Bug#1019519: opencv: downloads blobs from Github during build

[Victor Westerhuis]

Source: opencv
Version: 4.6.0+dfsg-6
Severity: serious
Tags: patch
Justification: Policy 4.9

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

During the build process, OpenCV module wechat_qrcode downloads four blobs from Github:
- -- wechat_qrcode: Downloading detect.caffemodel from https://raw.githubusercontent.com/WeChatCV/opencv_3rdparty/a8b69ccc738421293254aec5ddb38bd523503252/detect.caffemodel
- -- wechat_qrcode: Downloading detect.prototxt from https://raw.githubusercontent.com/WeChatCV/opencv_3rdparty/a8b69ccc738421293254aec5ddb38bd523503252/detect.prototxt
- -- wechat_qrcode: Downloading sr.caffemodel from https://raw.githubusercontent.com/WeChatCV/opencv_3rdparty/a8b69ccc738421293254aec5ddb38bd523503252/sr.caffemodel
- -- wechat_qrcode: Downloading sr.prototxt from https://raw.githubusercontent.com/WeChatCV/opencv_3rdparty/a8b69ccc738421293254aec5ddb38bd523503252/sr.prototxt

"For packages in the main archive, required targets must not attempt network access [...]", according to Debian Policy 4.9.

I have prepared a patch in a fork of the Salsa repository and have started a merge request.

Regards,


Victor Westerhuis


- -- System Information:
Debian Release: bookworm/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (100, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.18.0-4-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_NL.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en_US:en:nl_NL:nl
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

-----BEGIN PGP SIGNATURE-----
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=fzKE
-----END PGP SIGNATURE-----