZ22CfrZqYrq+b3/oGVVu/Xmi7GgEejAdYGdSAcg9ewzYQyq4pp7JOMf CDd1RCjdsCIDsMupf/FKC1KYbFeZXBS63KY5DPa9k/Go4igewlsxVJy8xcuyGsja X9pH+JvxTtzkUMEdyGq60j5g61PW0LXbR3PqbeOJtf4x/iflX4So68AM1MMzS4YR +kHT2W+WXuNmHr1iZ9LaF6YKEcpiAdOML0ETQX0LYVH3ZW9ni4JPm9MDvIMpcKcK p+fbugVyXtSV+nUaJkGQChL3Wetv4elPZ+FlXsoKyP59U97X0IWGCYMGvyKeq951 hx+5zaa6UGjToofrgdRv+BW7uSCg0nlhOtzzOXHDrExims4kTf/49ub+C/nchUao C6SuHKaQ =XzG9 -----END PGP SIGNATURE-----